-
Additional Data Protection Statement – Patselect
This data protection statement informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering Patselect and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”).
Regarding the terminology used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Types of Processed Data:
- Inventory data (e.g., names, addresses).
- Contact data (e.g., email, phone numbers).
- Content data (e.g., text input, photographs, videos).
- Contract data (e.g., contract subject, duration, customer category).
- Payment data (e.g., bank details, payment history).
- Usage data (e.g., visited websites, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).
Processing of Special Categories of Data (Article 9(1) GDPR):
No special categories of data are processed.
Categories of Individuals Affected by Processing:
- Customers, prospective customers, visitors, and users of the online offering, business partners.
- Visitors and users of the online offering.
Hereinafter, we collectively refer to the affected individuals as “users.”
Purpose of Processing:
- Provision of the online offering, its content, and shop functions.
- Performance of contractual services, service, and customer care.
- Responding to contact inquiries and communication with users.
- Marketing, advertising, and market research.
- Security measures.
- Terms Used
1.1. “Personal Data” refers to all information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable if they can be directly or indirectly identified, particularly by association with an identifier such as a name, an identification number, location data, an online identifier (e.g., cookies), or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
1.2. “Processing” refers to any operation or set of operations performed on personal data, with or without automated processes. The term is broad and includes virtually any handling of data.
1.3. “Controller” refers to the natural or legal person, authority, institution, or other entity that alone or jointly with others determines the purposes and means of processing personal data.
- Relevant Legal Bases
In accordance with Article 13 GDPR, we inform you of the legal bases of our data processing. Unless the legal basis is specified in this data protection statement, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR; the legal basis for processing to fulfill our services and execute contractual measures as well as responding to inquiries is Article 6(1)(b) GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR; and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) GDPR. If the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
- Changes and Updates to the Data Protection Statement
We ask you to regularly review the content of our data protection statement. We adapt the data protection statement as soon as changes in our data processing require it. We will inform you when such changes require an action on your part (e.g., consent) or other individual notifications.
- Security Measures
4.1. In accordance with Article 32 GDPR, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of risks to individuals’ rights and freedoms.
These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data and the related access, input, transfer, availability security, and separation.
Furthermore, we have established procedures to ensure the exercise of data subjects’ rights, the deletion of data, and responses to data security threats. Additionally, we consider the protection of personal data in the development and selection of hardware, software, and procedures, in accordance with the principle of data protection through technology design and privacy-friendly default settings (Article 25 GDPR).
4.2. One of the security measures includes the encrypted transmission of data between your browser and our server.
5. Disclosure and Transmission of Data
5.1. If we disclose data to other persons and companies (processors or third parties) within the scope of our processing, transmit it to them, or otherwise grant them access to the data, this is done only on the basis of a legal permission (e.g., if a transmission of data to third parties, such as payment service providers, is necessary for the fulfillment of the contract according to Art. 6 Para. 1 lit. b GDPR), if you have given your consent, if a legal obligation provides for this, or based on our legitimate interests (e.g., when using agents, hosting providers, tax, business and legal advisors, customer care, accounting, billing, and similar services that allow us to efficiently and effectively fulfill our contractual obligations, administrative tasks, and duties).
5.2. If we commission third parties with the processing of data based on a so-called “processing contract,” this is done based on Art. 28 GDPR.
6. Transfers to Third Countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transmitting data to third parties, this is done only if it is necessary for the fulfillment of our (pre)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or allow data to be processed in a third country only under the special conditions of Art. 44 et seq. GDPR. This means that processing takes place, for example, based on special guarantees, such as the officially recognized determination of a level of data protection corresponding to that of the EU (e.g., for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
7. Rights of Data Subjects
7.1. You have the right to request confirmation as to whether data concerning you is being processed and to obtain information about this data, as well as further details and a copy of the data in accordance with Art. 15 GDPR.
7.2. You have the right, according to Art. 16 GDPR, to request the completion of the data concerning you or the correction of inaccurate data concerning you.
7.3. According to Art. 17 GDPR, you have the right to demand that relevant data be deleted immediately, or alternatively, according to Art. 18 GDPR, to request a restriction on the processing of the data.
7.4. You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transmission to other controllers.
7.5. You also have the right, according to Art. 77 GDPR, to file a complaint with the competent supervisory authority.
8. Right of Withdrawal
You have the right to revoke granted consents according to Art. 7 Para. 3 GDPR with effect for the future.
9. Right to Object
You can object at any time to the future processing of data concerning you in accordance with Art. 21 GDPR. The objection may particularly be made against processing for direct marketing purposes.
10. Cookies and Right to Object to Direct Advertising
10.1. “Cookies” are small files that are stored on users’ computers. Various information can be stored within cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies, also known as “session cookies” or “transient cookies,” are cookies that are deleted after a user leaves an online offering and closes their browser. Such a cookie may, for example, store the contents of a shopping cart in an online store or a login status. “Permanent” or “persistent” cookies are cookies that remain stored even after the browser is closed. For example, the login status can be stored if users visit it after several days. Likewise, such a cookie can store users’ interests, which are used for reach measurement or marketing purposes. “Third-party cookies” are cookies offered by providers other than the responsible party operating the online offering (otherwise, if they are only the responsible party’s cookies, they are referred to as “first-party cookies”).
10.2. We use temporary and permanent cookies and inform about this within our privacy policy. If users do not want cookies stored on their computer, they are asked to deactivate the corresponding option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. The exclusion of cookies may lead to functional restrictions of this online offering.
10.3. A general objection to the use of cookies used for online marketing purposes can be declared for many services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that not all functions of this online offering may then be fully available.
11. Deletion of Data
11.1. The data we process will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated otherwise in this privacy policy, stored data will be deleted as soon as it is no longer required for its purpose and there are no legal retention obligations preventing its deletion. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be locked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
11.2. Germany: According to legal requirements, storage is particularly carried out for 6 years in accordance with § 257 Para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years according to § 147 Para. 1 AO (books, records, reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
11.3. Austria: According to legal requirements, storage is particularly carried out for 7 years according to § 132 Para. 1 BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, income and expenditure statements, etc.), for 22 years in connection with real estate, and for 10 years for documents related to electronically provided services, telecommunications, broadcasting, and television services provided to non-business customers in EU member states, and for which the Mini-One-Stop-Shop (MOSS) is used.
12. Order Processing in the Online Shop and Customer Account
12.1. We process the data of our customers within the scope of order processes in our online shop to enable them to select and order the chosen products and services, as well as to facilitate their payment and delivery or execution.
12.2. The processed data includes inventory data, communication data, contract data, and payment data. The affected persons include our customers, interested parties, and other business partners.
12.3. Processing is carried out based on Art. 6 Para. 1 lit. b (execution of order transactions) and c (legally required archiving) GDPR.
12.4. Users can create a user account to view their orders. User accounts are not public and cannot be indexed by search engines.
12.5. In the context of registration and repeated logins, we store the IP address and the time of the respective user action.
12.6. Deletion will occur after the statutory warranty and comparable obligations have expired. The necessity of retaining the data is reviewed every three years; in the case of statutory archiving obligations, deletion will occur after the expiration thereof (end of commercial (6 years) and tax law (10 years) retention obligations). Data in the customer account will remain until its deletion.
- Business Analytics and Market Research
13.1. To operate our business economically, to identify market trends, customer and user needs, we analyze the data we have regarding business transactions, contracts, inquiries, etc. We process personal data such as customer data, communication data, contract data, payment data, usage data, metadata on the basis of Article 6(1)(f) GDPR, with the affected persons being customers, prospects, business partners, visitors, and users of the online offering. The analyses are conducted for the purposes of business evaluations, marketing, and market research. We may take into account the profiles of registered users, such as data on their purchasing activities. The analyses are used to improve user-friendliness, optimize our offerings, and enhance business efficiency. The analyses are for our internal purposes only and will not be disclosed externally, unless they are anonymous analyses with aggregated data.
13.2. If these analyses or profiles are personal, they will be deleted or anonymized upon the termination of the user’s account, or after two years from the conclusion of the contract. Furthermore, business-wide analyses and general trend determinations are created anonymously whenever possible.
- Credit Check
14.1. If we advance payments (e.g., when buying on account), we reserve the right to request an identity and credit check to assess credit risk using mathematically-statistical methods from specialized service companies (credit agencies).
14.2. In the context of the credit check, we transmit the following personal data of the customer (name, postal address, date of birth, information about the type of contract, bank details) to the following credit agencies: SCHUFA (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden), privacy notice: https://www.schufa.de/en/about-us/data-scoring/.
14.3. The information we receive from credit agencies about the statistical probability of a payment default is processed as part of a prudent discretionary decision regarding the establishment, execution, and termination of the contractual relationship. We reserve the right to refuse payment on account or another advance payment in case of a negative credit check result.
14.4. The decision as to whether we advance payment is made solely on the basis of an automated decision in an individual case, which our software makes based on the information from the credit agency.
14.5. If we obtain your explicit consent, the legal basis for the credit check and the transmission of customer data to the credit agencies is the consent according to Article 6(1)(a), 7 GDPR. If no consent is obtained, our legitimate interests in securing payment claims serve as the legal basis according to Article 6(1)(f) GDPR.
- Contact and Customer Service
15.1. When contacting us (via contact form or email), the user’s details will be processed to handle the contact request and its processing in accordance with Article 6(1)(b) GDPR.
15.2. The user’s data may be stored in our Customer Relationship Management System (“CRM System”) or a similar query management system.
15.3. We delete the inquiries once they are no longer necessary. We review the necessity every two years; inquiries from customers who have a customer account are stored permanently, and deletion is referenced in the customer account details. In addition, the legal archiving obligations apply.
- Collection of Access Data and Log Files
16.1. We collect data about every access to the server on which this service is hosted, based on our legitimate interests according to Article 6(1)(f) GDPR (so-called server log files). Access data includes the name of the retrieved website, file, date and time of retrieval, transferred data volume, message about successful retrieval, browser type and version, operating system of the user, referrer URL (the previously visited page), IP address, and the requesting provider.
16.2. Log file information is stored for security reasons (e.g., for the investigation of misuse or fraud) for a maximum of seven days and then deleted. Data that is required for evidentiary purposes will be exempted from deletion until the respective incident is finally clarified.
- Online Presences in Social Media
17.1. Based on our legitimate interests according to Article 6(1)(f) GDPR, we maintain online presences within social networks and platforms to communicate with customers, prospects, and users who are active there, and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
17.2. Unless otherwise stated in our privacy policy, we process user data when they communicate with us within social networks and platforms, e.g., by posting on our online presence or sending us messages.
17.3. We use Google Analytics to show ads to users who have shown interest in our online offering or have certain characteristics (e.g., interest in specific topics or products determined by the websites they visit) by transmitting this information to Google (so-called “remarketing” or “Google Analytics Audiences”). With Remarketing Audiences, we aim to ensure that our ads align with users’ potential interests and do not become intrusive.
- Google Analytics
18.1. Based on our legitimate interests (i.e., the interest in the analysis, optimization, and economic operation of our online offering according to Article 6(1)(f) GDPR), we use Google Analytics, a web analytics service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offering by users is generally transferred to a Google server in the USA and stored there.
18.2. Google is certified under the Privacy Shield Agreement, offering a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
18.3. Google uses this information on our behalf to evaluate the use of our online offering by users, to compile reports on activities within this offering, and to provide other services related to the use of this offering and internet usage. Pseudonymous user profiles may be created from the processed data.
18.4. We use Google Analytics only with IP anonymization enabled. This means that the IP address of the users is truncated by Google within EU member states or in other contracting states of the EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
18.5. The IP address transmitted by the user’s browser will not be merged with other data from Google. Users can prevent the storage of cookies by adjusting their browser settings; users can further prevent the collection of data generated by the cookie and related to their use of the online offering by Google, and the processing of such data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
18.6. For more information on how Google uses data, the settings options, and opt-out possibilities, visit: https://www.google.com/intl/en/policies/privacy/partners, https://policies.google.com/technologies/ads, and https://adssettings.google.com/authenticated.
- Google Re/Marketing Services
19.1. Based on our legitimate interests (i.e., the interest in the analysis, optimization, and economic operation of our online offering according to Article 6(1)(f) GDPR), we use the marketing and remarketing services (“Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
19.2. Google is certified under the Privacy Shield Agreement, offering a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
19.3. The Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner, presenting users only with ads that potentially match their interests. For example, if a user is shown ads for products they have previously shown interest in on other websites, this is referred to as “remarketing.” For these purposes, when our website or other websites where Google Marketing Services are active are accessed, Google immediately executes a code and so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. These help store an individual cookie, i.e., a small file, on the user’s device (similar technologies may be used instead of cookies). Cookies may be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. This file records which websites the user has visited, what content they are interested in, and which offers they have clicked on, along with technical information about the browser and operating system, referring websites, visit time, and other details about the use of the online offer. The IP address of the user is also collected, but within Google Analytics, we inform that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and is only transmitted in full to a Google server in the USA and shortened there in exceptional cases. The IP address is not merged with other Google data. The information mentioned above may also be combined by Google with similar data from other sources. If the user subsequently visits other websites, they may be shown ads tailored to their interests.
19.4. Users’ data is processed pseudonymously within Google Marketing Services. This means that Google does not store or process users’ names or email addresses but processes relevant data related to cookies within pseudonymous user profiles. From Google’s perspective, advertisements are managed and displayed for the cookie owner rather than for a specifically identified person. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google’s servers in the USA.
19.5. The Google Marketing Services we use include the online advertising program “Google AdWords.” In the case of Google AdWords, each AdWords customer receives a different “conversion cookie.” Thus, cookies cannot be tracked across the websites of AdWords customers. The information collected using the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers receive information about the total number of users who clicked on their ad and were redirected to a page tagged with a conversion-tracking tag. However, they do not receive information that personally identifies users.
19.6. We may integrate third-party advertisements based on the Google Marketing Service “DoubleClick.” DoubleClick uses cookies to enable Google and its partner websites to display ads based on users’ visits to this website or other websites on the Internet.
19.7. We may integrate third-party advertisements based on the Google Marketing Service “AdSense.” AdSense uses cookies to enable Google and its partner websites to display ads based on users’ visits to this website or other websites on the Internet.
19.8. We may also use the “Google Optimizer” service. Google Optimizer allows us to track the impact of various website changes (e.g., modifications to input fields, design, etc.) through A/B testing. For these testing purposes, cookies are stored on users’ devices. Only pseudonymous user data is processed.
19.9. Furthermore, we may use the “Google Tag Manager” to integrate and manage Google analytics and marketing services on our website.
19.10. For more information on Google’s use of data for marketing purposes, please visit the overview page: https://policies.google.com/technologies/ads. Google’s privacy policy is available at:
19.11. If you wish to object to interest-based advertising by Google Marketing Services, you can use Google’s settings and opt-out options: https://adssettings.google.com/authenticated.
20. Etracker
20.1. Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR), we use the analysis service “etracker” provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg.
20.2. The data processed by etracker may be used to create user profiles under a pseudonym. Cookies may be used for this purpose. The cookies allow the recognition of your browser. The data collected using etracker technologies is not used to personally identify visitors to our website without the explicit consent of the data subject and is not merged with personal data about the bearer of the pseudonym. Furthermore, personal data is processed only for us and is not combined with personal data collected within other online offerings.
20.3. You may object to data collection and storage at any time with effect for the future. To object to the collection and storage of your visitor data for the future, you can obtain an opt-out cookie from etracker at the following link. This opt-out cookie ensures that no visitor data from your browser is collected and stored by etracker in the future: http://www.etracker.de/privacy?et=Account-ID [Please insert your account ID here].
20.4. By opting out, an opt-out cookie named “cntcookie” will be set by etracker. Please do not delete this cookie as long as you wish to maintain your objection. For more information, please refer to etracker’s privacy policy: http://www.etracker.com/de/datenschutz.html.
21. Newsletter
21.1. The following information informs you about the content of our newsletter as well as the subscription, dispatch, and statistical evaluation procedures and your right to object. By subscribing to our newsletter, you agree to receive it and to the procedures described.
21.2. Newsletter content: We send newsletters, emails, and other electronic notifications with promotional information (hereinafter referred to as “newsletter”) only with the recipient’s consent or legal authorization. If the content of the newsletter is specifically described during the subscription process, it is decisive for the user’s consent. Otherwise, our newsletters contain information about our products, offers, promotions, and our company.
21.3. Double opt-in and logging: Subscription to our newsletter follows a so-called double opt-in procedure. This means that after subscribing, you will receive an email asking you to confirm your subscription. This confirmation is necessary to prevent anyone from subscribing with external email addresses. Subscriptions to the newsletter are logged to verify the subscription process according to legal requirements. This includes storing the subscription and confirmation timestamps and the IP address. Changes to your data stored by the dispatch service provider are also logged.
21.4. Shipping Service Provider: The newsletters are sent via “MailChimp,” a newsletter distribution platform provided by the US-based company Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the shipping service provider’s privacy policy here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement, thereby providing a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).
21.5. To the extent that we use a shipping service provider, the provider may, according to its own information, use this data in a pseudonymous form, i.e., without assignment to a user, to optimize or improve its own services, e.g., for the technical optimization of shipping and newsletter presentation or for statistical purposes to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to contact them directly or to pass them on to third parties.
21.6. Registration Data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name for personal addressing in the newsletter.
21.7. Performance Measurement – The newsletters contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from its server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, is initially collected. This information is used to improve the technical services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. Statistical surveys also include determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, neither we nor, if used, the shipping service provider intends to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and adapt our content accordingly or send different content based on the interests of our users.
21.8. Germany: The sending of the newsletter and performance measurement are based on the recipient’s consent according to Art. 6 Para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 Para. 2 No. 3 UWG or on the basis of legal permission according to § 7 Para. 3 UWG.
21.9. Austria: The sending of the newsletter and performance measurement are based on the recipient’s consent according to Art. 6 Para. 1 lit. a, Art. 7 GDPR in conjunction with § 107 Para. 2 TKG or on the basis of legal permission according to § 107 Para. 2 and 3 TKG.
21.10. The logging of the registration process is based on our legitimate interests according to Art. 6 Para. 1 lit. f GDPR and serves as proof of consent to receive the newsletter.
21.11. Newsletter recipients can unsubscribe from our newsletter at any time, i.e., revoke their consent. A link to unsubscribe from the newsletter can be found at the end of each newsletter. This simultaneously revokes their consent to performance measurement. A separate revocation of performance measurement is unfortunately not possible; in this case, the entire newsletter subscription must be canceled. Upon unsubscribing from the newsletter, personal data is deleted unless its retention is legally required or justified, in which case processing is limited to these exceptional purposes. In particular, we may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them for newsletter distribution purposes to be able to prove previously given consent. The processing of this data is limited to the purpose of potential defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed simultaneously.
22. Integration of Third-Party Services and Content
22.1. Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f GDPR), we use content or service offerings from third-party providers within our online offering to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always requires that the third-party providers of this content perceive the users’ IP addresses, as they could not send the content to their browser without the IP address. The IP address is thus required for displaying this content. We strive to use only such content whose respective providers use the IP address solely for delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” allow information such as visitor traffic on the pages of this website to be evaluated. The pseudonymous information may also be stored in cookies on the user’s device and may include technical information about the browser and operating system, referring websites, visit time, and other details about the use of our online offering, as well as be linked with such information from other sources.
22.2. The following provides an overview of third-party providers and their content, including links to their privacy policies, which contain further information on data processing and, in some cases already mentioned here, opt-out options:
- If our customers use third-party payment services (e.g., PayPal or Sofortüberweisung), the terms and privacy policies of the respective third-party providers apply, which are accessible within the respective websites or transaction applications.
- External fonts from Google, LLC., https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts occurs via a server call to Google (usually in the USA). Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
- Maps from the “Google Maps” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
- Videos from the “YouTube” platform provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
- Functions of the Google+ service are integrated within our online offering. These functions are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged into your Google+ account, you can link the content of our pages to your Google+ profile by clicking the Google+ button. This allows Google to associate your visit to our pages with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Google+. Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
- – Within our online offering, functions of the Instagram service are integrated. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Privacy Policy: http://instagram.com/about/legal/privacy/.
- – We use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). When you access a page that contains such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s servers in the USA. This log data may include your IP address, the address of the visited websites that also contain Pinterest functions, the type and settings of your browser, the date and time of your request, your use of Pinterest, as well as cookies. Privacy Policy: https://about.pinterest.com/de/privacy-policy.
- – Within our online offering, functions of the Twitter service or platform (hereinafter referred to as “Twitter”) may be integrated. Twitter is a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. These functions include the display of our posts on Twitter within our online offering, linking to our Twitter profile, and the ability to interact with Twitter’s posts and features, as well as measuring whether users access our online offering via advertisements we place on Twitter (so-called conversion measurement). Twitter is certified under the Privacy Shield Agreement and thus provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.