Data protection

WAS IST WOOCOMMERCE?

We have integrated the open source shop system WooCommerce as a plugin on our website. This WooCommerce plugin is based on the WordPress content management system, which is a subsidiary of Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA) is. The implemented functions send data to Automattic Inc. shipped, stored and processed. We inform you in this data protection declaration, what data it is, how the network uses this data and how you manage data storage or. can prevent.

WooCommerce is an online shop system, that since 2011 Is part of the WordPress directory and is specifically designed for WordPress websites. It's a customizable one, open source eCommerce platform, which is based on WordPress and was also integrated into our website as a WordPress plugin.

WHY DO WE USE WOOCOMMERCE ON OUR WEBSITE?

We use this practical online shop solution, in order to be able to offer you our physical or digital products or services in the best possible way on our website. It is the goal, To give you simple and easy access to our offering, so that you can get the products you want quickly and easily. With WooCommerce we have found a good plugin here, that meets our requirements for an online shop.

WHAT DATA IS STORED BY WOOCOMMERCE?

information, which you actively enter into a text field in our online shop, can be used by WooCommerce or. collected and stored by Automattic. So when you register with us or. order a product, Automattic can collect this data, process and store. This can be in addition to your email address, Name or address also includes credit cards- or billing information. Automattic can subsequently use this information for its own marketing campaigns.

There is also information available, which Automattic automatically collects from you in so-called server log files:

  • IP Address
  • Browser information
  • Default language setting
  • Date and time of web access

WooCommerce also sets cookies in your browser and uses technologies such as pixel tags (Web Beacons), For example, to clearly identify you as a user and possibly offer interest-based advertising. WooCommerce uses a number of different cookies, which are set depending on the user action. That means, For example, if you add a product to your shopping cart, a cookie will be set, so that the product remains in the shopping cart, when you leave our website and return at a later time.

Storage period

Unless a specific storage period has been stated within this data protection declaration, Your personal data remains with us, until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (z. B. tax- or commercial law retention periods); In the latter case, the deletion takes place after these reasons no longer apply.

General information on the legal basis for data processing on this website

Provided you have consented to data processing, We process your personal data on the basis of Art. 6 Abs. 1 lit. a GDPR or. Art. 9 Abs. 2 lit. and GDPR, provided that special data categories according to Art. 9 Abs. 1 DSGVO are processed. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 Abs. 1 lit. and GDPR. If you consent to the storage of cookies or access to information on your device (z. B. via Device-Fingerprinting) have consented, the data processing is additionally carried out on the basis of § 25 Abs. 1 TDDDG. Consent can be revoked at any time. Is your data necessary to fulfill the contract or to carry out pre-contractual measures?, We process your data on the basis of Art. 6 Abs. 1 lit. b DSGVO. We also process your data, provided that these are necessary to fulfill a legal obligation based on Art. 6 Abs. 1 lit. c DSGVO. Data processing can also be carried out on the basis of our legitimate interest in accordance with Art. 6 Abs. 1 lit. f GDPR. Information about the relevant legal bases in each individual case is provided in the following paragraphs of this data protection declaration.

Note on data transfer to third countries that are not secure in terms of data protection law as well as transfer to US companies, that are not DPF certified

We use, among other things, tools from companies based in third countries that are not secure in terms of data protection, as well as US tools, whose providers do not comply with the EU-US Data Privacy Framework (DPF) are certified. When these tools are active, Your personal data may be transferred to these countries and processed there. We point out, that a level of data protection comparable to that of the EU cannot be guaranteed in third countries with uncertain data protection law. We point out, that the USA, as a safe third country, generally has a level of data protection comparable to the EU. Data transfer to the USA is then permitted, if the recipient has a certification under the “EU-US Data Privacy Framework” (DPF) or has appropriate additional guarantees. Information on transfers to third countries, including data recipients, can be found in this data protection declaration.

Recipients of personal data

As part of our business activities, we work with various external bodies. In some cases, it is also necessary to transmit personal data to these external bodies. We only pass on personal data to external parties, if this is necessary within the scope of fulfilling the contract, if we are legally obliged to do so (z. B. Transfer of data to tax authorities), if we have a legitimate interest in accordance with Art. 6 Abs. 1 lit. f DSGVO in the transfer or if another legal basis allows the data transfer. When using order processors, we only pass on our customers' personal data on the basis of a valid order processing contract. In the case of joint processing, a joint processing contract is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR APPLICABLE, YOU HAVE THE RIGHT AT ALL TIMES, FOR REASONS, THAT RESULT FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE TERMS. THE APPLICABLE LEGAL BASIS, ON WHICH PROCESSING IS BASED, READ THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS, WE CAN PROVE COMPULSORY REASONS FOR PROCESSING THAT WOULD BE PROTECTED, YOUR INTERESTS, RIGHTS AND FREEDOMS PREVAIL OR THE PROCESSING IS FOR THE ASSESSMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 ABS. 1 GDPR). YOUR PERSONAL DATA WILL BE PROCESSED, FOR DIRECT ADVERTISING, SO YOU HAVE THE RIGHT, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT IT RELATES TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 ABS. 2 GDPR).

Right to lodge a complaint with the responsible supervisory authority

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the location of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right, Data, which we process automatically based on your consent or in fulfillment of a contract, to yourself or to a third party in a common way, in machine-readable format. If you request the direct transfer of the data to another person responsible, this only happens, as far as it is technically feasible.

Information, Correction and deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data at any time, their origin and recipients and the purpose of data processing and, if applicable. a right to correct or delete this data. You can contact us at any time about this or if you have any further questions on the subject of personal data.

Right to restriction of processing

You have the right, to request the restriction of the processing of your personal data. You can contact us at any time about this. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time, to check this. You have the right for the duration of the exam, to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is occurring unlawfully, You can request that data processing be restricted instead of deletion.
  • When we no longer need your personal data, However, use them to exercise, Need to defend or assert legal claims, you have the right, to request the restriction of the processing of your personal data instead of deletion.
  • If you lodge an objection in accordance with Art. 21 Abs. 1 GDPR, A balance must be made between your and our interests. As long as it is not yet certain, whose interests prevail, you have the right, to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, This data - apart from its storage - may only be used with your consent or for assertion purposes, Exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

SSL- or. TLS encryption

This site is used for security reasons and to protect the transmission of confidential content, such as orders or inquiries, that you send to us as the site operator, an SSL- or. TLS encryption. You can recognize an encrypted connection by this, that the browser's address line is "http://“ auf „https://“ changes and the lock symbol in your browser line. If the SSL- or. TLS encryption is enabled, can the data, that you transmit to us, cannot be read by third parties.

Objection to advertising emails

The use of contact details published as part of the imprint obligation to send unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example through spam emails, vor.

4. Data collection on this website

Cookies

Our websites use so-called “cookies”. Cookies are small data packages and do not cause any damage to your device. They are either temporary for the duration of a session (Session-Cookies) or permanent (permanente Cookies) stored on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device, until you delete them yourself or your web browser automatically deletes them. We can use cookies (First-Party-Cookies) or come from third parties (sog. Third-Party-Cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (z. B. Cookies for processing payment services). Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (z. B. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes. Cookies, to carry out the electronic communication process, to provide certain, functions you require (z. B. for the shopping cart function) or to optimize the website (z. B. Cookies for measuring web audience) are required (necessary cookies), are based on Art. 6 Abs. 1 lit. f GDPR saved, unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing takes place exclusively on the basis of this consent (Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG); consent can be revoked at any time. You can set your browser like this, that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. Which cookies and services are used on this website, can be found in this data protection declaration.

Contact form

If you send us inquiries using the contact form, Your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent. This data is processed on the basis of Art. 6 Abs. 1 lit. b DSGVO, if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing the inquiries addressed to us (Art. 6 Abs. 1 lit. f DSGVO) or on your consent (Art. 6 Abs. 1 lit. and GDPR) provided this has been requested; consent can be revoked at any time. The data you enter in the contact form remains with us, until you request us to delete it, Revoke your consent to storage or the purpose for data storage no longer applies (z. B. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Inquiry by email, or telephone

If you email us, or contact telephone, will include your request including all resulting personal data (Name, Inquiry) stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent. This data is processed on the basis of Art. 6 Abs. 1 lit. b DSGVO, if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing the inquiries addressed to us (Art. 6 Abs. 1 lit. f DSGVO) or on your consent (Art. 6 Abs. 1 lit. and GDPR) provided this has been requested; consent can be revoked at any time. The data you send to us via contact requests remains with us, until you request us to delete it, Revoke your consent to storage or the purpose for data storage no longer applies (z. B. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

Comment function on this website

In addition to your comment, the comment function on this page also requires information about the time the comment was created, Your email address and, if you do not post anonymously, the username you chose is saved.

Storage of the IP address

Our comment function saves users’ IP addresses, write the comments. Because we do not check comments on this website before they are published, we need this data, in order to be able to take action against the author in the event of legal violations such as insults or propaganda.

Storage period for comments

The comments and the associated data are saved and remain on this website, until the commented content has been completely deleted or the comments must be deleted for legal reasons (z. B. offensive comments).

Legal basis

The comments are saved based on your consent (Art. 6 Abs. 1 lit. and GDPR). You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

5. Social media

Facebook

Elements of the social network Facebook are integrated into this website. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. However, according to Facebook, the data collected will also be transferred to the USA and other third countries. You can find an overview of the Facebook social media elements here: https://developers.facebook.com/docs/plugins/?locale=de_DE. When the social media element is active, A direct connection is established between your device and the Facebook server. Facebook thereby receives the information, that you have visited this website with your IP address. When you click the Facebook “Like” button, while you are logged into your Facebook account, You can link the contents of this website on your Facebook profile. This allows Facebook to assign your visit to this website to your user account. We point out, that we, as providers of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation. The use of this service is based on your consent in accordance with Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG. Consent can be revoked at any time. To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook, we are Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to collecting the data and passing it on to Facebook. The processing carried out by Facebook after the forwarding is not part of the shared responsibility. Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-safe implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. Rights of those affected (z. B. Request for information) You can make a claim directly to Facebook regarding the data processed by Facebook. If you assert your data subject rights with us, we are obliged, forward these to Facebook. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company is committed to this, to comply with these data protection standards. Further information can be obtained from the provider using the following link: https://www.dataprivacyframework.gov/participant/4452.

X (formerly Twitter)

This website contains functions of the service X (formerly Twitter) integrated. These functions are offered by the parent company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The branch responsible for data processing for people living outside the USA is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, responsible. When the social media element is active, A direct connection is established between your device and the X server. X (formerly Twitter) This provides us with information about your visit to this website. By using X (formerly Twitter) and the “Re-Tweet” function or. “Repost” the websites you visit with your X (formerly Twitter)-Account linked and made known to other users. We point out, that we as providers of the pages have no knowledge of the content of the transmitted data or their use by X (formerly Twitter) receive. Further information can be found in X's data protection declaration (formerly Twitter) unter: https://x.com/de/privacy. The use of this service is based on your consent in accordance with Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://gdpr.x.com/en/controller-to-controller-transfers.html. Your privacy settings at X (formerly Twitter) you can do so in the account settings https://x.com/settings/account change. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company is committed to this, to comply with these data protection standards. Further information can be obtained from the provider using the following link: https://www.dataprivacyframework.gov/participant/2710.

Instagram

Functions of the Instagram service are integrated into this website. These functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When the social media element is active, A direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website. If you are logged into your Instagram account, You can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to assign your visit to this website to your user account. We point out, that we, as providers of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. The use of this service is based on your consent in accordance with Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG. Consent can be revoked at any time. To the extent that personal data is collected on our website using the tool described here and sent to Facebook or. Instagram will be forwarded, we are Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to collecting the data and passing it on to Facebook or. Instagram. The processing carried out by Facebook or. Instagram is not part of the shared responsibility. Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using Facebook- or. Instagram tools and responsible for the privacy-safe implementation of the tool on our website. For the data security of Facebook or. Facebook is responsible for Instagram products. Rights of those affected (z. B. Request for information) regarding those on Facebook or. You can claim the data processed by Instagram directly from Facebook. If you assert your data subject rights with us, we are obliged, forward these to Facebook. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381. Further information can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company is committed to this, to comply with these data protection standards. Further information can be obtained from the provider using the following link: https://www.dataprivacyframework.gov/participant/4452.

Tumblr

This website uses buttons and other elements of the Tumblr service. The provider is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA. When the social media element is active, A direct connection is established between your device and the Tumblr server. Tumblr thereby receives information about your visit to this website. The Tumblr buttons allow you to do this, share a post or page on Tumblr or follow the provider on Tumblr. When you visit one of our websites with the Tumblr button, The browser establishes a direct connection with the Tumblr servers. We have no influence on the extent of the data, that Tumblr collects and transmits using this plugin. According to the current status, the user's IP address and the URL of the respective website are transmitted. The use of this service is based on your consent in accordance with Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG. Consent can be revoked at any time. Further information can be found in Tumblr's privacy policy at: https://www.tumblr.com/privacy/de.

6. Plugins und Tools

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. ReCAPTCHA is intended to be verified, whether data entry on this website (z. B. in a contact form) by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically, as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (z. B. IP Address, Time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyzes run completely in the background. Website visitors are not informed of this, that an analysis takes place. The data is stored and analyzed on the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in this, to protect its web offerings from abusive automated spying and SPAM. If appropriate consent has been requested, The processing takes place exclusively on the basis of Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG, to the extent that consent requires the storage of cookies or access to information on the user's device (z. B. Device-Fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. Further information about Google reCAPTCHA can be found in the Google data protection regulations and the Google terms of use under the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company is committed to this, to comply with these data protection standards. Further information can be obtained from the provider using the following link: https://www.dataprivacyframework.gov/participant/5780.

Akismet

We have integrated Akismet on this website. The provider is Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland (hereinafter Aut O’Mattic), whose parent company is based in the USA. Akismet allows us to do this, to analyze posted comments to determine whether they are SPAM. For this purpose we process the visitor name provided, the email address, the IP Addresses, the Comment text, Browser type and access time. The use of Akismet is based on Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in undisturbed, Spam-free communication with website visitors. If appropriate consent has been requested, The processing takes place exclusively on the basis of Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG, to the extent that consent requires the storage of cookies or access to information on the user's device (z. B. for device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. Further details can be found here: https://akismet.com/gdpr/. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://wordpress.com/support/data-processing-agreements/. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company is committed to this, to comply with these data protection standards. Further information can be obtained from the provider using the following link: https://www.dataprivacyframework.gov/participant/4709.

 

Pages: 1 2