Privacy Policy

Data protection

I. General Information and Contact Details

Welcome to our website! 

Data protection is not only a legal necessity for us but a matter of course. With the following information, we would like to inform you in accordance with legal requirements about what happens to your personal data when you visit our website. Personal data includes all data that can be attributed to you as an identified or identifiable person. 

Responsible for the processing of personal data in connection with your visit to these websites is:

Thomas GmbH + Co. Sitz- und Liegemöbel KG
Walkmühlenstraße 93
27432 Bremervörde
Germany
Phone: +49 (0)4761 97 90
Email: info@lattoflex.com
You can reach our company data protection officer using the contact details above with the additional note "The Data Protection Officer" or by email at datenschutz@thomas.de. 

II. Processing of Your Data 

When you use our website, various personal data are processed: 

1. Provision of the Website and Creation of Logfiles 

Every time you visit our website, our system automatically collects data and information from the accessing computer: 

• Information about the browser type and version used 
• The user's operating system 
• The HTTP response code 
• The amount of data transferred 
• The user's IP address Date and time of access 
• Websites from which the user's system accesses our website 
• Websites accessed by the user's system through our website 

The temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. Furthermore, the data serves us to optimize these internet offerings and to ensure the security of our information technology. An evaluation of the data for marketing purposes does not take place in this context. The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. For the collection of data for the provision of the website, this is the case when the respective session is ended. In the case of storage of data in log files, this is the case after at most fourteen days. Further storage is possible. In this case, the users' IP addresses are deleted or anonymized, so that an assignment of the calling client is no longer possible. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR, with our legitimate interest being the proper provision of the functions of this website, the evaluation of access information with the aim of eliminating and avoiding technical malfunctions, as well as the avoidance and tracking of security incidents.
Partly, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly checked. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer. 

2. Cookies 

This website uses cookies and similar technologies. Cookies are small text files that are stored by the internet browser on the user's end device. A cookie usually contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Cookies are used to make the website more user-friendly, to optimize the functions and services of the website, and to provide you with content tailored to your needs.
The purpose of using technically necessary cookies is to enable and simplify the use of the website. Some functions of this website cannot be offered without the use of cookies. The user data collected by technically necessary cookies is not used to create user profiles. Furthermore, with your separate consent, cookies may be used for the provision of external media such as films and maps, as well as for the analysis of website usage. The data of the users collected in this way is pseudonymized by technical measures. Therefore, an assignment of the data to the calling user is no longer possible. The data is not merged with other personal data of the users.
You can deactivate or restrict the use of cookies by changing the settings in your internet browser. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, not all functions of the website may be fully usable. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR, with the legitimate interest of the data controller being the secure, stable, and efficient provision of the functions of the website and the information available thereon. If the data controller fulfills an existing contractual obligation towards you with the respective function, for example, the contractual provision of a digital service, the legal basis is Art. 6 para. 1 lit. b GDPR. If we use cookies for the provision of functions or for other purposes that are not technically necessary, the legal basis for the processing of personal data in connection with these cookies is Art. 6 para. 1 lit. a GDPR in conjunction with your consent. If we use cookies to fulfill our legal obligations, for example, to manage your consents, the legal basis for the processing of personal data carried out in this respect is Art. 6 para. 1 lit. c GDPR in conjunction with § 25 TTDSG. 

3. Plugins and Tools 

etracker 

The provider of this website uses services of etracker GmbH from Hamburg, Germany (www.etracker.com) for the analysis of usage data. We do not use cookies by default for web analysis. If we use analysis and optimization cookies, we obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used that enable a statistical analysis of the use of this website, measuring the success of our online marketing activities, and testing procedures, for example, testing and optimizing different versions of our online offerings or their components. Cookies are small text files that are stored by the internet browser on the user's end device. etracker cookies do not contain information that allows identification of a user.
The data generated by etracker on behalf of the provider of this website is processed and stored exclusively in Germany by etracker and is thus subject to strict German and European data protection laws and standards. etracker has been independently audited, certified, and awarded the ePrivacyseal data protection seal for this purpose.
Data processing is based on the legal provisions of Art. 6 para. 1 lit. f (legitimate interest) of the General Data Protection Regulation (GDPR). Our interest within the meaning of the GDPR (legitimate interest) is the optimization of our online offering and our web presence. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login, or device identifiers, is anonymized or pseudonymized at the earliest opportunity. Other use, merging with other data, or disclosure to third parties does not occur.
You can object to the aforementioned data processing at any time. The objection has no adverse consequences. 

HubSpot 

If you contact us via contact form or email, your details from the inquiry form or your email, including the contact details you provided there, will be used to process your inquiry. Providing the data is necessary for processing and responding to your inquiry - without it, we cannot or only partially respond to your inquiry. The data may be stored in our Customer Relationship Management System (CRM) HubSpot. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request aims to conclude a contract. Your data will be deleted as soon as your inquiry has been answered conclusively and there are no statutory retention obligations, such as in the case of any subsequent contract processing. You can object to the processing of your personal data at any time with effect for the future in the case of Art. 6 para. 1 lit. f GDPR. If we have obtained your consent, the legal basis for processing is Art. 6 para. 1 lit. a GDPR.
We use HubSpot for marketing and support activities on our website. When using the contact form, the data transmitted by you is collected by the external provider HubSpot and is subject to its privacy policy. HubSpot is a software company based in the USA with an office in Germany. Contact: HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Telephone: 0049 (0)30 56796549. HubSpot is an integrated software solution that covers various aspects of our online marketing. These include, among others: email marketing, social media publishing & reporting, reporting, contact management (e.g., user segmentation & CRM), landing pages, and contact forms.
As part of the processing via HubSpot, data may be transmitted to the USA. The security of the transmission is ensured, unless an adequacy decision of the European Commission justifies the transmission, via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security equivalent to that of the GDPR. You can find the text of the incorporated provisions at: https://legal.hubspot.com/dpa
For more information on HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy
More information from HubSpot regarding EU data protection regulations: https://legal.hubspot.com/security
For more information on the cookies used by HubSpot, please see: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser and https://knowledge.hubspot.com/privacy-and-consent/hubspot-cookie-security-and-privacy 

Google Tag Manager 

This website uses Google Tag Manager. This service enables us to manage website tags via an interface. This Google tool only sets tags. This means that no cookies are used and no personal data is regularly collected. However, other tags may be triggered, which may in turn collect data. The Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it remains in effect for all tracking tags implemented via Google Tag Manager. 

Privacy Policy on the Use of AddThis 

The data controller has integrated components of the company AddThis on this website. AddThis is a so-called bookmarking provider. The service enables simplified bookmarking of websites via buttons. By hovering over the AddThis component with the mouse or clicking on it, a list of bookmarking and sharing services is displayed. AddThis is used on over 15 million websites, and according to the operator's information, the buttons are displayed over 20 billion times annually.
The operator of AddThis is Oracle Corporation, 10 Van de Graaff Drive, Burlington, MA 01803, USA.
Each time one of the individual pages of this website, which is operated by the data controller and on which an AddThis component has been integrated, is called up, the internet browser on the information technology system of the data subject is automatically prompted by the respective AddThis component to download data from the website www.addthis.com. As part of this technical process, AddThis gains knowledge of the visit and which specific individual page of this website is used by the data subject's information technology system. AddThis uses this data to create anonymized user profiles. The data and information transmitted to AddThis in this way enable AddThis itself, as well as affiliated companies or partner companies, to target visitors to the data controller's websites with personalized and interest-based advertising. AddThis displays personalized and interest-based advertising based on a cookie set by the company. This cookie analyzes the individual surfing behavior of the data subject's information technology system. The cookie stores visits to websites made by the computer system. The data subject can prevent the setting of cookies by our website at any time, as described above, by means of an appropriate setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent AddThis from setting a cookie on the information technology system of the data subject. In addition, cookies already set by AddThis can be deleted at any time via an internet browser or other software programs.
The data subject also has the possibility to permanently object to the processing of personal data by AddThis. To do this, the data subject must press the opt-out button under the link http://www.addthis.com/privacy/opt-out, which sets an opt-out cookie. The opt-out cookie set with the objection is stored on the information technology system used by the data subject.
If the cookies are deleted on the system of the data subject after an objection, the data subject must call up the link again and set a new opt-out cookie. However, setting the opt-out cookie may result in the data controller's websites not being fully usable for the data subject.
The applicable data protection provisions of AddThis can be accessed at http://www.addthis.com/privacy/privacy-policy.

Google AdSense 

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analysed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC. in the USA.
Google uses the information obtained in this way to evaluate your usage behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google. The described processing of data is carried out in accordance with Art. 6 para. 1 lit. f GDPR for the purpose of targeted advertising to the user by advertising third parties whose advertisements are displayed on this website on the basis of the evaluated user behaviour. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalised third-party advertising content for a fee. You can find more information about Google's privacy policy at the following Internet address: https://policies.google.com/privacy
You can permanently deactivate cookies for ad preferences by preventing them by setting your browser software accordingly or you can download and install the browser plug-in available at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?visit_id=638479052590407736-2532775430&rd=1
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies. Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please follow the option described above for making an objection. 

Google Conversion Tracking 

This website uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers with the help of advertising material (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. Our aim is to show you adverts that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an Ads advert placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?visit_id=638479090982262333-1527814639&rd=1 
In order to target users whose data we have received in the context of business or business-like relationships with advertising that is even more relevant to their interests, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily e-mail addresses and telephone numbers) to Google electronically. Google does not have access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables the display of personalised advertising across all Google services linked to the respective Google account.
Customer data is only transmitted to Google if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182 
Google's privacy policy can be viewed here: https://policies.google.com/privacy

Google Dynamic Remarketing

On our website, we use the dynamic remarketing function Google Dynamic Remarketing from "Google AdWords", a service provided by Google Ireland LTD, Gordon House, Barrow Street, Dublin 4, Ireland. The technology enables us to place automatically generated, target group-orientated advertisements after your visit to our website. The adverts are based on the products and services that you clicked on during your last visit to our website. Google uses cookies to create interest-based adverts. Google normally stores information such as your web enquiry, IP address, browser type, browser language, date and time of your enquiry. This information is only used to assign the web browser to a specific computer. It cannot be used to identify a person. If you do not wish to receive user-based advertising from Google, you can deactivate the display of adverts using Google's ad settings. For more information on how Google uses cookies, you can read Google's privacy policy by following the link below: https://policies.google.com/privacy

Google DoubleClick

We have integrated components from DoubleClick by Google on our website. DoubleClick is a Google brand under which special online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with every impression as well as with clicks or other activities.
Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick places a cookie in your browser.
DoubleClick uses a cookie ID, which is required to process the technical procedure. The cookie ID is required, for example, to display an advert in a browser. DoubleClick can also use the cookie ID to record which adverts have already been displayed in a browser in order to avoid duplication. The cookie ID also enables DoubleClick to record conversions. Conversions are recorded, for example, if a user has previously been shown a DoubleClick advert and subsequently makes a purchase on the advertiser's website using the same internet browser. A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to create commission statements. Among other things, Google can recognise that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection provisions of DoubleClick by Google can be found at https://policies.google.com/privacy .
We process your data with the help of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie is also used to avoid multiple displays of the same adverts. Each time you access one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and billing of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restriction, but not all functions may be fully available. The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

Pingdom

We use the "PingDom" service of SolarWinds Worldwide, LLC, 7171 Southwest Parkway, Bldg 400, Texas 78735 Austin, United States on our website. The service stores and processes information about your user behaviour on our website. For this purpose, the service uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device and that enable your use of our website to be analysed. We use the service to analyse the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behaviour, we can improve our offering and make it more interesting for you as a user. The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). We have concluded an agreement with the service provider for order processing including the European standard contractual clauses to establish an adequate level of data protection in third countries: https://www.solarwinds.com/legal/legal-documents/customer-data-processing-addendum

E-learning platform "Coachy" for online training courses

We use the e-learning platform "Coachy" (Coachy International Ltd 36, St. Domenica Street, Victoria VCT 9030, Malta; Mail: support@coachy.net; https://www.coachy.net/en) for our courses. Coachy is an Internet video course portal that enables online courses to be set up and offered. "Coachy" provides the data entered by the user to the controller for the purpose of customer support. The applicable data protection provisions of "Coachy" may be retrieved under https://www.coachy.net/en/data-policy/. They provide information about the collection, processing and use of personal data. By creating an account and logging in to this platform, a user account is automatically created on "Coachy" in our member area with the e-mail address provided or requested. The following data is transferred to "Coachy" in our member area: first name, surname, email address. The personal data in the member area is used exclusively for technical processing and administration of the services. "Coachy", the company that processes personal data on behalf of and on the instructions of the controller, is merely the processor. A corresponding order processing contract has been concluded, which complies with the requirements of Art. 28 GDPR. "Coachy" necessarily obtains knowledge of the above-mentioned data insofar as this is provided for in our order processing contract with "Coachy".
The legal basis for the processing of personal data in this case results from Art. 6 para. 1 sentence 1 lit. b).

Links

Our website contains links to third-party websites. The respective data protection declarations and data protection notices of the respective operators of the linked websites apply. We would like to point out that we are not responsible for data processing practices on third-party platforms outside our own sphere of influence.

YouTube with extended data protection

This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video. If YouTube is activated, Google may use Google Web Fonts for the purpose of standardising the display of fonts. When you access YouTube, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent attempts at fraud.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy. When using YouTube, personal data may be transferred to the United States of America. We would like to point out that there may be a lower level of protection for personal data in the United States in relation to the European Union.
When using YouTube, the protection of personal data when transferred to the United States is guaranteed in accordance with the European Standard Contractual Clauses:  https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

Google Maps

This website uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Web Fonts for the purpose of standardising the display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://business.safety.google/controllerterms/ and https://business.safety.google/controllerterms/sccs/.
You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy.

new relic - Server monitoring and error tracking

With the support of technical services in the areas of server monitoring (monitoring of server functions) & error tracking (detection and tracking of errors), we ensure the availability and integrity of our online offering. We also use the processed data for the technical optimisation of our online offering.
For these purposes, we use the services of New Relic, Inc. Attn: Legal Department 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA. New Relic is certified in accordance with the Trans Atlantic Data Privacy Framework and thus offers a guarantee of compliance with European data protection law(https://www.privacyshield.gov/ps/participant?id=a2zt0000000TNPiAAO&status=Active).
In this context, New Relic processes aggregated performance data, i.e. performance, utilisation and comparable technical values, which provide information about the stability and any anomalies of our online offering. In the event of errors and anomalies, individual enquiries from users of our online offering are recorded in pseudonymised form in order to identify the source of the problem and rectify the error. In this case, pseudonymisation means in particular that users' IP addresses are stored with the last two digits truncated (so-called IP masking). The aggregated data is deleted after three months, the pseudonymised data after seven days.
We use New Relic on the basis of our legitimate interests in the security, accuracy and optimisation of our online offering in accordance with Art. 6 para. 1 lit. f GDPR. Further information on the processing of personal data by New Relic can be found in the privacy policy of the service: https://newrelic.com/termsandconditions/privacy.

4. orders / other functions

Enquiries/orders/transactions

In addition to the purely informational use of our offers, you can send us questions and place orders. To do this, you must generally provide further personal data, which we process to process your request, to answer your enquiries, to fulfil contracts concluded with you and to process any further tasks arising from this, such as the processing of warranty claims, to assert and realise our claims and, if necessary, to react to your evaluation and to which the aforementioned data processing principles apply. In addition, we use personal data to the extent necessary to fulfil our legal obligations, for example to comply with our documentation and retention obligations under tax or commercial law.
Data will only be passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations towards you (Art. 6 para. 1 sentence 1 lit. b GDPR), for example the transmission of your address as a delivery address to a logistics partner, a shipping company or dropshipping provider so that they can send or deliver the goods you have ordered to you. We also pass on personal data if this is necessary to process payments. The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR if you have given your consent. If the processing serves the fulfilment of a contract to which the data subject is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. If we process personal data in order to process non-contractual concerns or enquiries or to respond appropriately to reviews, we do so for the purpose of optimal and efficient communication with you as well as for the appropriate evaluation and commenting of reviews and to improve our customer service, to optimise and design our offers to meet your needs, to maintain the customer relationship and also to clarify and resolve technical problems. The aforementioned purposes constitute our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR. If we fulfil a legal obligation incumbent on us by processing your personal data, the legal basis is Art. 6 para. 1 lit. c GDPR.
In addition, we reserve the right to process personal data in individual cases if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent activities, for tracking and rectifying functional or security problems. The aforementioned purposes then constitute our legitimate interest within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR.

Registration

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data will only be passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations towards you (Art. 6 para. 1 sentence 1 lit. b GDPR). As part of the registration process, the information resulting from the registration form is requested and stored by us. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. When concluding a contractual relationship on our website, we ask you for the following personal data

• Data that identifies you personally, such as your name and email address
• other personal data that we are legally obliged or authorised to collect and process and that we need for your authentication, identification or to verify the data we have collected.
• The aforementioned data is processed to fulfil the contractual relationship. The data is processed on the basis of Art. 6 para. 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, statutory and contractual retention obligations.

Use of PayPal

We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. All PayPal transactions are subject to the PayPal Privacy Policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE

Use of PayPal Plus 

We use the PayPal Plus payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object to this processing based on Art. 6 para. 1 lit. f GDPR at any time for reasons arising from your particular situation. personal data concerning you by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Use of PayPal Express

We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognised.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE.

Use of PayPal Check-Out

We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Third party provider 

Purchase on account via PayPal 

5. storage period

6. SSL or TLS encryption 

7. Newsletter and email messages

Use of the e-mail address for sending direct advertising

8. Zoom

III Social networks 

Facebook 

Instagram 

IV. Your rights