data protection

Data protection

The purpose of this privacy policy is to inform you and the public about the nature, scope and purpose of the personal data we collect, use and process, and at the same time to inform you about the rights to which you are entitled.


1. Definitions

    Our data protection declaration is based on the terms of the General Data Protection Regulation (GDPR). When we use the following terms in our data protection declaration, we mean the following meaning:

    a. Personal data
      Personal data is information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An “identifiable” person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, or location data, as well as an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

      b. Data subject
        A person is “affected” when his or her personal data are processed by the controller.

        c. Processing
          “Processing” means any operation which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or linking, restriction, erasure or destruction.

          d. Restriction of processing
            Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.

            e. Profiling
              “Profiling” means the automated processing of personal data for the purpose of evaluating, analyzing or predicting personal data (in particular with regard to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements).

              f. Pseudonymisation
                Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

                g. Controller or person responsible for processing
                  The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for his or her nomination may be provided for by Union or Member State law.

                  h. Processor
                    A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

                    i. Recipient
                      Recipient is a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular investigation in accordance with Union or Member State law shall not be considered recipients.

                      j. Third
                        Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorised to process personal data under the direct responsibility of the controller or processor.

                        k. Consent
                          Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her.


                          2. Name and address of the controller

                          SolX GmbH
                          Kurpromenade 25
                          76332 Bad Herrenalb

                          Phone: +49 7083 9330398
                          E-mail: info@solx.de


                          2.1 Collection of data and legal basis for processing

                            a. Collection of general data and information
                            When you access our website, information of a general nature is automatically recorded. This information (so-called "server log files") includes the type of Internet browser, the operating system used, the domain name of your Internet service provider and similar. No conclusions can be drawn about you personally based on this information. This information is technically necessary in order to correctly deliver the content of websites you have requested and is mandatory when using the Internet. Anonymous information of this type is statistically evaluated by us in order to optimize our website and the technology behind it.

                            The following information is collected and stored when you access our website:

                            • IP address of your PC or your internet-enabled device
                            • Access date
                            • Name and URL of the retrieved file,
                            • Referrer URL
                            • Browser / Operating System / Access Provider

                            The data collection and storage serves the following purposes:

                            • Establishing a connection to the website,
                            • Technical use of the website,
                            • System security
                            • Administration.

                            Data processing is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.
                            For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

                            b. Registration and ordering on our website

                            If you register on our website or create a user account, personal data will also be collected from you. We would like to point out that although registration may offer further access to the content of our website, it is not a mandatory requirement for using our website. Which personal data is transmitted to the controller is determined from the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller can arrange for the data to be passed on to one or more processors, for example a parcel service provider for postal delivery to you, who will also use the personal data exclusively for internal use attributable to the controller.
                            When you register on our website, the data you enter during registration will be saved.
                            The purpose of data collection and storage is:

                            • Customer identification
                            • Processing and handling of the order for correspondence with you
                            • Accounting
                            • to handle any liability claims that may arise, as well as to assert any claims against you
                            • technical administration of the website
                            • Administration
                              Your consent will be obtained during the ordering process before this data is processed.
                              The data processing is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter b GDPR.

                              c. Newsletter

                              If you voluntarily subscribe to our newsletter (regular promotional information emails with offers or other information from our company), the data you provide will be used exclusively for this purpose and will not be passed on to third parties.

                              This also includes information that is relevant to the service or registration. The validity of the email address is checked using the so-called "double opt-in" process. The order for the newsletter is checked by sending a confirmation email and the response. No further data is collected.
                              You can unsubscribe from the newsletter (withdraw your consent) at any time and can do so either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. There are no additional costs for the objection that go beyond the regular transport costs (e.g. costs for a telephone call). The data processing based on your consent is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

                              d. Sending the newsletter

                              Existing customers
                              We reserve the right to regularly send you offers for similar goods or services from our range to those you have already purchased by email. In accordance with Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Paragraph 1 Letter f of GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the person responsible named at the beginning. You will only incur transmission costs according to the basic rates. After receipt of your objection, your email address will be removed from the mailing list.

                              e. Contact option via the website
                              If you send us inquiries via the contact form or by email, your details from the inquiry form or email, including the contact details you provided there, will be stored for the purpose of processing the inquiry and or contacting the data subject stored by us. We do not pass this data on to third parties. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. The data processing based on your consent is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR. The personal data collected for the use of the contact form is deleted automatically after your request has been processed. You have the right to revoke your consent to data processing at any time.

                              f. Comment function in the blog on the website

                              When comments are made on our site, the chosen user name is recorded and stored in addition to this information so that illegal content can be prosecuted to our relief.


                              2.2 Storage period / collection and storage of personal data, as well as the type and purpose of their use / transfer of data

                                We store the personal data collected and transmitted to us for the processing of your order until the statutory retention period expires. We will then delete your data unless we are obliged to store it for a longer period in accordance with Article 6 Paragraph 1 Clause 1 Letter c of GDPR due to tax and commercial law retention and documentation obligations (from the German Commercial Code, the German Criminal Code or the German Fiscal Code) or you have consented to longer storage in accordance with Article 6 Paragraph 1 Clause 1 Letter a of GDPR.
                                In case of a When you contact us, regardless of an order (e.g. via email or the contact form), we will store your data until your request and the related matter have been processed and there are no statutory retention periods that prevent this.

                                When processing personal data on the basis of an express consent, we store this data until the consent is revoked by the data subject.

                                As part of the processing of personal data on the basis of Art. 6 Para. 1 lit. f GDPR, we store this data until the right of objection in accordance with Art. 21 Para. 1 GDPR is exercised by the data subject.

                                As part of the processing of personal data on the basis of Art. 6 Para. 1 lit. f GDPR for the purpose of direct marketing, we store this data until the right of objection in accordance with Art. 21 Para. 1 GDPR is exercised by the data subject.

                                The purpose of the personal data transmitted is customer identification, order processing, customer correspondence, invoicing, direct advertising and the processing of any liability claims or the assertion of any claims against you.

                                If we have to offer you updates for goods with digital elements or for digital products due to contractual obligations, we will use the data you provide as part of the order to inform you about updates (via email or post). This is done due to our legal information obligations in accordance with Art. 6 Para. 1 lit. c GDPR. Your contact details will only be processed to the extent necessary to provide information about an update.


                                3. Transfer of data

                                a) Basics
                                  Your personal data will not be transferred to third parties for purposes other than those stated under b) below.

                                  We will only pass on your personal data to third parties if:

                                  • You have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR,
                                  • the disclosure is necessary to assert, exercise or defend legal claims pursuant to Art. 6 (1) sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
                                  • in the event that there is a legal obligation to disclose data pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and
                                  • this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.
                                    b) Basic data transfer
                                      We will only pass on your personal data to third parties who are involved in the contract execution, such as the logistics company responsible for delivery and the credit institution responsible for payment matters. In cases where your personal data is passed on to third parties, the scope of the data transmitted is always limited to the minimum required.

                                      c. Obligation to provide information - possible consequences of non-provision
                                        The provision of personal data is partly required by law (tax law) or can result from contractual regulations (transparency of the contractual partner). Failure to provide personal data would prevent the conclusion of a contract and therefore will not take place. The person responsible will provide you with any information about the legally or contractually required provision of personal data.

                                        d. Existence of automated decision-making
                                          We do not use automated decision-making or profiling.

                                          e. Routine deletion and blocking of personal data
                                            Once the storage period, as explained in more detail under 4 above, has expired, the personal data will be routinely deleted.

                                            f. Rights of the person affected by data processing
                                              As a data subject, you have the following rights:

                                              • Art. 15 GDPR: You have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
                                              • Art. 16 GDPR: You have the right to request rectification of inaccurate or completion of your personal data stored by us;
                                              • Art. 17 GDPR: You have the right to request erasure of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
                                              • Art. 18 GDPR: You have the right to request restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
                                              • Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to have it transmitted to another controller;
                                              • Art. 7 Para. 3 GDPR: You have the right to revoke your consent to data processing. This means that we may no longer continue the data processing based on this consent in the future;
                                              • Art. 77 GDPR: You have the right to complain about data processing to a supervisory authority at your usual place of residence or place of work or at our company headquarters (right of complaint).

                                              4. Right of objection

                                              You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (e) or (f) GDPR, for reasons arising from your particular situation, provided that there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection.

                                                5. Cookies
                                                  a. Use, legal basis and purpose

                                                  We use so-called "cookies" so that we can optimally design and further optimize the range of functions and the technical presentation of our website. These are small text files that are stored on your device. With the help of these "cookies", data can be stored on your computer when you visit our website.

                                                  We also use cookies on our website that enable us to analyze users’ surfing behavior.

                                                  When you visit our website, you will be informed about the use of cookies for analysis purposes and your consent will be obtained for the processing of personal data used in this context. In this context, you will also be referred to this privacy policy.

                                                  The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.

                                                  The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) (a) GDPR if the user has given their consent.

                                                  The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after changing pages. We need cookies for the following applications: Adoption of language settings. The user data collected by technically necessary cookies is not used to create user profiles.
                                                  The analysis cookies are used to improve the quality of our website and its content. The analysis cookies tell us how the website is used and enable us to continually optimize our offering.

                                                  b. Duration of storage, possibility of objection and removal

                                                  Cookies are stored on the user's computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions.

                                                  6. Social Media

                                                    Data processing in social media

                                                    Our company is active on various social media. When communicating with users, user data may be processed outside the European Union, which may result in risks by making it more difficult to enforce rights. With regard to US providers who are certified under the Privacy Shield, we would like to point out that they are thereby obliged to comply with EU data protection standards.

                                                    As a rule, user data is processed for advertising and market research purposes in order to create user profiles from user behavior. The user profiles can be used, for example, to place targeted advertisements. For these purposes, cookies are usually stored on users' computers in which the user behavior and interests are stored.

                                                    Legal basis for processing:

                                                    The legal basis for processing users' personal data is our legitimate interest in providing users with effective information and communicating with them in accordance with Art. 6 (1) (f) GDPR. If users are asked by the respective platform providers to consent to the data processing described above, the legal basis for processing is Art. 6 (1) (a) and Art. 7 GDPR.

                                                    The respective provider has the quickest access to the user data. They can take the most effective measures. The rights of the person concerned can therefore be asserted most quickly directly with the provider. Otherwise, we are always at your side.

                                                    Details of the respective processing and the objection options (opt-out):

                                                    Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), Facebook pages based on an agreement on joint processing of personal data – Privacy Policy: https://www.facebook.com/about/privacy/ , Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .

                                                    a. Facebook
                                                    Part of our website is the integration of the so-called social plug-ins (“plug-ins”) of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plug-ins are marked with a Facebook logo or the addition “Social Plug-in from Facebook” or “Facebook Social Plugin”. An overview of the Facebook plug-ins and their appearance can be found here: https://developers.facebook.com/docs/plugins
                                                    If you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged into Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plug-ins, for example by clicking the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

                                                    Under https://de-de.facebook.com/about/privacy/ explains which setting options Facebook offers to protect the privacy of the person concerned.

                                                    b. Instagram

                                                    Part of our website is the integration of the so-called social plug-in ("plug-in") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plug-ins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plug-ins and what they look like can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page on our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading with add-ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).
                                                    Further information and Instagram’s applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/ .

                                                    c. Twitter

                                                    Part of our website is the integration of the so-called social plug-in ("plug-in") of the microblogging service Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plug-ins are marked with a Twitter logo, for example in the form of a blue "Twitter bird". When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the Twitter servers. The content of the plug-in is transmitted directly from Twitter to your browser and integrated into the page. Through the integration, Twitter receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Twitter profile or are not currently logged into Twitter. This information (including your IP address) is transmitted from your browser directly to a Twitter server in the USA and stored there. If you are logged into Twitter, Twitter can directly assign your visit to our website to your Twitter account. If you interact with the plugins, for example by pressing the "Tweet" button, the corresponding information is also sent directly to a Twitter server and saved there. The information is also published on your Twitter account and displayed to your contacts there. The purpose and scope of data collection and the further processing and use of the data by Twitter as well as your rights and setting options to protect your privacy can be found in Twitter's privacy policy: https://twitter.com/privacy If you do not want Twitter to assign the data collected via our website directly to your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the Twitter plugins from loading with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
                                                    Twitter’s applicable privacy policy can be found at https://twitter.com/privacy?lang=de .

                                                    d. YouTube
                                                    Part of our website is the integration of YouTube. This is an Internet video portal that allows video publishers to upload video clips for free and other users to view, rate and comment on them for free. YouTube allows the publication of all types of videos, which is why complete film and television shows, as well as music videos, trailers and videos made by users themselves can be accessed via the Internet portal.

                                                    The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
                                                    As soon as you visit pages of our website that have a YouTube plug-in, a connection to the YouTube servers is established. The YouTube server is informed which specific page of our website you have visited. If you are also logged into your YouTube account, you would allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this possibility of assignment if you log out of your account beforehand. For more information on the collection and use of your data by YouTube, see the privacy policy at youtube.com
                                                    The privacy policy published by YouTube provides information about the collection, processing and use of personal data by YouTube and Google.

                                                    e. Xing

                                                    Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Every time you access one of our pages that contains Xing functions, a connection is established to Xing servers. To the best of our knowledge, no personal data is stored. In particular, no IP addresses are stored and no user behavior is evaluated. You can find more information on data protection and the Xing Share button in Xing's privacy policy at https://www.xing.com/app/share?op=data_protection


                                                    f. LinkedIn

                                                    Our website may use social plugins ("plugins") from the social network "LinkedIn", which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The plugins are marked with a LinkedIn logo or the addition "LinkedIn Social Plugin". If you visit a website of Messe Düsseldorf GmbH that contains such a plugin, clicking on the icon establishes a direct connection to the LinkedIn servers. The content of the plugin is transmitted directly from LinkedIn to your browser, which integrates it into the website. By integrating the plugins, LinkedIn receives the information that you have accessed the corresponding page of our website. If you are logged in to LinkedIn, LinkedIn can assign the visit to your LinkedIn account. If you interact with the plugins, for example by leaving a comment, the corresponding information is transmitted directly from your browser to LinkedIn and stored there. The purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights and options for protecting your privacy, can be found at http://www.linkedin.com/legal/privacy-policy . If you do not want LinkedIn to collect data about you via our website when you use the plug-in, you must log out of LinkedIn before visiting our website.



                                                    g. Tumblr

                                                    This offer uses the buttons of the Tumbler service. These buttons are offered by Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA, help@tumblr.com. They can be recognized by the term "Tumblr". Using the buttons, it is possible to share a post or page of this offer on Tumblr or to follow the provider on Tumblr.

                                                    When a user visits a web page on this website that contains such a button, their browser establishes a direct connection to Tumblr's servers. The content of the Tumblr button is transmitted directly from Tumblr to the user's browser. The provider therefore has no influence on the scope of the data that Tumblr collects using this plugin and informs users according to their level of knowledge. According to this, only the user's IP address and the URL of the respective website are transmitted when the button is accessed, but are not used for any other purpose than displaying the button.

                                                    Further information can be found in Tumblr’s privacy policy at www.tumblr.com/policy/de/privacy.



                                                    Pinterest
                                                    Our website contains the "Pin it" button of the social network Pinterest, which is operated by Pinterest, Inc. - located at 808 Brannan St, San Francisco, CA 94103, USA. By using the "Pin it" button, Pinterest receives the information that you have visited one of our websites. If you are logged into your Pinterest account during this time, Pinterest can also assign your visit to your Pinterest account. By clicking the "Pin it" button, data is transmitted to Pinterest, which is stored on servers (in the USA). If you want to prevent this, you must log out of your Pinterest account before clicking the "Pin it" button. To protect your privacy, please refer to Pinterest's privacy policy for further details on data collection, processing and use of your data by Pinterest, as well as your legal options and setting options: http://pinterest.com/about/privacy/


                                                    i. Meetup
                                                    We use the provider service meetup. A Meetup group is a local community that hosts meetups where members meet in person, in real life, at a location. Meetup is operated by WeWork Companies Inc., 115 W 18th St., New York, NY 10011, USA. To protect your privacy, please refer to meetup's privacy policy for further details on data collection, processing and use of your data by meetup as well as your legal options and setting options: https://www.meetup.com/de-DE/privacy/


                                                    7. Online Marketing

                                                      a. Use of Google Maps

                                                      We use the function for embedding Google Maps from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website. This function enables the visual representation of geographical information and interactive maps.

                                                      When you visit pages that contain Google Maps, Google also collects, processes and uses data from visitors to the pages. For more information on how Google collects and uses data, please see Google's privacy policy at https://www.google.com/privacypolicy.html . There you also have the option to change your settings in the data protection center so that you can manage and protect the data processed by Google.

                                                      Your data may also be transferred to the USA. The European Commission has issued an adequacy decision for data transfers to the USA. You have the right to object to this processing of personal data concerning you based on Art. 6 (1) f GDPR at any time for reasons arising from your particular situation.

                                                      To do this, you must deactivate JavaScript in your browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent, such as the interactive map display.



                                                      b. Use of Google reCAPTCHA

                                                      We use the reCAPTCHA service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. The query serves the purpose of distinguishing whether the input was made by a human or by automated, machine processing. The query includes sending the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. Your data may also be transmitted to the USA. For data transfers to the USA, there is an adequacy decision of the European Commission, the "Privacy Shield". Google participates in the "Privacy Shield" and has submitted to the requirements. By clicking on the query, you consent to the processing of your data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. Further information on Google reCAPTCHA and the associated data protection declaration can be found at: https://www.google.com/privacy/ads/

                                                      c. DoubleClick by Google

                                                      This website uses the online marketing tool DoubleClick by Google of the operator Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("DoubleClick").
                                                      DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) (f) GDPR.

                                                      In addition, DoubleClick can use cookie IDs to record conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information.
                                                      Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our current level of knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.

                                                      If you wish to object to participation in this tracking process, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, although this setting will be deleted if you delete your cookies. Alternatively, you can find out more about the setting of cookies and make settings for this at the Digital Advertising Alliance at www.aboutads.info. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.
                                                      You can find further information about the privacy policy of DoubleClick by Google at the following Internet address: http://www.google.de/policies/privacy/

                                                      d. Google AdSense

                                                      This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google AdSense uses so-called "DoubleClick DART cookies" ("cookies"). These are text files that are stored on your computer and that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information that can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transferred to a Google server in the USA and stored there.
                                                      Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other data held by Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

                                                      The described processing of data is carried out in accordance with Art. 6 Para. 1 lit. f GDPR for the purpose of targeted advertising to the user by advertising third parties, whose advertisements are displayed on this website based on the evaluated user behavior. At the same time, the processing serves our financial interest in exploiting the economic potential of our website by displaying personalized third-party advertising content for a fee.

                                                      You can find further information about Google’s privacy policy at the following internet address: http://www.google.de/policies/privacy/
                                                      You can permanently deactivate cookies for advertising preferences by preventing them through a corresponding setting in your browser software or by downloading and installing the browser plug-in available under the following link:
                                                      http://www.google.com/settings/ads/plugin?hl=de
                                                      Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

                                                      e. Google AdWords

                                                      Part of our website is the integration of the so-called service Google AdWords. This is an Internet advertising service that allows advertisers to place ads in Google's search engine results as well as in the Google advertising network. Google AdWords allows an advertiser to pre-define certain keywords, using which an ad will only be displayed in Google's search engine results if the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.
                                                      The operating company of the Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of Google AdWords is to promote our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine, as well as displaying third-party advertising on our website. As already stated above, the data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

                                                      Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do so, the data subject must access the link www.google.de/settings/ads from each Internet browser used and make the desired settings there.
                                                      Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ can be accessed.

                                                      f. Google Analytics (with anonymization function)

                                                      Part of our website is the integration of the so-called Google Analytics service. This is a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies". These are small text files that are stored on your device and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use the information obtained on behalf of the website operator to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plugin.
                                                      Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html Google Analytics is available at this link https://www.google.com/intl/de_de/analytics explains it in more detail.

                                                      g. Google+

                                                      Our website uses so-called social plugins (“plugins”) from the social network Google+, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The plugins can be recognized, for example, by buttons with the “+1” symbol on a white or colored background. You can find an overview of Google plugins and what they look like here: https://developers.google.com/+/plugins When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Google’s servers. Google transmits the content of the plugin directly to your browser and integrates it into the page. Through the integration, Google receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Google+ profile or are not currently logged into Google+. This information (including your IP address) is transmitted from your browser directly to a Google server in the USA and stored there. If you are logged in to Google+, Google can directly assign your visit to our website to your Google+ profile. If you interact with the plug-ins, for example by pressing the "+1" button, the corresponding information is also sent directly to a Google server and saved there. The information is also published on Google+ and displayed to your contacts there. The purpose and scope of data collection and the further processing and use of the data by Google, as well as your rights and setting options to protect your privacy, can be found in Google's privacy policy: http://www.google.com/intl/de/+/policy/+1button.html If you do not want Google to directly assign the data collected via our website to your profile on Google+, you must log out of Google+ before visiting our website. You can also completely prevent the Google plug-ins from loading using add-ons for your browser, e.g. with the script blocker "NoScript" ( http://noscript.net/ ).

                                                      8. Payment processing
                                                        a. PayPal

                                                        On our website are PayPal components are integrated. PayPal is an online payment service provider. Payments are processed via accounts that represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have an account. An account is managed via an email address, which is why there is no traditional account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also performs escrow functions and offers buyer protection services.
                                                        The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

                                                        If you use such payment options, we will transfer your personal data required for payment processing to PayPal pass along. As a rule, the scope of the personal data passed on is: first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that is necessary for payment processing. Personal data that is related to the respective order is also necessary for processing the purchase contract.
                                                        The purpose of the data transfer is to process the payment and to prevent fraud. We will transfer data to PayPal in particular if there is a legitimate interest in the data transfer. PayPal may transfer the personal data received to credit agencies as part of its own data protection declaration. This transfer is for the purpose of identity and credit checks. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil the contractual obligations or if the data is to be processed on behalf of PayPal. The person concerned has the option of revoking their consent to the handling of personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.
                                                        The data transfer to PayPal described in this section will only take place if you select this payment option.
                                                        PayPal’s applicable privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .

                                                        b. Klarna

                                                        On our website are Klarna components are integrated. Klarna is a payment service that enables cashless payment for products and services on the Internet. Klarna is a technical process through which the online retailer receives immediate payment confirmation. This enables a retailer to deliver goods, services or downloads to the customer immediately after the order is placed.
                                                        The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
                                                        If the data subject selects “Klarna” as a payment option during the ordering process in our online shop, the data subject’s data will be automatically transmitted to Klarna. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.

                                                        The personal data exchanged with Klarna includes first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that is necessary for payment processing. The purpose of transmitting the data is to process payments and prevent fraud. The data controller will also transmit other personal data to Klarna if there is a legitimate interest in the transmission. The personal data exchanged between Klarna and the data controller may be transmitted by Klarna to credit agencies. This transmission is for the purpose of checking identity and creditworthiness.
                                                        Klarna may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of them.
                                                        The data subject has the option of revoking his or her consent to Klarna handling personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.
                                                        Klarna’s applicable data protection regulations can be found at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

                                                        c. Amazon Pay

                                                        The Amazon Payments payment method enables customers to use their payment details and specified payment methods stored at Amazon.de to pay in our online shop via their Amazon account.

                                                        If you select Amazon Payments as your payment method, payment processing will be carried out directly by the payment service provider Amazon Payments Europe sca, 5 Rue Plaetis, L-2338 Luxembourg. If the customer selects “Amazon Payments” as their payment method during the online ordering process, they must first log in with their Amazon account details. Amazon Payments uses the information from the customer’s Amazon account to first identify them and then process the payment.
                                                        When paying via Amazon Payments, the General Terms and Conditions and the Privacy Policy of Amazon Payments Europe SCA apply. You can find these on the website https://payments.amazon.com

                                                        d. Google Pay

                                                        If you choose the payment method “Google Pay” [from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”)], payment will be processed via the “Google Pay” app on the respective mobile device (system requirements: at least Android 4.4 and an NFC function).

                                                        The charge will be made to the payment card stored with Google Pay or a payment system verified there (e.g. PayPal). For payments of more than €25, your mobile device must first be unlocked using the relevant verification measure.

                                                        Google subsequently transmits the payment information stored with Google Pay to the seller in the form of a one-time virtual card number, which does not contain any information about the actual payment method stored with Google Pay, for payment verification.
                                                        Google Pay acts as an intermediary for all payments. The transaction is carried out exclusively between the user and the source website by charging the payment method stored with Google Pay.
                                                        The information provided during the ordering process, including order information, will be passed on to Google.
                                                        The transfer and data processing is carried out for the purpose of payment processing in accordance with Art. 6 Paragraph 1 Letter b GDPR.

                                                        Google may collect data for each payment made through Google Pay.
                                                        These include:

                                                        • Registration information
                                                        • Information obtained from third parties:
                                                        • Transaction information

                                                        This processing is carried out based on the legitimate interest in proper accounting, the verification of transaction data and the optimization and maintenance of the functionality of the Google Pay service in accordance with Art. 6 (1) (f) GDPR. If data is collected by other Google services, Google can merge this data with the data collected during the payment process.

                                                        The additional terms of use of Google Pay can be found at:
                                                        Further information on data protection at Google Pay can be found at:

                                                        e. Apple Pay If you choose the payment method “Apple Pay” [from Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (hereinafter “Apple”)], the payment will be processed via the “Apple Pay” function of the respective end device (system requirements: macOS, iOS or watchOS).
                                                        The charge is made to a payment card stored with "Apple Pay". When making a payment, authorization is required using the respective verification method on your device.

                                                        Apple Pay uses security features built into your device's hardware and software to protect your transactions. Apple says Apple Pay is designed to protect your personal information. Apple does not store or have access to the original credit, debit, or prepaid card numbers used with Apple Pay. Additionally, Apple does not store any transaction data that can identify you when you use Apple Pay with credit, debit, or prepaid cards. Your transactions are visible only to you, the merchant or developer, and your bank or card issuer.
                                                        For the purpose of payment processing, the information provided during the ordering process and order information are passed on to Apple in encrypted form. After being encrypted again by Apple, these encrypted data are passed on to the payment service stored in Apple Pay.

                                                        After payment is made, Apple sends your device account number along with the transaction-specific dynamic security code to the app or website. Neither Apple nor your device sends your actual payment card number to the app.
                                                        The data is passed on for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR. If personal data is processed in the course of the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.

                                                        Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

                                                        When you use Apple Pay on iPhone or Apple Watch to confirm a purchase you made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple servers. Apple does not retain any of this information in a format that can identify you. You can turn off the ability to use Apple Pay on your Mac in your iPhone's settings. Choose Wallet & Apple Pay, then turn off Allow Payments on Mac.
                                                        Further information on data protection at Apple Pay can be found at: https://support.apple.com/de-de/HT203027