IMPRINT & PRIVACY

General Information and Mandatory Disclosures

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

The responsible entity for data processing on this website is:

WeissKlang Microphones®

Owner and Representative: Salvatore Di Fresco

The responsible entity decides alone or jointly with others on the purposes and means of processing personal data (e.g., names, contact details, etc.). The privacy policy applies in the context of your visit to our website www.weissklang.com, including the use of the online shop. Handling your personal data carefully is important to us. Therefore, we comply with legal regulations when collecting and processing your data. To ensure the secure protection of your personal data, we use effective security measures to reliably safeguard the data we receive from you.

Your data will neither be published nor disclosed to third parties without authorization.

Type of data processed:

• Inventory data (e.g. names, addresses)
• Contact details (e.g. email)
• Content data (e.g. text entries)
• Usage data (e.g. visited pages, interest in content, access times)
• Meta-/Communication data (e.g. device information)
• Legal basis: Art. 6 para. 1 letter f GDPR

Personal data, according to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), refers to all information relating to an identified or identifiable natural person.

How do we collect your data?

Your data is collected in part by you providing it to us. This may include data, for example, that you enter into a contact form. Other data is collected automatically or with your consent when visiting the website by our IT systems. This mainly includes technical data (e.g. internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the competent supervisory authority.

You can contact us at any time if you have further questions on the subject of data protection.

Analytics tools and third-party tools

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using so-called analytics programs. Our main analytics tool is hosted on our own server, ensuring that your data is not shared with third parties. Processing takes place exclusively on our servers to protect your privacy.

Detailed information about these analytics programs can be found in the following privacy policy.

Retention period

Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining your personal data (e.g. tax or commercial law retention periods); in the latter case, the data will be deleted once these reasons no longer apply.

General information on the legal basis for data processing on this website

If you have consented to the processing of your data, we process your personal data on the basis of Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR, if special categories of data according to Article 9 (1) of the GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Article 49 (1) (a) of the GDPR. If you have consented to the storage of cookies or to the access to information on your device (e.g., via device fingerprinting), the data processing is additionally based on Section 25 (1) of the TTDSG (German Telemedia Act). The consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6 (1) (b) of the GDPR. Furthermore, we process your data if it is necessary for the fulfillment of a legal obligation on the basis of Article 6 (1) (c) of the GDPR. The data processing may also be carried out on the basis of our legitimate interests pursuant to Article 6 (1) (f) of the GDPR. The relevant legal bases applicable in each individual case are outlined in the following paragraphs of this privacy policy.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke consent that you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)

If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The specific legal basis for each processing activity can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such advertising purposes. This also applies to profiling, insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to request that data, which we process automatically based on your consent or in fulfillment of a contract, be provided to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent that it is technically feasible.

Access, correction and deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, a right to correction or deletion of this data at any time. You can contact us at any time if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. During the verification process, you have the right to request the restriction of processing of your personal data.
• If the processing of your personal data has been or is unlawful, you may request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you require it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
• If you have lodged an objection under Article 21(1) of the GDPR, a balancing of interests must be carried out between your and our interests. Until it is determined whose interests outweigh the other, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data - apart from their storage - may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest of the European Union or a Member State.

SSL and TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser address bar changes from “http://“ to ‘https://“ ” and by the lock symbol in your browser’s address bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a fee-based contract, this data is required for payment processing.

Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address bar of the browser changes from ‘http://“ to ‘https://“ ” and by the lock icon in your browser bar.

With encrypted communication, your payment data transmitted to us cannot be read by third parties.

Objection to promotional emails

The use of contact data published as part of the imprint requirement to send unsolicited advertising and informational materials is hereby objected to. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as through spam emails.

Server and Hosting

We host the content of our website on a server operated by us with the following provider:

IONOS SE

For more information, please refer to the Privacy Policy of IONOS SE.

The use of IONOS SE is based on Article 6(1) lit. f of the GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If consent has been requested, the processing is carried out exclusively based on Article 6(1) lit. a of the GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a contract required by data protection laws, ensuring that the service provider processes the personal data only according to our instructions and in compliance with the GDPR.

Content Delivery Network (CDN)

To improve loading times, reduce server load, and ensure the secure delivery of our website, we use a content delivery network (CDN) provided by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (“BunnyCDN”).

A CDN is a global network of distributed servers that delivers static content such as images and fonts. This helps speed up our website and ensures high availability - even during traffic spikes.

Only static assets are delivered through the CDN. No personal data - such as information submitted via orders, contact forms, logins, or user interactions - is processed or transmitted via BunnyCDN. These types of data are handled exclusively through encrypted direct connections between your browser and our servers.

Legal basis

We rely on our legitimate interest pursuant to Article 6(1)(f) of the GDPR to provide a fast, stable, and secure website experience.

Data Processing Agreement

We’ve signed a data processing agreement (DPA) with BunnyCDN in accordance with Article 28 of the GDPR. This ensures that any processing operations that may be technically required are carried out in compliance with data protection regulations and strictly under our instructions.

BunnyCDN operates servers both within the European Union and in third countries. Contractual and technical safeguards ensure that no personal data is transferred or permanently stored when content is delivered. Only technical access data (e.g. IP address, timestamp, requested file) is processed temporarily and in anonymized form for troubleshooting purposes - with no link to individual users.

For more information, please refer to the Privacy Policy of BunnyCDN.

Data Collection

Cookies

Our website uses so-called “cookies” Cookies are small data packets that do not cause any harm to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have different purposes. Some cookies are essential for the proper functioning of certain features on the website, such as the shopping cart or video display. Other cookies are used to analyze user behavior or for advertising purposes.

Cookies that are necessary for the electronic communication process, to provide specific functions you desire (e.g., shopping cart functionality), or to optimize the website (e.g., cookies for audience measurement) are stored based on Art. 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically flawless and optimized delivery of their services. If consent for the storage of cookies and similar recognition technologies has been requested, processing will occur solely on the basis of this consent (Art. 6(1)(a) of the GDPR and § 25(1) TTDSG); consent can be withdrawn at any time.

You can configure your browser to notify you when cookies are being set and allow cookies only on a case-by-case basis, block cookies for specific situations or altogether, and enable automatic cookie deletion when closing the browser. Please note that disabling cookies may affect the functionality of this website.

For information about the cookies and services used on this website, please see our privacy policy.

Contact form

If you send us inquiries via contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), provided this was requested; consent can be withdrawn at any time.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for the data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions - in particular, retention periods - remain unaffected.

Request by e-mail or telephone

If you contact us by email or phone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), provided this was requested; consent can be withdrawn at any time.

The data you send to us via contact requests will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular, statutory retention periods - remain unaffected.

Communication via Livechat

We use Rocket.Chat, a service we host ourselves, to communicate with our customers and other third parties. Because Rocket.Chat is open-source and runs on our own servers, we control how the data is processed and stored.

All communication is end-to-end encrypted and is handled entirely on our own servers.

The communication content exchanged in our live chat remains with us until you request its deletion, revoke your consent to its storage, or the purpose for the data storage no longer applies (e.g. after your request has been fully processed). Mandatory legal provisions - in particular, legal retention periods - remain unaffected.

The following data is processed when you use RocketChat:

• User name/email address (if provided)
• Message content
• Storage and processing of data
• The data you provide in the live chat will only be used to process your request and improve our service. The data is stored on our server and will not be shared with third parties.

Possibility of objection

You can refuse the use of RocketChat at any time by simply not using the chat. If you do not use the service, no data will be processed.

Legal basis

The data is processed on the basis of Art. 6 para. 1 lit. b GDPR, as the data processing is necessary to carry out the communication and to answer your inquiries.

Social Media

Facebook

This website integrates elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries. You can find an overview of the Facebook social media elements here.

When the social media element is active, a direct connection is established between your device and the Facebook server. This provides Facebook with the information that you have visited this website with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.

You can find more information about this in Facebook’s privacy policy at:

https://de-de.facebook.com/privacy/explanation

If consent has been obtained, the aforementioned service is used on the basis of Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent can be withdrawn at any time. In the absence of consent, the service is used on the basis of our legitimate interest in the widest possible visibility in social media.

As far as personal data on our website is collected and forwarded to Facebook with the help of the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement.

The wording of the agreement can be found here.

According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) with regard to the data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook. Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

Meta contract addendum

Standard contractual clause

Privacy Policy

X (formerly Twitter)

Functions of the X service are integrated on this website. These features are offered by X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

When the social media element is active, a direct connection is established between your terminal device and the X server. X thereby receives information about your visit to this website. By using X and the “Re-Post” function, the websites you visit are linked to your X account and made known to other users. We would like to point out that as the provider of the pages, we do not receive any knowledge of the content of the transmitted data or its use by X.

Further information on this can be found in X’s privacy policy at:

https://x.com/privacy

If consent has been obtained, the aforementioned service is used on the basis of Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent can be withdrawn at any time. In the absence of consent, the service is used on the basis of our legitimate interest in the widest possible visibility in social media. The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here.

You can change your data protection settings at X in the account settings at https://x.com/settings.

Instagram

This website includes functions of the Instagram service. These functions are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When the social media element is active, a direct connection is established between your terminal device and the Instagram server. As a result, Instagram receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that as the provider of the pages, we do not receive any knowledge of the content of the transmitted data or its use by Instagram. If consent has been obtained, the aforementioned service is used on the basis of Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent can be withdrawn at any time. In the absence of consent, the service is used on the basis of our legitimate interest in the widest possible visibility in social media.

To the extent that personal data on our website is collected and forwarded to Facebook or Instagram using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The processing by Facebook or Instagram after the transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at:

Terms of Use

According to this agreement, we are responsible for providing the privacy information when using the Facebook or Instagram tool and for the secure implementation of the tool on our website in compliance with data protection regulations. Facebook is responsible for the data security of Facebook or Instagram products. Data subject rights (e.g., requests for information) regarding the data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert your data subject rights with us, we are obligated to forward them to Facebook. The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

Data transmission addendum

Privacy Policy

Standard contractual clauses

Analytics Tools and Advertising

Matomo

We use the open-source analytics tool Matomo on our website to analyze the usage of our site and improve our services. Matomo uses cookies that are stored on your device and enable an analysis of how our website is used. The information generated by these cookies regarding the use of this website is not shared with third parties.

The data is stored on our own server, ensuring that your information remains under our control at all times and is not transmitted to external providers. We have also implemented all necessary technical and organizational measures to protect your privacy.

The following data is collected when Matomo is used:

• Referrer URL
• Visited pages
• Geographic data (anonymized)
• Used browser and operating system
• Duration of the visit

Possibility of objection

You can opt out of the analysis by Matomo by not activating the analytics cookie in the cookie consent banner or by clicking “Reject.” This will prevent the setting of analytics cookies and ensure that your data is not used to improve our website.

Legal basis

The processing of the data is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in analyzing and improving our website and optimizing our online services.

Meta Pixel

This website uses the Facebook/Meta Pixel for conversion tracking. The service provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the United States and other third countries. This allows the behavior of website visitors to be tracked after they are redirected to the website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook ads to be evaluated for statistical and market research purposes, and future advertising efforts can be optimized. The data collected is anonymized for us as the website operator, and we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, making it possible to link the data to the respective user profile. Facebook can use the data for its own advertising purposes, according to Facebook’s Data Use Policy. As a result, Facebook can display ads on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the website operator.

The use of this service is based on your consent pursuant to Art. 6(1)(a) DSGVO and § 25(1) TTDSG. You can withdraw your consent at any time. We use the advanced matching feature within the Meta Pixel. The advanced matching allows us to send various types of data (e.g., location, state, postal code, hashed email addresses, names, gender, birthdate, or phone number) of our customers and prospects, which we collect via our website, to Meta (Facebook). By activating this feature, we can tailor our Facebook ad campaigns more precisely to individuals who are interested in our offers. Furthermore, advanced matching improves the attribution of website conversions and expands Custom Audiences. To the extent that personal data is collected on our website using this tool and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing by Facebook after the transfer is not part of the joint responsibility. Our shared obligations have been documented in a Joint Processing Agreement.

The wording of the agreement can be found here. https://www.facebook.com/legal/controller_addendum

According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) with regard to the data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook. Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

Meta contract addendum

Standard contractual clauses

In the Data protection notices you can find further information on protecting your privacy in Facebook’s privacy policy:

https://de-de.facebook.com/about/privacy/

You can also disable the remarketing feature “Custom Audiences” in the ad settings.

You need to be logged into Facebook to do this. If you do not have a Facebook account, you can disable Facebook’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance.

Facebook Conversion API

We have integrated the Facebook Conversion API on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries. The Facebook Conversion API allows us to capture the interactions of website visitors with our site and share this data with Facebook to improve advertising performance on Facebook. Specifically, this includes the time of the visit, the webpage accessed, your IP address, your user agent, and potentially other specific data (e.g. purchased products, cart value, and currency).

A complete overview of the data that can be collected can be found here.

The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can withdraw your consent at any time. As far as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited to the collection of the data and its transfer to Facebook. The processing by Facebook after the transfer is not part of the joint responsibility. Our shared obligations have been documented in a joint processing agreement.

The wording of the agreement can be found here.

According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) with regard to the data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook. Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

Meta contract addendum

Standard contractual clauses

In the Data protection notices you can find more information on how Facebook protects your privacy in its privacy policy.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a contract required by data protection laws, ensuring that the service provider processes the personal data only according to our instructions and in compliance with the GDPR.

Facebook Custom Audiences

We use Facebook Custom Audiences. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. When you visit and use our websites and apps, access our free or paid offerings, submit data to us, or interact with the Facebook content of our company, we collect your personal data. If you give us consent to use Facebook Custom Audiences, we will share this data with Facebook, enabling Facebook to display relevant advertisements to you. Additionally, your data may be used to define target audiences (Lookalike Audiences). Facebook processes this data as our data processor.

The use of this service is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be revoked at any time. The data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission.

Details can be found here:

Custom Audiences

Data processing conditions

Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we need your email address as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No additional data is collected, or only on a voluntary basis. For the management of the newsletter, we use newsletter service providers, which are described below.

Newsletter distribution

This website uses its own newsletter service (Mautic), which is hosted on our own servers. The emails are also sent via our own email server. This ensures that none of your personal data is shared with third parties.

Data processing for sending newsletters

The data you provide for the purpose of subscribing to the newsletter (e.g., email address, name) will be stored and processed exclusively on our servers. We use this data to send you our newsletter with information about our products, services, or promotions.

Analysis of newsletter campaigns

To optimize our newsletter, we conduct an analysis that allows us to track whether a newsletter message has been opened and which links have been clicked. These evaluations are anonymized and are solely used to improve our offerings.

Legal basis

The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. An unsubscribe link is included in every newsletter message. The lawfulness of the data processing that occurred prior to the withdrawal remains unaffected.

Retention period

Your data will be stored as long as you subscribe to our newsletter. After unsubscribing, your data will be deleted immediately, unless a longer storage period is required by law or for the purpose of preventing future mailings (e.g., by being added to a blacklist). The storage in a blacklist is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) to ensure compliance with legal requirements. You can object to the storage if your interests outweigh our legitimate interest.

No transfer to third parties

Since we fully operate our newsletter and email services on our own servers, no personal data is transmitted to external service providers or third parties.

You have the right:

• To request confirmation as to whether we are processing personal data about you, as well as to obtain information about this data (Art. 15 GDPR).
• To request the correction of inaccurate or incomplete data (Art. 16 GDPR).
• To request the deletion of your personal data (Art. 17 GDPR), provided this does not conflict with legal obligations.
• To request the restriction of processing (Art. 18 GDPR).
• To receive your data in a structured, commonly used, and machine-readable format (Art. 20 GDPR).
• To withdraw your consent at any time (Art. 7 (3) GDPR).
• To lodge a complaint with a supervisory authority (Art. 77 GDPR).

Plugins and Tools

YouTube with enhanced data protection

This website integrates videos from YouTube. The operator of the site is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data protection mode. According to YouTube, this mode ensures that YouTube does not store information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Therefore, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. During this process, YouTube is informed about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user experience, and prevent fraud attempts.

It is possible that further data processing operations may be triggered after starting a YouTube video, over which we have no control. The use of YouTube is in the interest of an appealing presentation of our online content. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR. If corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6 (1) (a) of the GDPR and Section 25 (1) of the TTDSG (German Telemedia Act), insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

For more information about data protection on YouTube, please refer to their privacy policy at:

https://policies.google.com/privacy?hl=de

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no control over this data transfer. When Google Maps is activated, Google may use Google Fonts for the purpose of uniform font presentation. When you access Google Maps, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online content and to make it easy to locate the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR. If corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6 (1) (a) of the GDPR and Section 25 (1) of the TTDSG (German Telemedia Act), insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

Controller Data Protection Terms

Standard contractual clauses

For more information on how user data is handled, please refer to Google’s privacy policy:

https://policies.google.com/privacy?hl=de

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether data entered on this website (e.g., in a contact form) is done by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place. The storage and analysis of data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. If consent has been requested, processing is carried out exclusively based on Article 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

For more information on Google reCAPTCHA, please refer to Google’s Privacy Policy and Terms of Service at the following links:

https://policies.google.com/privacy?hl=de

https://policies.google.com/terms?hl=de

eCommerce and Payment

Processing of customer and contract data

We collect, process, and use personal customer and contract data for the establishment, content structuring, and modification of our contractual relationships. We collect, process, and use personal data regarding the use of this website (usage data) only to the extent necessary to enable the user to utilize the service or for billing purposes. The legal basis for this is Art. 6(1)(b) GDPR. The collected customer data will be deleted after the completion of the order or termination of the business relationship and the expiration of any applicable statutory retention periods. Statutory retention periods remain unaffected.

Data transmission upon conclusion of contract for online stores, retailers and shipping of goods

If you order goods from us, we will pass on your personal data to the transport company responsible for delivery and to the payment service provider entrusted with processing the payment. Only the data necessary for the respective service provider to fulfill their task will be shared. The legal basis for this is Art. 6 (1) lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. If you have given your consent in accordance with Art. 6 (1) lit. a GDPR, we will also provide your email address to the transport company responsible for the delivery so that they can inform you about the shipping status of your order via email. You can revoke your consent at any time.

Data transmission upon conclusion of a contract for services and digital content

We only transfer personal data to third parties if this is necessary for contract processing, such as to the credit institution responsible for payment processing. No further transfer of data takes place unless you have expressly consented to such a transfer. Your data will not be shared with third parties for advertising purposes without your explicit consent. The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Payment services

We integrate third-party payment services on our website. When you make a purchase with us, your payment data (e.g. name, payment amount, account details, credit card number) is processed by the payment service provider for the purpose of payment processing. These transactions are subject to the respective contractual and data protection provisions of the respective providers. The use of payment service providers is based on Article 6(1)(b) GDPR (contract execution) and in the interest of ensuring a smooth, convenient, and secure payment process (Article 6(1)(f) GDPR). If your consent is required for certain actions, the processing is based on Article 6(1)(a) GDPR; consent can be revoked at any time with future effect.

We use the following payment services on this website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here.

Further details can be found in the Privacy Policy of PayPal.

Stripe

The provider for customers within the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter referred to as “Stripe”). Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission.

Details can be found here:

Privacy Policy

Data Processing Agreement

Further details can be found in the Privacy Policy of Stripe.

Klarna

The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as “Klarna”). Klarna offers various payment options (e.g. installment payments). If you choose to pay with Klarna (Klarna Checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimize the use of the Klarna Checkout solution.

Details on the use of Klarna cookies can be found here.

Further details can be found in the Privacy Policy of Klarna.

American Express

The provider of this payment service is American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (hereinafter referred to as “American Express”). American Express may transfer data to its parent company in the USA. The data transfer to the USA is based on the Binding Corporate Rules.

Details can be found here.

For more information, please refer to the Privacy Policy of American Express.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter referred to as “Mastercard”). Mastercard may transfer data to its parent company in the USA. The data transfer to the USA is based on Mastercard’s Binding Corporate Rules.

Details can be found here:

Global Privacy Notice

Binding Corporate Rules

VISA

The provider of this payment service is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereafter referred to as “VISA”). The United Kingdom is considered a jurisdiction with adequate data protection standards, meaning it offers a level of data protection comparable to that of the European Union. VISA may transfer data to its parent company in the United States. Data transfer to the U.S. is based on the European Commission’s Standard Contractual Clauses.

Details can be found here.

For more information, please refer to the Privacy Policy of VISA.

In-house Services

Handling of applicant data

We provide you with the opportunity to apply with us (e.g. via email or post). Below, we inform you about the scope, purpose, and use of the personal data collected during the application process. We assure you that the collection, processing, and use of your data will be carried out in accordance with applicable data protection laws and all relevant legal provisions, and that your data will be treated with the utmost confidentiality.

Scope and purpose of data collection

If you submit an application to us, we process your associated personal data (e.g. contact and communication details, application documents, notes from interviews, etc.) as far as necessary to make a decision regarding the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (preparation of an employment relationship), Art. 6(1)(b) GDPR (general contract initiation), and - if you have provided consent - Art. 6(1)(a) GDPR. You can withdraw your consent at any time. Your personal data will only be shared within our company with those involved in processing your application. If the application is successful, the data you have provided will be stored in our data processing systems based on § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of managing the employment relationship.

Data retention period

If we are unable to offer you a position, you decline an offer, or you withdraw your application, we reserve the right to retain the data you submitted based on our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months after the conclusion of the application process (rejection or withdrawal of the application). After this period, the data will be deleted, and any physical application documents will be destroyed. The retention is primarily for evidentiary purposes in case of a legal dispute. If it becomes apparent that the data will be required beyond the 6-month period (e.g., due to a potential or ongoing legal dispute), deletion will only occur once the purpose for the extended retention no longer applies. A longer retention may also occur if you have provided consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.

Acceptance into the applicant pool

If we are unable to offer you a position, there may be the possibility of including you in our applicant pool. In the case of inclusion, all documents and information from your application will be transferred to the applicant pool, allowing us to contact you in the event of suitable vacancies. Inclusion in the applicant pool occurs solely based on your explicit consent (Art. 6(1) lit. a GDPR). Providing consent is voluntary and has no bearing on the current application process. The individual may withdraw their consent at any time. In this case, the data from the applicant pool will be irreversibly deleted, unless there are legal retention requirements. The data from the applicant pool will be irreversibly deleted no later than two years after the consent is given.