Privacy Policy

The controller responsible for data processing is:

Frederick Vincent Louis Hinsch

Unterdorf 9

6403 Küssnacht am Rigi

Switzerland

Phone: +49 156 78889567 / WhatsApp (currently WhatsApp only)

We are delighted about your interest in our online shop. Protecting your privacy is very important to us. Below we provide you with detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains, for example, the

name of the requested file, your IP address, the date and time of retrieval, the amount of data transferred, and the requesting provider (access data), and documents the retrieval. This

access data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offering. This serves to protect our legitimate interests in the correct presentation

of our offering, which prevail within the context of a balancing of interests, pursuant to Art. 6(1) sentence 1 lit. f GDPR.

2. Data Processing for Contract Fulfilment and Contact

2.1 Data Processing for Contract Fulfilment

For the purpose of contract fulfilment (including inquiries regarding and processing of any existing warranty and performance-related claims as well as any statutory update obligations) pursuant to

Art. 6(1) sentence 1 lit. b GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, as in these

cases we absolutely require the data for contract fulfilment and cannot ship the order without it. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on the disclosure to our service providers for the purpose of order, payment, and shipping processing, can be found in the

following sections of this privacy policy. After the contract has been fully performed, your data will be restricted from further processing and deleted after expiry of the tax and

commercial law retention periods pursuant to Art. 6(1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR

or we reserve the right to a further use of data that is permitted by law and about which we inform you in this declaration.

2.2 Customer Account

Provided you have given your consent for this pursuant to Art. 6(1) sentence 1 lit. a GDPR by choosing to open a customer account, we use your data for the purpose of

opening the customer account and for storing your data for further future orders on our website. You may delete your customer account at any time, either by sending a

message to the contact option described in this privacy policy, or via a function provided for this purpose within the customer account. After your customer account has been deleted, your data

will be deleted, unless you have expressly consented to a further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to a further use of data

that is permitted by law and about which we inform you in this declaration.

2.3 Contacting Us

As part of customer communication, we collect personal data pursuant to Art. 6(1) sentence 1 lit. b GDPR in order to process your inquiries, when you voluntarily provide us with this data when contacting us (e.g.

via contact form, live chat tool, or email). Mandatory fields are marked as such, as in these cases we absolutely require the data to process your inquiry.

Which data is collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted, unless you have expressly

consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to a further use of data that is permitted by law and about which

we inform you in this declaration.

2.4 Customer Communication via Messenger Services (Telegram & WhatsApp Business)

We offer you the option of contacting us via messenger services. If you use these communication channels, the personal data generated in the process (in particular your username,

phone number or chat ID, profile picture, as well as the message content and any photos you transmit) is processed by the respective messenger provider. We process the

content you transmit exclusively for the purpose of answering your inquiry and, where applicable, for the initiation and performance of a contract pursuant to Art. 6(1) sentence 1 lit. b GDPR. Please note that we have no

influence over the data processing carried out by the messenger providers themselves.

2.4.1 Telegram Chatbot "Louis" (AI-Powered Customer Service)

On our website we link to a Telegram chatbot named "Louis", which helps you select the right refrigerator seal. The provider of the Telegram messenger service is

Telegram FZ-LLC, Business Central Towers, Dubai Media City, United Arab Emirates. Further information on data processing by Telegram can be found at: https://telegram.org/privacy

How it works and which data is processed:

When you write to our Telegram chatbot, your messages are first transmitted via Telegram's infrastructure. We then process your messages on our own

server in Germany and forward the message content (text, and any photos) to the AI service Google Gemini (provider: Google Ireland Limited, Gordon House,

Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to generate an automated reply. In doing so, the following data is processed:

- Your Telegram chat ID as well as your display name or username stored with Telegram

- The content of your messages (text, and any images transmitted)

- The time of the message

- A short, role-based conversation history (recent messages) so that the bot can understand the context

Legal basis and consent:

The transmission of your message content to Google Gemini takes place exclusively on the basis of your explicit consent pursuant to Art. 6(1) sentence 1 lit. a GDPR as well as Art. 49(1) lit. a

GDPR (for the transfer to the third country USA). Before the chatbot transmits your messages to Google Gemini for the first time, you will be informed about the data processing within the Telegram chat and must

expressly give your consent by clicking the "I agree" button. Without this consent, no processing by Google Gemini takes place; in that case you cannot use the chatbot.

We expressly point out that, under the free Gemini API tier, Google may also use the submitted content to improve its own AI models. For this reason, please do not enter

any particularly sensitive data (e.g. health data, payment data, passwords) in the chat. For your inquiry we only need technical details about the seal (dimensions, seal type,

and, if applicable, the refrigerator brand/model) as well as, optionally, photos of the seal.

Right of withdrawal:

You can withdraw your consent at any time with effect for the future by sending the command /widerruf in the Telegram chat. After withdrawal, no further messages will be transmitted to Google

Gemini, and your conversation history stored with the bot will be deleted. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

Third-country transfer:

Google Gemini partly processes the message content on servers in the USA. No adequacy decision by the European Commission exists for the USA. We base the transfer on

Standard Contractual Clauses of the EU Commission pursuant to Art. 46 GDPR in conjunction with your explicit consent pursuant to Art. 49(1) lit. a GDPR. There is a risk

that US authorities may gain access to the transmitted data without you having effective legal remedies available. Further information on data processing by Google Gemini can be found here:

- https://ai.google.dev/gemini-api/terms

- https://policies.google.com/privacy

Retention period:

The conversation data stored by the chatbot (chat ID, message history, consent log) is retained only for as long as necessary to process your inquiry,

but for no longer than until your consent is withdrawn or 90 days after the last interaction. We retain the consent log itself pursuant to Art. 7(1) GDPR for evidentiary purposes for up to 3

years after withdrawal.

2.4.2 WhatsApp Business

For communication with customers we use WhatsApp Business, a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (parent company: Meta

Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA). If you contact us via WhatsApp, the following data is processed:

- Your phone number

- Your profile name stored with WhatsApp and, if applicable, your profile picture

- The content of your messages (text, and any photos, voice messages, documents)

- The time and status of the messages (sent, delivered, read)

Legal basis:

Processing takes place for the purpose of handling your inquiry, contract initiation, and contract performance pursuant to Art. 6(1) sentence 1 lit. b GDPR, as well as on the basis of our legitimate interest in

efficient customer communication pursuant to Art. 6(1) sentence 1 lit. f GDPR. By actively writing to us via WhatsApp, you simultaneously declare your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR to the

use of this channel.

Third-country transfer:

WhatsApp Ireland Limited may transfer data to Meta Platforms, Inc. in the USA. No adequacy decision by the European Commission exists for the USA. Our cooperation is based

on Standard Contractual Clauses of the EU Commission and — where applicable — on your consent pursuant to Art. 49(1) lit. a GDPR. There is a risk that US authorities may gain access to the

transmitted data without you having effective legal remedies available.

Further information on data processing by WhatsApp can be found in WhatsApp's privacy policy for the European Region:

https://www.whatsapp.com/legal/privacy-policy-eea

Retention period:

Chat histories in WhatsApp Business are deleted as soon as your inquiry has been fully processed, provided no statutory retention obligations (e.g. under commercial or tax law for

orders) apply.

2.4.3 Rights and Withdrawal

You may object to the processing of your data via messenger services at any time, or withdraw any consent given, with effect for the future. To do so, use the command

/widerruf in the Telegram chat, an informal message in the respective messenger, or the contact option in our Legal Notice. Alternatively, for purely GDPR-compliant communication

without a messenger provider, we recommend using our contact form or email contact at info@dichtungen030.de.

3. Data Processing for the Purpose of Shipping

For the purpose of contract performance pursuant to Art. 6(1) sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with delivery, insofar as this is

necessary for the delivery of ordered goods. If you have questions about our service providers and the basis of our cooperation with them, please contact us via the contact option described in this privacy policy.

Disclosure of data to shipping service providers for the purpose of delivery notification

Provided you have given us your explicit consent to this during or after your order, we pass on your email address and

phone number to the selected shipping service provider on the basis of this consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, so that they can contact you prior to delivery for the purpose of announcing or coordinating delivery.

Consent may be withdrawn at any time by sending a message to the contact option described in this privacy policy, or directly to the shipping service provider at the

contact address listed below. After withdrawal, we delete the data provided for this purpose, unless you have expressly consented to a further use of your data or we

reserve the right to a further use of data that is permitted by law and about which we inform you in this declaration. If you have questions about our service providers and the basis

of our cooperation with them, please contact us via the contact option described in this privacy policy.

General Logistics Systems Germany GmbH & Co. OHG

GLS Germany-Straße 1 - 7

DE-36286 Neuenstein

Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG

Görlitzer Straße 1

41460 Neuss

Germany

Hermes Germany GmbH

Essener Straße 89

D-22419 Hamburg

Germany

DHL Paket GmbH

Sträßchensweg 10

53113 Bonn

Germany

DPD Deutschland GmbH

Wailandtstraße 1

63741 Aschaffenburg

Germany

4. Data Processing for Payment Processing

When processing payments in our online shop, we work together with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the payment method selected, we pass on the data necessary for processing the payment transaction to our technical service providers, who act for us under a data processing agreement, or to the commissioned credit institutions, or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves the fulfilment of the contract pursuant to Art. 6(1) sentence 1 lit. b GDPR. In some cases, payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the order process. In this respect, the privacy policy of the respective payment service provider applies.

If you have questions about our partners for payment processing and the basis of our cooperation with them, please contact us via the contact option described in this privacy policy.

4.2 Data Processing for the Purpose of Fraud Prevention and Optimisation of Our Payment Processes

Where applicable, we provide our service providers with additional data, which they use, together with the data necessary for processing the payment, as our data processors for the purpose of fraud prevention

and the optimisation of our payment processes (e.g. invoicing, processing of disputed payments, supporting bookkeeping). This serves, pursuant to Art. 6(1) sentence 1 lit. f

GDPR, to protect our legitimate interests, which prevail within the context of a balancing of interests, in our protection against fraud and in efficient payment management.

4.3 Payment Service Providers

We use the following payment service providers:

- Apple Pay

- Google Pay

- Klarna

- Mastercard

- PayPal

- Shopify Payments

- VISA

Data processing takes place on the basis of Art. 6(1) sentence 1 lit. b GDPR (contract performance). The data required for payment processing is transmitted to the respective payment service provider

and processed there.

4.4 Cloudflare

We use the services of Cloudflare as a content delivery network and to protect our website. The operator is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Data processing

takes place on the basis of a data processing agreement. Cloudflare may have access to the following data:

- IP address

- Technical browser data

- Log data

- Performance and security metrics

4.5 Google Tag Manager

We use Google Tag Manager to manage marketing and analytics tags. No personal data is collected directly by the Tag Manager itself. Data processing takes place on

the basis of our legitimate interests pursuant to Art. 6(1) lit. f GDPR.

5. Cookies and Other Technologies

5.1 General Information

To make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages.

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser

(so-called session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies).

Protection of privacy on end devices

When using our online offering, we use strictly necessary technologies in order to provide the telemedia service you have expressly requested. Storing

information on your device, or accessing information already stored on your device, does not require your consent in this respect.

For functions that are not strictly necessary, storing information on your device, or accessing information already stored on your device, requires your

consent. Please note that if consent is not given, parts of the website may not be fully usable. Any consent you have given remains

valid until you change or reset the respective settings on your device.

Any subsequent data processing via cookies and other technologies

We use such technologies that are strictly necessary for the use of certain functions of our website (e.g. shopping cart function). Through these technologies, the IP address, the time

of the visit, device and browser information, as well as information on your use of our website (e.g. information on the content of the shopping cart) are collected and processed. This serves, within the context

of a balancing of interests, our prevailing legitimate interests in an optimised presentation of our offering pursuant to Art. 6(1) sentence 1 lit. f GDPR.

We also use technologies to fulfil the legal obligations to which we are subject (e.g. in order to be able to prove consent to the processing of your personal data)

as well as for web analytics and online marketing. Further information on this, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy.

Cookie Settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Provided you have consented to the use of the technologies pursuant to Art. 6(1) sentence 1 lit. a GDPR, you can withdraw your consent at any time by sending a message to the

contact option described in this privacy policy. Alternatively, you can also visit the following link: http://www.dichtungen030.de/pages/gdpr-compliance . If cookies are not accepted, the functionality of our website may be limited.

5.2 Consent Management Platform (CMP)

We use the consent management platform "Pandectes GDPR Compliance" (provided as a Shopify app by Pandectes Inc.), in order to obtain your consent to the storage of certain cookies and technologies on your device and to document this in a manner compliant with data protection law. The provider of this solution is Pandectes Inc.

When you visit our website, the following personal data is transmitted to Pandectes:

• Your consent(s) or withdrawal of your consent(s)

• Your pseudonymised IP address

• Information about your browser

• Information about your device

• Time of your visit to the website

• Google Consent Mode v2 signals

This data is processed in order to be able to store and prove your cookie settings. The legal basis for this

processing is Art. 6(1) lit. c GDPR (legal obligation) in conjunction with Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG), as we are

legally obliged to keep proof of consent given.

Pandectes stores the consent data (consent ID and consent date) for a period of up to 12 months. After this period expires, you will be asked for your consent again.

You can change or withdraw your cookie settings at any time via the cookie banner or the "Cookie Settings" link in the footer of our website.

 

5.3 Information on Third-Country Transfers (Data Transfer to Third Countries)

We use technologies from service providers on our website whose registered office and/or server locations may be located in third countries outside the EU or EEA. If no adequacy decision

by the EU Commission exists for such a country, an adequate level of data protection must be ensured by other suitable safeguards.

Suitable safeguards in the form of contractually agreed Standard Contractual Clauses of the EU Commission or binding internal data protection rules (Binding Corporate Rules) are generally

possible, but require a prior review by the contracting parties as to whether an adequate level of protection can be ensured. According to the case law of the CJEU, it may

be necessary in this regard to take additional protective measures.

We have generally agreed the Standard Contractual Clauses issued by the EU Commission with the technology providers we use that process personal data in a third country.

Where possible, we also agree additional safeguards intended to ensure adequate data protection in third countries without an adequacy decision.

Notwithstanding this, it may happen that, despite all contractual and technical measures, the level of data protection in the third country does not correspond to that of the EU. In such cases, if

necessary, we ask for your consent, within the context of the cookie consent, pursuant to Art. 49(1) lit. a GDPR to the transfer of your personal data to a third country.

In particular, there is a risk that local authorities in the third country may, from a European data protection perspective, obtain access rights to your personal data that are not sufficiently

limited, that we as the data exporter or you as the data subject may not become aware of this, and/or that you may not have sufficient legal remedies available

to prevent this and/or to take action against such access.

In particular, the following countries are currently among the third countries without an adequacy decision by the EU Commission (non-exhaustive list):

- China

- Russia

- Taiwan

- United Arab Emirates

You can find out to which third countries data is transferred by us in the privacy notices for the respective tool used and/or the consent management service/

Consent Management Platform (CMP) we use.

5.4 Use of hCaptcha

We use hCaptcha on our website (provider: Intuition Machines, Inc., 2443 Fillmore St #380-7571, San Francisco, CA 94115, USA) to verify whether entries are made by a human or by

automated machine processing.

How it works and data processing: When hCaptcha is used, data is transmitted to hCaptcha's servers. The following data is processed:

- IP address

- Information about your device and browser (device type, screen resolution, browser version)

- Time spent on the website

- Mouse movements and inputs

- A cookie with a unique identifier

Legal basis: Processing takes place on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

Transfer of data to third countries: When hCaptcha is used, data is transferred to the USA. As no adequacy decision by the EU Commission exists for the USA, we base the transfer

on Standard Contractual Clauses of the EU Commission pursuant to Art. 46 GDPR in conjunction with your explicit consent pursuant to Art. 49(1) lit. a GDPR. There is a risk that US authorities

may gain access to your data without you having effective legal remedies available.

Retention period: The data collected by hCaptcha is only stored for as long as necessary for the purpose of verification.

Right of withdrawal: You can withdraw your consent at any time with effect for the future. To do so, use the contact option described in this privacy policy or the

cookie settings on our website.

Data processing agreement: We have concluded a data processing agreement with the provider of hCaptcha pursuant to Art. 28 GDPR.

Further information on data protection at hCaptcha can be found at: https://www.hcaptcha.com/privacy

5.5 Use of Affiliate Links

On our website we use so-called affiliate links. These links lead to offers from third-party providers (e.g. CHECK24). If you click on such an affiliate link, you will be redirected to the

website of the respective third-party provider. In doing so, the third-party provider may store cookies or similar technologies on your device in order to track the origin of the visit

(e.g. that you reached the offer via our website). This data serves to settle commissions between us and the third-party provider.

Legal basis:

Your data is processed on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, provided you have consented via our cookie banner.

Data processing by third-party providers:

Please note that data processing is carried out by the third-party provider and its privacy policy applies. We have no influence over the collection and processing of data by the

third-party provider.

Right of withdrawal:

You can withdraw your consent at any time with effect for the future by adjusting the cookie settings on our website or deleting cookies in your browser.

Further information:

For further information on data processing by our advertising partners, please read their privacy policies:

- CHECK24: https://www.check24.de/datenschutz/

6. Use of Cookies and Other Technologies

On our website we use the following cookies and other technologies from third-party providers. Unless stated otherwise for the individual technologies, this takes place on

the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. After the purpose no longer applies and our use of the respective technology ends, the data collected in this

context is deleted. You can withdraw your consent at any time with effect for the future. Further information on your options for withdrawal can be found in the section "Cookies and Other

Technologies". Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have questions about the providers and the

basis of our cooperation with them, please contact us via the contact option described in this privacy policy.

Use of Google Services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") described below. The information automatically collected by the Google technologies

about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless stated otherwise for

individual technologies, data processing takes place on the basis of an agreement concluded for the respective technology between joint

controllers pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy notices.

Our service providers are based and/or use servers in countries outside the EU and EEA for which the European Commission has, by decision, determined an adequate level of data protection.

Our service providers are based and/or use servers in countries outside the EU and EEA. No adequacy decision by the European Commission exists for these countries. Our

cooperation with them is based on the Standard Contractual Clauses of the European Commission.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information on your use of our website),

from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU,

your IP address is stored on a server located in the EU in order to derive location data and is then immediately deleted, before the traffic is forwarded to other Google servers

for further processing. Data processing takes place on the basis of a data processing agreement with Google.

For the purpose of optimised marketing of our website, we have activated the data-sharing settings for "Google products and services". This allows Google to access the data collected and

processed by Google Analytics and subsequently use it to improve Google's services. Data sharing with Google under these data-sharing settings takes place on the basis of an

additional agreement between controllers. We have no influence over the subsequent data processing by Google.

For the purpose of optimised marketing of our website, we use the so-called User-ID function. This function allows us to assign a unique, permanent ID to your interaction data across one or more

sessions on our online presences, and thus to analyse your user behaviour across devices and sessions.

For web analytics and advertising purposes, the extended functionality of Google Analytics uses the so-called DoubleClick cookie, which enables your browser to be recognised when visiting other websites. Google

will use this information to compile reports on website activity and to provide further services related to website usage.

If you do not give us your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR to the use of Google Analytics, no cookies will be stored on or read from your device. The data processing described in the previous

paragraphs does not take place. To close gaps in web analytics through behavioural and conversion modelling, pings with data (user agent, information about

your consent behaviour, screen resolution, IP address) are sent to Google.

 

Hotjar

We use Hotjar (Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 3155, Malta) to

analyse user behaviour on our website. Hotjar creates anonymised heatmaps and recordings of

user interactions (clicks, scrolling behaviour, mouse movements), in order to improve the usability of our website.

Data processed: pseudonymised IP address, device information, screen size, browser type, geographic

location (country only), preferred language, user interactions.

Legal basis: Art. 6(1) lit. a GDPR (consent via cookie banner).

Hotjar stores data for a maximum of 365 days. Further information can be found in Hotjar's privacy policy at https://www.hotjar.com/privacy/.

 

Shopify Inbox (Chat)

 

We use Shopify Inbox as a chat function on our website. The service is provided by Shopify International Limited, Victoria

Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

When you use the chat, your message content, your name (if provided), your email address (if provided), as well as technical data (IP address, browser type) are processed.

Legal basis: Art. 6(1) lit. b GDPR (contract initiation/customer inquiry) as well as Art. 6(1) lit. f GDPR (legitimate interest in customer communication).

Data processing takes place within the scope of our data processing agreement with Shopify. Further information: https://www.shopify.com/legal/privacy.

 

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google remarketing cookie is set when you visit our website, which automatically enables

interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, as well as information on your use of our website) and by means of a

pseudonymous cookie ID and on the basis of the pages you have visited. Further data processing only takes place if you have activated the "personalised advertising"

setting in your Google account. If you are logged in to Google during your visit to our website in this case, Google uses your data together with Google Analytics data to

create and define target audience lists for cross-device remarketing.

For website analysis and event tracking, we measure your subsequent usage behaviour via Google Ads Conversion Tracking if you have reached our website via a Google Ads advertisement.

For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, as well as information on your use of our website based on

events we have defined, such as visiting a website or newsletter sign-up) may be collected, from which usage profiles are created using pseudonyms.

If you do not give us your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR to the use of Google Ads, no cookies will be stored on or read from your device. The data processing described in the previous

paragraphs does not take place. To close gaps in web analytics through behavioural and conversion modelling, pings with data (user agent, information about

your consent behaviour, screen resolution, IP address, page URL, information about ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

Google Maps

For the visual display of geographic information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google,

and Google subsequently processes it. We have no influence over this subsequent data processing.

Use of Facebook Services (Meta)

On our website we use technologies of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"), such as the Facebook Pixel and possibly further

tools for analysis and advertising purposes.

Facebook Pixel

With the Facebook Pixel, we can track the behaviour of users after they have been redirected to our website by clicking on a Facebook advertisement. This serves to evaluate

the effectiveness of Facebook advertisements for statistical and market research purposes and can help to optimise future advertising measures. The data collected is anonymous to us as the operator

of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Meta, so that a connection to the respective

user profile is possible, and Meta may use the data for its own advertising purposes in accordance with the Facebook Data Policy. This may enable Meta and its partners to place advertisements on and

outside of Facebook.

The Facebook Pixel is only used with your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent at any time by adjusting the cookie settings on

our website.

Further information on data processing by Meta can be found in Meta's privacy policy:

https://www.facebook.com/privacy/policy/

Transfer of data to third countries

Meta Platforms Ireland Limited may transfer data to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. No adequacy decision by the European

Commission exists for the USA. Our cooperation is based on Standard Contractual Clauses of the European Commission. Further information on this can be found in Meta's privacy policy.

Custom Audiences & Conversion API (if used)

In addition, we use the "Custom Audiences" or "Meta Conversion API" function. This allows us to show visitors to our website interest-based advertisements

("Facebook ads") when they visit Facebook or other Meta services. For this purpose, behaviour on our website is analysed (e.g. products viewed) in order to subsequently show

users suitable advertising.

This is only used with your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent at any time.

Instagram Ads

We use functions of Instagram Ads, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"), in order to place targeted advertising for our offers

on Instagram and to measure its success. In doing so, data such as your IP address, device information, pages visited, and interactions with our advertisements may be collected and

transmitted to Meta.

Instagram Ads is only used with your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent at any time by adjusting the cookie settings on

our website.

Further information on data processing by Meta can be found in Meta's privacy policy:

https://privacycenter.instagram.com/policy/

Messenger Plugins (Facebook Messenger)

On our website we use Messenger plugins from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"), such as Facebook Messenger chat.

You can use these plugins to contact us directly. When the plugin is loaded and used, data (e.g. IP address, device information, browser data, interactions) is transmitted to Meta.

The Messenger plugin is only used with your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent at any time by adjusting the cookie settings on

our website.

Further information on data processing by Meta can be found in Meta's privacy policy:

https://www.facebook.com/privacy/policy/

Transfer of data to third countries

Meta Platforms Ireland Limited may transfer data to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. No adequacy decision by the European

Commission exists for the USA. Our cooperation is based on Standard Contractual Clauses of the European Commission. Further information on this can be found in Meta's privacy policy.

7. Contact Options and Your Rights

7.1 Your Rights

As a data subject, you have the following rights:

- pursuant to Art. 15 GDPR, the right to request information, to the extent specified therein, about your personal data processed by us;

- pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate or completion of your personal data stored with us;

- pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing is

- necessary for exercising the right to freedom of expression and information;

- necessary for compliance with a legal obligation;

- necessary for reasons of public interest; or

- necessary for the establishment, exercise, or defence of legal claims;

- pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as

- the accuracy of the data is disputed by you;

- the processing is unlawful, but you refuse its deletion;

- we no longer need the data, but you need it for the establishment, exercise, or defence of legal claims; or

- you have objected to the processing pursuant to Art. 21 GDPR;

- pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to

another controller;

- pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence, place of work, or

the place of our registered office.

Right to object

Insofar as we process personal data as explained above in order to protect our legitimate interests, which prevail within the context of a balancing of interests, you may object to

such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other

purposes, you only have a right to object where there are grounds arising from your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing

which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defence of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

7.2 Contact Options

If you have questions about the collection, processing, or use of your personal data, about information, correction, restriction, or deletion of data, or about withdrawal of consent given, or

objection to a specific use of data, please contact us directly using the contact details in our Legal Notice.