Privacy Policy

Our privacy policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles. (hereinafter collectively referred to as "online offer"). With regard to the terminology used, such as "personal data" or its "processing", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR)..

Responsible:

See imprint (or linked in the footer of this page)

Privacy Officer:

  • Name: DataSolution LUD GmbH, Isarstr. 13, D-14974 Ludwigsfelde, Germany
  • Phone number: imprint (or linked in the footer of this page)
  • Email address: imprint (or linked in the footer of this page)

Types of data processed:

  • Inventory data (e.g., names, addresses)
  • Contact data (e.g., email, phone numbers)
  • Content data (e.g., text input, photographs, videos)
  • Use data (e.g., web pages visited, interest in content, access times)
  • Meta/communication data (e.g., device information, IP addresses)

Processing of special categories of data (Art. 9 (1) DSGVO):

No special categories of data are processed.

Categories of data subjects concerned by the processing:

  • Customers / prospective customers / suppliers
  • Visitors and users of the online offer
  • Following we refer to the data subjects collectively also as "users"

Purpose of processing:

  • Providing the online offer, its contents and functions
  • Provision of contractual services, service and customer care
  • Responding to contact requests and communicating with users
  • Marketing, advertising, and market research
  • Security measures.

Date: 02.11.2021

  • In accordance with Art. 13 DSGVO, we inform you about the legal bases of our data processing. If the legal basis is not mentioned in the privacy notices, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 DSGVO, the legal basis for processing for the performance of our services and implementation of contractual measures and responding to inquiries is Art. 6(1)(b) DSGVO, the legal basis for processing for the performance of our legal obligations is Art. 6(1)(c) DSGVO, and the legal basis for processing for the protection of our legitimate interests is Art. 6(1)(f) DSGVO. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.
  1. Changes and updates to the privacy notices

  • We ask you to regularly check the content of our privacy notice. We adapt the privacy notices as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
  1. Security measures

  • We take security measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, appropriate technical and organizational measures to ensure a level of protection appropriate to the risk; The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access concerning them, input, disclosure, ensuring availability and their separation. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, deletion of data, and response to data compromise. Furthermore, we take into account the protection of personal data already in the development, or selection of hardware, software as well as procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings taken into account (Art. 25 DSGVO).
  • Security measures include in particular the encrypted transmission of data between your browser and our server.
  1. Collaboration with processors and third parties

  • If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if a transfer of data to third parties, such as payment service providers, according to Art. 6 para. 1 lit. b DSGVO is necessary for the performance of the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
  • If we entrust third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 DSGVO.
  1. Transfers to third countries

  • If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or do so in the context of using third-party services or disclosing, or transferring data to third parties, this will only be done if it is done in order to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or allow the processing of data in a third country only if the special requirements of Art. 44 et seq. DSGVO are met. I.e. the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
  1. Rights of data subjects

  • You have the right to request confirmation as to whether data in question are being processed and to be informed about them, as well as to receive further information and a copy of the data in accordance with Art. 15 of the GDPR.
  • You have according to. Art. 16 DSGVO the right to request the completion of the data concerning you or the correction of inaccurate data concerning you.
  • You have in accordance with Art. 17 DSGVO the right to request that data concerning you be deleted without undue delay, or alternatively in accordance with Art. 18 DSGVO to request a restriction of the processing of the data.
  • You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 DSGVO and to request that it be transferred to other data controllers..
  • You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO.
  1. Right of withdrawal

  • You have the right to revoke consent granted in accordance with Art. 7 (3) DSGVO with effect for the future.
  1. Right of objection

  • You may object at any time to the future processing of data relating to you in accordance with Article 21 DSGVO. The objection may be made in particular against the processing for purposes of direct marketing.
  1. Deletion of data

  • The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 DSGVO. Unless expressly stated in the context of this privacy notice, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
  • Germany: According to legal requirements, the retention takes place in particular for 6 years in accordance with § 257 para 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
  1. Provision of contractual services

  • We process inventory data (e.g., names and addresses and contact details of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 para. 1 lit b. DSGVO. The inputs marked as mandatory in online forms, are required for the conclusion of the contract.
  • Users can optionally create a user account, in particular by viewing their orders. As part of the registration, the required mandatory information will be provided to users. The user accounts are not public and can not be indexed by search engines. If users have cancelled their user account, their data with regard to the user account will be deleted, subject to their retention is necessary for commercial or tax reasons in accordance with Art. 6 para. 1 lit. c DSGVO. It is the responsibility of the users to save their data in the event of termination before the end of the contract. We are entitled to irretrievably delete all data of the user stored during the term of the contract.
  • In the context of registration and renewed registrations and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the users in protection against abuse and other unauthorized use. In principle, this data is not passed on to third parties, unless it is necessary for the pursuit of our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c DSGVO.
  • We process usage data (e.g., the visited web pages of our online offer, interest in our products) and content data ( e.g., entries in the contact form or user profile) for advertising purposes in a user profile, for example, to display product information to the user based on their previously used services..
  • The deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation); information in the customer account remains until its deletion.
  1. Contact

  • When contacting us (via contact form or e-mail), the user's details are processed for the purpose of processing the contact request and its handling in accordance with Art. 6 para. 1 lit. b) DSGVO.
  • The user's details may be stored in our Customer Relationship Management System („CRM System“) or comparable inquiry organization.
  • We delete the inquiries if they are no longer necessary. We review the necessity every two years; requests from customers who have a customer account, we store permanently and refer to the information on the customer account for deletion. In the case of legal archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).
  1. Comments and contributions

  • When users leave comments or other contributions, their IP addresses are stored on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO stored for 7 days.
  • This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves may be prosecuted for the comment or post and are therefore interested in the identity of the author.
  1. Collection of access data and log files

  • We collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type plus version, the operating system of the user, referrer URL (the previously visited page), IP address and the requesting provider.
  • Log file information is stored for security reasons (e.g. for the clarification of abuse or fraud) for a maximum of seven days and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until final clarification of the respective incident.
  1. Online presences in social media

  • We maintain on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about our services there. When calling the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
  • Unless otherwise stated in the context of our privacy policy, we process the data of users insofar as they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.
  1. Cookies & Reach measurement

  • We use temporary and permanent cookies, i.e. small files that are stored on users' devices (for an explanation of the term and its function, see the last section of this privacy notice). In part, the cookies serve security purposes or are necessary for the operation of our online offer (e.g., for the display of the website) or to store the user decision when confirming the cookie banner. In addition, we or our technology partners use cookies for range measurement and marketing purposes, about which users are informed in the course of the privacy notices.
  • To manage your cookie settings on this website, please click here..
  • A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the Services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by means of their deactivation in the browser settings. Please note that then, if necessary, not all functions of this online offer can be used.
  1. Google Analytics

  • We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google uses cookies. The information generated by the cookie about the use of the online offer by users is usually transmitted to a Google server in the U.S. and stored there..
  • Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and Internet use. In doing so, pseudonymous usage profiles of the users can be created from the processed data.
  • We use Google Analytics to display the ads placed by within advertising services of Google and its partners, only to those users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Google ( so-called "Remarketing Audiences", or "Google Analytics Audiences"). With the help of Remarketing Audiences, we would also like to ensure that our ads correspond to the potential interest of users and do not have a harassing effect.
  • We only use Google Analytics with IP anonymization enabled. This means that the IP address of users is shortened by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
  • The IP address transmitted by the user's browser is not merged with other data from Google. Users can prevent the storage of cookies by selecting the appropriate settings on their browser software; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
  • For more information about Google's data use, settings and opt-out options, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Data use by Google when you use our partners' websites or apps"), https://policies.google.com/technologies/ads ("Data Use for Advertising Purposes"), https://adssettings.google.com/authenticated ("Manage Information Google Uses to Display Advertisements to You").
  • For the rest, the personal data will be anonymized or deleted after a period of 14 months.
  1. Google Re/Marketing Services

  • We use the marketing and remarketing services (in short "Google marketing services") of Google Ireland Limited ( Gordon House, Barrow Street, Dublin 4, Ireland), ("Google").
  • The Google marketing services allow us to display advertisements for and on our website in a more targeted manner, in order to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products in which he was interested on other websites, this is referred to as "remarketing". For these purposes, when our website and other websites on which Google marketing services are active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as „web beacons“) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, which content he is interested in and which offers he has clicked on, as well as technical information on the browser and operating system, referring websites, time of visit and other information on the use of the online offer. The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area and only in exceptional cases is transferred in full to a Google server in the USA and shortened there. The IP address is not merged with the user's data within other Google offerings. The aforementioned information may also be combined on the part of Google with such information from other sources. If the user subsequently visits other websites, he can be shown the ads tailored to his interests..
  • The data of the users are processed pseudonymously within the Google marketing services. I.e. Google does not store and process, for example, the name or email address of users, but processes the relevant data cookie-related within pseudonymous user profiles. I.e. from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the U.S..
  • The Google marketing services we use include, among others, the online advertising program "Google AdWords". In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". Cookies can therefore not be tracked across the websites of AdWords customers. The information obtained using the cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users..
  • We may integrate third-party advertisements based on the Google marketing service „DoubleClick“. DoubleClick uses cookies, with which Google and its partner sites, the placement of ads based on users' visits to this site or other sites on the Internet is enabled..
  • We may integrate third-party advertisements based on the Google marketing service "AdSense". AdSense uses cookies, with which Google and its partner websites, the placement of ads based on users' visits to this website or other websites on the Internet is enabled..
  • Also, we may use the service "Google Optimizer". Google Optimizer allows us in the context of so-called „A/B testing“ to track how various changes to a website (eg changes to the input fields, design, etc.). Cookies are placed on users' devices for these testing purposes. In the process, only pseudonymous data of the users are processed.
  • Furthermore, we use the „Google Tag Manager“ to integrate and manage the Google analytics and marketing services in our website.
  • For more information about Google's use of data for marketing purposes, please see the overview page: https://policies.google.com/technologies/ads, Google's privacy notice is available at https://policies.google.com/privacy.
  • If you wish to opt-out of interest-based advertising by Google marketing services, you may use the settings and opt-out options provided by Google at https://adssettings.google.com/authenticated.
  1. Amazon Affiliate Program

  • With this website, we may be participants in the affiliate program of Amazon EU, which was designed to provide a medium for websites, by means of which through the placement of advertisements and links to Amazon.co.uk advertising fees can be earned. Amazon uses cookies to track the origin of orders. Among other things, Amazon can recognize that you have clicked the affiliate link on this website.
  • For more information about Amazon's use of data, please see the company's privacy policy: http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
  1. Tracking and use of data within the deployed widget and affiliate system of Vergleich.org
  • We embed on our pages a widget for product and service comparisons of the provider "Vergleich.org", VGL Verlagsgesellschaft mbH, Oranienstraße 6, D-10997 Berlin. In this context, personal usage data of the visitors of this online offer can be processed pseudonymously. In this context, tracking measures customary in the industry are used, insofar as these are necessary for the operation of the widgets and affiliate system of Vergleich.org. In the following, we clarify the technical background for users.
  • Vergleich.org cooperates with companies whose services are advertised and linked on other websites by means of Vergleich.org's affiliate program (so-called affiliate links). The operators of the respective websites receive a commission when users follow the affiliate links and subsequently take advantage of the offers. The offer system requires that we and Vergleich.org as well as participating providers of the services/products mediated by the affiliate measures can track whether visitors to this online offer who are interested in affiliate links and/or the offers available from us subsequently take up the offers at the instigation of the affiliate links or our online offer. For this purpose, the affiliate links are supplemented with certain values, which may be a part of the link or otherwise saved, e.g. in a cookie, i.e. a small file that is saved on the user's computer. The values include in particular the source website (referrer), time, an online identifier of the operators of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the visitor to this online offer, as well as tracking-specific values such as advertising material ID, partner ID, sub-partner ID and categorizations (sub-ID).
  • The online identifier of the visitors of this online offer used by Vergleich.org, is a pseudonymous value. That is, the online identifier itself does not contain any personal data such as name or email address. It only helps to determine whether the same visitor to this online offer who has clicked on an affiliate link has taken advantage of the offer, i.e. has concluded a contract with its provider, for example. However, the online identifier is personal to the extent that the affiliate company and Vergleich.org have the online identifier together with other user data. Only in this way can the partner company or Vergleich.org tell us whether that visitor to this online offer has taken advantage of the offer and we receive a commission or similar.
  • This processing is based on our legitimate interests and the legitimate interests of Vergleich.org and the providers (i.e. interest in the analysis, optimization and economic operation of our online offer) according to Art. 6 para. 1 lit. f DSGVO.
  • Further information and notes on the right to object as well as other data subject rights can be found in the data protection information of Vergleich.org: https://www.vergleich.org/datenschutz/.
  1. Vibrant

  • We also use advertising formats from Vibrant Media to refinance the service. Vibrant Media's formats are based on contextual targeting. This means that no personal data is used, only the content of the page you are on at that moment. If, in exceptional circumstances, personal information is collected, used or stored, Vibrant will only do so with the explicit and active consent of the individual user. For more information on advertising formats and Vibrant Media's current privacy policy, please click here https://www.vibrantmedia.com/de/whats-intellitxt/.
  1. Integration of Third Party Services and Content

  • We use within our online offer content or service offers from third parties to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always requires that the third-party providers of this content perceive the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as „web beacons“) for statistical or marketing purposes. The „pixel tags“ can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as be linked to such information from other sources.
  • The following presentation provides an overview of third-party providers and their content, along with links to their privacy statements, which contain further information on the processing of data and, in part, already mentioned here, objection options (so-called opt-out):