Data Protection Declaration
(Last updated: July 2026)
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Roeckl Handschuhe & Accessoires GmbH & Co. KG, Isartalstraße 49, 80469 Munich, Germany, Tel.: +49 (0) 89 – 729 69 – 0, Email: info@roeckl.com. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3 The controller has appointed a data protection officer, who can be contacted as follows: 'Munker Privacy Consulting GmbH, Pähler Str. 5a, 82399 Raisting, Email: info@munker.info'
2) Data Collection When Visiting Our Website
2.1 When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymised form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser bar.
3) Hosting & Content Delivery Network
3.1 Amazon Web Services
For hosting our website and displaying the page content, we use the system of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg
Data may also be transferred to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
3.2 AWS CloudFront
We use a content delivery network provided by: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg
This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
Data may also be transferred to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
3.3 Cloudinary
We use a content delivery network provided by: Cloudinary Ltd., 3400 Central Expressway, Suite 110, Santa Clara, CA 95051, USA
This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider relies on standard contractual clauses issued by the European Commission, which are intended to ensure compliance with the European level of data protection.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your end device for a longer period and make it possible to save page settings (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies used by us, processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR where consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the website visit.
You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or in general.
Please note that the functionality of our website may be restricted if cookies are not accepted.
5) Contacting Us
5.1 Trusted Shops
For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany
Exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, other customer data to the provider so that the provider can contact you by email with a review reminder.
You may withdraw your consent at any time with effect for the future vis-à-vis us or the provider.
We and the provider are joint controllers for the processing described above in accordance with Art. 26 GDPR. The joint controllership agreement can be viewed here: https://help.etrusted.com
5.2 Zendesk
To process customer enquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland
If you submit contact enquiries by email via our website, these are stored and organised in the ticketing system to enable chronological processing and improve the service experience. You can use the individually assigned ticket number to view the current status of the processing of your request at any time.
For the organisation and processing of enquiries, personal data is collected to the extent provided, but in any event including surname, first name and email address, transmitted to the provider, stored there and accessed.
The legal basis for processing this data is our legitimate interest in the efficient organisation of our customer service, in responding to your enquiry as quickly as possible and in optimising our service offering in accordance with Art. 6(1)(f) GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
5.3 When you contact us (e.g. via a contact form or email), personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for processing. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified, provided that no statutory retention obligations prevent deletion.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. The data required to open an account can be found in the input fields of the relevant form on our website.
You may delete your customer account at any time by sending a message to the controller at the address stated above. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion and we have no continuing legitimate interest in further storage.
7) Use of Customer Data for Direct Advertising
7.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive them by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this context, we store the IP address recorded by your internet service provider (ISP), as well as the date and time of registration, so that any possible misuse of your email address can be traced at a later date. The data collected when you subscribe to the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named above. After you unsubscribe, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to further use your data where permitted by law and about which we inform you in this declaration.
7.2 Amazon SES
Our email newsletters are sent via the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provided when subscribing to the newsletter to this provider in accordance with Art. 6(1)(f) GDPR so that the provider can send the newsletter on our behalf.
Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out statistical performance analyses of newsletter campaigns by means of web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. End-device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other data records.
You may withdraw your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
Data may also be transferred to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
7.3 Klaviyo
Our email newsletters and other promotional email communications are sent via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
On the basis of our legitimate interest in effective and user-friendly email marketing, we transmit the data you provided when registering to this provider in accordance with Art. 6(1)(f) GDPR so that the provider can send emails on our behalf.
Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out statistical performance analyses of email campaigns by means of web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. End-device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other data records.
You may withdraw your consent to email tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
7.4 Email Notification of Product Availability
For temporarily unavailable items, you can subscribe to email notifications about product availability. We will then send you a one-time email informing you that the selected item is available. The only mandatory information required to send this notification is your email address. Providing additional data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you only receive a notification once you have expressly confirmed your consent by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this context, we store the IP address recorded by your internet service provider (ISP), as well as the date and time of registration, so that any possible misuse of your email address can be traced at a later date. The data collected when you register for our email notification service regarding product availability is used strictly for the intended purpose.
You can unsubscribe from availability notifications at any time by sending a corresponding message to the controller named above. After you unsubscribe, your email address will be deleted without delay from the distribution list established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further use your data where permitted by law and about which we inform you in this declaration.
7.5 Shopping Cart Reminders by Email
If you abandon your purchase before completing the order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart.
The only mandatory information required to send this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you only receive a notification once you have expressly confirmed your consent by clicking a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for the purpose of sending a shopping cart reminder. In this context, we store the IP address recorded by your internet service provider (ISP), as well as the date and time of registration, so that any possible misuse of your email address can be traced at a later date. The data collected when you register for our email notification service is used strictly for the intended purpose.
You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named above. After you unsubscribe, your email address will be deleted without delay from the distribution list established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further use your data where permitted by law and about which we inform you in this declaration.
8) Data Processing for Order Handling
8.1 To the extent necessary for contract handling for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned financial institution in accordance with Art. 6(1)(b) GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing the order in order to inform you personally in fulfilment of our statutory information obligations in accordance with Art. 6(1)(c) GDPR. Your contact details are used strictly for communications about updates owed by us and are processed by us for this purpose only to the extent necessary for the relevant information.
To process your order, we also work with the service provider(s) listed below, who support us in whole or in part in performing concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8.2 Disclosure of Personal Data to Shipping Service Providers
- DHL
We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We transmit your email address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or sending a delivery notification in accordance with Art. 6(1)(a) GDPR, provided that you have given your express consent during the ordering process. Otherwise, for delivery purposes we only transmit the recipient's name and delivery address to the provider in accordance with Art. 6(1)(b) GDPR. The data is disclosed only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with the provider or a delivery notification is not possible.
Consent may be withdrawn at any time with effect for the future vis-à-vis the controller named above or the provider.
- DHL Express
We use the following provider as a transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
We transmit your email address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or sending a delivery notification in accordance with Art. 6(1)(a) GDPR, provided that you have given your express consent during the ordering process. Otherwise, for delivery purposes we only transmit the recipient's name and delivery address to the provider in accordance with Art. 6(1)(b) GDPR. The data is disclosed only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with the provider or a delivery notification is not possible.
Consent may be withdrawn at any time with effect for the future vis-à-vis the controller named above or the provider.
8.3 Use of Payment Service Providers
- Apple Pay
If you select the “Apple Pay” payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the “Apple Pay” function of your end device running iOS, watchOS or macOS by charging a payment card stored with “Apple Pay”. Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. Authorising a payment therefore requires entry of a code previously set by you and verification using your end device's “Face ID” or “Touch ID” function.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay in order to execute the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.
If personal data is processed in the course of the transfers described, processing is carried out exclusively for payment handling purposes in accordance with Art. 6(1)(b) GDPR.
Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time and whether the transaction was successfully completed. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve “Apple Pay” and other Apple products and services.
If you use Apple Pay on an iPhone or Apple Watch to complete a purchase you initiated via Safari on a Mac, the Mac and the authorising device communicate through an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
Further information on data protection in connection with Apple Pay is available at: https://support.apple.com
- EPS Bank Transfer
One or more online payment methods from the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2,1200 Vienna, Austria
If you select a payment method offered by the provider for which you make an advance payment (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Klarna
One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you select a payment method offered by the provider for which you make an advance payment (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you select a payment method for which the provider makes an advance payment (e.g. purchase on account, instalment purchase or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, information about an alternative means of payment).
To safeguard our legitimate interest in determining our customers' ability to pay, we transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. On the basis of the personal data you provide and other data (such as shopping cart, invoice amount, order history and payment experience), the provider checks whether the payment option you selected can be granted in view of payment and/or default risks.
In addition to the provider's internal criteria, identity and creditworthiness information from the following credit agencies may also be taken into account when deciding on the application in accordance with Art. 6(1)(f) GDPR:
https://cdn.klarna.com
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included in the calculation of the score values, among other factors, but is not the sole factor.
You may object to this processing of your data at any time by sending a message to us or the provider. However, the provider may remain entitled to process your personal data where this is necessary for contractual payment handling.
- Mollie
One or more online payment methods from the following provider are available on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands
If you select a payment method offered by the provider for which you make an advance payment (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- PayPal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method offered by the provider for which you make an advance payment, the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you select a payment method for which we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, information about an alternative means of payment).
To safeguard our legitimate interest in determining your ability to pay in such cases, we transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. On the basis of the personal data you provide and other data (such as shopping cart, invoice amount, order history and payment experience), the provider checks whether the payment option you selected can be granted in view of payment and/or default risks.
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included in the calculation of the score values, among other factors, but is not the sole factor.
You may object to this processing of your data at any time by sending a message to us or the provider. However, the provider may remain entitled to process your personal data where this is necessary for contractual payment handling.
- Sofort Bank Transfer
One or more online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden
If you select a payment method offered by the provider for which you make an advance payment (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- TWINT
One or more online payment methods from the following provider are available on this website: TWINT AG, Stauffacherstrasse 31, CH-8004 Zurich, Switzerland
If you select a payment method offered by the provider for which you make an advance payment (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be disclosed solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
Where data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
8.4 Sanctions List Screening
In connection with initiating business relationships and processing orders, we reserve the right to compare the personal data you provide with data contained in sanctions lists of the European Union and/or its individual Member States and, on the basis of the result of this comparison, decide whether to enter into the business relationship or execute the order.
This data processing is carried out in accordance with Art. 6(1)(c) GDPR on the basis of our legal obligation to check and ensure that we do not enter into business relationships with sanctioned natural or legal persons and thereby prevent resources from being made available to such persons.
8.5 Electronic Withdrawal Function for Distance Contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.
When using the withdrawal function, in addition to information identifying the contract to be withdrawn, further personal information such as the consumer's first and last name and email address must be provided or confirmed.
This information is collected and transmitted to us in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the withdrawal. The personal data provided is also used on the basis of Art. 6(1)(b) GDPR to confirm receipt of the withdrawal declaration by email. Art. 6(1)(c) GDPR is an additional legal basis for processing. We are legally required to provide an electronic withdrawal function for paid consumer distance contracts.
9) Online Marketing
9.1 Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ('Google'). Google AdSense uses cookies, i.e. text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called web beacons (small invisible graphics) to collect information, through which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to a Google server and stored there. This may also involve transmission to servers operated by Google LLC in the USA.
Google uses the information obtained in this way to evaluate your usage behaviour with regard to AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties where required by law and/or where such third parties process the data on Google's behalf.
All processing described above, in particular the reading of information on the end device used by means of cookies and/or web beacons, is carried out only if you have given us your express consent to do so in accordance with Art. 6(1)(a) GDPR. Without such consent, Google AdSense will not be used during your visit to our website.
You may withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google's privacy provisions is available here: https://business.safety.google
9.2 Microsoft Dynamics 365
This website uses the software “Microsoft Dynamics 365”, a cloud-based marketing service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Dynamics 365 makes it possible to manage and synchronise various marketing activities via a central user interface. In particular, Microsoft Dynamics 365 enables lead generation, centralised email and newsletter marketing and effective contact management by means of user segmentation. To perform these various functions, Microsoft Dynamics 365 uses cookies, i.e. small text files that are stored locally in your web browser's cache on your end device and allow us to analyse your use of the website. The cookies collect certain information such as the IP address, location and time of page access, among other data. Information collected by Microsoft Dynamics 365 is stored on Microsoft servers and evaluated on our behalf. This may also involve transfers to Microsoft in the USA. All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Microsoft's privacy provisions is available at: https://privacy.microsoft.com
10) Web Analytics Services
10.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ('Google'), which enables an analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your end device that collect certain information. This information also includes your IP address, which Google shortens by removing the final digits in order to exclude direct personal identification.
The information is transmitted to Google servers and processed there. Transfers to Google LLC, based in the USA, are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through the use of Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 is available at https://business.safety.google
Demographic Features
Google Analytics 4 uses the special “demographic features” function and can use it to create statistics containing statements about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after being stored for two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have enabled personalised advertisements and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalised advertising” function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com
Further information on Google Signals is available at: https://support.google.com
User IDs
As an extension to Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, have created an account on this website and log in to this account on different devices, your activities, including conversions, may be analysed across devices.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.2 Google Tag Manager
This website uses “Google Tag Manager”, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Google Tag Manager provides a technical basis for combining various web applications, including tracking and analytics services, and calibrating, controlling and linking them to conditions via a uniform user interface. Google Tag Manager itself does not store or read information on users' end devices. Nor does the service independently analyse data. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. A transfer to servers operated by Google LLC in the USA is also possible.
This processing is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without such consent, Google Tag Manager will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further legal information on Google Tag Manager is available at https://business.safety.google
11) Retargeting/Remarketing and Conversion Tracking
11.1 Meta Pixel with Advanced Matching
Within our online offering, we use the “Meta Pixel” service in advanced matching mode, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ('Meta').
If a user clicks on an advertisement placed by us on Facebook or Instagram, “Meta Pixel” adds a parameter to the URL of our linked page. Following redirection, this URL parameter is then entered into the user's browser by a cookie set by our linked page itself. In addition, this cookie records specific customer data, such as the email address we collect on our website linked to the Facebook or Instagram advertisement in connection with processes such as purchases, account logins or registrations (advanced matching). The cookie is then read and enables the data, including specific customer data, to be transmitted to Meta.
We use “Meta Pixel” with advanced matching to make our advertisements (so-called “ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to users' interests or display certain characteristics (e.g. interests in certain topics or products identified on the basis of websites visited), which we transmit to Meta (so-called “Custom Audiences”).
We also analyse the effectiveness of our advertisements by tracking whether users are redirected to our website after clicking an advertisement (conversion). Compared with the standard version of “Meta Pixel”, the advanced matching function helps us measure the effectiveness of our advertising campaigns more accurately by recording a greater number of attributable conversions.
All transmitted data is stored and processed by Meta, allowing it to be attributed to the relevant user profile, and Meta may use the data for its own advertising purposes in accordance with Meta's data use policy (https://www.facebook.com
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, it may also be transferred to servers operated by Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.2 Google Ads Remarketing
This website uses retargeting technology provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google sets a cookie in the browser of your end device that automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Further data processing takes place only if you have agreed with Google that your internet and app browsing history may be linked to your Google account and that information from your Google account may be used to personalise advertisements you view online. If, in this case, you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data in order to create target groups. The use of Google Ads Remarketing may also involve the transfer of personal data to servers operated by Google LLC in the USA.
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to our website.
You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Details of processing initiated by Google and how Google handles data from websites are available here: https://policies.google.com
Further information on Google's privacy provisions is available here: https://business.safety.google
11.3 Microsoft Advertising
This website uses retargeting technology provided by: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This makes it possible to address visitors to our website who have already shown an interest in our shop and products with targeted, personalised, interest-based advertising. Advertising materials are displayed on the basis of a cookie-based analysis of previous and current usage behaviour.
When retargeting technology is used, a cookie is stored on your computer or mobile end device to collect pseudonymised data about your interests and tailor advertising to the stored information. These cookies are small text files stored on your computer or mobile end device. You are thus shown advertisements that are highly likely to correspond to your product and information interests.
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to our website.
You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.4 trbo
This website uses retargeting technology provided by: TRBO GMBH, Leopoldstr. 41, 80802 Munich, Germany
The service enables a statistical evaluation of the use of website functions and content by presenting test variants to specific user groups.
On this basis, visitors can be addressed with targeted interest-based advertising and content tailored to their interests.
Cookies, i.e. small text files stored on your computer or mobile end device, are used to evaluate variants and display interest-based content.
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without such consent, retargeting technology will not be used during your visit to our website.
You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website.
11.5 Google Ads Conversion Tracking
This website uses the online advertising programme “Google Ads” and, within Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
We use Google Ads to draw attention to our attractive offers on external websites with the aid of advertising materials (so-called Google AdWords). In relation to the data from advertising campaigns, we can determine how successful individual advertising measures are. In this way, we pursue our aim of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your end device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page featuring a conversion tracking tag. However, they do not receive any information that can personally identify users.
The use of Google Ads may also involve the transfer of personal data to servers operated by Google LLC in the USA.
Details of processing initiated by Google Ads Conversion Tracking and how Google handles data from websites are available here: https://policies.google.com
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
You may also permanently object to cookies being set by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com
To address users whose data we have obtained in the context of business or business-like relationships with advertising that is even more closely aligned with their interests, we use a customer matching function within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not receive access to unencrypted data; instead, it automatically encrypts the information in the customer files during transmission using a special algorithm. Google can then use the encrypted information only to match it with existing Google accounts created by the data subjects. This enables personalised advertising to be displayed across all Google services linked to the relevant Google account.
Customer data is transmitted to Google only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw this consent vis-à-vis us at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function is available here: https://support.google.com
Google's privacy provisions are available here: https://business.safety.google
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.6 Google Marketing Platform
This website uses the Google Marketing Platform online marketing tool operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ('GMP').
GMP uses cookies to display advertisements that are relevant to users, improve campaign performance reports or prevent a user from seeing the same advertisements multiple times. Google uses a cookie ID to record which advertisements are displayed in which browser and can thus prevent them from being shown multiple times. In addition, GMP can use cookie IDs to record so-called conversions related to advertising enquiries. This is the case, for example, if a user sees a GMP advertisement and later visits the advertiser's website using the same browser and makes a purchase via that website. According to Google, GMP cookies do not contain personal information.
As a result of the marketing tools used, your browser automatically establishes a direct connection with Google's server.
We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you as follows on the basis of our current knowledge: By integrating GMP, Google receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address. The use of GMP may also involve the transfer of personal data to servers operated by Google LLC in the USA.
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
GMP by Google's privacy provisions are available here: https://business.safety.google
11.7 Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology provided by: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
For the use of Universal Event Tracking, a tag is stored on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behaviour on our website traceable and sends the information collected in this way to Microsoft. The purpose is to statistically record and evaluate certain predefined goals, such as purchases or leads, so that the orientation and content of our offers can be tailored more closely to users' interests. The tags are never used to identify users personally.
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to our website.
You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
12) Website Functions
12.1 Vimeo
This website uses plugins to display and play videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent abusive behaviour.
If you are logged into a user account with the provider while visiting our website, your data is assigned directly to your account when you click on a video. If you do not want the data to be assigned to your account, you must log out before activating the play button.
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service via the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
12.2 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transferred to: Google LLC, USA
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers, at the latest when video playback begins, in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent abusive behaviour.
If you are logged into a user account with the provider while visiting our website, your data is assigned directly to your account when you click on a video. If you do not want the data to be assigned to your account, you must log out before activating the play button.
All processing described above, in particular the setting of cookies to read information on the end device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service via the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
12.3 Trusted Shops Trustbadge
Graphic elements provided by the following provider are integrated into our website to display external customer reviews and/or an externally awarded quality seal: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany
When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements correctly. In doing so, certain browser information, including your IP address, is transmitted to the provider.
If personal data is also processed in this context, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the optimal marketing of our offering and the attractive design of our website.
Further processing may take place if you place an online order with us.
Depending on your express consent in accordance with Art. 6(1)(a) GDPR, after completion of an order your order information (order total, order number and, where applicable, product purchased) and your email address are transmitted in encrypted form to the provider via the Trustbadge in order to check whether you are already registered for the provider's services (in particular “Buyer Protection”) and, where applicable, to enable a new registration.
If an existing registration is identified or if you newly register for the provider's services (in particular Buyer Protection), your order information (order total, order number and product purchased) and your email address are transmitted to and further processed by the provider on the basis of the contractual agreement with the provider in accordance with Art. 6(1)(b) GDPR in order to provide the services (in particular Buyer Protection).
We and the provider are joint controllers for the processing described above in accordance with Art. 26 GDPR. The joint controllership agreement can be viewed here: https://help.etrusted.com
12.4 Google Maps
This website uses an online map service provided by: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service used to display interactive maps in order to present geographical information visually. Use of this service shows you our location and makes it easier to plan a possible journey to us.
As soon as you access a subpage into which a Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers; this may also involve transfer to servers operated by Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged into Google, your data is assigned directly to your account. If you do not want the data to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage and evaluation are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you also have the option of completely disabling the Google Maps web service by turning off JavaScript in your browser. Google Maps and therefore the map display on this website will then not be available.
Where legally required, we have obtained your consent to the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the option for objecting described above.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google's privacy provisions is available here: https://business.safety.google
12.5 Google Web Fonts
This website uses web fonts from the following provider to ensure a uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you access a page, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transferred to: Google LLC, USA
Personal data is processed when establishing a connection with the font provider only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google's privacy provisions is available here: https://business.safety.google
12.6 - Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transferred to: Google LLC, USA.
For the visual design of the CAPTCHA window, the provider uses “Google Fonts”, i.e. fonts loaded by Google from the internet. No information other than the information specified above, which is already transmitted to Google through the reCAPTCHA functionality, is processed in this context.
The service checks whether an entry is made by a natural person or is being misused through machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the end device used, identification data relating to the browser and operating system type used, as well as the date and duration of the visit, and transmits this information to the provider's servers for evaluation. Cookies, i.e. small text files stored in the browser of the end device, may be used for this purpose.
Where the processing described above is based on cookies, these are set only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual personal responsibility on the internet and preventing misuse and spam in accordance with Art. 6(1)(f) GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
12.7 Applications for Vacancies by Email
In a separate section of our website, we advertise current vacancies for which interested persons can apply by email using the contact address provided.
Applicants must provide all personal data required for a well-founded assessment, including general information such as name, address and contact details, as well as evidence of qualifications and, where applicable, health-related information. Details relating to the application can be found in the relevant job advertisement.
After an application is received by email, the data is stored and evaluated exclusively for the purpose of processing the application. If we have any questions, we use either the applicant's email address or telephone number. Processing is carried out on the basis of Art. 6(1)(b) GDPR (or Section 26(1) of the German Federal Data Protection Act (BDSG)), under which participation in the application process is regarded as taking steps prior to entering into an employment contract.
If special categories of personal data within the meaning of Art. 9(1) GDPR (e.g. health data such as information about severe disability status) are requested from applicants as part of the application process, processing is carried out in accordance with Art. 9(2)(b) GDPR so that we can exercise rights and fulfil obligations arising from employment law and social security and social protection law.
Cumulatively or alternatively, processing of special categories of data may also be based on Art. 9(2)(h) GDPR if it is carried out for the purposes of preventive or occupational medicine, the assessment of the applicant's working capacity, medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services.
If the applicant is not selected or withdraws the application prematurely, the submitted data and all electronic correspondence, including the application email, will be deleted no later than six months after a corresponding notification. This period is based on our legitimate interest in answering any follow-up questions relating to the application and, where applicable, fulfilling our evidentiary obligations under rules on the equal treatment of applicants.
If the application is successful, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (and, where processing takes place in Germany, in conjunction with Section 26(1) BDSG) for the purpose of carrying out the employment relationship.
13) Tools and Miscellaneous
13.1 Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they access the website in the form of an interactive user interface in which consent to certain cookies and/or cookie-based applications can be given by ticking boxes. Through use of the tool, all cookies/services requiring consent are loaded only if the relevant user gives the appropriate consent by ticking the relevant boxes. This ensures that such cookies are set on the user's end device only where consent has been given.
The tool sets technically necessary cookies in order to store your cookie preferences. As a general rule, no personal user data is processed in this context.
If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and therefore in the legally compliant design of our website.
Art. 6(1)(c) GDPR is a further legal basis for processing. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the relevant user's consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
Further information about the operator and the settings available in the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
13.2 Elasticsearch
This website uses the search technology service of the following provider: ELASTIC, 800 West El Camino Real, Suite 350, Mountain View, California 94040, USA
To provide the item search function via the search field and for navigation and filters, the provider collects and stores certain user information (such as the user or session ID) in anonymised form.
If personal data is also processed in this context, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a fault-tolerant search for items and therefore in the optimal marketing of our offering.
For data transfers to the USA, the provider relies on standard contractual clauses issued by the European Commission, which are intended to ensure compliance with the European level of data protection.
13.3 Channable
For the integration and synchronisation of databases and web applications, we use the services of the following provider: ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands
Our processing operations are automated and different workflows are established in order to manage and execute internal processes in our processing system efficiently. If personal data is also processed in this context, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimising our internal organisation.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
14) Rights of the Data Subject
14.1 The applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the legal basis stated for the respective conditions governing their exercise:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
15) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the relevant legal basis, the purpose of processing and, where applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
Where personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.
If statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for contract performance or the taking of steps prior to entering into a contract and/or we have no continuing legitimate interest in further storage.
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(2) GDPR.
Unless otherwise indicated by the other information in this declaration concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
