Data Protection Policy for Users

Data protection Policy for users as per German Rules. 


1) Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is INNOVA Flexo Products, c / o Flatberry GmbH, Zimmermühlenweg 14-18, 61440 Oberursel, Germany, Tel .: 02241/8960490, E-Mail: info @ innovaflexo.com. The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https: //" and the lock symbol in your browser line.

2) Data collection when you visit our website
If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source / reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)
The processing takes place in accordance with Art. 6 Para. 1 lit.f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) hosting
Hosted by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of a Processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data can also be processed in the context of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc . or Shopify (USA) Inc. In the event of the transmission of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the adequacy decision of the European Commission. Further information on data protection from Shopify can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify will only take place within the framework communicated below.

4) cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values ​​on an individual basis. Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.
In some cases, the cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies we use, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of a given consent or in accordance with Art. 6 Para. 1 lit.f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) contact
When you contact us (e.g. using the contact form or email), personal data is collected. Which data is collected when a contact form is used can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit.f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention requirements.

6) Data processing when opening a customer account and for contract processing
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide us with them to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We save and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with due regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we reserve the right to further use your data as permitted by law has been.

7) Data processing for order processing
7.1 To process your order, we work together with the following service provider (s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 Paragraph 1 lit. b GDPR.
7.2 Transfer of personal data to shipping service providers
- German postal service
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will give your e-mail address in accordance with Article 6 (1) (a) GDPR prior to delivery of the goods to Deutsche Post for the purpose of agreeing a delivery date or to announce the delivery, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Deutsche Post or the delivery notification is not possible.
The consent can be revoked at any time with effect for the future against the person responsible or against Deutsche Post.
- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will give your e-mail address in accordance with Article 6 (1) (a) GDPR before the goods are delivered for the purpose of coordination of a delivery date or delivery notification to DHL, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or vis-à-vis the transport service provider DHL.
- DHL Freight
If the goods are delivered by the transport service provider DHL (DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany), we will give your e-mail address in accordance with Art. 6 Paragraph 1 lit. The goods are forwarded to DHL for the purpose of agreeing a delivery date or to announce the delivery, provided you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or vis-à-vis the transport service provider DHL.
- DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will give your email address and telephone number before the goods are delivered in accordance with Art. 6 Paragraph 1 lit. For the purpose of agreeing a delivery date or to announce the delivery to DPD, provided that you have given your express consent for this in the ordering process. Otherwise we will only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or the delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DPD.
- FedEx
If the goods are delivered by the transport service provider FedEx (FedEx Express Germany GmbH, Langer Kornweg 34 k, 65451 Kelsterbach), we will give your email address and telephone number before the goods are delivered in accordance with Art. 6 Paragraph 1 lit. a GDPR to FedEx for the purpose of agreeing a delivery date or to announce the delivery, provided that you have given your express consent for this in the ordering process. Otherwise we will only pass on the name of the recipient and the delivery address to FedEx for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with FedEx or the delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider FedEx.
- GLS
If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Strasse 1 - 7, 36286 Neuenstein), we will give your email address in accordance with Art. 6 Para. 1 lit. a GDPR before the delivery of the goods for the purpose of agreeing a delivery date or to announce the delivery to GLS, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO only forward the name of the recipient and the delivery address to GLS. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with GLS or the transmission of status information of the shipment delivery is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or vis-à-vis the transport service provider GLS.
- Hermes
If the delivery of the goods is carried out by the transport service provider Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg), we will give your email address prior to delivery of the goods in accordance with Art. 6 Paragraph 1 lit. For the purpose of agreeing a delivery date or to announce the delivery to Hermes, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Hermes for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Hermes or the transmission of status information about the delivery of the shipment is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider Hermes.
- Giver
If the goods are delivered by the transport service provider Schenker (Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main), we will give your email address in accordance with Article 6 (1) (a) GDPR before the goods are delivered to For the purpose of coordinating a delivery date or to announce the delivery to Schenker, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the donors for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Schenker or the delivery notification is not possible. The consent can be revoked at any time with effect for the future vis-à-vis the person in charge named above or vis-à-vis Schenker.
- TNT
If the delivery of the goods is carried out by the transport service provider TNT (TNT Express GmbH, Haberstraße 2, 53842 Troisdorf), we will give your e-mail address prior to delivery of the goods in accordance with Article 6 (1) (a) GDPR for the purpose of coordination of a delivery date or delivery notification to TNT, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to TNT for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with TNT or the transmission of status information of the shipment delivery is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider TNT.
- UPS
If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will give your email address before the goods are delivered in accordance with Art. 6 Paragraph 1 a GDPR for the purpose of agreeing a delivery date or to announce the delivery to UPS, provided that you have given your express consent in the ordering process. Otherwise we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of status information of the shipment delivery is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or vis-à-vis the transport service provider UPS.
7.3 Use of payment service providers (payment services)
- Google Pay
If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment will be processed via the "Google Pay" application of yours with at least Android 4.4 ("KitKat") operated mobile device with an NFC function by debiting a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To release a payment via Google Pay in the amount of more than € 25, you must first unlock your mobile device using the verification measure set up in each case (such as face recognition, password, fingerprint or sample).
For the purpose of payment processing, the information you provided during the ordering process, along with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the original website, with which a successful payment is verified. This transaction number does not contain any information about the real payment data of your means of payment stored with Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary for processing the payment process. The transaction is carried out exclusively in the relationship between the user and the original website by debiting the means of payment stored with Google Pay.
If personal data is processed in the described transmissions, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Google reserves the right to collect, save and evaluate certain process-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, the location and description of the dealer, a description of the goods or services purchased by the dealer, photos that you attached to the transaction, the name and email address of the seller and buyer or of the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing takes place exclusively in accordance with Art. 6 (1) (f) GDPR on the basis of the legitimate interest in proper billing, the verification of process data and the optimization and maintenance of the functionality of the Google Pay service.
Google also reserves the right to merge the processed process data with other information that is collected and stored by Google when other Google services are used.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection with Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- giropay
When paying via "giropay", payment is processed by giropay GmbH, An der Welle 4, 60322 Frankfurt / Main, to whom we pass on the information you provided during the ordering process along with information about your order. The transfer of your data takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR exclusively for the purpose of payment processing and only insofar as it is necessary for this. You can find more information about the data protection provisions of giropay GmbH at the following Internet address: https://www.giropay.de/rechtliches/datenschutzerklaerung
- Klarna
If a Klarna payment service is selected, the payment will be processed by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first and last name, street, house number, zip code, city, gender, email address, telephone number and IP address) as well as data related to the order are stored (e.g. invoice amount, article, type of delivery) passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Article 6 (1) (a) GDPR as part of the ordering process. You can see here which credit agencies your data can be forwarded to:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. Klarna uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal details are processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s data protection regulations for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.
- Paydirect
If you choose the paydirekt payment method, the payment will be made via the payment service provider paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main. Your payment data (e.g. payment amount, details of the payee) as well as your confirmation that the payment data are correct will be collected, processed and sent to your by paydirekt GmbH to carry out the paydirekt payment in accordance with Art. 6 Para. 1 lit. Bank transmitted. This processing only takes place insofar as it is actually necessary for the execution of the payment. Paydirekt GmbH then authenticates the payment using the authentication procedure stored for you at your bank. Further information about the transfer and processing of your data can be found in the paydirekt data protection declaration, which you can view under the following link: https://www.paydirekt.de/agb/index.html.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we give your payment data to PayPal (Europe) S.a.r.l. as part of the payment process. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. For further data protection information, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd. , 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will send the information you provided during the ordering process, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on for the purpose of processing payments with Stripe Payments Europe Ltd. and only insofar as it is necessary for this. You can find more information on data protection at Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy.
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
- RIGHT AWAY
If the payment method "SOFORT" is selected, the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will send the information you provided during the ordering process along with the information about your order in accordance with Art. 6 Para. 1 lit.b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is passed on exclusively for the purpose of processing payments with the payment service provider SOFORT and only insofar as it is necessary for this. You can find more information about SOFORT's data protection provisions at the following Internet address: https://www.klarna.com/sofort/datenschutz.
- Stripe
If you choose a payment method from the payment service provider Stripe, the payment will be processed by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will provide the information and information you provided during the ordering process pass on your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. You can find more information on Stripe's data protection at the URL https://stripe.com/de/privacy#translation.
Stripe reserves the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard the legitimate interest in determining the solvency of the user. If necessary, Stripe transmits the personal data required for a credit check and received as part of payment processing to selected credit agencies, which Stripe discloses to users on request. The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. Stripe uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the authorization to use the selected payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the commissioned credit bureaus.
However, Stripe may still be entitled to process your personal data if this is necessary for contractual payment processing.
- VR payment
When selecting a payment method offered by VR Payment, the payment is processed by the payment service provider VR Payment GmbH, Saonestrasse 3a, 60528 Frankfurt am Main, Germany (hereinafter: "VR Payment") via an external terminal. First of all, your personal data (surname, first name, payment data) are collected by VR Payment on the virtual terminal and encrypted there. This encrypted data record is then sent to VR Payment as the acquirer to authorize the payment. VR Payment decrypts the first part, which contains the card number, which is required for later booking. The second part with the authorization data is sent to the respective issuer (card issuing body) via the responsible payment card system. VR Payment then authenticates the transaction using the authentication procedure stored at the bank for this purpose. The payment amount will then be transferred from your account to our account. All the aforementioned processing is carried out exclusively for the purpose of proper payment processing in accordance with Art. 6 Paragraph 1 lit. b GDPR. In addition to the data required for payment, VR Payment may collect additional data as part of the transaction processing, such as delivery address or information about the offer associated with the transaction. This processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of VR Payment's legitimate interest in verifying process data and optimizing and maintaining the functionality of the service. You can find more information on data protection from VR Payment here: https://www.vr-payment.de/datenschutz-haftung/

8) Use of social media: social plugins
8.1 LinkedIn as a standard plug-in
Our website uses so-called social plugins (“plugins”) from the online service LinkedIn operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). You can recognize the LinkedIn plugins by the LinkedIn logo or the “Recommend button” on our website.
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the LinkedIn servers. The content of the plugin is transmitted directly from LinkedIn to your browser and integrated into the page. Through this integration, LinkedIn receives the information that your browser has accessed the corresponding page of our website, even if you do not have a LinkedIn profile or are not currently logged into LinkedIn. This information (including your IP address) is sent directly from your browser to a LinkedIn server in the USA and stored there.
If you are logged in to LinkedIn, LinkedIn can immediately assign your visit to our website to your LinkedIn account. If you interact with the plugins, this information is also transmitted directly to a LinkedIn server and stored there. The information is also published on your LinkedIn account and shown to your contacts there.
The data processing operations described are carried out in accordance with Article 6 (1) (f) GDPR on the basis of LinkedIn's legitimate interests in displaying personalized advertising in order to inform other users of the social network about your activities on our website and to tailor the LinkedIn service to your needs .
If you do not want LinkedIn to directly assign the data collected via our website to your LinkedIn account, you must log out of LinkedIn before visiting our website. You can object to the loading of the LinkedIn plugins and thus the data processing operations described above with add-ons for your browser for the future, e.g. with the script blocker "NoScript" (http://noscript.net/).
The purpose and scope of the data collection and the further processing and use of the data by LinkedIn as well as your related rights and setting options to protect your privacy can be found in LinkedIn's data protection information: https://www.linkedin.com/legal/privacy-policy
8.2 LinkedIn plug-in as a Shariff solution
Our website uses so-called social plugins (“plugins”) from the online service LinkedIn operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
In order to increase the protection of your data when you visit our website, these buttons are not unrestrictedly integrated into the page as plug-ins, but only using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is established with the LinkedIn servers. If you click on the button, a new browser window opens and calls up the LinkedIn page, on which you can interact with the plugins there (if necessary after entering your login data).
The purpose and scope of the data collection and the further processing and use of the data by LinkedIn as well as your related rights and setting options to protect your privacy can be found in LinkedIn's data protection information: https://www.linkedin.com/legal/privacy-policy

9) Use of Social Media: Videos
Use of Youtube Videos
This website uses the YouTube embedding function to display and play back videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used here, which, according to the provider, does not start storing user information until the video (s) are played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to information from “Youtube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be assigned to your profile on YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in accordance with Article 6 (1) (f) GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research and / or the needs-based design of its website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC. come in the US.
Regardless of the playback of the embedded videos, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations without our influence.
Further information on data protection at "Youtube" can be found in the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google's data protection declaration at https://www.google.de/intl/ de / policies / privacy.
As far as legally required, we have obtained your consent for the processing of your data described above in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

10) Using a live chat system
Own live chat system
On this website, for the purpose of operating a live chat system that is used to answer live inquiries, your given chat name and your communicated chat content are collected as data and stored for the course of the chat. The chat and your given chat name are only saved in the so-called RAM (Random Access Memory) and are immediately deleted as soon as we or you have ended the chat conversation, but no later than 2 hours after the last message in the chat history. Cookies are used to operate the chat function. Cookies are small text files that are stored locally in the cache of the visitor's Internet browser. The cookies enable the website visitor's internet browser to be recognized in order to distinguish between individual users of the chat function on our website.
If the information collected in this way is related to a person, it is processed in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.
In order to avoid the storage of cookies, you can set your internet browser so that cookies can no longer be stored on your computer in the future or cookies that have already been stored are deleted. Switching off all cookies can, however, mean that the chat function on our website can no longer be carried out.
Shopify Chat
This website uses the Shopify Chat live chat system, a service provided by Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada (“Shopify”) for customer support purposes. Shopify collects and stores anonymized user data to answer live support inquiries. Usage profiles can be created from this anonymized data under a pseudonym. Cookies may be used. Cookies are small text files that are stored locally in the cache of the visitor's Internet browser. Cookies enable recognition of the Internet browser. If the information collected in this way is related to a person, it is processed in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.
The data collected with the Shopify technologies will not be used to personally identify the visitor to this website and will not be merged with personal data about the bearer of the pseudonym without the separately given consent of the person concerned. To avoid the storage of Shopify cookies, you can set your internet browser so that cookies can no longer be stored on your computer in the future or cookies that have already been stored are deleted. Switching off all cookies can, however, mean that some functions on our website can no longer be carried out. You can object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with future effect by sending us your objection informally by e-mail to the e-mail address given in the legal notice.
In the event that data is transferred to Shopify Inc. in Canada, the European Commission's adequacy decision guarantees the appropriate level of data protection.

11) Tools and miscellaneous
11.1 Best Currency Converter
This website uses the “Best Currency Converter” service from Grizzly Apps SRL, Muresului Street 7 Bloc E23, Scara B, Apartament 15, Brasov, Romania (“Best Currency Converter”). On the basis of our legitimate interest in displaying prices in the local currency of your location, Best Currency Converter collects your IP address in accordance with Article 6 (1) (f) GDPR and evaluates it in order to adapt prices on the website to your location. The IP address is not stored permanently. In addition, Best Currency Converter sets a functional cookie in the browser of the device you are using after the currency has been adjusted for the first time, in order to save the currency setting for the duration of a session. After this session has expired, the cookie is automatically deleted.
Further information on data protection from "Best Currency Converter" can be found at https://currency.grizzlyapps.com/privacy-policy
11.2 - sevDesk
We use the sevDesk service of the cloud-based accounting software from sevDesk GmbH, Hauptstrasse 115, 77652 Offenburg, to handle the bookkeeping.
SevDesk processes incoming and outgoing invoices as well as, if necessary, the bank movements of our company in order to automatically record invoices, match them to the transactions and use them to create the financial accounting in a partially automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.
You can find more information about sevDesk GmbH, the automated processing of data and the data protection provisions at https://sevdesk.de/sicherheit-datenschutz/
11.3 Cookie consent tool based on Usercentrics technology
This website uses a cookie consent tool with technology from Usercentrics GmbH, Rosental 4, 80331 Munich (hereinafter "Usercentrics") to obtain effective user consent for cookies and cookie-based applications that require consent.
By integrating a corresponding JavaScript code, users are shown a banner when the page is called, in which consent for certain cookies and / or cookie-based applications can be given by ticking the box. Here, the tool blocks the setting of all cookies requiring consent until the respective user gives consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user if consent has been given.
So that the cookie consent tool can clearly assign page views to individual users and individually record, log and save the consent settings made by the user for a session, certain user information (including the IP address) is saved when our website is called up by the cookie consent tool. collected, transmitted to the Usercentrics server and stored there.
This data processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website.
Another legal basis for the data processing described is Article 6 (1) (c) GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
We have concluded an order processing agreement with Usercentrics, with which we oblige Usercentrics to protect the data of visitors to our website and not to pass them on to third parties.
Further information on the use of data by Usercentrics can be found in the Usercentrics data protection declaration at https://usercentrics.com/privacy-policy/
11.4 Google Translate
This site uses the "Google Translate" translation service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") via an API integration. The browser you are using connects to the Google servers so that the translation is automatically displayed according to your choice of a national language. Google uses so-called "cookies", which are text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there; it can also be transferred to the Google LLC server. come in the US.
If personal data is processed, this is done in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in barrier-free and universal access to our website.
You can find more information about Google Translate and Google's privacy policy at: https://www.google.com/policies/privacy/
As far as legally required, we have obtained your consent for the processing of your data described above in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

12) rights of the data subject
12.1 The applicable data protection law grants you comprehensive rights of data subjects (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:
- Right to information in accordance with Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed Planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if we did not collect it from you, the existence of automated decision-making including profiling and, if necessary, meaningful information about the logic involved and the scope and the intended effects of such processing, as well as your right to be informed about the guarantees in accordance with Art. 46 GDPR when your data is forwarded in Third countries exist;
- Right to correction in accordance with Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by us;
- Right to deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Paragraph 1 GDPR are met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request that the processing of your personal data be restricted as long as the accuracy of your data is being checked, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have objected to reasons of your particular situation, as long as it is not certain whether ours legitimate reasons prevail;
- Right to information in accordance with Art. 19 GDPR: If you have asserted the right to correct, delete or restrict processing against the person responsible, the person responsible is obliged to correct or delete the data to all recipients to whom the personal data relating to you has been disclosed or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another person responsible, insofar as this is technically feasible ;
- Right to revoke consent given in accordance with Art. 7 Paragraph 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal;
- Right to lodge a complaint in accordance with Art. 77 GDPR: If you are of the opinion that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement.
12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAINLY LEGITIMATE INTEREST, YOU HAVE THE EVERY TIME TO PROCESS YOUR PERSONAL DATA, FOR REASONS WHICH WE APPLY TO YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPULSORY REASONS FOR PROCESSING THAT OUTSIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOM OR IF THE PROCESSING OR EXPRESSION APPLIES.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN OBJECT AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

13) Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data is stored until the person concerned revokes his or her consent.
If there are statutory retention periods for data that are processed in the context of legal or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR, these data are routinely deleted after the retention periods have expired, provided they are no longer required for contract fulfillment or contract initiation and / or we have no legitimate interest in further storage.
When processing personal data on the basis of Art. 6 Paragraph 1 lit.f GDPR, this data is stored until the person concerned exercises his right of objection under Art. 21 Paragraph 1 GDPR, unless we can have compelling reasons worthy of protection prove for the processing that the interests, rights and freedoms of the data subject outweigh, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 Paragraph 1 lit.f GDPR, this data is stored until the person concerned exercises his right of objection under Art. 21 Paragraph 2 GDPR.
Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.