Privacy Policy

Data protection declaration

Data Protection Information in accordance with Articles 13 and 14 of the GDPR

Below you will find our data protection information for applicants, customers and suppliers available for download.

Data-Protection-Information-Applicants (PDF)

Data-Protection-Information-Customers (PDF)

Data-Protection-Information-Suppliers )PDF)

The person responsible for data processing is:

CHANGE Sportswear GmbH & Co. KG

Industriestraße 2a

93192 Wald/Rossbach

Germany

shopify@cambio.de

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our websites without entering any personal data. Each time you visit a website, the server automatically saves only a so-called server log file, which records e.g. the name of the page visited, your IP address, date and time of the visit, the amount of data sent and the provider from which you visited the site (access data) and the visit. The access data are processed exclusively in connection with ensuring trouble-free operation of the site and optimising our offer. The purpose of this, in accordance with Article 6 paragraph 1 sub f AVG, is to safeguard our, in the context of a weighing of interests decisive, legitimate interest in the correct representation of our offer. All access data are deleted at the latest one month after the end of the visit to the site.

1.1 Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of the processing for us. Unless otherwise stated in this data protection statement, all access data and all data collected in the forms provided for this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection statement.

Our service providers are located and/or use servers in the following countries for which the European Commission has adopted an adequate level of data protection by decision: Canada, New Zealand, Japan, United Kingdom, United States.

The US adequacy decision applies as the basis for transfers to third countries, provided that the respective service provider is certified. Until certification by our service providers, data transfers remain on this basis: standard data protection clauses of the European Commission.

Our service providers are based and/or use servers in these countries: Australia, India, Singapore.

The European Commission has not established adequacy for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

1.2 Content Delivery Network

In order to reduce loading times, we use a so-called Content Delivery Network (‘CDN’) for some offers. With this service, content, e.g. large media files, are delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers work for us in the context of order processing.

2. Data processing for contract settlement and contact moments

2.1 Data processing for contract management

For the purpose of contract processing (incl. enquiry and handling of any existing warranty and performance claims as well as any legal update obligations) in accordance with Article 6 (1) (b) AVG, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract and we cannot send the order without its specification. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular the transfer to our service providers for the processing of orders, payments and shipments, can be found in the following sections of this data protection statement. After the complete settlement of the contract, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods in accordance with Art. 6 (1) (c) AVG, unless you have expressly given your consent for further use of your data in accordance with Art. 6 (1) (a) AVG or we reserve the right to further use data, which is legally permissible and about which we inform you in this statement.

Goods management system

For order and contract processing, we use goods management systems of external service providers. Our service providers work for us in order processing. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

2.2 Customer account

Insofar as you have given your consent to this by opening a customer account in accordance with Art. 6 (1) a AVG, we will use your data for opening the customer account and for storing your data for further future orders on our website. Deleting your customer account is possible at any time and can be done by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) AVG or we reserve the right to further use data, which is permitted by law and about which we inform you in this statement.

2.3 Contact

In the context of customer communication, we collect personal data to process your requests in accordance with art. 6 (1) (b) AVG, if you voluntarily provide us with this data when you contact us (e.g. via contact form, live chat tool or e-mail). Mandatory fields are marked as such because in these cases we absolutely need the data to process your contact. Which data is collected can be seen from the respective input forms. After the complete processing of your request, your data will be deleted, unless you have given your express consent for further use of your data in accordance with Art. 6(1)(a) AVG or we reserve the right to further use data, which is legally permitted and about which we inform you in this statement.

3. Data processing for the purpose of dispatch

To execute the contract in accordance with art. 6 para. 1 subsection b AVG, we transfer your data to the carrier in charge of the delivery, insofar as this is necessary for the delivery of the ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy statement.

Data transfer to shipping service providers for the purpose of shipment notification

If you have given us your express consent to do so during or after your order, we will transfer your e-mail to the selected shipping service provider in accordance with Art. 6(1)(a) AVG e-mail address and Telephone number so that they can contact you prior to delivery for the purpose of delivery notification or coordination. Consent may be revoked at any time by sending a message to the contact option described in this privacy statement or directly to the shipping service provider at the contact address listed below. Following revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond what is permitted by law and about which we inform you in this statement. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy statement.

DHL Parcel B.V.

Reactorweg 25

3542 AD UTRECHT

The Netherlands

4. Data processing during payment execution

We cooperate with these partners to process payments in our online shop: technical service provider, credit institution, payment service provider.

4.1 Data processing for processing transactions

Depending on the selected payment method, we provide the data required to process the payment transaction to our technical service providers working for us as part of order processing, or to the assigned credit institution or to the selected payment service provider further, insofar as this is necessary for the settlement of the payment. This serves the performance of the contract according to Art. 6(1)(b) AVG. In some cases, payment service providers collect the data necessary for processing the payment themselves, for example on their own website or via a technical integration into the ordering process. In this regard, the data protection statement of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact option described in this privacy statement.

4.2 Data processing for fraud prevention and optimisation of our payment processes

We may provide our service providers with additional information which, together with the information required to process the payment, they may use as our processors for the purposes of fraud prevention and to optimise our payment processes (e.g. billing, processing disputed payments, accounting support). In accordance with Article 6(1)(f) AVG, this serves to protect our legitimate interests in fraud protection or efficient payment management, which outweigh our own interests.

5. Advertising by E-mail

5.1 Email newsletter with registration and newsletter tracking

If you register for our newsletter, we will use the data required for this purpose or data provided by you individually to send you our e-mail newsletter on a regular basis based on your consent in accordance with Art. 6 para. 1 subsection a AVG.

You can unsubscribe from the newsletter at any time and can do so by sending a message to the contact option described in this privacy statement or via a link included for this purpose in the newsletter. After unsubscribing, we will remove your e-mail address from the list of recipients unless you have expressly consented to further use of your data or we reserve the right to use your data in ways permitted by law, of which we inform you in this privacy notice.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link included for this purpose in the newsletter. After unsubscribing, we will remove your e-mail address from the list of recipients, unless you have expressly consented to further use of your data in accordance with Art. 6 paragraph 1 a AVG or we reserve the right to use your data in a way that goes beyond this and is permitted by law and about which we inform you in this statement.

We would like to point out that we evaluate your user behaviour when sending the newsletter. To this end, we also analyse your interaction with our newsletter by measuring, storing and evaluating opening rates and click-through rates with a view to designing future newsletter campaigns (‘newsletter tracking’).

For this evaluation, the e-mails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. For the evaluations, we link in particular the following ‘newsletter data’

the page from which the page was requested (so-called referrer URL),
the date and time of the request,
the description of the type of web browser used,
the IP address of the requesting computer
the e-mail address,
the date and time of registration and confirmation

and the single-pixel technologies with your e-mail address or your IP address and, if applicable, an individual ID. Links in the newsletter may also contain this ID.

If you no longer wish to receive the newsletter, you can unsubscribe from the newsletter at any time - as described above.

The information is kept for as long as you have subscribed to the newsletter.

5.2 E-Mail newsletter without subscription and without your right of objection

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right, pursuant to Article 11.7(3) of the Telecommunications Act, to send you regular e-mail offers for similar products from our range. The purpose of this is to safeguard our, in the context of an interest assessment decisive, legitimate interest in a promotional approach to our customers in accordance with Art. 6 para. 1 sub f AVG.

You can object to this use of your e-mail address at any time by sending a message to the contact option described in this privacy statement or via a link provided for this purpose in the promotional e-mail, without incurring any costs other than the postage costs according to the basic rates. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 a AVG or we reserve the right to use your data in a way that goes beyond this and is permitted by law and about which we inform you in this declaration.

5.3 Transmission of the newsletter

The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy statement.

The newsletter and newsletter tracking mentioned above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are based and/or use servers in the following countries for which the European Commission has adopted by decision an adequate level of data protection: United Kingdom

5.4 Sending review requests by email

If you have given us express consent to do so during or after placing your order in accordance with Art. 6(1)(a) AVG, we will use your e-mail address to request an evaluation of your order via the evaluation system we use. This consent may be withdrawn at any time by sending a message to the contact option described in this privacy statement or via a link included for this purpose in the evaluation request. After you have withdrawn your consent, we will remove your e-mail address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) AVG or we reserve the right to use data further than this, which is permitted by law and about which we inform you in this statement.

Evaluation requests may also be sent by our service provider Trusted Shops SE Subbelrather Str. 15C, 50823 Cologne (‘Trusted Shops’).

In connection with the transmission of evaluation requests, we receive information from Trusted Shops about the respective status (e.g. whether the evaluation request has been sent and whether it has arrived). This is done in accordance with Article 6(1)(f) AVG in order to fulfil our legitimate interest to receive information about the rating invitations in order to carry out optimisations on this basis if necessary, as well as to fulfil Trusted Shops' legitimate interest in being able to offer this service.

We are jointly responsible with Trusted Shops for sending rating invitations and for collecting and displaying rating or status information.

As part of the joint responsibility between us and Trusted Shops, you can contact Trusted Shops, whose contact details can be found here , if you have any questions about data protection or wish to assert your rights. Further information on data protection can be found at the following link here. Independently, you can also contact us at any time using the contact option described in this data protection declaration. Your question will then, if necessary, be passed on to the other person responsible for answering it.

6. Cookies and other technologies

6.1 General information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your end device. Some of the cookies used by us are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognise your browser the next time you visit (permanent cookies).

Privacy protection for end devices

When you use our online services, we use technologies that are absolutely necessary to provide the telemedia service you have expressly requested. The storage of information in your end device or access to information already stored in your end device does not require consent in this respect.

For functions that are not absolutely necessary, the storage of information in your end device or access to information already stored in your end device requires your consent. Please note that if you do not give your consent, parts of the website may not be available for unrestricted use. Any consent you may have given remains valid until you adjust or reset the respective settings in your end device.

Any subsequent data processing by means of cookies and other technologies

We use such technologies that are absolutely necessary for the use of certain functions of our website (e.g. the shopping cart function). Through these technologies, IP address, time of visit, device and browser information and information about your use of our website (e.g. information about the contents of the shopping cart) are collected and processed. As part of a balancing of interests, this serves overriding legitimate interests in an optimised presentation of our offer in accordance with Art. 6 (1) f AVG.

In addition, we use technology to fulfil the legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analysis and online marketing. More information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy statement.

We may also use technologies not separately mentioned in this privacy notice. More detailed information on these technologies, including the respective legal basis for data processing, can be found on the Usercentrics platform.

You can access them by clicking on the fingerprint button in the bottom right or left corner of the page.

What types of cookies are used?

Required cookies: These cookies are necessary to enable the operation of the website. This includes, for example, cookies that allow you to log in to the customer area or add something to the shopping basket.

Targeting - Cookies: These cookies record visits to the website, the pages visited and links provided by the user. This information is used to tailor advertisements on the website to the visitor's interests.

Analytical / performance cookies: These cookies allow anonymous data to be collected on visitors' usage behaviour.

Third-party cookies: These cookies come from advertising partners, for example. Partner company cookies do not contain any personal data. Data is only collected under a user ID pseudonym.

Functional-Cookies: These cookies are used for certain functions of the website, e.g. to suggest a better navigation flow on the website, to display personalised and relevant information. (e.g. ‘interest-based ads’).

Cookie settings

The cookie settings for your browser can be found under the following link: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Insofar as you have consented to the use of the technologies in accordance with Article 6 paragraph 1 sub a AVG, you may withdraw your consent at any time by sending a message to the contact person described in the privacy statement. You can also click on the fingerprint button in the bottom right or left corner of the page. If cookies are not accepted, the functionality of our website may be limited.

6.2 Use of Usercentrics Consent Management for consent administration

On our website, we use the Usercentrics Consent Management Platform (‘Usercentrics’) to inform you about the cookies and technologies we use on our website and to obtain, manage and document your consent to the processing of your personal data by these technologies. In accordance with Art. 6(1)(c) AVG, this is necessary to fulfil our legal obligation under Art. 7(1) AVG to prove your consent to the processing of your personal data, to which we are subject. Usercentrics is an offering of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, Usercentrics' web server stores a so-called server log file, which also contains your anonymised IP address, date and time of visit, device and browser information and information about your consent behaviour. Your data is deleted after three years, unless you have given your explicit consent for further use of your data in accordance with Art. 6(1)(a) AVG or we reserve the right to use your data for other legally permitted purposes about which we inform you in this statement.

Our service providers are located and/or use servers in the following countries for which the European Commission has adopted an adequate level of data protection by decision: United States.

The US adequacy decision applies as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is available.

7. Use of cookies and other technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise specified for the individual technologies, this is done on the basis of your consent in accordance with Art. 6(1)(a) AVG.

The data collected in this context will be deleted as soon as the purpose has ceased to exist and we have stopped using the relevant technology. You can revoke your consent at any time with effect for the future. More information on your revocation options can be found in the ‘Cookies and other technologies’ section. More information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

7.1 Use of Google services

We use the following technologies from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The information automatically collected by Google technologies about your use of our website is usually sent to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Unless otherwise specified for individual technologies, data processing is based on an agreement concluded for the respective technology between the jointly responsible parties in accordance with Article 26 AVG. More information on data processing by Google can be found in Google's data protection information .

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has adopted an adequate level of data protection by decision.

Our service providers are established and/or use servers in countries outside the EU and the EEA. The European Commission has not established adequacy for these countries. Our cooperation is based on the European Commission's standard data protection clauses.

Google Analytics

For website analysis purposes, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information and information about your use of our website), from which usage profiles are compiled using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server in the EU to derive location data and then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing takes place on the basis of an assignment processing agreement by Google.

To optimise the marketing of our website, we have activated data sharing settings for ‘Google products and services’. This allows Google to access the data collected and processed by Google Analytics, which can then be used to improve Google's services. The data transfer to Google within the scope of this data transfer is based on an additional agreement between the responsible parties. We have no influence on the further processing of the data by Google.

For the purpose of optimised marketing of our website, we use the so-called user ID function. Using this function, we can assign a unique, permanent ID to your interaction data for one or more sessions on our online sites and thus analyse your user behaviour across different devices and sessions.

For web analytics and advertising purposes, Google Analytics' extension function enables the so-called DoubleClick cookie to recognise your browser when you visit other websites.

Google uses this information to compile reports on website activity and to provide other services relating to website use.

For web analytics, the extension function of Google Analytics allows Google Signals so-called ‘cross-device tracking’. If your internet-enabled devices are linked to your Google account and you have activated the ‘personalised advertising’ setting in your Google account, Google can generate reports on your usage behaviour (in particular user numbers from different devices) even if you change your device. We do not process any personal data in this context; we only receive statistics based on Google Signals.

If you do not give us your consent for the use of Google Analytics in accordance with Art. 6 paragraph 1 sub a AVG, no cookies will be stored or read on your device. The data processing described in the previous paragraphs does not take place. To close gaps in web analytics through behavioural and conversion modelling, pings with data (user agent, information about your consent behaviour, screen resolution, IP address) are sent to Google.

Google Ads

For advertising purposes in Google search results and on third-party websites, when you visit our website, the so-called Google Remarketing Cookie is set, which by collecting and processing data (IP address, time of visit, device and browser information as well as information about your use of our website) and by means of a pseudonymous cookie ID and on the basis of the pages visited by you, automatically enables interest-based advertising. Further data processing only takes place if you have activated the ‘personalised advertising’ setting in your Google account. If you are logged into Google during your visit to our website, Google uses your data together with the data from Google Analytics to create and define target group lists for cross-device remarketing.

If you do not give us permission for the use of Google Ads in accordance with Art. 6(1)(a) AVG, no cookies will be stored or read on your device. The data processing described in the previous paragraphs does not take place. To close gaps in web analytics through behavioural and conversion modelling, pings with data (user agent, information about your consent behaviour, screen resolution, IP address, page URL, information about ad clicks in URL parameters) are sent to Google. Your IP address is used to infer the IP country.

Google Maps

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour when you arrive at our website via a Google Ads ad. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as a website visit or newsletter registration) may be collected, from which usage profiles using pseudonyms are created.

For the visual display of geographic information, Google Maps collects data on your use of the Maps features, in particular IP address and location data, and transmits this data to Google and is then processed by Google. We have no influence on this subsequent data processing.

Google reCAPTCHA

To protect against abuse of our web forms and against spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information and information about your use of our website) and performs an analysis of your use of our website by means of a so-called JavaScript and cookies. In addition, other cookies stored in your browser by Google services are evaluated. Personal data are not read or stored from the input fields of the respective form.

Google Tag Manager

The Google Tag Manager allows us to manage various tags and services on our website. When executing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing takes place on the basis of a data processing agreement by Google.

Using the Google Tag Manager, it is possible to integrate various services/technologies.

If you do not wish the use of individual tracking services and have therefore deactivated them, the deactivation remains in effect for all affected tracking tags integrated by the Google Tag Manager.

7.2 Use of Facebook services

Use of Facebook Pixel

We use the Facebook pixel as part of the technologies of Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (‘Facebook (by Meta)’ bzw. ‘Meta Platforms Ireland’) as described below. The Facebook pixel is used to automatically collect and store data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as a website visit or newsletter registration), from which user profiles using pseudonyms are created. Within the scope of so-called comprehensive data matching, information is also collected and stored for matching purposes, with which individuals can be identified (e.g. names, e-mail addresses and telephone numbers). For this purpose, when you visit our website, a cookie is automatically set by the Facebook pixel, as a result of which your browser is automatically recognised by a pseudonymous cookie ID when you visit other websites. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activity and provide other services related to website use, in particular personalised and group advertising. We have no influence on data processing by Facebook and only receive statistics based on Facebook pixels.

The information automatically collected by Facebook technologies (by Meta) about your use of our website is usually transferred to and stored on a server of Meta Platforms, Inc, 1601 Willow Road, Menlo Park, California 94025, USA. More information on Facebook's data processing can be found in Facebook's privacy policy (by Meta). Our service providers are based and/or use servers in the following countries for which the European Commission has adopted an adequate level of data protection by decision: US, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The US adequacy decision applies as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is available. Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

The European Commission has not established adequacy for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

Facebook Analytics

Within the framework of Facebook Analytics, statistics on visitor activity on our website are compiled on the basis of data collected with the Facebook pixel about your use of our website. The data processing is based on an agreement on order processing by Facebook (by Meta). Your analysis serves the optimal presentation and marketing of our website.

Facebook Ads (Advertising Manager)

We use Facebook Ads to promote this website on Facebook (by Meta) and other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the exact execution, in particular the decision on the placement of ads with individual users. Unless otherwise stipulated for the individual technologies, data processing is based on an agreement between jointly responsible parties in accordance with Article 26 AVG. The joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. This does not include subsequent data processing by Meta Platforms Ireland.

Based on statistics on visitor activity on our website, which are created via Facebook pixels, we carry out group advertising on Facebook (by Meta) via Facebook Custom Audience by determining the characteristics of the relevant target group. In the context of the extensive data collection (see above) that takes place to determine the respective target group, Facebook (by Meta) acts as our processor.

Based on the pseudonymous cookie ID set by the Facebook pixel and the data collected on your usage behaviour on our website, we conduct personalised advertising via Facebook Pixel Remarketing.

For web analytics and event tracking, we use Facebook Pixel Conversions to measure your subsequent usage behaviour when you reach our website through a Facebook Ads advertisement. The data processing is based on an agreement on order processing by Facebook (by Meta).

7.3 Cookies and technologies from other providers

Use of Pinterest Tag for web analysis and advertising purposes

For web analytics and advertising purposes on Pinterest and third-party websites, when you visit our website using technology provided by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (‘Pinterest’), data (IP address, time of visit, device and browser information and information about your use of our website based on events specified by us, such as a website visit or newsletter sign-up) and a pseudonymous cookie ID, and based on the pages you visit, automatically enables interest-based advertising. From the data collected, user profiles are created using pseudonyms. Pinterest will combine this information with other data from your Pinterest account and use it to compile reports on website activity and to provide other services related to website usage. We have no influence on Pinterest's data processing and only receive statistics based on Facebook pixels. This allows us to measure your subsequent usage patterns for website analysis and tracking events when you visit our website through a Pinterest ad. The information automatically collected by Pinterest is usually transferred to a server of Pinterest, Inc, 505 Brannan St., San Francisco, CA 94107, USA, and stored there. The data processing is based on an agreement between co-responsible parties in accordance with Art. 26 AVG.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has established an adequate level of data protection by decision.

Use of Vimeo Video Plugin to integrate third-party content

To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the video plugin of Vimeo Inc, 330 West 34th Street, 5th Floor, New York 10011, USA (‘Vimeo’), sent to Vimeo and then processed by Vimeo. The data processing is based on an agreement between co-responsible parties in accordance with Art. 26 AVG.

Google Analytics is automatically integrated into the Vimeo Video Plugin. For website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is an offering of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The information automatically collected by Google about your use of our website is usually sent to and stored on a Google LLC server, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. If you visit our website from the EU, your IP address is stored on a server in the EU to derive location data and then immediately deleted before the traffic is forwarded to other Google servers for processing. We have no control over and access to Vimeo's data processing, including the settings and results of Google Analytics.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has adopted a decision establishing an adequate level of data protection.

Microsoft Clarity

We use the web analytics service Microsoft Clarity on our website. Microsoft Clarity is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). Clarity enables us to analyse user behaviour on our website (e.g. click behaviour, scrolling movements and interactions) and to create heatmaps and session replays. This helps us to improve the usability of our website.

In doing so, Clarity uses cookies and similar technologies through which personal data of website visitors may be processed, in particular:

shortened IP address,
technical information about the browser and end device,
usage data (e.g. mouse movements, page views, interactions),
time and duration of the visit.

We have configured Clarity so that input fields, sensitive data and personal content are masked by default or not recorded. Microsoft may also use the collected information for its own purposes, such as product improvement and error analysis.

The legal basis for the use of Clarity is your consent in accordance with Article 6(1)(a) GDPR, which you may withdraw at any time via our consent management tool.

Data transfer to the USA
Data processing may also take place in the United States. Microsoft is certified under the EU–US Data Privacy Framework (DPF), ensuring an adequate level of data protection in accordance with Article 45 GDPR. In addition, we have concluded a data processing agreement with Microsoft pursuant to Article 28 GDPR.

Further information on data processing by Microsoft can be found in Microsoft’s Privacy Statement at:
https://privacy.microsoft.com/de-de/privacystatement
and in the Clarity Privacy Notice at:
https://learn.microsoft.com/de-de/clarity/

8. Integration of the Trusted Shops Trustbadge/other widgets

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected ratings).

This serves to protect our legitimate interests in optimal marketing by enabling safe shopping in accordance with Art. 6 (1) (f) AVG, which outweigh our interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne (‘Trusted Shops’), with which we are jointly responsible for data protection under Art. 26 AVG. As part of this data protection declaration, we inform you in the following about the essential content of the agreement in accordance with Article 26 paragraph 2 AVG.

As part of the joint responsibility that exists between us and Trusted Shops SE, if you have any questions about data protection and exercising your rights, you should preferably contact Trusted Shops via the contact options listed in the data protection information . Nevertheless, you can always contact the responsible person of your choice. Your question will then, if necessary, be passed on to the other responsible person for an answer.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a US CDN (content delivery network) provider. In any case, an adequate level of data protection is guaranteed by an EU Commission adequacy decision, which can be consulted here for the US. US service providers are generally certified under the EU-US Data Privacy Framework (DPF). More information is available here. Where service providers are not certified under the DPF, standard contractual clauses have been entered into as a suitable safeguard.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. The IP address is anonymised immediately after collection, so that the stored data cannot be assigned to you personally. The anonymised data is used in particular for statistical purposes and error analysis.

8.2 Data processing after completion of the order

After the order is completed, the order data (total order amount, order number, any product purchased) and your e-mail address, which is hashed with a cryptological one-way function, are transmitted to Trusted Shops. The legal basis is Art. 6(1)(f) AVG. This serves to check whether you are already registered for services at Trusted Shops and is therefore necessary for the protection of our and Trusted Shops' overriding legitimate interests in the provision of transaction assessment services linked to the specific order, in each case in accordance with Art. 6 (1) (f) AVG. If you are registered, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you have not yet registered for the services, you will then be given the opportunity to do so for the first time. Further processing after registration also depends on the contractual agreement with Trusted Shops. If you have not yet registered for the Services, you will be given the opportunity to give your consent to receive invitations for reviews. If you do not give this consent, all transmitted data will be automatically deleted by Trusted Shops and a personal referral will no longer be possible.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6(1)(f) AVG to ensure trouble-free operation. Processing may take place in third countries (US and Israel). An adequate level of data protection is guaranteed in each case by an EU Commission adequacy decision, which can be consulted here for the US and here for Israel. US service providers are generally certified under the EU-US Data Privacy Framework (DPF). More information is available here. Where service providers are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.

9. Social Media

Our online presence on Facebook (by Meta), Instagram (by Meta), Youtube, LinkedIn

Insofar as you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 sub a AVG, when you visit our online presences on the above-mentioned social media, your data are automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These can be used, for example, to place ads within and outside the platforms that presumably match your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the relevant social media operator, as well as a contact option and your rights and setting options for protecting your privacy, please refer to the provider's data protection information linked below. Should you still need assistance, please contact us.

Facebook by Meta is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (‘Meta Platforms Ireland’) The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is usually transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in the context of a visit to a Facebook (by Meta) fan page is based on an agreement between co-responsible parties in accordance with Art. 26 AVG. More information (information on Insights data) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has adopted an adequate level of data protection by decision: US, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina

The US adequacy decision applies as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is available.

Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

The European Commission has not established adequacy for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

Instagram ( by Meta) is an offering of Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (‘Meta Platforms Ireland’) The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to and stored on a server at Meta Platforms , Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in the context of a visit to an Instagram (by Meta) fan page is based on an agreement between jointly responsible parties in accordance with Article 26 DSGVO. More information (information on Insights data) can be found here.

The US adequacy decision applies as a basis for transfers to third countries, provided that the respective service provider is certified. Certification is available.

Our service providers are based and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.

The European Commission has not established adequacy for these countries. Our cooperation with you is based on these guarantees: standard data protection clauses of the European Commission.

YouTube is an offering of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Information automatically collected by Google about your use of our online presence on YouTube is generally transferred to and stored on a Google LLC server, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Our service providers are located and/or use servers in countries outside the EU and EEA. The European Commission has not established adequacy for these countries. Our cooperation is based on the European Commission's standard data protection clauses.

LinkedIn is an offering of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (‘LinkedIn’). The information that LinkedIn automatically collects about your use of our online presence on LinkedIn is typically sent to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA and stored there.

Our service providers are located and/or use servers in the following countries for which the European Commission has adopted an adequate level of data protection by decision: United States.

The US adequacy decision applies as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is available.

10. Contact options and your rights

10.1 Your rights

As a data subject, you have the following rights:

in accordance with Article 15 AVG the right to request information about your personal data processed by us within the scope defined therein
in accordance with Article 16 AVG the right to request rectification or completion of your concerning incorrect personal data stored with us without delay
in accordance with Article 17 AGV the right to request the erasure of your personal data stored with us unless further processing is not required to

exercise freedom of expression and freedom of information;
to comply with a legal obligation
reasons of public interest
to bring, exercise or defend legal claims

in accordance with Article 18 AGV, the right to request the restriction of the processing of your personal data if

the accuracy of the personal data is disputed by you
the processing is unlawful and you object to its erasure
we no longer need the personal data, but you need it for the establishment, exercise or defence of legal claims
you have objected to the processing in accordance with Article 21 AGV

in accordance with Article 20 AGV the right to obtain your personal data, which you have provided to us, in a structured, common and machine-readable form or to request the transfer of such data to another controller
pursuant to Article 77, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority within your usual place of residence or workplace or at the head office of our company.

Right of objection

Insofar as we process personal data as explained above for the purpose of safeguarding a legitimate interest, which is decisive in the context of a balancing of interests, you may object to such processing for the future. If the processing is for the purpose of direct marketing, you may exercise this right at any time as described above. If the processing is for other purposes, you can only exercise a right to object if there are reasons arising from your specific situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can invoke compelling legitimate grounds that outweigh the importance of your interests, rights and freedoms or if the processing is carried out for the purposes of instituting, exercising or substantiating legal proceedings.

This does not apply if the processing is carried out for the purpose of direct marketing. In that case, your personal data will not be further processed for this purpose.

10.2 Contact

In case of questions regarding the collection, processing or use of your personal data, in case of inspection, rectification, restriction or deletion of data and also in case of withdrawal of given consents or objection to a certain use of data, you can contact us directly using the contact details in our colophon.

Data protection officer

Datenschutz Symbiose GmbH, Dr Marion Herrmann

Hundingstr. 12

95445 Bayreuth

Germany

mh@datenschutz-symbiose.de