Skip to main content
Inventor of the slatted frame
More than 60 years of experience
Over 400 competent specialised trade partners
Innovation Made in Bremervörde
Mission painless sleep

Privacy Policy

Data protection

I. General Information and Contact Details

Welcome to our website! 

Data protection is not only a legal necessity for us but a matter of course. With the following information, we would like to inform you in accordance with legal requirements about what happens to your personal data when you visit our website. Personal data includes all data that can be attributed to you as an identified or identifiable person. 

Responsible for the processing of personal data in connection with your visit to these websites is:

Thomas GmbH + Co. Sitz- und Liegemöbel KG
Walkmühlenstraße 93
27432 Bremervörde
Germany
Phone: +49 (0)4761 97 90
Email: info@lattoflex.com
You can reach our company data protection officer using the contact details above with the additional note "The Data Protection Officer" or by email at datenschutz@thomas.de. 

II. Processing of Your Data 

When you use our website, various personal data are processed: 

1. Provision of the Website and Creation of Logfiles 

Every time you visit our website, our system automatically collects data and information from the accessing computer: 

  • Information about the browser type and version used 
  • The user's operating system 
  • The HTTP response code 
  • The amount of data transferred 
  • The user's IP address Date and time of access 
  • Websites from which the user's system accesses our website 
  • Websites accessed by the user's system through our website 

The temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. Furthermore, the data serves us to optimize these internet offerings and to ensure the security of our information technology. An evaluation of the data for marketing purposes does not take place in this context. The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. For the collection of data for the provision of the website, this is the case when the respective session is ended. In the case of storage of data in log files, this is the case after at most fourteen days. Further storage is possible. In this case, the users' IP addresses are deleted or anonymized, so that an assignment of the calling client is no longer possible. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR, with our legitimate interest being the proper provision of the functions of this website, the evaluation of access information with the aim of eliminating and avoiding technical malfunctions, as well as the avoidance and tracking of security incidents.
Partly, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly checked. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer. 

2. Cookies 

This website uses cookies and similar technologies. Cookies are small text files that are stored by the internet browser on the user's end device. A cookie usually contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Cookies are used to make the website more user-friendly, to optimize the functions and services of the website, and to provide you with content tailored to your needs.
The purpose of using technically necessary cookies is to enable and simplify the use of the website. Some functions of this website cannot be offered without the use of cookies. The user data collected by technically necessary cookies is not used to create user profiles. Furthermore, with your separate consent, cookies may be used for the provision of external media such as films and maps, as well as for the analysis of website usage. The data of the users collected in this way is pseudonymized by technical measures. Therefore, an assignment of the data to the calling user is no longer possible. The data is not merged with other personal data of the users.
You can deactivate or restrict the use of cookies by changing the settings in your internet browser. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, not all functions of the website may be fully usable. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR, with the legitimate interest of the data controller being the secure, stable, and efficient provision of the functions of the website and the information available thereon. If the data controller fulfills an existing contractual obligation towards you with the respective function, for example, the contractual provision of a digital service, the legal basis is Art. 6 para. 1 lit. b GDPR. If we use cookies for the provision of functions or for other purposes that are not technically necessary, the legal basis for the processing of personal data in connection with these cookies is Art. 6 para. 1 lit. a GDPR in conjunction with your consent. If we use cookies to fulfill our legal obligations, for example, to manage your consents, the legal basis for the processing of personal data carried out in this respect is Art. 6 para. 1 lit. c GDPR in conjunction with § 25 TTDSG. 

3. Plugins and Tools 

etracker 

The provider of this website uses services of etracker GmbH from Hamburg, Germany (www.etracker.com) for the analysis of usage data. We do not use cookies by default for web analysis. If we use analysis and optimization cookies, we obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used that enable a statistical analysis of the use of this website, measuring the success of our online marketing activities, and testing procedures, for example, testing and optimizing different versions of our online offerings or their components. Cookies are small text files that are stored by the internet browser on the user's end device. etracker cookies do not contain information that allows identification of a user.
The data generated by etracker on behalf of the provider of this website is processed and stored exclusively in Germany by etracker and is thus subject to strict German and European data protection laws and standards. etracker has been independently audited, certified, and awarded the ePrivacyseal data protection seal for this purpose.
Data processing is based on the legal provisions of Art. 6 para. 1 lit. f (legitimate interest) of the General Data Protection Regulation (GDPR). Our interest within the meaning of the GDPR (legitimate interest) is the optimization of our online offering and our web presence. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login, or device identifiers, is anonymized or pseudonymized at the earliest opportunity. Other use, merging with other data, or disclosure to third parties does not occur.
You can object to the aforementioned data processing at any time. The objection has no adverse consequences. 

HubSpot 

If you contact us via contact form or email, your details from the inquiry form or your email, including the contact details you provided there, will be used to process your inquiry. Providing the data is necessary for processing and responding to your inquiry - without it, we cannot or only partially respond to your inquiry. The data may be stored in our Customer Relationship Management System (CRM) HubSpot. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request aims to conclude a contract. Your data will be deleted as soon as your inquiry has been answered conclusively and there are no statutory retention obligations, such as in the case of any subsequent contract processing. You can object to the processing of your personal data at any time with effect for the future in the case of Art. 6 para. 1 lit. f GDPR. If we have obtained your consent, the legal basis for processing is Art. 6 para. 1 lit. a GDPR.
We use HubSpot for marketing and support activities on our website. When using the contact form, the data transmitted by you is collected by the external provider HubSpot and is subject to its privacy policy. HubSpot is a software company based in the USA with an office in Germany. Contact: HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Telephone: 0049 (0)30 56796549. HubSpot is an integrated software solution that covers various aspects of our online marketing. These include, among others: email marketing, social media publishing & reporting, reporting, contact management (e.g., user segmentation & CRM), landing pages, and contact forms.
As part of the processing via HubSpot, data may be transmitted to the USA. The security of the transmission is ensured, unless an adequacy decision of the European Commission justifies the transmission, via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security equivalent to that of the GDPR. You can find the text of the incorporated provisions at: 
https://legal.hubspot.com/dpa
For more information on HubSpot's privacy policy: 
https://legal.hubspot.com/privacy-policy
More information from HubSpot regarding EU data protection regulations: 
https://legal.hubspot.com/security
For more information on the cookies used by HubSpot, please see: 
https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser and https://knowledge.hubspot.com/privacy-and-consent/hubspot-cookie-security-and-privacy 

Google Tag Manager 

This website uses Google Tag Manager. This service enables us to manage website tags via an interface. This Google tool only sets tags. This means that no cookies are used and no personal data is regularly collected. However, other tags may be triggered, which may in turn collect data. The Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it remains in effect for all tracking tags implemented via Google Tag Manager. 

Privacy Policy on the Use of AddThis 

The data controller has integrated components of the company AddThis on this website. AddThis is a so-called bookmarking provider. The service enables simplified bookmarking of websites via buttons. By hovering over the AddThis component with the mouse or clicking on it, a list of bookmarking and sharing services is displayed. AddThis is used on over 15 million websites, and according to the operator's information, the buttons are displayed over 20 billion times annually.
The operator of AddThis is Oracle Corporation, 10 Van de Graaff Drive, Burlington, MA 01803, USA.
Each time one of the individual pages of this website, which is operated by the data controller and on which an AddThis component has been integrated, is called up, the internet browser on the information technology system of the data subject is automatically prompted by the respective AddThis component to download data from the website 
www.addthis.com. As part of this technical process, AddThis gains knowledge of the visit and which specific individual page of this website is used by the data subject's information technology system. AddThis uses this data to create anonymized user profiles. The data and information transmitted to AddThis in this way enable AddThis itself, as well as affiliated companies or partner companies, to target visitors to the data controller's websites with personalized and interest-based advertising. AddThis displays personalized and interest-based advertising based on a cookie set by the company. This cookie analyzes the individual surfing behavior of the data subject's information technology system. The cookie stores visits to websites made by the computer system. The data subject can prevent the setting of cookies by our website at any time, as described above, by means of an appropriate setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent AddThis from setting a cookie on the information technology system of the data subject. In addition, cookies already set by AddThis can be deleted at any time via an internet browser or other software programs.
The data subject also has the possibility to permanently object to the processing of personal data by AddThis. To do this, the data subject must press the opt-out button under the link 
http://www.addthis.com/privacy/opt-out, which sets an opt-out cookie. The opt-out cookie set with the objection is stored on the information technology system used by the data subject.
If the cookies are deleted on the system of the data subject after an objection, the data subject must call up the link again and set a new opt-out cookie. However, setting the opt-out cookie may result in the data controller's websites not being fully usable for the data subject.
The applicable data protection provisions of AddThis can be accessed at 
http://www.addthis.com/privacy/privacy-policy.

Google AdSense 

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analysed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC. in the USA.
Google uses the information obtained in this way to evaluate your usage behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google. The described processing of data is carried out in accordance with Art. 6 para. 1 lit. f GDPR for the purpose of targeted advertising to the user by advertising third parties whose advertisements are displayed on this website on the basis of the evaluated user behaviour. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalised third-party advertising content for a fee. You can find more information about Google's privacy policy at the following Internet address: 
https://policies.google.com/privacy
You can permanently deactivate cookies for ad preferences by preventing them by setting your browser software accordingly or you can download and install the browser plug-in available at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?visit_id=638479052590407736-2532775430&rd=1
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies. Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please follow the option described above for making an objection. 

Google Conversion Tracking 

This website uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers with the help of advertising material (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. Our aim is to show you adverts that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an Ads advert placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and how Google handles data from websites can be found here: 
https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: 
https://support.google.com/My-Ad-Center-Help/answer/12155656?visit_id=638479090982262333-1527814639&rd=1 
In order to target users whose data we have received in the context of business or business-like relationships with advertising that is even more relevant to their interests, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily e-mail addresses and telephone numbers) to Google electronically. Google does not have access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables the display of personalised advertising across all Google services linked to the respective Google account.
Customer data is only transmitted to Google if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: 
https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182 
Google's privacy policy can be viewed here: 
https://policies.google.com/privacy

Google Dynamic Remarketing

On our website, we use the dynamic remarketing function Google Dynamic Remarketing from "Google AdWords", a service provided by Google Ireland LTD, Gordon House, Barrow Street, Dublin 4, Ireland. The technology enables us to place automatically generated, target group-orientated advertisements after your visit to our website. The adverts are based on the products and services that you clicked on during your last visit to our website. Google uses cookies to create interest-based adverts. Google normally stores information such as your web enquiry, IP address, browser type, browser language, date and time of your enquiry. This information is only used to assign the web browser to a specific computer. It cannot be used to identify a person. If you do not wish to receive user-based advertising from Google, you can deactivate the display of adverts using Google's ad settings. For more information on how Google uses cookies, you can read Google's privacy policy by following the link below: https://policies.google.com/privacy

Google DoubleClick

We have integrated components from DoubleClick by Google on our website. DoubleClick is a Google brand under which special online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with every impression as well as with clicks or other activities.
Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick places a cookie in your browser.
DoubleClick uses a cookie ID, which is required to process the technical procedure. The cookie ID is required, for example, to display an advert in a browser. DoubleClick can also use the cookie ID to record which adverts have already been displayed in a browser in order to avoid duplication. The cookie ID also enables DoubleClick to record conversions. Conversions are recorded, for example, if a user has previously been shown a DoubleClick advert and subsequently makes a purchase on the advertiser's website using the same internet browser. A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to create commission statements. Among other things, Google can recognise that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection provisions of DoubleClick by Google can be found at https://policies.google.com/privacy .
We process your data with the help of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie is also used to avoid multiple displays of the same adverts. Each time you access one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and billing of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restriction, but not all functions may be fully available. The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

Pingdom

We use the "PingDom" service of SolarWinds Worldwide, LLC, 7171 Southwest Parkway, Bldg 400, Texas 78735 Austin, United States on our website. The service stores and processes information about your user behaviour on our website. For this purpose, the service uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device and that enable your use of our website to be analysed. We use the service to analyse the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behaviour, we can improve our offering and make it more interesting for you as a user. The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected.
The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). We have concluded an agreement with the service provider for order processing including the European standard contractual clauses to establish an adequate level of data protection in third countries: https://www.solarwinds.com/legal/legal-documents/customer-data-processing-addendum

E-learning platform "Coachy" for online training courses

We use the e-learning platform "Coachy" (Coachy International Ltd 36, St. Domenica Street, Victoria VCT 9030, Malta; Mail: support@coachy.net; https://www.coachy.net/en) for our courses. Coachy is an Internet video course portal that enables online courses to be set up and offered. "Coachy" provides the data entered by the user to the controller for the purpose of customer support. The applicable data protection provisions of "Coachy" may be retrieved under https://www.coachy.net/en/data-policy/. They provide information about the collection, processing and use of personal data. By creating an account and logging in to this platform, a user account is automatically created on "Coachy" in our member area with the e-mail address provided or requested. The following data is transferred to "Coachy" in our member area: first name, surname, email address. The personal data in the member area is used exclusively for technical processing and administration of the services. "Coachy", the company that processes personal data on behalf of and on the instructions of the controller, is merely the processor. A corresponding order processing contract has been concluded, which complies with the requirements of Art. 28 GDPR. "Coachy" necessarily obtains knowledge of the above-mentioned data insofar as this is provided for in our order processing contract with "Coachy".
The legal basis for the processing of personal data in this case results from Art. 6 para. 1 sentence 1 lit. b).

Links

Our website contains links to third-party websites. The respective data protection declarations and data protection notices of the respective operators of the linked websites apply. We would like to point out that we are not responsible for data processing practices on third-party platforms outside our own sphere of influence.

YouTube with extended data protection

This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video. If YouTube is activated, Google may use Google Web Fonts for the purpose of standardising the display of fonts. When you access YouTube, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent attempts at fraud.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy. When using YouTube, personal data may be transferred to the United States of America. We would like to point out that there may be a lower level of protection for personal data in the United States in relation to the European Union.
When using YouTube, the protection of personal data when transferred to the United States is guaranteed in accordance with the European Standard Contractual Clauses:  https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

Google Maps

This website uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Web Fonts for the purpose of standardising the display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://business.safety.google/controllerterms/ and https://business.safety.google/controllerterms/sccs/.
You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy.

new relic - Server monitoring and error tracking

With the support of technical services in the areas of server monitoring (monitoring of server functions) & error tracking (detection and tracking of errors), we ensure the availability and integrity of our online offering. We also use the processed data for the technical optimisation of our online offering.
For these purposes, we use the services of New Relic, Inc. Attn: Legal Department 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA. New Relic is certified in accordance with the Trans Atlantic Data Privacy Framework and thus offers a guarantee of compliance with European data protection law(https://www.privacyshield.gov/ps/participant?id=a2zt0000000TNPiAAO&status=Active).
In this context, New Relic processes aggregated performance data, i.e. performance, utilisation and comparable technical values, which provide information about the stability and any anomalies of our online offering. In the event of errors and anomalies, individual enquiries from users of our online offering are recorded in pseudonymised form in order to identify the source of the problem and rectify the error. In this case, pseudonymisation means in particular that users' IP addresses are stored with the last two digits truncated (so-called IP masking). The aggregated data is deleted after three months, the pseudonymised data after seven days.
We use New Relic on the basis of our legitimate interests in the security, accuracy and optimisation of our online offering in accordance with Art. 6 para. 1 lit. f GDPR. Further information on the processing of personal data by New Relic can be found in the privacy policy of the service: https://newrelic.com/termsandconditions/privacy.

4. orders / other functions

Enquiries/orders/transactions

In addition to the purely informational use of our offers, you can send us questions and place orders. To do this, you must generally provide further personal data, which we process to process your request, to answer your enquiries, to fulfil contracts concluded with you and to process any further tasks arising from this, such as the processing of warranty claims, to assert and realise our claims and, if necessary, to react to your evaluation and to which the aforementioned data processing principles apply. In addition, we use personal data to the extent necessary to fulfil our legal obligations, for example to comply with our documentation and retention obligations under tax or commercial law.
Data will only be passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations towards you (Art. 6 para. 1 sentence 1 lit. b GDPR), for example the transmission of your address as a delivery address to a logistics partner, a shipping company or dropshipping provider so that they can send or deliver the goods you have ordered to you. We also pass on personal data if this is necessary to process payments. The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR if you have given your consent. If the processing serves the fulfilment of a contract to which the data subject is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. If we process personal data in order to process non-contractual concerns or enquiries or to respond appropriately to reviews, we do so for the purpose of optimal and efficient communication with you as well as for the appropriate evaluation and commenting of reviews and to improve our customer service, to optimise and design our offers to meet your needs, to maintain the customer relationship and also to clarify and resolve technical problems. The aforementioned purposes constitute our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR. If we fulfil a legal obligation incumbent on us by processing your personal data, the legal basis is Art. 6 para. 1 lit. c GDPR.
In addition, we reserve the right to process personal data in individual cases if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent activities, for tracking and rectifying functional or security problems. The aforementioned purposes then constitute our legitimate interest within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR.

Registration

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data will only be passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations towards you (Art. 6 para. 1 sentence 1 lit. b GDPR). As part of the registration process, the information resulting from the registration form is requested and stored by us. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. When concluding a contractual relationship on our website, we ask you for the following personal data

  • Data that identifies you personally, such as your name and email address
  • other personal data that we are legally obliged or authorised to collect and process and that we need for your authentication, identification or to verify the data we have collected.
  • The aforementioned data is processed to fulfil the contractual relationship. The data is processed on the basis of Art. 6 para. 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, statutory and contractual retention obligations.

Use of PayPal

We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. All PayPal transactions are subject to the PayPal Privacy Policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE

Use of PayPal Plus 

We use the PayPal Plus payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object to this processing based on Art. 6 para. 1 lit. f GDPR at any time for reasons arising from your particular situation. personal data concerning you by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Use of PayPal Express

We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognised.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at 
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE.

Use of PayPal Check-Out

We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Third party provider 
When paying via the payment method of a third-party provider, the data required for payment processing is transmitted to PayPal. This processing takes place on the basis of Art. 6 para. 1 lit. b GDPR. PayPal may then forward the data to the respective provider in order to process this payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Local third-party providers can be, for example 
  • Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany) 
  • giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany) 
Purchase on account via PayPal 
When paying via the payment method purchase on account, the data required for payment processing is first transmitted to PayPal. In order to process this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies in accordance with the procedure described above. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if Ratepay makes advance payments. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/en/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE

5. storage period

Unless otherwise stated in the respective individual information, we process personal data in accordance with the statutory provisions only for the purposes described here and only for as long as personal identification of the data subject is required for the respective purpose. The data will then be deleted or neutralised/anonymised in accordance with data protection regulations.

6. SSL or TLS encryption 

In the case of unencrypted data transmissions on the Internet (e.g. unencrypted communication by e-mail), the confidentiality of the transmitted data cannot be fully guaranteed. This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator.
You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Newsletter and email messages

With your consent, you can subscribe to our newsletter (if offered), with which we inform you about our current interesting offers. The advertised services and benefits are named in the declaration of consent. We use the so-called double opt-in procedure to subscribe to our newsletter.
This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format to enable log file recording and log file analysis. This allows the success or failure of newsletter campaigns to be statistically analysed. Based on the embedded tracking pixel, we can recognise whether and when an email was opened by a data subject and which links in the email were accessed by the data subject.
Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the controller in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the data subject. Unsubscribing from the newsletter is automatically interpreted as cancellation. After cancellation, this personal data will be deleted by the controller. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter.
You can declare your cancellation by clicking on the link provided in every newsletter email or by sending a message to the contact details given in the legal notice.
Use of the e-mail address for sending direct advertising
We use your e-mail address, which we have received as part of the sale of goods or services, to send you electronic advertising for our own goods or services that are similar to those that you have already purchased from us, unless you have objected to this use. The provision of the e-mail address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from the legitimate interest in direct advertising.
The legal basis for the use of your e-mail address for advertising our own similar products is Section 7 (3) UWG. You can object to the use of your email address at any time by sending a message to our contact details above or by using the unsubscribe function provided by us in every advertising email. This will not incur any costs other than the transmission costs according to the basic tariffs of the respective means of communication used by you.

8. Zoom

We use external communication providers (third-party providers or platforms for our video conferences, audio conferences, webinars or other online meetings and online communications), in this case the provider ZOOM Video Communications Inc, San Jose Office, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. This takes place either
  • in the context of our contractual or pre-contractual legal relationships pursuant to Art. 6 para. 1 lit. b GDPR,
  • within the scope of your consent, if we have obtained this in advance (e.g. for a recording) in accordance with Art. 6 para. 1 lit. a GDPR or otherwise
  • within the scope of our legitimate interest in a technically flawless online offer and its economically efficient and high-quality design and optimisation of communication with our customers, interested parties and contact persons in accordance with Art. 6 para. 1 lit. f GDPR.
Each time you use our external communication provider, all data that you provide, enter or display during communication (in particular inventory data such as name and email, usage data such as browser used, websites visited, length of stay, referrer URL and your IP address, content data such as audio and video communication and/or recording, chat history, shared screen content) is transferred to the external communication provider and stored by it. We ourselves use the most data protection-friendly settings possible, and you can also take such precautions. For example, you can log in with alias names or unique email addresses or (partially) deactivate your audio and video transmission.
As a result, your data will be transferred to the USA. We have concluded a contract with our communications provider in accordance with the standard contractual clauses, in which our provider guarantees the protection of your data in accordance with the requirements of the GDPR. We have also concluded an order processing contract with the external communications provider, according to which the provider will only process your data in accordance with our instructions.
Your data will remain stored as long as it is still required for the purposes of your consent, for contract fulfilment/processing, for legal prosecution by us or for our other legitimate interests or if we are legally required to retain your data.
Your data will not be passed on to third parties by us or the external communication provider. An exception may be an evaluation of the usage data for service and security purposes as well as for marketing purposes by the external communication provider. For further use of your data by the external communications provider, please refer to their terms and conditions 
https://explore.zoom.us/en/terms/ and the associated privacy policy https://explore.zoom.us/en/privacy/
Insofar as external communication providers store cookies or other trackers on your computer, we also refer you to our general description in this privacy policy for the general handling and deactivation of cookies.

III Social networks 

Facebook 
This section applies to our processing of personal data via our Facebook presence: Meta Platforms Ireland Limited Facebook Ireland Limited ("Facebook") is generally responsible for the collection and further processing of personal user data on Facebook websites. Please note that Facebook collects and processes certain information about your visit to our Facebook page even if you do not have a Facebook user account or are not logged in to Facebook. For information on the processing of personal data by Facebook, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.
As the operator of this Facebook page, we can only view your public profile on Facebook. Which information is visible here depends on your settings in your profile. In addition, we process your personal data (such as your name and the content of your messages, enquiries or other contributions to us) if you contact us via our Facebook page or if you publish content via our Facebook presence, e.g. in the form of a comment. We then process this data for the purpose of processing your posts accordingly and responding to them if necessary. These purposes also constitute our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 f) of the European General Data Protection Regulation (GDPR).
We store your personal data on our systems, i.e. outside of Facebook, if and for as long as it is required for the purposes for which it was collected or if there are statutory retention obligations. 
Instagram 
This privacy policy applies to our Instagram presence: Instagram is part of the Facebook group of companies and shares infrastructure, systems and technology with Facebook and other Facebook companies (https://www.facebook.com/help/111814505650678?ref=dp).
We expressly point out that Facebook stores the data of users of its services (e.g. personal information, IP address, etc.) and may also use this data for business purposes. For more information on Facebook's data processing at Instagram, please refer to Instagram's privacy policy at 
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
We have no influence on data collection and further processing by Facebook/Instagram. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent Facebook/Instagram fulfils existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on. Insofar as personal data is processed in connection with our Instagram page and Facebook alone decides on the purposes and means of processing, Facebook is the sole controller. Meta Platforms Ireland Limited Facebook Ireland Limited (also: "Facebook/Instagram"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is the sole controller of the processing.
You can contact the company data protection officer for Instagram at the following address: 
https://www.facebook.com/help/contact/540977946302970 contact form. The Instagram Privacy Policy (https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect) specifies the categories of personal data that are processed when using Facebook products (https://www.facebook.com/help/1561485474074139?ref=dp), describes in general terms the purposes for which this data is used and specifies the categories of recipients to whom this data may be disclosed. In the Data Policy, you will also find information about the legal basis for the processing of this data and information about how you can withdraw your consent to the processing of personal data. Further information on the respective legal basis can be found at https://www.facebook.com/about/privacy/legal_bases.
In the data policy, you will also find information on how you can exercise your rights of access, rectification, portability and erasure vis-à-vis Facebook. Under this point you will also find information about your right to object to certain processing of personal data. You can find more information about your control options here: 
https://www.facebook.com/help/2069235856423257. In the data policy you will also find information about the duration for which personal data is stored and information about the criteria for determining this duration and the possibility of blocking or deleting Instagram accounts. The data policy refers to the intention of Facebook/Instagram to transfer data to third countries if necessary. Please note that if personal data is processed in the United States of America, the level of protection for your data may be lower than if it is processed within the EU. If you visit our Instagram page and your browser allows cookies to be stored, Facebook/Instagram stores information in the form of small text files in your browser's memory (hereinafter referred to as "cookies") and can access this information when you visit the Instagram platform or a website that integrates Instagram technologies. You can find more information on the purpose of the cookies used, the integration of these cookies by other websites and your control options in this regard here: https://help.instagram.com/1896641480634370?ref=ig.
Cookies enable Instagram/Facebook to track your user behaviour (for registered users across devices) on other websites beyond the Instagram platform and also to create profiles of your behaviour. This applies both to persons registered with the Instagram platform and to persons not registered there. If you want to prevent your behaviour from being tracked in this way, you should log out of Facebook or Instagram or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser.
In addition to the content you submit, information about your profile, your likes and your posts will be visible to us depending on your privacy settings. You can find out how to change your privacy settings here: 
https://de-de.facebook.com/help/instagram/116024195217477. The processing of your personal data when contacting or interacting with us via our Instagram presence is carried out by us on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest within the meaning of the legal basis is to respond to your request and to communicate with you appropriately and for the intended purpose. If your contact is aimed at the conclusion of a contract (for example in the context of participation in competitions), the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

IV. Your rights

You have the right at any time 
  • to revoke the consent you have given us to process your personal data at any time or to object to the processing of your data.
  • to receive information about your data stored by us. 
  • to have incorrect data about you corrected by us. 
  • that we delete data about you that is no longer required. 
  • that the processing of your data will be restricted under certain conditions; this may be the case, for example, if deletion is not possible but the data may not be processed further. 
  • that your data is transferable; this right applies in particular if you have given your consent to the processing of your data or if the processing of the data is necessary to fulfil a contract. The right to data portability does not exist insofar as your data is not processed automatically.
To exercise your rights, please use the contact details provided in the introduction to this privacy policy. If you are of the opinion that the processing of your data violates the legal requirements, you can also lodge a complaint with the supervisory authority responsible for us.
We would like to point out that in certain cases we may request additional information from you in order to establish your identity. This is the only way we can ensure, for example when providing information, that information is not disclosed to unauthorised persons.

V. Data protection for applications and in the application process

We process the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by e-mail or via a web form on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection decision, unless deletion conflicts with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof and presentation in proceedings under the General Equal Treatment Act (AGG). The legal basis for the processing of personal data of applicants is Art. 88 para. 1 GDPR in conjunction with Art. 6 para. 1 lit. b GDPR and § 26 of the Federal Data Protection Act (BDSG), furthermore, insofar as the processing is carried out to fulfil legal requirements, Art. 6 para. 1 lit. c GDPR and, insofar as the consent of the data subject is the basis of the processing, Art. 6 para. 1 lit. a GDPR in conjunction with § 26 BDSG.

Status: 11.02.2024