Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we process your personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nouri Kamshouri und Grabowski GbR, Wilhelmsruher Damm 119, 13439 Berlin, Germany, Tel.: 015234006523, Email: info@granori.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Collection of Data When Visiting Our Website

2.1 If you use our website solely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the web server (known as "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited
Date and time of access
Amount of data transmitted in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (where applicable, in anonymised form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

Shopify

We use the services of the following provider to host our website and display its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make your visit to our website more convenient and enable the use of certain features, we use cookies, which are small text files stored on your device. Some cookies are automatically deleted when you close your browser ("session cookies"), while others remain on your device for longer and allow website settings to be saved ("persistent cookies"). In the latter case, you can find the storage period in your browser's cookie settings overview.

Where individual cookies used by us also involve the processing of personal data, such processing is carried out pursuant to Art. 6(1)(b) GDPR where necessary for the performance of a contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the optimal functionality of our website and in making visits to our website user-friendly and effective.

You can configure your browser to notify you when cookies are set, to decide whether to accept them on a case-by-case basis, or to prevent cookies from being accepted in certain cases or altogether.

Please note that declining cookies may limit the functionality of our website.

5) Contacting Us

5.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Personal data submitted via the chat is processed either pursuant to Art. 6(1)(b) GDPR, because this is necessary to take steps prior to entering into a contract or to perform a contract, or pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing effective assistance to visitors to our website.

Subject to any applicable statutory retention periods, the data you submit in this way will be deleted once the matter concerned has been conclusively resolved.

In addition, cookies may be used to collect and analyse further information for the purpose of creating pseudonymised usage profiles. However, this information is not used to identify you personally and is not combined with other data sets. Where this information constitutes personal data, processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in statistically analysing user behaviour for optimisation purposes.

You can prevent cookies from being set by changing your browser settings accordingly. However, this may limit the functionality of our website.

You may object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time by contacting us, with effect for the future.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 When you contact us (e.g. via a contact form or email), personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your enquiry relates to a contract, Art. 6(1)(b) GDPR also constitutes a legal basis for processing. Your data will be deleted when the circumstances indicate that the matter concerned has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will also be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can see which data is required to open an account in the relevant form on our website.

You may request the deletion of your customer account at any time by sending a message to the controller at the address stated above. Following deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully performed, no statutory retention periods prevent deletion and we have no remaining legitimate interest in retaining the data.

7) Use of Customer Data for Direct Marketing

Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing any other information is voluntary and such information is used to address you personally. We use the double opt-in procedure for newsletter subscriptions. This ensures that you only receive newsletters after you have expressly confirmed your consent to receive them by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. We store the IP address assigned by your internet service provider (ISP), as well as the date and time of registration, so that any potential misuse of your email address can be traced at a later date. The data we collect when you subscribe to the newsletter is used strictly for the stated purpose.

You may unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller identified at the beginning of this Privacy Policy. Once you have unsubscribed, your email address will be deleted from our newsletter distribution list without undue delay, unless you have expressly consented to further use of your data or we reserve the right to use your email address for additional marketing purposes which are permitted by law and about which we inform you in this Privacy Policy.

After you unsubscribe from the newsletter, your email address may be stored on a suppression list and compared with the recipient lists of future newsletters to technically prevent further newsletters requiring consent from being sent to you. This processing is based on our legitimate interest in preventing unwanted marketing communications pursuant to Art. 6(1)(f) GDPR.

8) Data Processing for Order Fulfilment

8.1 Submission of Image Files by Email for Order Fulfilment

On our website, we offer customers the option of commissioning the personalisation of products by submitting image files by email. The submitted image is used as a template for personalising the selected product.

Customers may send us one or more image files stored on their devices using the email address provided on the website. We collect, store and use the files submitted in this way solely to produce the personalised product in accordance with the relevant service description on our website. If the image files submitted are passed on to specialist service providers for the production and fulfilment of the order, we will expressly inform you of this in the following paragraphs. The files will not be disclosed for any other purpose. Where the submitted files or digital images contain personal data (in particular, images of identifiable individuals), all the processing operations described above are carried out solely for the purpose of fulfilling your online order pursuant to Art. 6(1)(b) GDPR.

Once the order has been fully processed, the submitted image files are automatically and permanently deleted.

8.2 Submission of Image Files via an Upload Function for Order Fulfilment

On our website, we offer customers the option of commissioning the personalisation of products by submitting image files via an upload function. The submitted image is used as a template for personalising the selected product.

Using the upload form on the website, customers can send us one or more image files stored on their devices directly via an automated, encrypted data transfer. We then collect, store and use the files submitted solely to produce the personalised product in accordance with the relevant service description on our website. If the image files submitted are passed on to specialist service providers for the production and fulfilment of the order, we will expressly inform you of this in the following paragraphs. The files will not be disclosed for any other purpose. Where the submitted files or digital images contain personal data (in particular, images of identifiable individuals), all the processing operations described above are carried out solely for the purpose of fulfilling your online order pursuant to Art. 6(1)(b) GDPR.

Once the order has been fully processed, the submitted image files are automatically and permanently deleted.

8.3 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be disclosed to the commissioned transport company and the commissioned financial institution pursuant to Art. 6(1)(b) GDPR.

If, under a relevant contract, we are obliged to provide you with updates for goods with digital elements or for digital products, we will process the contact details you provided when placing your order in order to notify you personally in accordance with our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of communicating updates that we are obliged to provide and will only be processed by us to the extent necessary to provide the relevant information.

8.4 Use of Payment Service Providers

Apple Pay

If you choose the "Apple Pay" payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment will be processed using the Apple Pay function of your device running iOS, watchOS or macOS by charging a payment card registered with Apple Pay. Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorise a payment, you must therefore enter a code previously set by you and verify the payment using your device's Face ID or Touch ID function.

For the purpose of processing the payment, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before it is transmitted to the payment service provider of the payment card registered with Apple Pay to complete the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. Once payment has been completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm that the payment was successful.

Where personal data is processed in connection with the transfers described above, such processing is carried out solely for payment processing purposes pursuant to Art. 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymisation completely excludes any link to an identifiable individual. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase initiated through Safari on a Mac, the Mac and the authorising device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a form that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac".

For further information about data protection in connection with Apple Pay, please visit: https://support.apple.com/de-de/HT203027

Google Pay

If you choose the "Google Pay" payment method offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment will be processed using the payment method stored in your Google account. To authorise a Google Pay payment on a desktop computer, you must first sign in to your Google account; to authorise a payment on a mobile device, you must complete the relevant verification procedure (e.g. facial recognition, password, fingerprint or pattern).

For the purpose of processing the payment, the information you provide during the ordering process, together with information about your order, is transmitted to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a unique transaction number, which is used to verify the payment. This transaction number does not contain any information about the actual payment details of the payment methods stored in Google Pay; instead, it is generated and transmitted as a numerical token that is valid only once. In all Google Pay transactions, Google acts solely as an intermediary in processing the payment. The transaction itself takes place exclusively between the user and the originating website by charging the payment method stored in Google Pay.

Where personal data is processed in connection with the transfers described above, such processing is carried out solely for payment processing purposes pursuant to Art. 6(1)(b) GDPR.

Google reserves the right to collect, store and analyse certain transaction-specific information for each transaction made using Google Pay. This includes the date, time and amount of the transaction, the merchant's location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively pursuant to Art. 6(1)(f) GDPR on the basis of its legitimate interest in proper accounting, verification of transaction data, and optimisation and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information that Google collects and stores when other Google services are used.

The Google Pay Terms of Service can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information about data protection in connection with Google Pay can be found at:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Klarna

One or more online payment methods offered by the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method offered by the provider under which you pay in advance (e.g. credit card payment), the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency and transaction number), together with information about the contents of your order, will be transferred to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data will be transferred solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

If you select a payment method under which the provider pays in advance (e.g. purchase on account, instalment payments or direct debit), you will also be asked to provide certain personal data during the checkout process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in assessing our customers' ability to pay, we forward this data to the provider for a creditworthiness assessment pursuant to Art. 6(1)(f) GDPR. On the basis of the personal data you provide and other data (such as shopping basket, invoice amount, order history and payment history), the provider assesses whether the selected payment option can be offered in view of the risk of non-payment and/or default.

In making a decision during the application assessment, identity and creditworthiness information from the following credit reference agencies may also be taken into account, in addition to the provider's internal criteria, pursuant to Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (known as "score values"). Where score values are included in the credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data is one of the factors used to calculate score values, but is not the only factor.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data where this is necessary for the contractual processing of payments.

PayPal

One or more online payment methods offered by the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method offered by the provider under which you pay in advance, the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency and transaction number), together with information about the contents of your order, will be transferred to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data will be transferred solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

If you select a payment method under which we pay in advance, you will also be asked to provide certain personal data during the checkout process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in assessing your ability to pay in such cases, we forward this data to the provider for a creditworthiness assessment pursuant to Art. 6(1)(f) GDPR. On the basis of the personal data you provide and other data (such as shopping basket, invoice amount, order history and payment history), the provider assesses whether the selected payment option can be offered in view of the risk of non-payment and/or default.

Shopify Payments

One or more online payment methods offered by the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Sofortüberweisung (Sofort Bank Transfer)

One or more online payment methods offered by the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

8.5 Electronic Withdrawal Function for Distance Contracts

Consumers who enter into contracts on this website for which a statutory right of withdrawal exists have the option of exercising that right through an electronic withdrawal function in accordance with the applicable withdrawal provisions.

To provide the electronic withdrawal function, we use a solution offered by the following provider: Martini & Radl OG, Garnisongasse 4, 1090 Vienna, Austria.

When using the withdrawal function, consumers must provide or confirm information identifying the contract from which they wish to withdraw, as well as further personal information such as their first and last name and email address.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimised solution pursuant to Art. 6(1)(f) GDPR. It is then used to confirm receipt of the withdrawal declaration by email on our behalf and subsequently transmitted to us. We then process the transmitted information to handle the withdrawal properly pursuant to Art. 6(1)(b) and Art. 6(1)(c) GDPR, on the basis of our statutory obligation to provide an electronic withdrawal function for paid consumer distance contracts.

The information collected by the provider is routinely deleted once the withdrawal has been fully processed, unless statutory retention obligations prevent deletion.

We have concluded a data processing agreement with the provider which protects the data processed in connection with the withdrawal function and prohibits unauthorised disclosure to third parties.

9) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of how you use our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device which collect certain information. This information also includes your IP address, although Google truncates the last digits of the address to prevent it from being directly attributable to an identifiable individual.

The information is transmitted to Google servers and processed there. Data may also be transferred to Google LLC in the United States.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet usage. The truncated IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data. Data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing operations described above, in particular the setting of cookies on the device you use, take place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please disable this service using the cookie consent tool provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic Features

Google Analytics 4 uses a special feature called "Demographic Features" which enables it to generate statistics concerning website visitors' age, gender and interests. This is done by analysing advertising and information provided by third parties. This enables target groups to be identified for marketing activities. However, the data collected cannot be attributed to a specific individual and is deleted after being stored for a period of two months.

Google Signals

Google Signals may be used on this website as an extension of Google Analytics 4 to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalised advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information about Google Signals is available at: https://support.google.com/analytics/answer/7532985?hl=de

User IDs

The "User IDs" feature may be used on this website as an extension of Google Analytics 4. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have created an account on this website and sign in to that account on different devices, your activities, including conversions, may be analysed across devices.

For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

10) Retargeting/Remarketing and Conversion Tracking

10.1 Meta Pixel

As part of our online offering, we use the "Meta Pixel" service provided by: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta").

If a user clicks on an advertisement we have placed on Facebook and/or Instagram, Meta Pixel adds a parameter to the URL of our linked page. After the user is redirected, this URL parameter is stored in the user's browser by means of a cookie set by our linked page itself.

On the one hand, this enables Meta to identify visitors to our online offering as a target group for displaying advertisements ("ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads we place only to users who have shown an interest in our online offering or who have certain characteristics (e.g. an interest in particular topics or products, determined from websites visited) which we transmit to Meta ("Custom Audiences").

On the other hand, Meta Pixel enables us to track whether users were redirected to our website after clicking on an advertisement and which actions they perform there ("conversion tracking").

In addition to Meta Pixel, which transmits data about your browser to Meta, the "Meta Conversions API" may also be used. Where it is used, information about certain actions performed on our website (known as "events", e.g. page views, adding products to a shopping basket, starting the checkout process or completing an order) is transmitted directly from our server to Meta's servers via an interface rather than through your browser. This makes it possible to measure the success of our advertising more reliably, for example where browser-based transmission does not take place or is incomplete due to technical restrictions. In connection with the Meta Conversions API, the following data in particular may be transmitted to Meta: the type and time of the event, the URL accessed, information about products ordered and their value, your IP address, information about your browser and device (user agent), and identifiers stored in Meta cookies. To avoid counting the same information twice through Meta Pixel and the Meta Conversions API, each event is assigned an identifier that Meta uses to match the transmissions.

The data collected is anonymous to us, meaning that it does not allow us to draw conclusions about users' identities. However, the data is stored and processed by Meta, which means that it may be linked to the relevant user profile and Meta may use the data for its own advertising purposes.

All processing operations described above, in particular the setting of cookies to read information from the device used, are carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

We and Meta are joint controllers for the collection of data via Meta Pixel and its transmission to Meta (Art. 26 GDPR). For this purpose, we have entered into a joint controllership arrangement with Meta, the essential content of which can be found at https://www.facebook.com/legal/controller_addendum

For the evaluation of data, its allocation to predefined events and the preparation of measurement and analysis reports, however, Meta acts as our processor pursuant to Art. 28 GDPR and is obliged to protect the data of our website visitors and customers under the data processing agreement available at https://facebook.com/legal/terms/dataprocessing

The information generated by Meta is generally transmitted to and stored on a Meta server. This may also involve transfers to servers of Meta Platforms Inc. in the United States.

10.2 Google Ads Conversion Tracking

This website uses the "Google Ads" online advertising programme and, within Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our offers on external websites by means of advertising materials (known as Google Ads). Using advertising campaign data, we can determine how successful individual advertising measures have been. Our aim is to show you advertising that is of interest to you, make our website more interesting for you and ensure that the advertising costs incurred are calculated fairly.

The conversion tracking cookie is set when a user clicks on an advertisement placed by Google. Cookies are small text files stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website while the cookie is still valid, Google and we can recognise that the user clicked on the advertisement and was redirected to that page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across the websites of different Google Ads customers. The information collected using the conversion cookie, which also includes your IP address, is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. These customers are informed of the total number of users who clicked on their advertisement and were redirected to a page with a conversion tracking tag. However, they do not receive any information that would enable them to identify users personally. The use of Google Ads may also involve the transfer of personal data to servers of Google LLC in the United States.

Details of the processing operations initiated by Google Ads conversion tracking and how Google handles data from websites are available here: https://policies.google.com/technologies/partner-sites

You may also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:

https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

Please note that certain features of this website may not be available or may only be available to a limited extent if you disable cookies.

Google's privacy policies can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.3 TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

If you have reached our website from an advertisement on the provider's domain, the success of the advertisement may be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, the tracking technology reads certain device and browser information, potentially including your IP address, in order to record and evaluate user actions defined by us (e.g. completed transactions, leads, searches on the website, views of product pages). This makes it possible to compile statistics about user behaviour on our website after users have been redirected from an advertisement, which we use to optimise our offering.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

11) Tools and Other Services

11.1 Billbee

For our accounting, we use the cloud-based accounting software service provided by: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.

The provider processes incoming and outgoing invoices and, where applicable, our company's bank transactions in order to automatically record invoices, match them to transactions and use this information to prepare our financial accounts in a partially automated process.

Where personal data is processed in this context, processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions pursuant to Art. 6(1)(f) GDPR.

11.2 FIBUscan

For our accounting, we use the cloud-based accounting software service provided by: FIBUdata Softwareentwicklung GmbH, Lohmannstraße 27, 56626 Andernach, Germany.

11.3 Cookie Consent Tool

This website uses a "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users when they access the website in the form of an interactive user interface in which they can give their consent to certain cookies and/or cookie-based applications by selecting the relevant checkboxes. The tool ensures that all cookies/services requiring consent are loaded only when the respective user has given the relevant consent by selecting the applicable checkbox. This ensures that such cookies are placed on the user's device only if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, such processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and therefore in ensuring the legal compliance of our website.

A further legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are under a legal obligation to make the use of cookies that are not technically necessary conditional on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator of the cookie consent tool and the available settings can be found directly in the corresponding user interface on our website.

12) Rights of Data Subjects

12.1 Under applicable data protection law, you have the following data subject rights (rights of access and rights of intervention) vis-à-vis the controller in relation to the processing of your personal data. The respective legal provisions listed below set out the requirements for exercising these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be notified pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Retention Period for Personal Data

The period for which personal data is stored is determined by the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar legal obligations on the basis of Art. 6(1)(b) GDPR, such data is routinely deleted upon expiry of the retention periods, provided that it is no longer necessary for the performance of a contract or for taking steps prior to entering into a contract and/or we have no remaining legitimate interest in retaining it.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the information provided in this Privacy Policy about specific processing activities, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Country/region

Language