Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data comprises all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Acme United Europe GmbH, Junkerstr. 13-15, 42699 Solingen, Germany, Tel.: 021223245100, Fax: 0212332181, Email: kundenservice@acmeunited.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer, who can be contacted as follows: "SEQUDATA Unternehmensberatungsgesellschaft für Datensicherheit und Datenschutz mbH & Co. KG, An den Bergen 22A, 14552 Michendorf, – represented by Mr Jörg Stolz –"

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server of the website (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited by us
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymised form)

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying the page content, we use a provider that performs its services itself or through selected sub-contractors exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

4) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your end device for a longer period and enable us to save page settings (so-called “persistent cookies”). You can find the storage period of persistent cookies in the overview of your web browser’s cookie settings.

If personal data is also processed by individual cookies we use, the processing is carried out either on the basis of Art. 6 (1) (b) GDPR for the performance of a contract, on the basis of your consent pursuant to Art. 6 (1) (a) GDPR, or on the basis of our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of your visit in accordance with Art. 6 (1) (f) GDPR.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or you can exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Own review reminder

Exclusively on the basis of your express consent pursuant to Art. 6 (1) (a) GDPR, we use your email address to send a one-time reminder to submit a review of your order. You can withdraw your consent at any time by sending a message to the controller responsible for data processing.

5.2 Trusted Shops

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany.

Exclusively on the basis of your express consent pursuant to Art. 6 (1) (a) GDPR, we transmit your email address and, where applicable, further customer data to the provider so that the provider can contact you by email with a review reminder.

You can withdraw your consent at any time with effect for the future, either towards us or the provider.

For the above-described processing activities, we are jointly responsible with the provider pursuant to Art. 26 GDPR. The agreement on joint controllership can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

5.3 eDesk

In order to process customer inquiries, we use the email ticketing system of the following provider: xSellco Limited, Two Haddington Buildings, Haddington Road, Dublin 4, D04 HE94, Ireland.

If you submit contact requests by email via our website, these are stored and organized in the ticket system in order to enable chronological processing and to improve the service experience. You can use the individually assigned ticket number to check the current status of the processing of your request at any time.

For the organization and processing of inquiries, personal data is collected in accordance with the scope of your disclosure, but at least first name, last name and email address, transmitted to the provider, stored there and read out.

The legal basis for the processing of this data is our legitimate interest in organizing our customer service efficiently, answering your concern as quickly as possible and optimizing our service offering pursuant to Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

5.4 When contacting us (e.g. via contact form or email), personal data is processed – exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) (f) GDPR. If your contact is aimed at the conclusion or performance of a contract, an additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that there are no statutory retention requirements to the contrary.

6) Comment function

Within the scope of the comment function on this website, in addition to your comment, information relating to the time the comment was created and the commenter name you selected are stored and published on this website. Your IP address is also logged and stored. The storage of the IP address is carried out for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content via a submitted comment. We require your email address in order to contact you if a third party should object to your published content as being unlawful.

The legal bases for the storage of your data are Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as being unlawful.

7) Data processing when opening a customer account

Pursuant to Art. 6 (1) (b) GDPR, personal data is collected and processed to the extent necessary if you provide it to us when opening a customer account. Which data is required for the account opening can be seen from the input form on our website.

You can delete your customer account at any time by sending a message to the controller specified above. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully performed, there are no statutory retention obligations to the contrary, and we do not have a legitimate interest in further storage.

8) Use of customer data for direct advertising

8.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory data required for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have explicitly confirmed your consent to receiving the newsletter by clicking on a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to the use of your personal data pursuant to Art. 6 (1) (a) GDPR. In this context, we store your IP address as registered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us during newsletter registration is used strictly for the intended purpose.

You may unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by sending a message to the controller mentioned at the beginning. Once you have unsubscribed, your email address will be promptly removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

8.2 Email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In this respect, we do not need to obtain separate consent from you in accordance with Section 7 (3) UWG (German Unfair Competition Act). The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send any emails.

You are entitled to object at any time to the use of your email address for the aforementioned advertising purpose with effect for the future by notifying the controller mentioned at the beginning. For this, you only incur transmission costs according to the basic tariffs. After receipt of your objection, the use of your email address for advertising purposes will be stopped without delay.

8.3 Klaviyo

Our email newsletter is sent via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) (f) GDPR so that the provider can manage the newsletter dispatch on our behalf.

Subject to your express consent pursuant to Art. 6 (1) (a) GDPR, the provider also performs statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. In doing so, device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated but not merged with other data sets.

You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider which protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

8.4 Advertising by postal mail
On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received these additional details from you within the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation in accordance with Art. 6 (1) (f) GDPR and to use them in order to send you interesting offers and information about our products by postal mail.
You can object to the storage and use of your data for this purpose at any time by contacting us.

9) Data processing for order handling

9.1 Insofar as it is necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.

If, under a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing the order in order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6 (1) (c) GDPR. Your contact details will be used strictly for the purpose of sending you information about updates owed by us and will be processed by us only insofar as this is necessary for the respective notification.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

9.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We forward your name and delivery address and, where required for delivery, your telephone number to a shipping partner selected by us exclusively for the purposes of delivery of the goods pursuant to Art. 6 (1) (b) GDPR.

9.3 Amazon Fulfillment (FBA)

For order processing, we use the following provider: Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg.

Name, address and, where applicable, other personal data will be passed on to the provider exclusively for the purpose of processing the online order in accordance with Art. 6 (1) (b) GDPR. Your data will only be passed on insofar as this is actually necessary for processing the order.

9.4 JTL

For order processing, we use the following provider: JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany.

9.5 Shopware

For order processing, we use the following provider: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany.

9.6 Post & DHL shipping (official)

To prepare shipments, we use the services of the following provider: Deutsche Post DHL Research And Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn, Germany.
Pursuant to Art. 6 (1) (b) GDPR, we transmit digital shipping labels containing your delivery information from our order processing system to the provider exclusively for the purpose of processing your online order. The provider then forwards these to our local printers to enable printing. Data is only passed on insofar as this is actually necessary for processing.

9.7 Disclosure of personal data to shipping service providers

- DHL

We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

We forward your email address and/or telephone number to the provider in accordance with Art. 6 (1) (a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or notifying you of the delivery, provided you have expressly consented to this in the ordering process. Otherwise, for the purpose of delivery, we only forward the recipient’s name and the delivery address to the provider in accordance with Art. 6 (1) (b) GDPR. The data is passed on only insofar as this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date in advance with the provider or provide delivery notifications.

You can withdraw your consent at any time with effect for the future by contacting the controller mentioned above or the provider.
- GLS

We use the following provider as a transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany.

You can withdraw your consent at any time with effect for the future by contacting the controller mentioned above or the provider.

9.8 Use of payment service providers

- Apple Pay

If you choose the “Apple Pay” payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the “Apple Pay” function on your end device running iOS, watchOS or macOS by charging a payment card stored with “Apple Pay”. Apple Pay uses security functions integrated in the hardware and software of your device to protect your transactions. To authorize a payment, you must therefore enter a code you have previously defined and verify the transaction using the “Face ID” or “Touch ID” function of your device.

For the purpose of payment processing, the information provided by you during the ordering process, together with the information about your order, is transmitted in encrypted form to Apple. Apple then encrypts this data again with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay for the execution of the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code back to the originating website to confirm that the payment was successful.

Insofar as personal data is processed in the described transfers, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Due to anonymization, a personal reference is completely excluded. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.

If you use Apple Pay on the iPhone or Apple Watch to complete a purchase that you made via Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a form that can identify you personally. You can disable the option to use Apple Pay on your Mac in the settings of your iPhone. Go to “Wallet & Apple Pay” and deactivate “Allow payments on Mac”.

Further information about data protection with Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027
- Billie GmbH

The following provider offers one or more online payment methods on this website: Billie GmbH, Charlottenstraße 4, 10969 Berlin, Germany.

If you choose a payment method from this provider where you pay in advance (e.g. credit card payment), the payment data you provided during the ordering process (including name, address, bank and card information, currency and transaction number) as well as information on the contents of your order will be transmitted to the provider in accordance with Art. 6 (1) (b) GDPR. In this case, your data will only be passed on for the purpose of payment processing and only insofar as it is necessary for this purpose.

If you choose a payment method in which the provider pays in advance (e.g. purchase on account, installment purchase or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, data on an alternative payment method).

In order to safeguard our legitimate interest in determining the solvency of our customers, this data will be forwarded to the provider for the purpose of a credit check in accordance with Art. 6 (1) (f) GDPR. The provider checks, on the basis of the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experience), whether the payment method selected by you can be granted in view of payment and/or default risks.

For the decision as part of the application review, the provider may also obtain identity and credit information from the following credit reference agencies in accordance with Art. 6 (1) (f) GDPR:

Creditreform Berlin Wolfram KG, Karl-Heinrich-Ulrichs-Straße 1, 10787 Berlin, Germany
Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany
SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany
Euler Hermes Deutschland, Friedensallee 254, 22763 Hamburg, Germany

The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is also included in the calculation of the score values, among other factors.

You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- EPS transfer

The following provider offers one or more online payment methods on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria.

The following provider offers one or more online payment methods on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany.

If you choose the “Google Pay” payment method of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed via the “Google Pay” application on your mobile end device running at least Android 4.4 (“KitKat”) with an NFC function by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To authorize a payment via Google Pay exceeding 25 EUR, it is necessary to first unlock your mobile device using the verification measure set up in each case (such as facial recognition, password, fingerprint or pattern).

For the purpose of payment processing, the information provided by you during the ordering process, together with the information about your order, is transmitted to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the originating website, which is used to verify that a payment has been made. This transaction number does not contain any information about the actual payment data of your payment methods stored with Google Pay, but is created and transmitted as a one-time valid numeric token. In all transactions via Google Pay, Google only acts as an intermediary in the payment process. The actual execution of the transaction takes place exclusively in the relationship between the user and the originating website by debiting the payment method stored with Google Pay.

Insofar as personal data is processed in the described transfers, processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction carried out via Google Pay. This includes date, time and amount of the transaction, merchant’s location and description, a description provided by the merchant of the goods or services purchased, photos attached by you to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason of the transaction and any associated offer.

According to Google, this processing takes place exclusively in accordance with Art. 6 (1) (f) GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data and optimization and functional maintenance of the Google Pay service.

Google also reserves the right to merge the processed transaction data with other information that Google collects and stores when using other Google services.

The Google Pay terms of use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- iDeal

The following provider offers one or more online payment methods on this website: Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands.

The following provider offers one or more online payment methods on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you choose a payment method with which the provider pays in advance (e.g. purchase on account, installment purchase or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, data on an alternative payment method).

For the decision as part of the application review, the provider may also obtain identity and credit information from the following credit reference agencies in accordance with Art. 6 (1) (f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The following provider offers one or more online payment methods on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands.

The following provider offers one or more online payment methods on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method from this provider where you pay in advance, the payment data you provided during the ordering process (including name, address, bank and card information, currency and transaction number) as well as information on the contents of your order will be transmitted to the provider in accordance with Art. 6 (1) (b) GDPR. In this case, your data will only be passed on for the purpose of payment processing and only insofar as it is necessary for this purpose.

If you choose a payment method where we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, data on an alternative payment method).

In order to safeguard our legitimate interest in determining your solvency in such cases, this data will be forwarded to the provider for the purpose of a credit check in accordance with Art. 6 (1) (f) GDPR. The provider checks, on the basis of the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experience), whether the payment method selected by you can be granted in view of payment and/or default risks.

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal’s own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment process. The data is passed on in accordance with Art. 6 (1) (b) GDPR and only insofar as this is necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, PayPal reserves the right to perform a credit check. For this purpose, your payment data may be passed on to credit reference agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal’s legitimate interest in determining your solvency. The result of the credit check with regard to the statistical probability of default is used by PayPal for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is also included in the calculation of the score values, among other factors. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

If the PayPal “purchase on account” payment method is available and selected, your payment data will first be transmitted to PayPal for the purpose of preparing the payment; PayPal will then pass it on to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) for the execution of the payment. The legal basis is Art. 6 (1) (b) GDPR in each case. In this case, Ratepay performs an identity and credit check in its own name to determine solvency according to the principle already described above and, on the basis of a legitimate interest in determining solvency in accordance with Art. 6 (1) (f) GDPR, forwards your payment data to credit reference agencies. A list of credit reference agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If a local third-party payment method is used, your payment data will first be transmitted to PayPal in accordance with Art. 6 (1) (b) GDPR for the purpose of preparing the payment. Depending on your selection of an available local payment method, PayPal then transmits your payment data for the execution of the payment in accordance with Art. 6 (1) (b) GDPR to the respective provider:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Further information on data protection can be found in PayPal’s privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Ratepay

The following provider offers one or more online payment methods on this website: Ratepay GmbH, Ritterstr. 12-14, 10969 Berlin, Germany.

For the decision as part of the application review, the provider may also obtain identity and credit information from the following credit reference agencies in accordance with Art. 6 (1) (f) GDPR:

see here https://www.ratepay.com/legal-payment-creditagencies/

The following provider offers one or more online payment methods on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

9.9 Electronic termination option for long-term contracts with consumers

Consumers who have concluded contracts for fee-based long-term obligations (e.g. subscription contracts) via this website have the option to terminate them in line with the applicable notice periods using an electronic button.

Clicking the button leads to a confirmation page on which the consumer can provide more details on the termination, clearly identify themselves and then declare their termination electronically.

In this context, personal data is collected and transmitted to us in accordance with Art. 6 (1) (b) GDPR only to the extent necessary for proper processing of the termination. Based on Art. 6 (1) (b) GDPR, the personal data provided is also used to confirm receipt of the notice of termination and the time of termination electronically in text form. Another legal basis for processing is Art. 6 (1) (c) GDPR. We are legally obliged to provide an electronic termination option for consumer contracts relating to fee-based long-term obligations concluded in electronic commerce.

10) Web Analytics Services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website, which are stored as small text modules on your end device and collect certain information. This information also includes your IP address, which is however shortened by Google by the last digits to exclude any direct personal reference.

The information is transmitted to Google’s servers and processed there. In this context, transfers to Google LLC located in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide us with other services related to the use of the website and the internet. The IP address transmitted by your browser in the context of Google Analytics and shortened is not merged with other Google data. The data collected when using Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR.
Without your consent, the use of Google Analytics 4 during your visit to the site will not take place. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic features
Google Analytics 4 uses the special function “demographic features” and can generate statistics that provide information about the age, gender and interests of website visitors. This is done by analysing advertising and third-party information. This allows target groups for marketing activities to be identified. The collected data cannot be attributed to any specific person and is deleted after a storage period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalised ads and have linked your devices with your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 (1) (a) GDPR, analyse your usage behaviour across devices and generate database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you may deactivate “Personalised Advertising” in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals is available at: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 (1) (a) GDPR, have created an account on this website and log in on different devices with this account, your activities, including conversions, may be analysed across devices.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European data protection level.

10.2 Google Tag Manager

This website uses the “Google Tag Manager“, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling and linking them to conditions via a unified user interface. The Google Tag Manager itself does not store information on users’ devices nor does it read such information. The service also does not carry out any independent data analyses. However, when pages are accessed, your IP address is transmitted to Google via Google Tag Manager and may be stored there. Transfers to servers of Google LLC in the USA are also possible.

This processing is only carried out if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without your consent, the Google Tag Manager will not be used during your visit to the site. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Further legal information on Google Tag Manager can be found at: https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

10.3 Hotjar

This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians STJ 1000, Malta

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information of the end device used such as IP address and browser details, in order to evaluate them for statistical analysis of user behaviour on our website and to create pseudonymised usage profiles. Among other things, this allows the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes any direct personal reference. A merge with clear data collected by other means does not take place.

All processing described above, in particular the reading or storing of information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

10.4 New Relic

This website uses the web analytics service of the following provider: New Relic, Inc., 188 Spear St, San Francisco, CA 94105, USA

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including device information such as IP address and browser details, in order to evaluate them for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. This also enables the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes direct personal reference. A merge with clear data collected by other means does not take place.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

10.5 Piwik PRO

This website uses the web analytics service of the following provider: Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin, Germany

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including device information such as IP address and browser details, in order to evaluate them for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. This also enables the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes any direct personal reference. A merge with clear data collected by other means does not take place.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

11) Retargeting/Remarketing and Conversion Tracking

11.1 Meta Pixel with Advanced Matching

Within our online offering, we use the “Meta Pixel” service in the mode of advanced matching from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Meta”).

If a user clicks on an advert placed by us on Facebook or Instagram, the URL of our linked page is extended by a parameter by means of “Meta Pixel”. This URL parameter is then entered into the user’s browser via a cookie which our linked page sets itself after redirection. In addition, this cookie records specific customer data such as the e-mail address which we collect on our website linked with the Facebook or Instagram advert during processes such as purchases, account logins or registrations (advanced matching). The cookie is then read out and enables the transmission of the data including the specific customer data to Meta.

We use “Meta Pixel” with advanced matching to make our adverts (“Ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or display certain characteristics (e.g. interests in particular topics or products determined on the basis of the websites visited) which we transmit to Meta (so-called “Custom Audiences”).

In addition, we analyse the effectiveness of our adverts by tracking whether users are redirected to our website after clicking on an advert (conversion). Compared to the standard variant of “Meta Pixel”, the function of advanced matching helps us to measure the effectiveness of our advertising campaigns more accurately by recording more attributed conversions.

All data transmitted is stored and processed by Meta so that an assignment to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with Meta’s data usage guidelines (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to place adverts on and outside of Facebook.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is usually transferred to a Meta server and stored there; in this context, transfer to servers of Meta Platforms Inc. in the USA may also occur.

11.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

For this purpose, Google places a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Beyond this, data processing only takes place if you have agreed with Google that your web and app browsing history may be linked by Google with your Google account and that information from your Google account may be used for the personalisation of adverts you see on the web. If you are logged into Google while visiting our website in this case, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data to Google Analytics data in order to form target groups. In the context of the use of Google Ads Remarketing, transmission of personal data to servers of Google LLC in the USA may also occur.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without such consent, the use of retargeting technology during your visit to our site does not take place.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

Details on the processing activities initiated by Google and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

Further information on Google’s data protection provisions can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.3 LinkedIn Insight

This website uses retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

This technology makes it possible to specifically target visitors to our website with personalised, interest-based advertising who have already shown interest in our shop and our products. The adverts are displayed on the basis of a cookie-based analysis of previous and current usage behaviour, although no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thus adapt advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile end device. You are then shown adverts that are highly likely to match your product and information interests.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without such consent, the use of retargeting technology during your visit to our site does not take place.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

11.4 LinkedIn Marketing Solutions

This website uses retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublín 2, Ireland.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without such consent, the use of retargeting technology during your visit to our site does not take place.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

11.5 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without such consent, the use of retargeting technology during your visit to our site does not take place.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

11.6 billiger.de Sales Tracking

This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany.

If you have reached our website from an advert on the provider’s domain, the success of the advert can be tracked with the help of cookies and/or similar technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain device and browser information, including your IP address where applicable, is read out via the tracking technology in order to record and evaluate predefined user actions (e.g. completed transactions, leads, search queries on the website, views of product pages). This allows the creation of statistics on the usage behaviour on our website after redirection from an advert, which serve us to optimise our offering.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

11.7 Google Ads Conversion Tracking

We use the Google Ads offering to draw attention to our attractive offers on external websites by means of advertising media (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an advert placed by Google Ads. Cookies are small text files that are stored on your end device. These cookies usually lose their validity after 30 days and are not used to identify individuals personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the advert and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their advert and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

In the context of the use of Google Ads, transmission of personal data to servers of Google LLC in the USA may also occur.

Details on the processing activities initiated by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in provided by Google at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

To address users whose data we have received within the scope of business or business-like relationships with even more interest-based advertising, we use a customer match function within Google Ads. For this purpose, we transfer one or more files with aggregated customer data (primarily e-mail addresses and telephone numbers) to Google electronically. In this process, Google does not gain access to clear data, but encrypts the information in the customer files automatically by means of a special algorithm during transmission. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This allows personalised advertising to be displayed across all Google services linked to the relevant Google account.

The transmission of customer data to Google takes place exclusively if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future. Further information on Google’s data protection measures in relation to the customer match function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s data protection provisions can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.8 Google Ads Conversion Tracking without Cookies

This website uses Google Ads Conversion Tracking exclusively without the use of cookies, which means that the service does not set cookies on your end device at any time.

Instead, the local storage of your browser is used to store an individual ID assigned by Google, which enables an analysis of your use of the website. Certain user information is processed via the ID.

The ID is set when a user clicks on an advert placed by Google Ads. If the user visits certain pages of this website, Google and we can recognise that the user has clicked on the advert and was redirected to this page. Each Google Ads customer receives a different ID. The IDs cannot therefore be tracked across the websites of Google Ads customers. The information obtained in this way is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their advert and were redirected to a page tagged with a conversion tracking tag.

However, they do not receive any information with which users can be personally identified. In the context of the use of Google Ads, transmission of personal data to servers of Google LLC in the USA may also occur. Details on the processing activities initiated by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

Insofar as the information collected is personal data, processing is carried out pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical evaluation of the success of our advertising campaigns.
Google’s data protection provisions can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.9 Google Ads Conversion Tracking

This website uses the online advertising programme “Google Ads” and, within the framework of Google Ads, conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the Google Ads offering to draw attention to our attractive offers on external websites by means of advertising media (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.
Google’s data protection provisions can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.10 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform from the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).

GMP uses cookies to display adverts that are relevant to users, to improve reports on campaign performance or to avoid that a user views the same adverts more than once. Via a cookie ID, Google records which adverts are displayed in which browser and can thus prevent them from being shown more than once. In addition, GMP can record so-called conversions with reference to advert requests by means of cookie IDs. This is the case, for example, when a user sees a GMP advert and later calls up the advertiser’s website using the same browser and buys something via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server.

We have no influence on the extent and further use of the data collected by the use of this tool by Google and therefore inform you according to our level of knowledge as follows: Through the integration of GMP, Google receives the information that you have called up the relevant part of our website or have clicked on one of our adverts. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address. In the context of the use of GMP, transmission of personal data to servers of Google LLC in the USA may also occur.

The data protection provisions of GMP by Google can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.11 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

For the use of Universal Event Tracking, a tag is implemented on each page of our website, which interacts with the conversion cookie set by Microsoft. This interaction makes it possible to trace user behaviour on our website and sends the information collected in this way to Microsoft. The purpose of this is to ensure that certain predefined targets such as purchases or leads can be statistically recorded and evaluated in order to make the orientation and content of our offers more interest-based. The tags are at no time used for personal identification of users.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without such consent, the use of retargeting technology during your visit to our site does not take place.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

11.12 TikTok Pixel

This website uses conversion tracking technology from the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

12) Website functionalities

12.1 Vimeo

This website uses plugins to display and play videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers in order to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, to compile playback statistics and to prevent misuse.

If you are logged into a user account with the provider while visiting our site, your data will be directly associated with your account when you click on a video. If you do not want your data to be associated with your account, you must log out before clicking the play button.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website.

12.2 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA.

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest at the time the video is played in order to load the content. In this process, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, to compile playback statistics and to prevent misuse.

All processing described above, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website.

12.3 Trusted Shops Trustbadge

Graphic elements from the following provider are integrated into our website for the display of external customer reviews and/or an externally awarded quality mark: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany.

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements correctly. In this process, certain browser information, including your IP address, is transmitted to the provider.

Insofar as personal data is processed in this context, this is done pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the optimal marketing of our offering and in the attractive presentation of our online presence.

In the event of an online order placed with us, further processing may take place.

Depending on your express consent pursuant to Art. 6 (1) (a) GDPR, after completion of an order your order information (order amount, order number, product purchased, if applicable) as well as your e-mail address will be transmitted in encrypted form to the provider via the trustbadge in order to check an existing registration for the provider’s services (in particular the “buyer protection”) and, if necessary, to enable a new registration.

If an existing registration is identified or if you newly register with the provider for its services (in particular buyer protection), your order information (order amount, order number, product purchased) as well as your e-mail address will be transmitted to the provider and further processed by it on the basis of the contractual agreement with the provider pursuant to Art. 6 (1) (b) GDPR in order to provide the services (in particular buyer protection).

For the processing described above, we and the provider are jointly responsible pursuant to Art. 26 GDPR. The agreement on joint controllership can be viewed here: https://help.etrusted.com/hc/de/articles/23970817960082

12.4 Google Web Fonts

This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you access a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In this process, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA.

The processing of personal data in the course of contacting the font provider is only carried out if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google’s data protection provisions can be found here: https://business.safety.google/intl/de/privacy/

12.5 Google reCAPTCHA

We use the CAPTCHA service of the following provider on this website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA.

For the visual design of the captcha window, “Google Fonts” are used by the provider, i.e. fonts loaded from the internet by Google. This does not involve any processing of information other than those mentioned above that are already transmitted to Google via the reCAPTCHA functionality.

The service checks whether an input is made by a natural person or abusively by automated processing and blocks spam, DDoS attacks and similar automated harmful access. To ensure that an action is performed by a human being and not by an automated bot, the provider collects the IP address of the end device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits these to the provider’s servers for evaluation. Cookies may be used in this process, i.e. small text files that are stored in the browser of the end device.

Insofar as the processing described above is carried out on the basis of cookies, these are only set if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and in preventing misuse and spam pursuant to Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information on Google’s data protection provisions can be found here: https://business.safety.google/intl/de/privacy/

12.6 Typeform

For conducting surveys or online forms, we use the services of the following provider: TYPEFORM SL, Carrer de Can Rabia 3-5, 4th floor, 08017 Barcelona, Spain.

The provider enables us to design and evaluate surveys and online forms. In addition to the respective personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to the provider and stored on the provider’s servers.

The information you enter into the forms is stored password-protected so as to ensure that access by third parties is excluded and that only we can evaluate the data for the purpose specified in the respective form.

For the processing of personal data required for the performance of a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures), Art. 6 (1) (b) GDPR serves as the legal basis. If you have given us consent to process your data, processing is carried out on the basis of Art. 6 (1) (a) GDPR. Consent granted can be revoked at any time with effect for the future.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

12.7 Microsoft Power BI

For internal visualisation of business processes and for custom analyses of economic processes, we use the “Microsoft Power BI” service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Where applicable, personal customer data may be subject to visualisation and analysis processes and thus be processed by Microsoft BI. In this case, Microsoft processes personal data as a processor bound by instructions in accordance with Art. 28 GDPR and has contractually undertaken towards us to protect this data in accordance with the statutory requirements.

For this purpose, Microsoft uses state-of-the-art encryption methods and ensures that data processing operations are carried out exclusively in data centres within the EU.

12.8 Uptain

To improve interaction with our visitors, we use a JavaScript plugin from uptain GmbH, Obergrünewalder Str. 8 a, 42103 Wuppertal (“uptain plugin”). This enables us to analyse your use of the website and improve customer communication (e.g. through a dialogue window). For this purpose, we collect information about your user behaviour, i.e. cursor movement, length of stay, links clicked and any information provided.

All processing described above, in particular the reading of information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without such consent, the use of Uptain during your visit to our site does not take place.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with Uptain, by which we oblige Uptain to protect our customers’ data and not to pass it on to third parties.

You can alternatively object to web analysis by Uptain at any time by activating an opt-out link in order to permanently deactivate the use of the uptain plugin, by disabling it at any time via the following link: https://firstaidonly.de?__up_tracking_unsubscribe

13) Tools and Miscellaneous

13.1 - DATEV

For handling our bookkeeping, we use the service of the cloud-based accounting software from the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.

The provider processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to record invoices automatically, match them to transactions and to create financial accounting from them in a partially automated process.

Insofar as personal data is processed in this context, processing is carried out on the basis of our legitimate interest in efficient organisation and documentation of our business processes pursuant to Art. 6 (1) (f) GDPR.
- Taxdoo

For handling our bookkeeping, we use the service of the cloud-based accounting software from the following provider: Taxdoo GmbH, Alter Wandrahm 13, 20457 Hamburg, Germany.

13.2 Cookie consent tool

This website uses a so-called “cookie consent tool” in order to obtain valid user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when the page is accessed in the form of an interactive user interface via which consents for certain cookies and/or cookie-based applications can be granted by ticking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives the relevant consent by ticking the box. This ensures that such cookies are only set on the respective user’s end device if consent has been granted.

The tool sets technically necessary cookies in order to save your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and, therefore, in a legally compliant design of our online presence.

Further legal basis for processing is Art. 6 (1) (c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user’s consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the configuration options of the cookie consent tool can be found directly in the corresponding user interface on our website.

14) Data subject rights

14.1 The applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby the legal basis stated for the respective prerequisites for exercising these rights applies:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent granted pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of the processing and – if relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of express consent pursuant to Art. 6 (1) (a) GDPR, the data concerned will be stored until you withdraw your consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfilment of the contract or for the initiation of a contract and/or we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer needed for the purposes for which it was collected or otherwise processed.

Last updated: 14.11.2025, 03:40:02