Datenschutz­erklärung

1. Pri­va­cy at a Glan­ce

Gene­ral Infor­ma­ti­on

Die fol­gen­den Hin­wei­se geben einen ein­fa­chen Über­blick dar­über, was mit Ihren per­so­nen­be­zo­ge­nen Daten pas­siert, wenn Sie die­se Web­site besu­chen. Per­so­nen­be­zo­ge­ne Daten sind alle Daten, mit denen Sie per­sön­lich iden­ti­fi­ziert wer­den kön­nen. Aus­führ­li­che Infor­ma­tio­nen zum The­ma Daten­schutz ent­neh­men Sie unse­rer unter die­sem Text auf­ge­führ­ten Daten­schutz­er­klä­rung.

Data Coll­ec­tion on This Web­site

Who is respon­si­ble for data coll­ec­tion on this web­site?

Data pro­ces­sing on this web­site is car­ri­ed out by the web­site ope­ra­tor. You can find the ope­ra­tor’s cont­act details in the sec­tion “Infor­ma­ti­on on the Respon­si­ble Par­ty” in this pri­va­cy poli­cy.

How do we coll­ect your data?

Your data is coll­ec­ted in part by you pro­vi­ding it to us. This may include, for exam­p­le, data that you enter into a cont­act form.

Other data is coll­ec­ted auto­ma­ti­cal­ly or with your con­sent when you visit the web­site through our IT sys­tems. This pri­ma­ri­ly includes tech­ni­cal data (e.g., inter­net brow­ser, ope­ra­ting sys­tem, or time of page access). This data is coll­ec­ted auto­ma­ti­cal­ly as soon as you enter this web­site.

What do we use your data for?

Some of the data is coll­ec­ted to ensu­re the error-free pro­vi­si­on of the web­site. Other data may be used to ana­ly­ze your user beha­vi­or. If con­tracts can be con­cluded or initia­ted via the web­site, the trans­mit­ted data will also be pro­ces­sed for con­tract offers, orders, or other order requests.

What rights do you have regar­ding your data?

You have the right at any time to recei­ve infor­ma­ti­on free of char­ge about the ori­gin, reci­pi­ent, and pur­po­se of your stored per­so­nal data. You also have the right to request the cor­rec­tion or dele­ti­on of this data. If you have given con­sent to data pro­ces­sing, you can revo­ke this con­sent at any time for the future. You also have the right, under cer­tain cir­cum­s­tances, to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data. Fur­ther­mo­re, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry aut­ho­ri­ty.

You can cont­act us at any time regar­ding this and other ques­ti­ons about data pro­tec­tion.

Ana­ly­sis Tools and Third-Par­ty Tools

When you visit this web­site, your brow­sing beha­vi­or may be sta­tis­ti­cal­ly ana­ly­zed. This is pri­ma­ri­ly done using ana­ly­sis pro­grams.

Detail­ed infor­ma­ti­on about the­se ana­ly­sis pro­grams can be found in the fol­lo­wing pri­va­cy poli­cy.

2. Hos­ting

We host the con­tent of our web­site with the fol­lo­wing pro­vi­der:

Host Euro­pe

The pro­vi­der is Host Euro­pe GmbH, Han­se­stra­ße 111, 51149 Colo­gne (her­ein­af­ter Host Euro­pe). When you visit our web­site, Host Euro­pe coll­ects various log files inclu­ding your IP addres­ses.

Details can be found in Host Euro­pe’s pri­va­cy poli­cy: https://www.hosteurope.de/AGB/Datenschutzerklaerung/.

The use of Host Euro­pe is based on Art. 6(1)(f) GDPR. We have a legi­ti­ma­te inte­rest in the most relia­ble pre­sen­ta­ti­on of our web­site. If appro­pria­te con­sent has been reques­ted, pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and Sec­tion 25(1) TDDDG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on on the user’s device (e.g., for device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be revo­ked at any time.

Data Pro­ces­sing Agree­ment

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a con­tract requi­red by data pro­tec­tion law, which ensu­res that the ser­vice pro­ces­ses the per­so­nal data of our web­site visi­tors only accor­ding to our ins­truc­tions and in com­pli­ance with the GDPR.

3. Gene­ral Infor­ma­ti­on and Man­da­to­ry Infor­ma­ti­on

Pri­va­cy Poli­cy

The ope­ra­tors of this web­site take the pro­tec­tion of your per­so­nal data very serious­ly. We tre­at your per­so­nal data con­fi­den­ti­al­ly and in accordance with sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this pri­va­cy poli­cy.

When you use this web­site, various per­so­nal data is coll­ec­ted. Per­so­nal data is data that can per­so­nal­ly iden­ti­fy you. This pri­va­cy poli­cy explains what data we coll­ect and what we use it for. It also explains how and for what pur­po­se this is done.

We point out that data trans­mis­si­on over the inter­net (e.g., when com­mu­ni­ca­ting via email) may have secu­ri­ty vul­nerabi­li­ties. Com­ple­te pro­tec­tion of data against access by third par­ties is not pos­si­ble.

Infor­ma­ti­on on the Respon­si­ble Par­ty

The respon­si­ble par­ty for data pro­ces­sing on this web­site is:

Ger­hard Sos­na
Wes­ten­hell­weg 5
59494 Soest

Pho­ne: +49 2921 3451883
Email: info@archemed.org

The respon­si­ble par­ty is the natu­ral or legal per­son who alo­ne or joint­ly with others deter­mi­nes the pur­po­ses and means of the pro­ces­sing of per­so­nal data (e.g., names, email addres­ses, etc.).

Sto­rage Dura­ti­on

Unless a more spe­ci­fic sto­rage peri­od has been spe­ci­fied within this pri­va­cy poli­cy, your per­so­nal data will remain with us until the pur­po­se for data pro­ces­sing no lon­ger appli­es. If you assert a legi­ti­ma­te request for dele­ti­on or revo­ke con­sent to data pro­ces­sing, your data will be dele­ted unless we have other legal­ly per­mis­si­ble reasons for sto­ring your per­so­nal data (e.g., tax or com­mer­cial reten­ti­on peri­ods); in the lat­ter case, dele­ti­on will occur after the­se reasons cea­se to app­ly.

Gene­ral Infor­ma­ti­on on the Legal Basis for Data Pro­ces­sing on This Web­site

If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, if spe­cial cate­go­ries of data pur­su­ant to Art. 9(1) GDPR are pro­ces­sed. In the case of expli­cit con­sent to the trans­fer of per­so­nal data to third count­ries, data pro­ces­sing is also car­ri­ed out on the basis of Art. 49(1)(a) GDPR. If you have con­sen­ted to the sto­rage of coo­kies or access to infor­ma­ti­on on your device (e.g., via device fin­ger­prin­ting), data pro­ces­sing is addi­tio­nal­ly car­ri­ed out on the basis of Sec­tion 25(1) TDDDG. Con­sent can be revo­ked at any time. If your data is requi­red for the per­for­mance of a con­tract or for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res, we pro­cess your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­mo­re, we pro­cess your data if it is neces­sa­ry to ful­fill a legal obli­ga­ti­on on the basis of Art. 6(1)© GDPR. Data pro­ces­sing may also be car­ri­ed out on the basis of our legi­ti­ma­te inte­rest pur­su­ant to Art. 6(1)(f) GDPR. Infor­ma­ti­on on the rele­vant legal basis in each indi­vi­du­al case is pro­vi­ded in the fol­lo­wing para­graphs of this pri­va­cy poli­cy.

Reci­pi­ents of Per­so­nal Data

In the cour­se of our busi­ness acti­vi­ties, we work with various exter­nal par­ties. In some cases, this also requi­res the trans­mis­si­on of per­so­nal data to the­se exter­nal par­ties. We only dis­c­lo­se per­so­nal data to exter­nal par­ties if this is neces­sa­ry for the per­for­mance of a con­tract, if we are legal­ly obli­ga­ted to do so (e.g., dis­clo­sure of data to tax aut­ho­ri­ties), if we have a legi­ti­ma­te inte­rest pur­su­ant to Art. 6(1)(f) GDPR in the dis­clo­sure, or if ano­ther legal basis per­mits the dis­clo­sure of data. When using data pro­ces­sors, we only dis­c­lo­se per­so­nal data of our cus­to­mers on the basis of a valid data pro­ces­sing agree­ment. In the case of joint pro­ces­sing, a joint pro­ces­sing agree­ment is con­cluded.

Revo­ca­ti­on of Your Con­sent to Data Pro­ces­sing

Many data pro­ces­sing ope­ra­ti­ons are only pos­si­ble with your expli­cit con­sent. You can revo­ke con­sent you have alre­a­dy given at any time. The lawful­ness of data pro­ces­sing car­ri­ed out until the revo­ca­ti­on remains unaf­fec­ted by the revo­ca­ti­on.

Right to Object to Data Coll­ec­tion in Spe­cial Cases and to Direct Mar­ke­ting (Art. 21 GDPR)

IF DATA PRO­CES­SING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PRO­CES­SING OF YOUR PER­SO­NAL DATA FOR REASONS ARI­SING FROM YOUR PAR­TI­CU­LAR SITUA­TI­ON; THIS ALSO APPLI­ES TO PRO­FIL­ING BASED ON THE­SE PRO­VI­SI­ONS. THE RESPEC­TI­VE LEGAL BASIS ON WHICH PRO­CES­SING IS BASED CAN BE FOUND IN THIS PRI­VA­CY POLI­CY. IF YOU OBJECT, WE WILL NO LON­GER PRO­CESS YOUR PER­SO­NAL DATA UNLESS WE CAN DEMONS­TRA­TE COM­PEL­LING LEGI­TI­MA­TE GROUNDS FOR THE PRO­CES­SING THAT OVER­RI­DE YOUR INTE­RESTS, RIGHTS, AND FREE­DOMS, OR THE PRO­CES­SING SER­VES THE ASSER­TI­ON, EXER­CISE, OR DEFEN­SE OF LEGAL CLAIMS (OBJEC­TION PUR­SU­ANT TO ART. 21(1) GDPR).

IF YOUR PER­SO­NAL DATA IS PRO­CES­SED FOR DIRECT MAR­KE­TING PUR­PO­SES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PRO­CES­SING OF PER­SO­NAL DATA CON­CER­NING YOU FOR THE PUR­PO­SE OF SUCH MAR­KE­TING; THIS ALSO APPLI­ES TO PRO­FIL­ING INSO­FAR AS IT IS RELA­TED TO SUCH DIRECT MAR­KE­TING. IF YOU OBJECT, YOUR PER­SO­NAL DATA WILL SUB­SE­QUENT­LY NO LON­GER BE USED FOR DIRECT MAR­KE­TING PUR­PO­SES (OBJEC­TION PUR­SU­ANT TO ART. 21(2) GDPR).

Right to Lodge a Com­plaint with the Com­pe­tent Super­vi­so­ry Aut­ho­ri­ty

In the event of vio­la­ti­ons of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Mem­ber Sta­te of their habi­tu­al resi­dence, place of work, or place of the alle­ged inf­rin­ge­ment. The right to lodge a com­plaint is wit­hout pre­ju­di­ce to other admi­nis­tra­ti­ve or judi­cial reme­dies.

Right to Data Por­ta­bi­li­ty

You have the right to have data that we pro­cess auto­ma­ti­cal­ly on the basis of your con­sent or in per­for­mance of a con­tract han­ded over to you or to a third par­ty in a com­mon, machi­ne-rea­da­ble for­mat. If you request the direct trans­fer of data to ano­ther con­trol­ler, this will only be done to the ext­ent that it is tech­ni­cal­ly fea­si­ble.

Infor­ma­ti­on, Cor­rec­tion, and Dele­ti­on

Within the frame­work of the appli­ca­ble legal pro­vi­si­ons, you have the right at any time to free infor­ma­ti­on about your stored per­so­nal data, its ori­gin and reci­pi­ents, and the pur­po­se of data pro­ces­sing and, if appli­ca­ble, a right to cor­rec­tion or dele­ti­on of this data. You can cont­act us at any time regar­ding this and other ques­ti­ons about per­so­nal data.

Right to Rest­ric­tion of Pro­ces­sing

You have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data. You can cont­act us at any time for this pur­po­se. The right to rest­ric­tion of pro­ces­sing exists in the fol­lo­wing cases:

• If you dis­pu­te the accu­ra­cy of your per­so­nal data stored by us, we usual­ly need time to veri­fy this. For the dura­ti­on of the review, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data.
• If the pro­ces­sing of your per­so­nal data was/is unlawful, you can request the rest­ric­tion of data pro­ces­sing ins­tead of dele­ti­on.
• If we no lon­ger need your per­so­nal data, but you need it for the exer­cise, defen­se, or asser­ti­on of legal claims, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data ins­tead of dele­ti­on.
• If you have lodged an objec­tion pur­su­ant to Art. 21(1) GDPR, a balan­cing of your and our inte­rests must be car­ri­ed out. As long as it has not yet been deter­mi­ned who­se inte­rests pre­vail, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, this data may—apart from being stored—only be pro­ces­sed with your con­sent or for the asser­ti­on, exer­cise, or defen­se of legal claims or for the pro­tec­tion of the rights of ano­ther natu­ral or legal per­son or for reasons of important public inte­rest of the Euro­pean Uni­on or a Mem­ber Sta­te.

SSL or TLS Encryp­ti­on

For secu­ri­ty reasons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as orders or inqui­ries that you send to us as the site ope­ra­tor, this site uses SSL or TLS encryp­ti­on. You can reco­gni­ze an encrypt­ed con­nec­tion by the fact that the address line of the brow­ser chan­ges from “http://” to “https://” and by the lock sym­bol in your brow­ser line.

When SSL or TLS encryp­ti­on is acti­va­ted, the data you trans­mit to us can­not be read by third par­ties.

Encrypt­ed Pay­ment Tran­sac­tions on This Web­site

If, after the con­clu­si­on of a paid con­tract, the­re is an obli­ga­ti­on to trans­mit your pay­ment data (e.g., account num­ber for direct debit aut­ho­riza­ti­on) to us, this data is requi­red for pay­ment pro­ces­sing.

Pay­ment tran­sac­tions using com­mon pay­ment methods (Visa/MasterCard, direct debit) are car­ri­ed out exclu­si­ve­ly via an encrypt­ed SSL or TLS con­nec­tion. You can reco­gni­ze an encrypt­ed con­nec­tion by the fact that the address line of the brow­ser chan­ges from “http://” to “https://” and by the lock sym­bol in your brow­ser line.

With encrypt­ed com­mu­ni­ca­ti­on, your pay­ment data that you trans­mit to us can­not be read by third par­ties.

4. Data Coll­ec­tion on This Web­site

Coo­kies

Our web­site uses so-cal­led “coo­kies.” Coo­kies are small data packets and do not cau­se any dama­ge to your device. They are stored eit­her tem­po­r­a­ri­ly for the dura­ti­on of a ses­si­on (ses­si­on coo­kies) or per­ma­nent­ly (per­ma­nent coo­kies) on your device. Ses­si­on coo­kies are auto­ma­ti­cal­ly dele­ted after your visit ends. Per­ma­nent coo­kies remain stored on your device until you dele­te them yours­elf or auto­ma­tic dele­ti­on is per­for­med by your web brow­ser.

Coo­kies may ori­gi­na­te from us (first-par­ty coo­kies) or from third-par­ty com­pa­nies (so-cal­led third-par­ty coo­kies). Third-par­ty coo­kies enable the inte­gra­ti­on of cer­tain ser­vices from third-par­ty com­pa­nies within web­sites (e.g., coo­kies for pro­ces­sing pay­ment ser­vices).

Coo­kies have various func­tions. Num­e­rous coo­kies are tech­ni­cal­ly neces­sa­ry, as cer­tain web­site func­tions would not work wit­hout them (e.g., the shop­ping cart func­tion or the dis­play of vide­os). Other coo­kies may be used to ana­ly­ze user beha­vi­or or for adver­ti­sing pur­po­ses.

Coo­kies that are neces­sa­ry to car­ry out the elec­tro­nic com­mu­ni­ca­ti­on pro­cess, to pro­vi­de cer­tain func­tions you have reques­ted (e.g., for the shop­ping cart func­tion), or to opti­mi­ze the web­site (e.g., coo­kies for mea­su­ring web audi­ence) (neces­sa­ry coo­kies) are stored on the basis of Art. 6(1)(f) GDPR, unless ano­ther legal basis is spe­ci­fied. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in sto­ring neces­sa­ry coo­kies for the tech­ni­cal­ly error-free and opti­mi­zed pro­vi­si­on of its ser­vices. If con­sent to the sto­rage of coo­kies and com­pa­ra­ble reco­gni­ti­on tech­no­lo­gies has been reques­ted, pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of this con­sent (Art. 6(1)(a) GDPR and Sec­tion 25(1) TDDDG); con­sent can be revo­ked at any time.

You can con­fi­gu­re your brow­ser so that you are infor­med about the set­ting of coo­kies and only allow coo­kies on a case-by-case basis, exclude the accep­tance of coo­kies for cer­tain cases or in gene­ral, and acti­va­te the auto­ma­tic dele­ti­on of coo­kies when clo­sing the brow­ser. If coo­kies are deac­ti­va­ted, the func­tion­a­li­ty of this web­site may be limi­t­ed.

You can find out which coo­kies and ser­vices are used on this web­site in this pri­va­cy poli­cy.

Con­sent with Borlabs Coo­kie

Our web­site uses the con­sent tech­no­lo­gy from Borlabs Coo­kie to obtain your con­sent to the sto­rage of cer­tain coo­kies in your brow­ser or to the use of cer­tain tech­no­lo­gies and to docu­ment this in a data pro­tec­tion-com­pli­ant man­ner. The pro­vi­der of this tech­no­lo­gy is Borlabs GmbH, Rüben­kamp 32, 22305 Ham­burg (her­ein­af­ter Borlabs).

When you enter our web­site, a Borlabs coo­kie is stored in your brow­ser, in which the cons­ents you have given or the revo­ca­ti­on of the­se cons­ents are stored. This data is not pas­sed on to the pro­vi­der of Borlabs Coo­kie.

The coll­ec­ted data is stored until you request us to dele­te it or dele­te the Borlabs coo­kie yours­elf, or the pur­po­se for data sto­rage no lon­ger appli­es. Man­da­to­ry sta­tu­to­ry reten­ti­on peri­ods remain unaf­fec­ted. Details on data pro­ces­sing by Borlabs Coo­kie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

The use of Borlabs Coo­kie con­sent tech­no­lo­gy is car­ri­ed out to obtain the legal­ly requi­red cons­ents for the use of coo­kies. The legal basis for this is Art. 6(1)© GDPR.

Ser­ver Log Files

The pro­vi­der of the pages auto­ma­ti­cal­ly coll­ects and stores infor­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser auto­ma­ti­cal­ly trans­mits to us. The­se are:

• Brow­ser type and brow­ser ver­si­on
• Ope­ra­ting sys­tem used
• Refer­rer URL
• Host­na­me of the acces­sing com­pu­ter
• Time of the ser­ver request
• IP address

This data is not mer­ged with other data sources.

The coll­ec­tion of this data is based on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error-free pre­sen­ta­ti­on and opti­miza­ti­on of its website—for this pur­po­se, the ser­ver log files must be coll­ec­ted.

Cont­act Form

If you send us inqui­ries via the cont­act form, your details from the inquiry form, inclu­ding the cont­act data you pro­vi­ded the­re, will be stored by us for the pur­po­se of pro­ces­sing the inquiry and in case of fol­low-up ques­ti­ons. We do not dis­c­lo­se this data wit­hout your con­sent.

The pro­ces­sing of this data is based on Art. 6(1)(b) GDPR, if your inquiry is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of inqui­ries addres­sed to us (Art. 6(1)(f) GDPR) or on your con­sent (Art. 6(1)(a) GDPR) if this has been reques­ted; con­sent can be revo­ked at any time.

The data you enter in the cont­act form will remain with us until you request us to dele­te it, revo­ke your con­sent to sto­rage, or the pur­po­se for data sto­rage no lon­ger appli­es (e.g., after your inquiry has been pro­ces­sed). Man­da­to­ry sta­tu­to­ry provisions—in par­ti­cu­lar reten­ti­on periods—remain unaf­fec­ted.

Inquiry by Email, Pho­ne, or Fax

If you cont­act us by email, pho­ne, or fax, your inquiry, inclu­ding all resul­ting per­so­nal data (name, inquiry), will be stored and pro­ces­sed by us for the pur­po­se of hand­ling your request. We do not dis­c­lo­se this data wit­hout your con­sent.

The pro­ces­sing of this data is based on Art. 6(1)(b) GDPR, if your inquiry is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of inqui­ries addres­sed to us (Art. 6(1)(f) GDPR) or on your con­sent (Art. 6(1)(a) GDPR) if this has been reques­ted; con­sent can be revo­ked at any time.

The data you send to us via cont­act requests will remain with us until you request us to dele­te it, revo­ke your con­sent to sto­rage, or the pur­po­se for data sto­rage no lon­ger appli­es (e.g., after your request has been pro­ces­sed). Man­da­to­ry sta­tu­to­ry provisions—in par­ti­cu­lar sta­tu­to­ry reten­ti­on periods—remain unaf­fec­ted.

5. Ana­ly­sis Tools and Adver­ti­sing

Mato­mo

This web­site uses the open source web ana­ly­sis ser­vice Mato­mo.

With the help of Mato­mo, we are able to coll­ect and ana­ly­ze data on the use of our web­site by web­site visi­tors. This allows us to find out, among other things, when which page views were made and from which regi­on they come. We also coll­ect various log files (e.g., IP address, refer­rer, brow­sers and ope­ra­ting sys­tems used) and can mea­su­re whe­ther our web­site visi­tors per­form cer­tain actions (e.g., clicks, purcha­ses, etc.).

The use of this ana­ly­sis tool is based on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in ana­ly­zing user beha­vi­or in order to opti­mi­ze both its web offe­ring and its adver­ti­sing. If appro­pria­te con­sent has been reques­ted, pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and Sec­tion 25(1) TDDDG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on on the user’s device (e.g., device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be revo­ked at any time.

IP Anony­miza­ti­on

When ana­ly­zing with Mato­mo, we use IP anony­miza­ti­on. Your IP address is shor­ten­ed befo­re ana­ly­sis so that it can no lon­ger be cle­ar­ly assi­gned to you.

Hos­ting

We host Mato­mo exclu­si­ve­ly on our own ser­vers, so that all ana­ly­sis data remains with us and is not pas­sed on.

6. Plug­ins and Tools

Ado­be Fonts

This web­site uses web fonts from Ado­be for the uni­form dis­play of cer­tain fonts. The pro­vi­der is Ado­be Sys­tems Incor­po­ra­ted, 345 Park Ave­nue, San Jose, CA 95110–2704, USA (Ado­be).

When you access this web­site, your brow­ser loads the requi­red fonts direct­ly from Ado­be in order to dis­play them cor­rect­ly on your device. In doing so, your brow­ser estab­lishes a con­nec­tion to Ado­be’s ser­vers in the USA. This gives Ado­be know­ledge that this web­site was acces­sed via your IP address. Accor­ding to Ado­be, no coo­kies are stored when pro­vi­ding the fonts.

The sto­rage and ana­ly­sis of data is based on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the uni­form dis­play of the type­face on its web­site. If appro­pria­te con­sent has been reques­ted, pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and Sec­tion 25(1) TDDDG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on on the user’s device (e.g., device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be revo­ked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.

Fur­ther infor­ma­ti­on about Ado­be Fonts can be found at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.

Ado­be’s pri­va­cy poli­cy can be found at: https://www.adobe.com/de/privacy/policy.html

The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Each com­pa­ny cer­ti­fied under the DPF com­mits to com­ply­ing with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/participant/5660.

7. eCom­mer­ce and Pay­ment Pro­vi­ders

Pro­ces­sing of Cus­to­mer and Con­tract Data

We coll­ect, pro­cess, and use per­so­nal cus­to­mer and con­tract data to estab­lish, struc­tu­re, and modi­fy our con­trac­tu­al rela­ti­onships. We coll­ect, pro­cess, and use per­so­nal data on the use of this web­site (usa­ge data) only to the ext­ent neces­sa­ry to enable the user to use the ser­vice or to bill for it. The legal basis for this is Art. 6(1)(b) GDPR.

The coll­ec­ted cus­to­mer data will be dele­ted after com­ple­ti­on of the order or ter­mi­na­ti­on of the busi­ness rela­ti­onship and expi­ra­ti­on of any exis­ting sta­tu­to­ry reten­ti­on peri­ods. Sta­tu­to­ry reten­ti­on peri­ods remain unaf­fec­ted.

Data Trans­fer Upon Con­clu­si­on of Con­tract for Online Shops, Retail­ers, and Goods Ship­ping

If you order goods from us, we pass on your per­so­nal data to the trans­port com­pa­ny com­mis­sio­ned with deli­very and to the pay­ment ser­vice pro­vi­der com­mis­sio­ned with pay­ment pro­ces­sing. Only such data is dis­c­lo­sed as the respec­ti­ve ser­vice pro­vi­der needs to ful­fill its task. The legal basis for this is Art. 6(1)(b) GDPR, which per­mits the pro­ces­sing of data for the per­for­mance of a con­tract or pre-con­trac­tu­al mea­su­res. If you have given appro­pria­te con­sent pur­su­ant to Art. 6(1)(a) GDPR, we will pass on your email address to the trans­port com­pa­ny com­mis­sio­ned with deli­very so that it can inform you by email about the ship­ping sta­tus of your order; you can revo­ke con­sent at any time.

Data Trans­fer Upon Con­clu­si­on of Con­tract for Ser­vices and Digi­tal Con­tent

We only trans­mit per­so­nal data to third par­ties if this is neces­sa­ry in the con­text of con­tract pro­ces­sing, for exam­p­le to the cre­dit insti­tu­ti­on com­mis­sio­ned with pay­ment pro­ces­sing.

No fur­ther trans­mis­si­on of data takes place or only if you have express­ly con­sen­ted to the trans­mis­si­on. Your data will not be pas­sed on to third par­ties wit­hout express con­sent, for exam­p­le for adver­ti­sing pur­po­ses.

The basis for data pro­ces­sing is Art. 6(1)(b) GDPR, which per­mits the pro­ces­sing of data for the per­for­mance of a con­tract or pre-con­trac­tu­al mea­su­res.

Pay­ment Ser­vices

We inte­gra­te pay­ment ser­vices from third-par­ty com­pa­nies on our web­site. When you make a purcha­se from us, your pay­ment data (e.g., name, pay­ment amount, account details, cre­dit card num­ber) is pro­ces­sed by the pay­ment ser­vice pro­vi­der for the pur­po­se of pay­ment pro­ces­sing. The respec­ti­ve con­trac­tu­al and data pro­tec­tion pro­vi­si­ons of the respec­ti­ve pro­vi­ders app­ly to the­se tran­sac­tions. The use of pay­ment ser­vice pro­vi­ders is based on Art. 6(1)(b) GDPR (con­tract pro­ces­sing) and in the inte­rest of a smooth, con­ve­ni­ent, and secu­re pay­ment pro­cess (Art. 6(1)(f) GDPR). Inso­far as con­sent is reques­ted for cer­tain actions, Art. 6(1)(a) GDPR is the legal basis for data pro­ces­sing; cons­ents can be revo­ked at any time for the future.

We use the fol­lo­wing pay­ment services/payment ser­vice pro­vi­ders within this web­site:

Pay­Pal

The pro­vi­der of this pay­ment ser­vice is Pay­Pal (Euro­pe) S.à.r.l. et Cie, S.C.A., 22–24 Bou­le­vard Roy­al, L‑2449 Luxem­bourg (her­ein­af­ter “Pay­Pal”).

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details can be found in Pay­Pal’s pri­va­cy poli­cy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Sofort­über­wei­sung

The pro­vi­der of this pay­ment ser­vice is Sofort GmbH, The­re­si­en­hö­he 12, 80339 Munich (her­ein­af­ter “Sofort GmbH”). With the help of the “Sofort­über­wei­sung” pro­ce­du­re, we recei­ve a pay­ment con­fir­ma­ti­on from Sofort GmbH in real time and can imme­dia­te­ly begin ful­fil­ling our obli­ga­ti­ons. If you have cho­sen the pay­ment method “Sofort­über­wei­sung,” you trans­mit the PIN and a valid TAN to Sofort GmbH, with which it can log into your online ban­king account. After log­ging in, Sofort GmbH auto­ma­ti­cal­ly checks your account balan­ce and car­ri­es out the trans­fer to us using the TAN you trans­mit­ted. It then imme­dia­te­ly trans­mits a tran­sac­tion con­fir­ma­ti­on to us. After log­ging in, your tran­sac­tions, the cre­dit limit of the over­draft faci­li­ty, and the exis­tence of other accounts and their balan­ces are also auto­ma­ti­cal­ly che­cked. In addi­ti­on to the PIN and TAN, the pay­ment data you ente­red and data about your per­son are also trans­mit­ted to Sofort GmbH. The data about your per­son includes first and last name, address, pho­ne number(s), email address, IP address, and any other data requi­red for pay­ment pro­ces­sing. The trans­mis­si­on of this data is neces­sa­ry to estab­lish your iden­ti­ty bey­ond doubt and to pre­vent fraud attempts. Details on pay­ment with Sofort­über­wei­sung can be found at the fol­lo­wing link: https://www.klarna.com/sofort/.

VISA

The pro­vi­der of this pay­ment ser­vice is Visa Euro­pe Ser­vices Inc., Lon­don Branch, 1 Shel­don Squa­re, Lon­don W2 6TT, United King­dom (her­ein­af­ter “VISA”).

The United King­dom is con­side­red a third coun­try that is safe under data pro­tec­tion law. This means that the United King­dom has a level of data pro­tec­tion that cor­re­sponds to the level of data pro­tec­tion in the Euro­pean Uni­on.

VISA may trans­fer data to its parent com­pa­ny in the USA. Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

Fur­ther infor­ma­ti­on can be found in VISA­’s pri­va­cy poli­cy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.