3.1 TECHNOLOGIES USED
This website uses various services and applications (collectively, “tools”) that are provided either by us or by third parties. These include, in particular, tools that use technology to store or access information on your device:
Cookies:
information stored on your device, consisting in particular of a cookie name, a value, the storing domain and an expiry date. So-called session cookies (e.g. PHPSESSID) are deleted after the session, while so-called persistent cookies are deleted after the specified expiry date. Cookies can also be removed manually.
Almacenamiento web (Local Storage / Session Storage):
information stored on the device, consisting of a name and a value. Information in the session storage is deleted after the session, while information in the local storage has no expiry date and remains stored unless a deletion mechanism has been established (e.g. local storage with timed entry). Information in the local and session storage can also be removed manually.
JavaScript:
programming codes embedded in or accessed on the website that, for example, set cookies and web storage or actively collect information from the device or about the usage behaviour of visitors. JavaScript can be used for “active fingerprinting” and the creation of usage profiles. JavaScript can be blocked by making appropriate browser settings, although most services will no longer function in this case.
Píxel:
a tiny graphic that is loaded automatically by a service. Its purpose is to enable visitor recognition by automatically transfer of the usual connection data (in particular the IP address, browser information, operating system, language, fonts, accessed address and time of access) and to determine, for example, when an email is opened or a website visited. Pixels can be used for “passive fingerprinting” and to create usage profiles. The use of pixels can be prevented, for example, by blocking images in emails and elsewhere, although doing so will severely limit their display.
“Fingerprints” can be created using these technologies and also just by establishing a connection on a page. These fingerprints are usage profiles that do not require the use of cookies or web storage to recognise visitors. There is no manual method that enables the prevention of fingerprints entirely.In their default settings, most browsers accept cookies, run scripts and display graphics. In most cases, however, you can adjust your browser settings to reject all or certain cookies or to block scripts and graphics. Our services will probably not work - either partly or properly – if you block the storage of cookies, the display of graphics and the execution of scripts completely.The following section lists the tools we use by category. In particular, we offer information about the providers of the tools, the storage duration of the cookies or information in the local storage and session storage as well as the transfer of data to third parties. We also explain in which cases we obtain your voluntary consent to use the tools and how you can withdraw this consent.
3.2 LEGAL BASIS AND WITHDRAWAL
3.2.1 LEGAL BASIS
We use tools that are necessary for website operation based on our legitimate interest pursuant to Art. 6 para. 1 point f) GDPR in order to provide the basic functions of our website. In certain cases, these tools may also be necessary for the performance of a contract or to take measures prior to entering into a contract, in which case the processing is carried out in accordance with Art. 6 para. 1 point b) GDPR. The access to and storage of information in the device is absolutely necessary in these cases and is carried out on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 2 TTDSG in Germany.We use all other non-essential (optional) tools that provide additional functions on the basis of your consent pursuant to Art. 6 para. 1 point a) GDPR. Access to and storage of information in the device is then carried out on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 2 TTDSG in Germany. These tools are only used for data processing if we have received your prior consent.Where personal data is transferred to third countries, we refer, also with regard to the risks that may be involved, to para. 6 (“Data transfer to third countries“). We will inform you if standard contractual clauses or other guarantees have been concluded for the use of certain tools. If you have given your consent to the use of certain tools, we (also) transfer the data processed when using the tools to third countries on the basis of this consent in accordance with Art. 49 para. 1 point a) GDPR.
3.2.2 OBTAINING YOUR CONSENT
To obtain and manage your consent, we use the consentmanager.com tool from consent-manager AB, Håltegelvägen 1b, 72348 Västerås, Sweden (“consentmanager”). The tool creates a banner informing you about how data is processed on our website and giving you the option to consent to all, some or no data processing by means of optional tools. This banner is shown on your first visit to our website and when you revisit the preferences selection to make changes or withdraw consent. The banner will also be shown on further visits to our website if you have deactivated the storage of cookies or if the cookies or information in consentmanager’s local storage have been deleted or have expired.Your consent or withdrawal, your IP address, information about your browser, your device and the time of your visit are transmitted to consentmanager during your visit to the website. In addition, consentmanager stores necessary information on your end device in order to retain your consent and withdrawal of consent:
__cmpconsentx (storage period: 1 year)
__cmpcpcx (storage period: 1 year)
__cmpcvcx (storage period: 1 year)
Data processing by consentmanager is necessary to provide the legally required consent management and to comply with our documentation obligations. The legal basis for the use of consentmanager is Art. 6 para. 1 point f) GDPR, according to our interest in compliance with the legal obligations for consent management. Access to and storage of information on the device are absolutely necessary in these cases and takes place on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 2 TTDSG in Germany.
3.2.3 WITHDRAWAL OF YOUR CONSENT OR CHANGE IN YOUR PREFERENCES
You may withdraw your consent for certain tools at any time. To do so, click on the following link/button: [link/button]. You can also change the selection of the tools to which your consent applies and obtain additional information on the tools in question. Alternatively, you may also exercise your right of withdrawal for certain tools by contacting the provider directly.
3.3 NECESSARY TOOLS
We use certain tools to enable the basic functions of our website (“necessary tools”). We would be unable to provide our service without these tools. The use of necessary tools therefore does not require consent. The legal basis for necessary tools is the requirement to maintain our legitimate interests according to Art. 6 para. 1 point f) GDPR, or to perform a contract or to take steps prior to entering into a contract according to Art. 6 para. 1 point b) GDPR. Access to and storage of information on the device is absolutely necessary in these cases and takes place on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 2 TTDSG in Germany.In regard refer to the information provided below, we refer to para. 6 (“Data transfer to third countries”) for the event that personal data is transferred to the USA or other third countries.
3.3.1 PROPRIETARY TOOLS
We use our proprietary tools that access information on the device or store information on the device, in particular to
authenticate login authentication;
balance load;
save your language settings;,
remember that you have been shown information placed on our website – so that it is not shown again the next time you visit the website.
3.3.2 GOOGLE RECAPTCHA
Our website uses the Google reCAPTCHA service, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for persons from the European Economic Area and Switzerland and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (jointly “Google”) for all other persons.reCAPTCHA prevents automated software (so-called bots) from performing abusive activities on the website, i.e. it checks whether entries actually originate from a human being. reCAPTCHA uses JavaScript and stores cookies and information in the local storage of your device for this purpose. The following data is processed in particular:
referrer URL (address of the page last visited by the user);
IP address;
cookies set by Google;
snapshot of the browser window;
user’s input behaviour (e.g. answering the reCAPTCHA question, input speed in form fields, order of selection of input fields by the user, number of mouse clicks);
technical information: Browser type, browser plugins, browser size and resolution, date, language setting, display instructions (CSS) and scripts (Javascript).
The following cookies from reCAPTCHA can be used for this purpose: “_GRECAPTCHA” (6 months).The following information in the local storage can be set by reCAPTCHA: “_grecaptcha”.Furthermore, Google reads the cookies from other Google services such as Gmail, Search and Analytics. You must log out of Google before accessing a page in which we have integrated Google reCAPTCHA if you do not want this information to be associated with your Google account.The above data is sent to Google in an encrypted form. Google’s evaluation decides in which form the Captcha is shown on the page. The use of reCAPTCHA is statistically evaluated. Google has claimed that your data will not be used for personalised advertising.The legal basis is the necessity to perform a contract or to take steps prior to entering into a contract according to Art. 6 para. 1 point b) GDPR, for instance in connection with registering a user account, using a contact form or subscribing to a newsletter. Google reCAPTCHA is used to protect IT security, ensure the stability of our website and prevent misuse.In some cases, the data may also be processed on servers in the USA. In the event that personal data is transferred to the USA or other third countries, this shall take place on the basis of Art. 49 para. 1 point b) GDPR for the performance of a contract or to take steps prior to entering into a contract.For more information in this regard, visit:
3.4 FUNCTIONAL TOOLS
We also use optional tools to enhance the user experience on our website and to provide you with more features (“functional tools”). Although they are not essential for the basic functions of the website, they can provide significant benefits to visitors, particularly in terms of user experience and additional communication, display or payment channels.The legal basis for the functional tools is your consent in accordance with Art. 6 para. 1 point a) GDPR. Access to and storage of information on the device is then based on the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 1 TTDSG in Germany. Refer to 3.2.3: “Withdrawal of your consent or change in your preferences” to withdraw your consent.In the event that personal data is transferred to the USA or other third countries, your consent explicitly extends to the transfer of data (Art. 49 para. 1 point a) GDPR). Please refer to section 6 (“Data transfer to third countries”) in regard to the associated risks.
3.5 ZENLOOP
We work with zenloop GmbH, Erich-Weinert-Straße 145, 10409 Berlin. zenloop is a business-to-business software-as-a-service platform that allows us to collect and analyse feedback from our customers through various channels. By doing so, we are able to tailor and improve our internet presence to the needs of our customers. In addition, zenloop collects your survey responses.The legal basis for data processing by zenloop is Art. 6 para. 1 point f) GDPR.We have entered into a data processing contract with zenloop in accordance with Art. 28 para. 3 GDPR and are satisfied that zenloop has implemented appropriate technical and organisational measures to ensure that the processing complies with the requirements of the GDPR and guarantees the protection of your rights.For more information in this regard, refer to the Privacy Policy at https://www.zenloop.com/en/legal/privacy. We use the personal data provided by you during the purchase – for instance the email address – to request that you use the evaluation system provided by us to rate your order. We do so to obtain customer and product evaluations from our customers and to carry out our own quality management.
3.6 ANALYTICS TOOLS
We use optional tools to collect statistics and analyse general usage behaviour based on access data (“analytics tools”) in order to improve our website. Moreover, we use analytics services to evaluate the use of our various marketing channels.The legal basis for the analytics tools is your consent in accordance with Art. 6 para. 1 point a) GDPR. Access to and storage of information on the device is then carried out on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 1 TTDSG in Germany. Refer to 3.2.3: “Withdrawal of your consent or change in your preferences” to withdraw your consent.In the event that personal data is transferred to the USA or other third countries, your consent explicitly extends to the transfer of data (Art. 49 para. 1 point a) GDPR). Please refer to section 6 (“Data transfer to third countries”) in regard to the associated risks.
3.6.1 GOOGLE ANALYTICS
Our website uses the Google Analytics service, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for persons from Europe, the Middle East and Africa (EMEA) and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (collectively “Google”) for all other persons.Google Analytics uses JavaScript and pixels to read information on your device and cookies to store information on your device. This information is used to analyse your usage behaviour and to improve our website. We will process the information obtained to evaluate your use of the website and to compile reports on website activities on behalf of the website operators. The data generated in this context may be transferred by Google to a server in the USA for analysis and stored there.We have made the following data protection settings for Google Analytics:
IP anonymisation (truncation of the IP address prior to evaluation);
automatic deletion of old logs by limiting the storage period to 26 months;
disabling of cross-device and cross-page tracking.
The following data is processed by Google Analytics:
IP address;
referrer URL (page last visited);
pages viewed (date, time, URL, title, length of stay);
downloaded files;
clicked links to other websites;
if applicable, achievement of certain goals (conversions);
technical information: operating system; browser type, version and language; device type, brand, model and resolution;
approximate location (country and city, if applicable, based on the anonymised IP address).
Google Analytics places the following cookies for the designated purpose and with the respective storage period:
„_ga“ (storage period: 2 years): Recognition and distinction of visitors by a user ID;
"_gid" (storage period: 24 hours): Recognition and distinction of visitors by a user ID;
„_gat_“ (storage time: 2 minutes): Reduction of requests to Google servers;
„_dc_gtm_UA-[GA-ID]“ (storage time: 1 minute): Reduction of requests to the Google servers;
“ (storage time: 13 months): Recognition and differentiation of visitors by a user ID, recording interaction with advertisements, playing out personalized advertisements.
We have entered into a data processing agreement with Google Ireland Limited for the use of Google Analytics. In the event that personal data is transferred from Google Ireland Limited to the USA, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) pursuant to Art. 46 para. 2 point c) GDPR.For more information in this regard, refer to the Google Privacy Policy at: https://support.google.com/analytics/answer/6004245.
3.6.2 SPOTEFFECTS AND MATOMO
This website uses the “Spoteffects” service by XAD spoteffects GmbH (Saarstr. 7, 80797 Mu-nich) to record the effectiveness of our TV advertising campaigns. To analyse interaction, Spoteffects uses the analytics tool Matomo (formerly Piwik), an open source analysis software for the statistical evaluation of visitor accesses.We have made the following data protection settings for Matomo:
IP anonymization (shortening of the IP address before evaluation so that no conclusions can be drawn about your identity);
Processing (especially geolocalization) and storage of your visit only with the help of the anonymized IP address;
Automatic deletion of old logs / limitation of storage time;
Accepting "Do Not Track" of the browser.
The following data may be stored in the user log together with a pseudonymised user ID:
anonymised IP address;
referrer URL (page last visited);
pages viewed (date, time, URL, title, length of stay);
downloaded files;
clicked links to other websites;
if applicable, achievement of specific goals (conversions);
technical information: operating system; browser type, version and language; device type, brand, model and resolution;
approximate location (country and city, if applicable, based on anonymised IP address).
The following cookies are placed for the specified purpose and with the respective storage period when using Matomo:
„_pk_id“ (storage period: 13 months): Storage of the user ID;
„_pk_ref” (storage period: 6 months): Storage through which websites the visitor came;
„_pk_ses“ (storage time: 30 minutes): short storage of usage data;
Refer to the Matomo Privacy Policy at: https://matomo.org/privacy/ for more information in this regard.
3.6.3 ADTRIBA
Our website uses the services of Adtriba GmbH (Veilchenweg 26b, 22529 Hamburg). Adtriba is an analysis and tracking tool that helps us draw conclusions about the success of our online marketing campaigns. We can use this information to evaluate our marketing campaigns and optimise them accordingly. To do this, Adtriba uses cookies (“analytics cookies”) to identify your touch points with our digital marketing campaigns. Your interactions with our advertising are measured additionally, for instance your clicks on our advertising banners.Moreover, your cookie ID, IP address (truncated to the last octet), technical information (browser type, operating system, device data), the marketing touchpoint (channel, source, campaign, time of interaction) and your visit to our website (page visited, referrer URL, interaction with the website and the time of your visit) are recorded as well.Refer to the Adtriba Privacy Policy for more information on data processing.
3.6.4 TRBO
Our website uses the service of trbo GmbH, Leopoldstr. 41, 80802 Munich (“Trbo”). Trbo is a tracking tool that helps us to design our website in the best possible way. By using Trbo, we can control and improve our online services by measuring the use of our online services and the effectiveness of our online advertising. This helps us to understand which pages and products interest our customers the most and which individual offers we should make to our website users in each case.From a technical perspective, the tracking tools include in particular “cookies” (“marketing cookies”) and “web beacons” to collect the following information: which pages are visited and when, how often and in which order, which products are searched for, which links or offers are clicked on and which orders are placed. The data collected from you and used in this context is stored in a pseudonymous form in all cases (e.g. a random identification number) and is not associated with personal data about you (e.g. name, address, etc.). Where the external service providers acquire access to the data, this takes place exclusively on our behalf and under our control.For more information about data protection at Trbo, click here.
3.6.5 LINKSTER
This website uses tracking technology by Linkster GmbH, Geschwister-Scholl-Straße 52, 20251 Hamburg, to measure and visualise insights into partnerships and advertising channels. This is a function to measure the efficiency of the corresponding advertising campaigns. Furthermore, the information enables us to allocate advertising successes to advertising partners for billing purposes. When you click on an integrated advert, cookies are placed in your browser and read in the event of a transaction. At each touch point, your browser sends an HTTP request to the Linkster server containing the transfer of certain information. This information includes the URL of the website on which advertising material is placed (referrer URL), the browser identifier (user agent) of your device (including information about the device type and operating system), the IP address of the device (this IP address is anonymised and hashed by us before storage), HTTP header (data package automatically transmitted by your browser containing various technical information), the time of the request and the cookie with its content if this has already been placed on your device. The tracking technology stores cookies on your device to document operations. A 24-digit, anonymous ID is stored in the cookie. The data is linked to this ID and stored in an encrypted form in our database on the server. It contains information about the last touch points (i.e. when a particular advertising medium was displayed or clicked on from a device). If necessary, the stored touch points can be put together to form a sequence chain (user journey). In the case of a request for action, the order number and the shopping basket value of your order are usually also transmitted and stored by us. In addition, the following values may be transmitted and stored: your customer number, new customer feature, your age and gender as well as the information you provided in a customer survey. The cookies stored by Linkster GmbH are deleted after 30 days at the latest. The information transferred to us and the cookies themselves are intended exclusively to ensure correct allocation of an advertising medium’s performance and the corresponding billing and is justified by our legitimate interests according to Art. 6 para. 1 sentence 1 point f) GDPR. Where you do not wish cookies to be placed on your device, you can deactivate this in our cookie banner and visit the “Cookie settings” at any time.You can also opt-out of the collection and processing of tracking data by clicking on this tracking opt-out link: trck.linkster.co/privacy-optout.do. You can view your data at: trck.linkster.co/privacy-mydata.do
3.6.6 TIKTOK
Our website uses the “TikTok Pixel” service, which is offered by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (jointly referred to in the following as “TikTok”).We use TikTok Pixel to understand and track visitor activity on our website. The Tiktok Pixel collects and processes information about the visitors to our website or the devices they use (“event data”). This event data is used for targeting our advertisements and improving their delivery as well as for personalised advertising. The data generated in this context may be transferred by TikTok to servers located in third countries for analysis and stored there.Some of this event data is information that is stored in the device you are using. In addition, the TikTok Pixel also uses cookies to store information on the device you are using. Any storage of information by the TikTok Pixel or access to information already stored on your device can only take place with your consent.The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 point a) GDPR. Access to and storage of information on the device is then carried out on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so § 25 para. 1 TTDSG in Germany. We have concluded suitable standard contractual clauses of the European Commission (Implementing Decision (EU) 2021/914) in accordance with Art. 46 para. 2 point c) for In the event that personal data is transferred to TikTok companies based in third countries.The collection and transfer of the event data is performed by us and TikTok as joint controllers. We have entered into a joint controller processing agreement with TikTok which sets out the allocation of data protection obligations between us and TikTok. In particular, we and TikTok have agreed therein
that we are responsible for providing you with all information in accordance with Art. 13, 14 GDPR on the joint processing of personal data;
that TikTok is responsible for enabling the rights of data subjects under Art. 15 to 20 GDPR with respect to personal data stored by TikTok after joint processing.
You can access the agreement concluded between us and TikTok at https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms.TikTok is the sole data controller for the subsequent processing of the submitted event data. For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and how you can exercise your rights against TikTok, refer to the TikTok Privacy Policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE.Marketing-Tools.We also use optional tools for advertising purposes (“marketing tools”). Some of the access data collected when using our website is used to create usage profiles, which store your usage behaviour, the advertisements you have viewed or clicked on and, based on this, the classification into advertising categories, interests and preferences in particular. By analysing and evaluating this access data, we are able to present you with personalised advertising, i.e. advertising that corresponds to your actual interests and needs, on our website and on the websites of other providers. For this purpose, we analyse your usage behaviour in order to recognise you on other sites and to address you in a personalised manner based on your use of our site (retargeting).The legal basis for the marketing tools is your consent in accordance with Art. 6 para. 1 point a) GDPR. Access to and storage of information on the device is then based on the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 1 TTDSG in Germany Refer to 3.2.3: “Withdrawal of your consent or change in your preferences” to withdraw your consent.In the event that personal data is transferred to the USA or other third countries, your consent explicitly extends to the transfer of data (Art. 49 para. 1 point a) GDPR). Please refer to section 6 (“Data transfer to third countries”) in regard to the associated risks.The following section contains a more detailed explanation of the tools and the providers used in this context. The data collected may include in particular:
the IP address of the machine;
the information of a cookie and in the local or session storage;
the device identifier of mobile devices (e.g. device ID, advertising ID);
referrer URL (previously visited page);
pages viewed (date, time, URL, title, length of stay);
downloaded files;
clicked links to other websites;
if applicable, achievement of specific goals (conversions);
technical information: operating system; browser type, version and language; device type, brand, model and resolution;
approximate location (country and city, if applicable).
The collected data is only stored pseudonymously, which means that no direct conclusions can be drawn about the persons.
3.6.7 META PIXEL
Our website uses the “Meta Pixel” service for marketing purposes, which is provided for persons outside the USA and Canada by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and for all other persons by Meta Platforms Inc, 1601 Willow Road, Menlo Park, California 94025, USA (jointly “Meta Platforms”).We use Meta Pixels to analyse the general use of our websites and to track the effectiveness of advertising (“conversion tracking”). In addition, we use Meta Pixels to show you personalised advertising messages on the social networks of Meta Platforms (such as Facebook and Instagram) based on your interest in our products (“retargeting”). This also involves target group remarketing by means of Custom Audience. The data generated in this context may be transferred for analysis by Meta Platforms to a server in the USA and stored there.Meta Platforms processes data for this purpose: The service collects the data using JavaScript, cookies and other technologies on our websites. This includes in particular:
HTTP header information such as information about the browser used (e.g. user agent, language);
information on events such as “page views”, other object properties and buttons clicked by visitors to the website;
online identifiers such as, but not limited to, IP addresses and, where provided, Facebook’s business-related identifiers or device IDs (such as mobile operating system ad IDs), as well as ad tracking disable/restriction status information.
The following cookies are set and read by Meta-Pixel for the specified purpose with the respective storage period:
„_fbc“ (storage period: 3 months): Usage analysis and retargeting;
„_fbp“ (storage period: 3 months): Usage analysis and retargeting;
The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 point a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so Section 25 para. 1 TTDSG in Germany. The transfer of your data to the USA and other third countries is based on your explicit consent in accordance with Art. 49 para. 1 point a) GDPR.Meta Platforms acts as our processor for matching, measurement and analytics services, in particular for analysing the use of our website, matching user ID and reporting on our advertising campaigns. We have therefore entered into a data processing agreement. In the event that personal data is transferred from Meta Platforms Ireland Limited to the USA for these purposes, Meta Platforms Ireland Limited and Meta Platforms Inc. have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) in accordance with Article 46 para. 2 point c) GDPR.In addition, we and Meta Platforms are joint controllers in the processing of event data for the targeting of advertisements (through the creation and selection of target groups), the delivery of commercial and transactional messages, the improvement of ad delivery and the personalisation of functions and content within the framework of the use of Meta Pixel. The mutual obligations in this regard have been set out in a joint contract, which can be accessed at the following address: https://www.facebook.com/legal/controller_addendum.In addition, Meta Platforms also processes the event data for the protection and security of Meta Platform products, for research and development purposes and for maintaining the integrity of and improving the products.If you are a member of Facebook or Instagram and have allowed Meta Platforms to do so in your account’s privacy settings, Facebook or Instagram may also associate the information collected about your visit to us to your member account and use it for targeted advertising. You can view and change the privacy settings of your Facebook profile at any time: https://www.facebook.com/settings/?tab=ads. You can prevent the association of data collected outside of Instagram for the display of personalised advertising in Instagram as follows: https://de-de.facebook.com/help/instagram/2885653514995517?locale=de_DE. If you have not consented to the use of Meta Pixels, Meta Platforms will only display generic advertisements that are not selected based on the information collected about you on this website.For further information, especially on our status as joint controllers and contact details, please refer to Meta Platforms Privacy Policy, in particular on the social networks Facebook and Instagram: https://www.facebook.com/about/privacy/.
3.6.8 GOOGLE ADS CONVERSION TRACKING AND ADS REMARKETING
Our websites use the “Google Ads" service, which is offered to persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and to all other persons by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (jointly “Google”).In Google Ads, we use “Google Ads Conversion Tracking” to record and analyse customer operations defined by us (such as clicking on an ad, page views, downloads). We use “Google Ads Remarketing” to show you individualised advertising messages for our products on Google partner websites. Both services use cookies, JavaScript Pixel and other technologies for this purpose. Google will also process the data to improve and further develop its own products and services, to perform aggregate statistical analysis of conversions, and to improve the quality and accuracy of conversions. Google can transfer the data generated during this process to a server in the USA for evaluation and storage.The following cookies are set by Google:
"_gcl_au" (storage period: 90 days): Conversion tracking, storage of ad clicks;
"_gcl_aw" (storage period: 90 days): Conversion tracking, storage of ad clicks;
" _gac_* (storage period: 90 days) Addition of the Google click identifier in the URL for conversion tracking (auto-tagging).
Legal basis for this data processing is your consent in accordance with Article 6 Paragraph 1 lit. a of the DSGVO. Access to and storage of information in the terminal device is then based on the implementation acts of the ePrivacy Directive of the EU member states, in Germany according to § 25 paragraph 1 TTDSG. Transfer of your data to the USA and other third countries is based on your express consent in accordance with Article 9 Paragraph 1 lit. a of the DSGVO.If you use a Google account, Google may associate your web and app browsing history with your Google account and use information from your Google account to personalise ads, depending on the settings stored in your Google account. You must log out of Google before accessing our website if you do not want this association with your Google account.If you have not consented to the use of Google Ads, Google will only display general advertising that has not been selected based on the information collected about you on this website. In addition to withdrawing your consent, you also have the option of deactivating personalised advertising in Google's advertising settings. Further information can be found:
3.6.9 SALESFORCE MARKETING CLOUD
We use the customer relationship management module “Salesforce Marketing Cloud” by Salesforce.com Inc., The Landmark @ One Market Street, Suite 300, San Francisco, California, CA 94105, USA (“Salesforce”) for marketing purposes (e.g. to forward our newsletters and information emails) and for analysis purposes when you visit our website. Salesforce is used to tailor our offerings and services to your interests and to improve our advertising and communications with you. Salesforce uses cookies or other unique identifiers (e.g. cookie IDs) to learn more about your usage patterns on our websites. You may disable this at any time in the cookie settings. Your contact details (e.g. name, address, email address, IP address) are transferred to the Salesforce Marketing Cloud for the purposes mentioned above. The Salesforce Marketing Cloud data is stored and processed on Salesforce servers in the USA. Salesforce undertakes with binding internal data protection rules in accordance with Art. 46 (2) b) and Art. 47 GDPR (so-called Binding Corporate Rules) to maintain an adequate level of data protection even when processing data outside the European Union. Salesforce has also implemented standard contractual clauses (SCCs) in a data processing agreement.For more information about the Salesforce Marketing Cloud and Service and the data processed, visit https://www.salesforce.com/es/company/privacy/.
3.6.10 UNBOUNCE
We use the services of Unbounce Marketing Solutions Inc, 400-401 West Georgia Street, Vancouver BC, Canada, V6B 5A1, (“Unbounce”), which provides “landing pages” for us to create for certain promotions. We use these promotional pages on our website to offer coupon codes, discounts or other benefits to prospective customers and customers and to provide an immediate redirect to our website.The campaign page is hosted by Unbounce and records your IP address, the referrer website, the browser, the user agent, the date and time of your visit, the device used and cookie data (refer also to Section 2.1 of this Privacy Policy). Unbounce uses cookies to measure the success of our promotion page. Your contact details will also be recorded by Unbounce if you complete a contact form on a campaign page.The legal basis for the aforementioned data processing is Art. 6 para. 1 points a), f) GDPR according to our legitimate interests. Our legitimate interest lies in marketing our products and measuring the success rate of our advertising campaigns.Refer to the Unbounce Privacy Policy for more information about data processing.
3.6.11 CRITEO
Our website also uses the remarketing technology by Criteo GmbH, Unterer Anger 3, 80331 Munich (“Criteo”). Criteo uses cookies (“marketing cookies”) and similar technologies and to collect exclusively anonymous data on the usage behaviour of website visitors for marketing purposes.Criteo is therefore able to analyse usage behaviour and on this basis to display targeted product recommendations as suitable advertising banners when other websites are visited. Under no circumstances can the anonymised data be used to personally identify visitors to the website.The data collected by Criteo is used only to improve the offer of advertising. Each banner displayed contains a small “i” (for information) in the bottom right-hand corner, which opens on mouseover and redirects to a page explaining the system when clicked.Refer to the Criteo Privacy Policy for more information in this regard and to object to the anonymous analysis of your usage behaviour if applicable.
3.6.12 A&S MAIL
This website uses technology from a+s Online GmbH, Stuttgarter Straße 41, 71254 Ditzingen, Germany. a+s Online GmbH uses cookies. a+s Online GmbH is an internet advertising service that allows advertisers to target users with advertising through email marketing. a+s Online GmbH is tasked with promoting our website by sending relevant advertising in emails.The legal basis for processing of the user’s data is Art. 6 para. 1 point f) GDPR. Data processing is carried out in each case to preserve our legitimate interests in the optimisation and efficient operation of our website. The data is erased or its processing is restricted or blocked as soon as it is no longer required to achieve the purpose for which it was collected, the data subject has objected to this processing or after 60 days.Refer to the a+s Online GmbH website at as-dialoggroup.de. for more information. Visit track.performancehub.de/opt-out if you wish to object to the use of “PerformanceHub conversion tracking” with effect for the future (“opt out”).
3.6.13 TYPEFORM
This website uses the services of Typeform S.L., Carrer Bac de Roda, 163, 08018 Barcelona (“Typeform”). Typeform is a tool for creating and conducting user surveys that helps us to improve our offerings and service based on your feedback.We use Typeform to include user surveys (e.g. cancellation survey, how do you know LILLYDOO survey) on our website, which respondents complete voluntarily. Typeform processes and stores personal data (e.g. customer number) and survey results when conducting surveys. We have concluded a data processing agreement with Typeform, in which Typeform undertakes to protect the data of our customers, to refrain from its transfer to third parties and, in the event of a transfer of personal data via subcontracted processors or affiliated companies to the USA, to comply with the regulations of the standard contractual clauses in accordance with Art. 46 GDPR.The legal basis for data processing is our legitimate interest in the technically flawless and optimised delivery of our service in accordance with Art. 6 para. 1 point f) GDPR. Refer to the Typeform Privacy Policy for more information about data processing by Typeform.
3.6.14 SESSIONLY
Our website uses the sessionly service, Renata Bognar, Prenzlauer Allee 186, 10405 Berlin (“sessionly”). Sessionly is a rating tool that helps us to conduct surveys with our customers so that we can learn more about how satisfied they are with our products. After your order process, sessionly sets a cookie (“marketing cookies”) to record the products you have purchased and your email address. We then receive this information from sessionly so that we can then send you an email soliciting a product review (refer also to the Newsletter and Promotional Mailings section). This email gives you the opportunity to share your experience with us about our products via sessionly. For more information about sessionly, click here.
3.6.15 JENTIS
We use the services of JENTIS GmbH, Schönbrunner Straße 231, 1120 Vienna ("JENTIS") to analyse the user behaviour of website visitors and to optimise the website. For these purposes, JENTIS receives access to web analysis data, which is measured, stored and processed by the analysis tools in use and JENTIS itself.For analysis purposes, data is transmitted to JENTIS on the one hand, and on the other hand JENTIS independently collects data on our behalf relating to the browser environment or the behaviour of the visitor. JENTIS only processes data that cannot be traced back to a person by JENTIS. The synthetically generated client ID set by JENTIS is used for pseudonymisation, so that no allocation to a person can take place via the usage behaviour of website visitors to third parties. Before storage, your IP address is either shortened in such a way that the reference to a person no longer exists or, after comparison of a geo-database, completely removed and replaced by an artificial value.The legal basis for the server-side transmission of the browser data synthetically generated by the JENTIS server, such as the client ID without IP address, to third-party servers, i.e. the pseudonymous analysis of user behaviour, is Art. 6 para. 1 lit. f DSGVO. For technical reasons, for the purposes of IT security and to fulfil user interests as well as for the economic operation of our online offer, this is absolutely necessary in the sense of § 25 para. 2 no. 2 TTDSG.You can find more information on data processing by Jentis at: https://www.jentis.com/en/privacy-policy/.
3.7 SOCIAL MEDIA PLUGINS AND EXTERNAL MEDIA
We also use social network tools that are used to log in to the website with an existing account or to share posts and content via these networks (“social media plugins”), as well as other external media, such as embedded videos or maps.Unless otherwise stated, the legal basis for this is your consent pursuant to Art. 6 para. 1 sentence 1 point a) GDPR, which is provided by you in the consent banner or in the specific tool by specifically allowing its use via an overlay. In these cases, access to and storage of information on the device is subject to consent and takes place on the basis of the implementation laws of the ePrivacy Directive of the EU Member States, so Section § 25 para. 1 TTDSG in Germany.Refer to 3.2.3: “Withdrawal of your consent or change in your preferences” to withdraw your consent. In the event that personal data is transferred to the USA or other third countries, your consent explicitly extends to the transfer of data (Art. 49 para. 1 sentence 1 point a GDPR). Please refer to section 6 (“Data transfer to third countries”) in regard to the associated risks.
3.7.1 FACEBOOK PLUGINS
Our website uses social media plugins (such as the Like button) by the social network Facebook, which is offered by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland for users outside the USA and Canada and by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA (jointly “Facebook”) for all other users.For data protection reasons, no personal data is initially transferred to the social network when you visit our website. The plugin will not be activated until you provide consent, which will enable a direct contact between your browser and the social network. This prevents data from being transferred to the network and stored there without your knowledge. Your data will be processed as follows once you have given your consent:Facebook receives information that you have accessed the corresponding subpage of our online presence. This takes place regardless of whether you have an account with Facebook and are logged in there. If you are logged in to Facebook, this data is directly associated with your account. If you activate the plug-in and, for example, link to the page, Facebook also saves this information – including the date and time ¬– in your user account and shares this publicly with your contacts. You must log out prior to activating the plugin if you do not want this association with your Facebook profile.Facebook stores this data as user profiles, which it uses them for the purposes of advertising, market research and/or needs-based design of its website. Evaluations of this kind are performed in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website.The data generated in this context may be transferred by Facebook to a server in the USA and stored there.In addition to withdrawing consent, you may also deactivate advertising based on social operations in the advertising preferences if you are a Facebook member.Refer to the Facebook Privacy Policy for more information in this regard.
3.7.2 YOUTUBE VIDEOS
We have embedded videos on our website that are stored on YouTube and can be played from our websites if you have consented. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”), which is offered to persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and to all other persons by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (jointly “Google”).We have activated YouTube’s privacy-enhanced mode. This means that Google receives less usage information and also does not personalise the video recommendations and advertisements. However, information is stored in the local storage and session storage of your device, in particular your device ID and other information regarding the playback of the video, which can be retrieved by Google.The following cookies may be set by YouTube:
“PREF” (storage period: 8 months): Storage of settings such as autoplay and video size.
The following information is stored in the local storage:
"yt-remote-device-id" (storage period: 1 year): Stores user preferences when retrieving a YouTube video;
"yt-player-headers-readable" (storage period: 1 month): Used to determine optimal video quality based on the visitor's device and network settings;
"yt.innertube::requests" (storage time: 1 day): Registers a unique ID to keep statistics of the videos from YouTube that the user has watched.
"yt.innertube::nextId" (storage duration: 1 day): Registers a unique ID to keep statistics of the videos from YouTube that the user has watched.
"yt-remote-connected-devices" (storage time: 1 day): Stores the user settings when retrieving a YouTube video.
"yt-player-bandwidth" (storage duration: 1 month): Used to determine the optimal video quality based on the visitor's device and network settings.
The following information is stored in the session storage:
"yt-remote-session-app" (storage duration: session): Saves the user settings when retrieving a YouTube video;
“yt-remote-cast-installed” (storage duration: session): Stores the user settings when retrieving a YouTube video integrated on other web pages;
“yt-remote-session-name” (Storage duration: Session): Stores the user's input when retrieving a YouTube video;
“yt-remote-cast-available” (storage duration: session): Stores the user's input when retrieving a YouTube video embedded on other web pages;
“yt-remote-fast-check-period” (storage duration: session): Stores the user settings when retrieving a YouTube video.
By visiting our website, YouTube and Google receive the information that you have accessed the corresponding subpage of our website. This takes place regardless of whether or not you are logged in to YouTube or Google. YouTube and Google use this data for the purposes of advertising, market research and the needs-based design of their websites. If you access YouTube on our website while you are logged into your YouTube or Google profile, YouTube and Google can also associate this event with the respective profiles. You must log out of Google before accessing our website if you do not want this information to be associated.In addition to withdrawing your consent, you may also deactivate personalised advertising in Google's advertising settings. In this case, Google will only display non-personalised advertising.Refer to Google’s Privacy Policy for more information, which also applies to YouTube.
3.7.3 GOOGLE MAPS
Our website uses the map service Google Maps, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for persons from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (jointly “Google”) for all other persons.In order for the Google map material we use to be integrated and displayed in your web browser, your web browser must establish a connection to a Google server – which may also be located in the USA – when you access our website.By integrating the map material, Google receives the information that a page of our website was accessed from the IP address of your device. If you access the Google map service on our website while you are logged into your Google profile, Google can also associate this event with your Google profile. You must log out of Google before accessing our contact page if you do not want the information to be associated with your Google profile. Google stores your data and uses it for purposes of advertising, market research and personalised presentation of Google Maps.Refer to the Google Privacy Policy and the the Additional Terms of Use for Google Maps for more information.