Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. A failure to provide it has no consequences. This only applies as long as no other information is provided in the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any personal information.

Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, date and time of the retrieval, the IP address, the amount of data transferred, and the requesting provider. The processing is based on Art. 6 para. 1 lit. f GDPR from our predominant legitimate interest in ensuring the uninterrupted operation of our website as well as improving our offerings.

Your data will be transmitted, among other things, to Canada. There is an adequacy decision of the EU[1] Commission for data transfers to Canada.

Hosting and shop system (Shopify)

Our website is operated by the service provider Shopify Inc., 151 O’Connor Street, Ottawa, ON K2P 2L8, Canada. For visitors from the European Economic Area, Shopify International Ltd., Dublin, Ireland, is responsible.

Shopify provides the technical infrastructure, the shop system, the Content Delivery Network (CDN), and data processing for orders. As part of the hosting, data may be transferred to the USA.

Legal bases:

  • Art. 6 para. 1 lit. b GDPR (Contract/Order)

  • Art. 6 para. 1 lit. f GDPR (legitimate interest in secure technical provision)

  • Art. 6 para. 1 lit. a GDPR (Consent, if tracking or US data transfer is required)

Shopify uses standard contractual clauses (SCC) to secure data transfer outside the EU.

Collection and processing of personal data when visiting the website

When accessing our website, technical information is automatically collected, including:

  • IP address

  • Browser type and version

  • Operating system

  • Date and time of access

  • Visited pages

  • Referrer URL

This data is technically necessary to display the website and ensure system security.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in technical functionality).

Contact

Responsible

Contact us upon request. The responsible party for data processing is:

XO Dimension, Julius Nörthemann, Im Siebigsfeld 3, 37115 Duderstadt, Germany, 015150854106, support@xo-dimension.de

Initiative contact by the customer via email

If you initiate contact with us via email, we collect your personal data (name, email address, message text) only to the extent you provide. The data processing serves to process and respond to your contact request.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation in case of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.

If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

We use your email address only to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide. The data processing serves the purpose of contacting you. If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation in case of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.

If contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

We use your email address only to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.

Customer account Orders

Customer account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

Collection, processing, and transfer of personal data in orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order as well as to handle your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.

Your data will be shared, for example, with the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of data transmission is limited to a minimum.

Your data will be transmitted, among other things, to Canada. There is an adequacy decision from the EU Commission for data transfers to Canada.

Reviews Advertising

Use of your personal data for sending postal advertising
We use your personal data (name, address), which we have received in the context of the sale of a product or service, to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded.
The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct marketing. You can object to this use of your address data at any time by notifying us. You can find the contact details for exercising the objection in the imprint.

Use of the email address for sending newsletters
We use your email address exclusively for our own advertising purposes for sending newsletters, regardless of the contract processing, provided you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of the email address for sending direct advertising
We use your email address, which we received in the context of the sale of a product or service, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising the objection in the imprint. You can also use the designated link in the advertising email for this purpose. No costs other than the transmission costs according to the basic rates will be incurred.

Use of Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") for sending newsletters as part of a data processing agreement.
We pass on the information you provided during the newsletter registration (email address, possibly first and last name) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
To evaluate newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as, for example, IP address, browser type and device, as well as the time. Usage profiles can be created from this data under a pseudonym. The collected data will not be used to personally identify you. The collected data will only be used for statistical evaluation to improve newsletter campaigns.
Your data is usually transmitted to servers of Klaviyo in the USA and stored there. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, available at: 

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de  (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).

The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object at any time to the processing of your personal data concerning you for reasons arising from your particular situation.
Further information on data protection at Klaviyo can be found at

https://www.klaviyo.com/legal/privacy-notice (https://www.klaviyo.com/legal/privacy-notice)  as well as under https://www.klaviyo.com/legal/data-processing-agreement (https://www.klaviyo.com/legal/data-processing-agreement).

Use of your personal data for sending postal advertising

We use your personal data (name, address) that we have received in the context of the sale of a product or service to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.

Shipping service provider inventory management

Transfer of the email address to shipping companies to inform about the shipping status

We will pass your email address to the shipping company as part of the contract processing, provided you have expressly consented to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

Payment service provider

Use of PayPal Express

We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g. IP[1]address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.

The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our predominant legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. For more information on data processing when using the payment service PayPal Express, please refer to the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.  

Use of PayPal Check-Out

We use the payment service PayPal Check-Out from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies if necessary. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical procedures, which take into account, among other things, address data. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of credit assessment for contract initiation. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our predominant legitimate interest in protection against payment default when PayPal makes an advance payment.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of data is necessary for the conclusion of the contract with the payment method you desire. Failure to provide data will result in the contract not being able to be concluded with the payment method you have chosen.

Third-party providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 para. 1 lit. b GDPR. To carry out this payment method, the data may then be forwarded by PayPal to the respective provider. This processing is based on Art. 6 para. 1 lit. b GDPR. Local third-party providers may include:

- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)

- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main

Invoice purchase via PayPal

When paying via the payment method invoice purchase, the data required for payment processing is initially transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Ratepay advances payment. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. For more information on data processing when using PayPal, please refer to the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.  

Supplement to data processing for payment via Apple Pay and credit card

Payment processing via Apple Pay and credit card

If you choose to pay via Apple Pay or via credit card (e.g., Visa, Mastercard, Amex), payment processing is carried out through external payment service providers. Personal data necessary for payment processing will be transmitted to the respective payment service provider.

For Apple Pay (provider: Apple Inc., One Apple Park Way, Cupertino, California, USA), payment processing takes place directly through your Apple device. Apple may process information about the transaction, the payment method used, and your device. For more information on data processing by Apple, please visit: https://support.apple.com/de-de/HT203027

For credit card payments, processing usually takes place through a payment service provider acting as the controller or processor. The following data may be processed:

  • Name of the cardholder / credit card number / expiration date and security code (CVC) / billing address / transaction data (amount, time, payment status)

The processing is carried out for the fulfillment of the contract in accordance with Art. 6 para. 1 lit. b GDPR and, if applicable, on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR (e.g., for fraud prevention).

Data processing is also subject to the data protection regulations of the respective payment service provider. The payment processing takes place via Shopify Payments.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the unique identification of the browser when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and the transmission of the data contained. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may not be able to use all functions of this website to their full extent.

Under the following links, you can find out how to manage (including disabling) cookies in the most important browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.

The use of cookies or similar technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offerings. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

Cookies and consent management (Cookiebot)

We use the consent management tool Cookiebot from Cybot A/S to obtain legally compliant consents for cookies and tracking services.

Upon your first visit to our website, a cookie banner will appear, allowing you to select which cookies you would like to allow.

Without consent, no non-essential cookies will be set.

Legal basis: Art. 6 para. 1 lit. a GDPR.

Advertising tracking

Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website usage and internet usage to the website operator.
This may include, among other things, the following information: IP address, date and time of page view, click path, information about the browser you are using and the device you are using, visited pages, referrer URL (the website from which you accessed our website), location data, purchase activities. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data from Google.
Google uses technologies such as cookies, browser web storage, and counting pixels that enable an analysis of your use of the website.
The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks). Both Google and US government authorities have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and all other data that Google has about you.
When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in anonymized form. The IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
The use of cookies or similar technologies is carried out with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information on terms of use and privacy, please visit https://policies.google.com/technologies/partner-sites (https://policies.google.com/technologies/partner-sites) and  at https://policies.google.com/privacy?hl=de&gl=de (https://policies.google.com/privacy?hl=de&gl=de).  

Use of Google Ads Conversion Tracking
We use the online advertising program "Google Ads" on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad served by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain personal data, and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility for cookies to be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to create conversion statistics. In this process, we learn the total number of users who clicked on one of our ads and were redirected to a page marked with a conversion tracking tag. However, we do not receive any information that would allow us to personally identify users.
Your data may be transmitted to the servers of Google LLC in the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks) and https://business.safety.google/adscontrollerterms/ (https://business.safety.google/adscontrollerterms/). 

The use of cookies or similar technologies is carried out with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
Further information as well as Google's privacy policy can be found at: https://www.google.de/policies/privacy/ (https://www.google.de/policies/privacy/)  

Plug-ins and Others

Use of the Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags that are used for the implementation of tracking and analysis tools in particular. The data processing serves the purpose of demand-oriented design and optimization of our website.
The Google Tag Manager itself does not store cookies nor does it process personal data. However, it enables the triggering of additional tags that can collect and process personal data.
For more information on terms of use and data protection, please visit here (https://www.google.com/intl/de/tagmanager/use-policy.html)

TikTok Pixel

On our website, the TikTok Pixel of the provider TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok") is used. This is a JavaScript code snippet that allows us to track user activities on our website and display targeted advertising through TikTok.

The TikTok Pixel can collect and process the following data:

  • IP address / device information (e.g., device type, operating system) / browser information / visited pages and interactions on our website / referrer URL

The processing of this data is based on your consent according to Art. 6 para. 1 lit. a GDPR, provided that it was requested via our cookie banner.

Further information on data processing by TikTok can be found in TikTok's privacy policy at: https://www.tiktok.com/legal/privacy-policy-eea?lang=de

Pinterest Tag

On our website, the Pinterest Tag of the provider Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") is used. This is a tracking pixel or JavaScript code that allows us to track user behavior on our website, measure conversions, and display targeted advertising through Pinterest.

The Pinterest tag can collect and process the following data in particular:

  • IP address

  • Device information (e.g., device type, operating system, screen resolution)

  • Browser information

  • Referrer URL

  • visited pages and interactions on our website

  • pseudonymous Pinterest user IDs, provided you are logged into Pinterest

The processing is carried out exclusively on the basis of your consent in accordance with Art. 6 Abs. 1 lit. a DSGVO, provided this was granted via our cookie banner. Without your consent, the Pinterest tag will not be activated.

Further information on data processing by Pinterest can be found in the Pinterest privacy policy at: https://policy.pinterest.com/de/privacy-policy

Use of social plug-ins
We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place serves the purpose of optimizing advertising for our products.
When integrating social plug-ins, a connection is established between your computer and the servers of the providers of the social network, and the plug-in is displayed on the page by notifying your browser, provided you have explicitly consented to this. In this process, both your IP address and the information about which of our pages you have visited are transmitted to the provider's servers. This applies regardless of whether you are registered or logged into the social network. Even for users who are not registered or logged in, transmission takes place. If you are simultaneously connected to one or more of your social network accounts, the collected information can also be assigned to your corresponding profiles. When using the plug-in functions (e.g., by clicking the button), this information is also associated with your user account. You can prevent this association by logging out of your social media accounts before visiting our website and before activating the buttons.
The use of cookies or similar technologies is carried out with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
The social networks named below are integrated into our website via social plug-ins. More information on the scope and purpose of the collection and use of data, as well as your rights and options for protecting your privacy, can be found in the linked privacy notices of the providers.

Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transfer of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland regarding the joint processing of personal data, which defines the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum (https://www.facebook.com/legal/controller_addendum) . Thereafter, we are particularly responsible for fulfilling the information obligations according to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, as well as for complying with the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data concerns our obligations under the agreement on joint processing. Meta Platforms Ireland is responsible for enabling the rights of the data subjects according to Art. 15 - 20 GDPR, for complying with the security requirements of Art. 32 GDPR regarding the security of the service, and for the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data concerns the obligations of Meta Platforms Ireland under the agreement on joint processing.
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum (https://www.facebook.com/legal/EU_data_transfer_addendum). Further information on the collection and use of data by Facebook, your related rights, and options for protecting your privacy can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/ (https://www.facebook.com/about/privacy/).  



Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): https://help.instagram.com/155833707900388 (https://help.instagram.com/155833707900388)  

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de). 

LinkedIn of the LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA) https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy (https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy)  

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA.

Pinterest of Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://policy.pinterest.com/de/privacy-policy (https://policy.pinterest.com/de/privacy-policy)
Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA.

Use of social plug-ins via "Shariff"
We use social network plug-ins on our website. To keep control over your data, we use the privacy-safe "Shariff" buttons.
Without your explicit consent, no connections to the servers of the social networks will be established, and consequently, no data will be transmitted.
"Shariff" is a development by the specialists of the computer magazine c't. It enables more privacy on the web and replaces the usual "Share" buttons of social networks. More information about the Shariff project can be found here l (https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html). 

When you click the buttons, a popup window appears where you can log in with your data at the respective provider. Only after this active login by you is a direct connection to the social networks established.
By logging in, you consent to the transfer of your data to the respective social media provider. This includes, among other things, both your IP address and the information about which of our pages you have visited. If you are simultaneously connected to one or more of your social network accounts, the collected information will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
Further information on the scope and purpose of the collection and use of data, as well as your related rights and options for protecting your privacy, can be found in the linked privacy notices of the providers.

Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388 (https://help.instagram.com/155833707900388).
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).
LinkedIn of the LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA)
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy (https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy)
Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA.

Pinterest of Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://policy.pinterest.com/de/privacy-policy (https://policy.pinterest.com/de/privacy-policy)
Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA.


Use of Google reCAPTCHA  
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The query serves the purpose of distinguishing input by a human or by automated, machine processing. To this end, your input is transmitted to Google and used there. Additionally, the IP address and any other data required by Google for the reCAPTCHA service may be transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).
The use of cookies or similar technologies is carried out with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information about Google reCAPTCHA and the associated privacy policy, please visit: https://www.google.com/recaptcha/intro/android.html (https://www.google.com/recaptcha/intro/android.html) and https://www.google.com/privacy (https://www.google.com/privacy).
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This serves the purpose of distinguishing input by a human or by automated, machine processing. In the background, Google collects and analyzes usage data, which is used by Invisible reCaptcha to differentiate regular users from bots. For this, your input is transmitted to Google and further used there. Additionally, the IP address and any other data required by Google for the Invisible reCAPTCHA service is transmitted to Google.
This data is processed by Google within the European Union and, if applicable, also in the USA. There is no adequacy decision from the EU Commission for the USA. Data transfer is carried out, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).
The use of cookies or similar technologies is carried out with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information about Google reCAPTCHA and the associated privacy policy, please visit: https://www.google.com/recaptcha/intro/android.html (https://www.google.com/recaptcha/intro/android.html) and https://www.google.com/privacy (https://www.google.com/privacy)

Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The data processing serves the purpose of uniform presentation of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this process. This includes processing your IP address and information about the browser you are using, which is transmitted to Google. This data is not linked to your Google account.

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.

The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a user-friendly and aesthetically pleasing design of our website. You have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons relating to your particular situation by notifying us.

Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ as well as under https://developers.google.com/fonts/faq.

Shipping to the USA / Disclosure to US authorities

For shipments to the USA, we are legally required to transmit certain data to US customs and security authorities, including:

  • Contents of the shipment

  • Description of goods

  • Customs tariff number

  • [1]

  • Recipient's name and address

  • if applicable, countries of origin of the products

This data is processed by DHL and the US customs authorities within the framework of legal requirements.

Rights of the affected person and duration of storage

Duration of storage

After the complete fulfillment of the contract, the data will initially be stored for the duration of the warranty period, and thereafter in consideration of legal, particularly tax and commercial law retention periods, and will then be deleted after the expiration of the period, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right to access, to rectification, to erasure, to restriction of processing, to data portability. Furthermore, you have a right to object under Art. 21 para. 1 GDPR against processing based on Art. 6 para. 1 f GDPR, as well as against processing for the purposes of direct advertising.

Right to complain to the supervisory authority

You have the right under Art. 77 GDPR to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can file a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection Lower Saxony

Prinzenstraße 5

30159 Hannover

Tel.: +49 511 1204500 Fax: +49 511 1204599

E-Mail: poststelle@lfd.niedersachsen.de

Right to object

If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to these processing activities at any time with effect for the future for reasons arising from your particular situation.

After an objection has been made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If the processing of personal data is carried out for the purposes of direct advertising, you can object to this processing at any time by notifying us. After an objection has been made, we will cease processing the affected data for the purposes of direct advertising.

 

last updated: 03.11.2025