Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies insofar as no other information is given for the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any information about yourself. 
Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offer. 
 

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the EU Commission. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Contact

Controller
Contact us if you wish. The controller responsible for data processing is: Mudassar Ahmad, Höhenweg 6, 65835 Liederbach am Taunus Germany, +4915732722920, info@theshirtfather.de

Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of making contact.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when sending images via upload
We provide an upload function for image files on our website. This makes it possible to send images to us by means of encrypted data transmission. When you transmit your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalised products. The image sent serves as a template for the product and is used for this purpose (e.g. T-shirt printing). The processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may be passed on in this context to service providers whom we use within the scope of commissioned processing. Your data will not be passed on to any other third parties.
We only use the image you send within the scope of providing the service. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when sending images by email 
You have the option of sending us images by email in connection with ordering a personalised product.
When you transmit your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalised products. The image sent serves as a template for the product and is used for this purpose (e.g. T-shirt printing). The processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data will not be passed on. 
We only use the image you send within the scope of providing the service. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer account      Orders      

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data in the case of orders
When you place an order, we collect and process your personal data only insofar as this is necessary for the fulfilment and processing of your order and for handling your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you. 
Your data is passed on, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of the data transfer is limited to a minimum.
 

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the EU Commission. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Reviews       Advertising      


Data collection when writing a comment or review
When you comment on or review an item or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments/reviews and displaying comments/reviews. 

By submitting the comment/review, you consent to the processing of the data transmitted. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. Your personal data will then be deleted.

When your comment/review is published, only the name you have provided will be published.

Use of the email address for sending newsletters
We use your email address to send you information and offers by newsletter, provided you have expressly consented to this. The data processing serves exclusively the purpose of advertising. For this purpose, we process your email address and, where applicable, other data that you have voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of the email address for sending direct advertising
We use the email address we received in the course of selling goods or services for the electronic sending of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising your right to object in the legal notice. You can also use the link provided for this purpose in the advertising email. This does not incur any costs other than the transmission costs according to the basic rates.

Use of Klaviyo
For sending newsletters, we use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo")  within the scope of commissioned processing.
We pass on the information you provided when subscribing to the newsletter (email address, and where applicable first and last name) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
In order to evaluate newsletter campaigns, the newsletters sent contain  a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device, as well as the time. Usage profiles can be created from this data under a pseudonym. The data collected is not used to identify you personally. The data collected is used solely for  statistical evaluation to improve newsletter campaigns.
Your data is generally transferred to Klaviyo servers in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and has thus undertaken to comply with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
You can find more information on data protection at Klaviyo at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement. 

Use of the email address for availability notifications
We offer a back-in-stock notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address on the respective item and being informed by us by email when it becomes available, provided you have consented to this. When the item becomes available, you will receive a one-time email notification about the availability of the respective item. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
 

Payment service providers       Credit checks      

Use of PayPal Express
On our website, we use the payment service PayPal Express of PayPal (Europe) S.Ă .r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. You can find more information on data processing when using the PayPal Express payment service in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out
On our website, we use the payment service PayPal Check-Out of PayPal (Europe) S.Ă .r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

Cookies may be stored in this process that enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal 
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report, if necessary, on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default if PayPal makes an advance payment. 
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.

Third-party providers
When paying via a third-party provider's payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers may include, for example:

  • Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
  • Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)


Purchase on invoice via PayPal 
When paying via the purchase on invoice payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies in accordance with the procedure already described above. The data processing serves the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default if Ratepay  makes an advance payment. You can find further information on data protection and which credit agencies Ratepay uses at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. 

You can find more information on data processing when using PayPal in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options
On our website, we use the payment service of Klarna Bank AB (publ) (SveavÀgen 46, 111 34 Stockholm, Sweden; "Klarna"). When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

Cookies may be stored in this process that enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
 
"Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, instant bank transfer), "Financing" (instalment purchase)
For individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit, credit card, instant bank transfer), "Financing" (instalment purchase), Klarna reserves the right to obtain a credit report, if necessary, on the basis of mathematical-statistical procedures using credit agencies.
For this purpose,  Klarna  transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address and data related to the order, to a credit agency for the purpose of identity and credit checks and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of checking creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default if Klarna  makes an advance payment. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
You can find further information, in particular to which credit agencies Klarna passes on your personal data, at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
 
You can obtain general information about Klarna at: https://www.klarna.com/de/. Your personal information is processed by Klarna in accordance with the applicable data protection regulations and as set out in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
 

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
 
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
 
Using the links below, you can find out how to manage (including deactivate) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
 
Technically necessary cookies
Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
 
The use of cookies or comparable technologies is based on Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
 

Use of the Shopify consent tool (Shopify Privacy & Compliance)
On our website, we use the consent tool "Shopify Privacy & Compliance" of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). Shopify is a company affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining and documenting the necessary consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. In the process, user information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the EU Commission. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The data processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.
You can find more information on data protection at Shopify at https://www.shopify.com/de/legal/datenschutz.


Analytics      Ad tracking      

Use of Hotjar
On our website, we use the analysis tool of Hotjar Ldt. (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; "Hotjar").
The data processing serves the purpose of the needs-based design, optimisation and analysis of our website. 
The tool records the movements of page visitors on the website on a random sample basis. This creates a log of mouse movements, scrolling behaviour, time spent and clicks on the website (so-called heatmap). 
For this purpose, Hotjar uses cookies, among other things. The following information, among other things, may be collected: IP address (in anonymised form), information about the device you use (screen size, devices, unique device identifier), information about the browser you use, location data (country only), preferred language for displaying the website, operating system used. You can find detailed information on the cookies used, their function and storage period here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies.
User profiles are created from this data under a pseudonym. The data is not used to personally identify the visitor to the website and is not merged with personal data about the bearer of the pseudonym. Hotjar is contractually prohibited from selling the data collected to any other third parties.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not certified under the TADPF. The data transfer is carried out, among other things, on the basis of appropriate safeguards. Hotjar will provide you with further information on the measures taken upon request.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
You can find further information on data protection when using Hotjar here: https://www.hotjar.com/legal/policies/privacy#enduserenglish.

Use of HeatMap 
On our website, we use the analysis tool of HeatMap Inc. (6724 Monroe Ave, Eldersburg, Maryland 21784, USA, "HeatMap") within the scope of commissioned processing. The data processing serves the purpose of the needs-based design, optimisation and analysis of our website. 
The tool records the movements of page visitors on the website. This creates a log of mouse movements, scrolling behaviour, time spent and clicks on the website (so-called heatmap). For this purpose, HeatMap uses cookies, among other things. The following information, among other things, may be collected: information about the device you use (screen size, devices, unique device identifier), information about the browser you use, location data (country only). User profiles can be created from this data under a pseudonym. The data is not used to personally identify the visitor to the website and is not merged with personal data about the bearer of the pseudonym. 
Your data may be transferred to third countries such as the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Heatmap is not certified under the TADPF.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. 
You can find more information on the collection and use of your data by HeatMap at: https://heatmap.com/privacy.
 
Use of the Meta Pixel
On our website, we use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta").
Meta and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33, 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights pursuant to Art. 15 - 20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33, 34 GDPR insofar as a personal data breach concerns Meta's obligations under the joint processing agreement.
The application serves the purpose of addressing visitors to the website in a targeted manner with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag has been implemented on the website. Via this tag, a direct connection to the Meta servers is established when you visit the website. As a result, information about which of our pages you have visited is transmitted to the Meta server. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalised, interest-based ads.
The application also serves the purpose of creating conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as which actions are carried out on this website after the redirection. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thus undertaken to comply with European data protection principles.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
You can deactivate the remarketing function "Custom Audiences" here. You can find more information on the collection and use of data by Meta, your rights in this regard and options for protecting your privacy in Meta's privacy notice at https://www.facebook.com/about/privacy/.


Use of Google Ads conversion tracking
On our website, we use the online advertising program "Google Ads" and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. There is therefore no way that cookies can be tracked across the websites of Ads customers.
The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.  
Your data may be transferred to the servers of Google LLC in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
You can find more information and Google's privacy policy at: https://www.google.de/policies/privacy/
 

Use of Google AdSense
On our website, we use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The data processing serves the purpose of renting out advertising space on the website and addressing visitors to the website on this space in a targeted manner with interest-based advertising. By means of this function, personalised, interest-based advertisements from the Google Display Network are shown to visitors to the provider's website. Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus undertaken to comply with European data protection principles. Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
You can find more information and Google's privacy policy at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/

Data subject rights and storage period

Storage period
After complete processing of the contract, the data is initially stored for the duration of the warranty period, then taking into account statutory retention periods, in particular those under tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

Rights of the data subject
If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, under Art. 21(1) GDPR you have a right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purpose of direct advertising.

Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach using the following contact details:

The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
65021 Wiesbaden
Phone: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
Email: poststelle@datenschutz.hessen.de

Right to object
If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If the processing of personal data is carried out for the purpose of direct advertising, you can object to this processing at any time by notifying us. After an objection has been made, we will stop processing the data concerned for the purpose of direct advertising.

Last updated: 22.10.2024

Â