Privacy Policy

The protection of personal data is an important asset, especially in today's world, and is therefore particularly important to us.

With our privacy policy we inform you about the type, scope and purpose of the personal data we collect, process and use.

In addition, you can also find out your rights in connection with the processing of your personal data by us in the text below.

At the end of the privacy policy, we have explained some of the terms we use to help you understand the privacy policy.

1. Name and contact details of the person responsible

First, we would like to introduce ourselves as the controller responsible for the processing of your personal data. The website www.chronofactum.com is operated by us, the

Tankred Tescher
CHRONOFACTUM
Rosenheimer Str. 5
83059 Kolbermoor

Phone: +49 (0)8031 2087 192

Email: info(at)chronofactum.com

We are responsible for the collection, processing, and use of your personal data, which may be collected during your visit to our website. If you have any questions, please contact us using the contact details provided.

2. Your rights

If we process your personal data, you have the right to information, rectification, erasure, restriction of processing, and data portability. Furthermore, you have the right to object and lodge a complaint. You can find more information about your rights below.

To exercise your rights, please contact us using the contact details above or our data protection officer.

The right to confirmation and information, Article 15 GDPR

You can request confirmation as to whether we process your personal data.

If we process your personal data, you are entitled to information about the following points:

– the purposes of processing

– the categories of personal data being processed,

– the recipients or categories of recipients to whom the personal data are disclosed, in particular recipients in third countries or international organisations,

– where possible, the envisaged period for which the personal data will be stored, or, where not possible, the criteria used to determine that period,

– the existence of a right to rectification or erasure of personal data concerning him or her or to restriction of processing by the controller or a right to object to such processing,

– the existence of a right of appeal to a supervisory authority,

– where the personal data are not collected from the data subject, all available information as to their source,

– the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

The right to rectification, Article 16 GDPR

You have the right to request that we immediately correct any inaccurate personal data concerning you

In addition, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

The right to erasure, Article 17 GDPR

You can request that we delete personal data concerning you immediately. In this case, we are obligated to delete personal data immediately if one of the following reasons applies:

– the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

– you withdraw your consent on which the processing is based and there is no other legal ground for the processing;

– you object to the processing and there are no overriding legitimate grounds for the processing, or you object to the processing;

– the personal data were processed unlawfully;

– the erasure of personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject;

– the personal data were collected in relation to information society services offered pursuant to Article 8(1) GDPR.

The right to erasure does not apply, by way of exception, if the processing

– to exercise the right to freedom of expression and information;

– to fulfill a legal obligation which requires processing by Union or Member State law to which we are subject or to perform a task carried out in the public interest or in the exercise of official authority vested in us;

– for reasons of public interest in the area of public health;

– for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) GDPR, insofar as the right to erasure is likely to render impossible or seriously compromise the achievement of the processing objectives, or

– to assert, exercise or defend legal claims.

If we are obliged to erase your personal data in accordance with the aforementioned principles and if we have made your personal data public, we will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform the other data controllers which process the personal data that you have requested the erasure by them of all links to these personal data or of copies or replications of these personal data.

The right to restriction of processing, Article 18 GDPR

Under the following conditions, you have the right to request that we restrict the processing of your personal data, namely if:

– the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;

– the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

– we no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

– you have objected to the processing pending the verification whether our legitimate grounds outweigh yours.

The right to data portability, Article 20 GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.

In addition, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

– the processing is based on consent or on a contract and

– the processing is carried out using automated procedures.

When exercising your right to data portability, you have the right to have your personal data transmitted directly from one controller to another, where technically feasible.

Right to object to data processing, Article 21 GDPR

You have the right to object at any time to the processing of personal data concerning you which is based on your consent or on our legitimate interest, for reasons related to your particular situation; this also applies to profiling.

After your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Direct mail:

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

You have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes, unless the processing is necessary to perform a task carried out in the public interest, for reasons related to your particular situation.

Right to withdraw consent

If you have given us your consent to process your personal data (e.g., to send you a newsletter), you also have the right to revoke this consent at any time with future effect. The revocation does not affect the legality of the processing carried out on the basis of the consent up to the time of revocation.

The revocation can be made informally.

Right to lodge a complaint with a supervisory authority, Article 77 GDPR

In addition, you also have the right to lodge a complaint against us with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that our processing of your personal data violates applicable data protection law.

The supervisory authority responsible for us is the
Bavarian State Office for Data Protection Supervision, Promenade 27 (Schloss), 91522 Ansbach, Telephone: +49 (0) 981 53 1300, Fax: +49 (0) 981 53 98 1300, Email: poststelle@lda.bayern.de.

3. Data processing when visiting our website

In principle, you can use our website without actively providing personal data. However, every time you visit our website, even for purely informational purposes, we collect various data and information for technical reasons and store it in so-called log files or server log files on our server. This only concerns the personal or personally identifiable data that your browser transmits to our server.

The following are recorded and stored:

– the IP address (Internet Protocol address),

– the date and time of access to our website,

– the browser software/browser types (computer programs for displaying websites) used to access our website, as well as their versions and languages,

– the operating system and version of the system accessing our system,

– the Internet service provider of the accessing system,

– Content of the request (contents of the specific pages accessed),

– Access status/HTTP status code (response provided by the server to each HTTP request, indicating the status of the request),

– the website from which our website is accessed,

– Time zone difference to Greenwich Mean Time (GMT).

Storing your IP address – even if only for a short time – is technically necessary due to the way the internet works. However, before we process and store your IP address, it is shortened and used only in this unrecognizable (anonymous) form. The full IP address is not stored. Once shortened, it can no longer be assigned to you.

We also do not use the other information and data mentioned above to draw conclusions about you and/or to identify you. Data that could potentially identify you will be anonymized as soon as possible.

The data and information listed above are collected by us solely to display our website to you, ensure its stability and security, and optimize it accordingly. The collection of this data therefore serves the purpose of improving the data security of the programs and systems we use. Furthermore, we use the data for anonymous, statistical analysis of your movements on our website.

The log files are stored separately from your other personal data that you may have provided to us when visiting our website and are not merged with them.

The log files are deleted after 7 days.

The legal basis for collecting this data is our legitimate interest (Article 6 (1) (f) GDPR) in the functionality and security of our website. Furthermore, we have a legitimate interest in using the anonymous or anonymized data to evaluate user behavior on our website in order to assess the effectiveness of our website design and structure.

4. Cookies

We use so-called cookies on our websites.

Cookies are small text files that are sent by our server to your browser along with the website you are visiting when you first visit our website. Your browser stores the cookie(s) on your device's hard drive.

Cookies cannot transmit malware or viruses to your device, run programs, or open pop-up windows. Nor are they used to send spam.

Rather, cookies are used to obtain certain information.

We use this data, or the cookies we use, to make our website more effective, secure, and user-friendly overall. For example, we can learn about which items are already in your shopping cart or whether a pop-up window has already been displayed. We also use cookies to compile web statistics. This information allows us to evaluate the effectiveness of our advertising measures, improve our marketing campaigns, and tailor our product offerings to our website users.

The data will never be merged with your personal data.

In addition to blocking cookies, you can also remove them from your device, regardless of whether their use is time-limited or unlimited.

To do this, you can call up the corresponding functions in your browser and delete the history.

Flash cookies can be prevented by installing an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox or the Adobe Flash Killer Cookie for Google Chrome.

By selecting private mode in your browser, you can prevent the setting or use of HTML5 Storage Objects.

We generally recommend deleting your browsing history and cookies regularly.

Below you will find the cookies used by third parties through our websites

Name of the provider Purpose & name of the cookie Expiry of the cookie

Google Analytics Google Analytics is a web analytics tool that, after 24 months, helps us track the number of visitors and their browsing behavior on our website. For this purpose, Google Analytics stores the following cookies: _utma, _utmb, _utmc, and _utmz. For more information, see http://www.google.com/policies/privacy

Legal basis for use

We have a legitimate interest (Article 5 (1) (f) GDPR) in the use of cookies. This applies, on the one hand, to cookies that are required to use the functions of our website (e.g., the shopping cart function), as these are necessary for the functionality and optimal provision of our services.

We also have a legitimate interest in using the other cookies we use to analyze how our websites are used, the page from which you came to our websites, etc., and to evaluate the advertising materials and measures we use, adapt them to user behavior, and make them more effective.

5. Sending newsletters

We offer newsletters (regular circulars with promotional content). We send our newsletter a maximum of 60 times per year.

Registration

You can subscribe to our newsletter via our website or via the newsletter order form in the bottom right corner of our website by entering your email address in the designated field and then clicking the "Subscribe to Newsletter" button, or by checking the consent box during the ordering process. Providing your email address is voluntary but required to receive the newsletter.

Providing your first and/or last name when registering for our newsletter is also voluntary and not required to receive the newsletter. However, if you provide us with your name when registering, we will use it to address you by name in the newsletters.

Double opt-in and logging

If you sign up for our newsletter via our website or the newsletter order form, we use the so-called double opt-in process. After you click the newsletter registration button, you will receive an automatically generated email from us to the email address you provided. Please click the confirmation link contained in this email to activate the delivery of our newsletter.

In addition to your email address and your first and/or last name, if provided, we also store the IP address (Internet Protocol address) assigned to you or the device you used to register at the time of your newsletter registration, as well as the date and time of registration. Collecting this additional data serves our legal protection. It is necessary to trace or prove any misuse of your email address by a third party.

If you grant your consent during the ordering process, the IP address assigned to the device you use, as well as the date and time the order was sent, will also be saved. Further details on the storage of personal data during the ordering process can be found in the "..." section of our privacy policy.

Use of login data

The data you submit as part of the newsletter will be used exclusively for sending the newsletter. Personal data collected as part of the newsletter service will not be shared.

Revocation of consent

You can revoke your consent to receive our newsletter at any time, i.e., unsubscribe from our newsletter. You will find a link to unsubscribe from the newsletter at the end of every newsletter we send. You also have the option of notifying us (Tankred Tescher CHRONOFACTUM, Rosenheimer Str. 5, 83059 Kolbermoor, email info@chronofactum.com, phone +49 (0)8031 2087 192) of your unsubscribe from the newsletter by other means.

6.1 Data processing when using the contact form

You have the option of sending us an inquiry using our contact form.

Use of the contact form

If you use this option, only the personal data you provide as part of your inquiry will be collected. Your email address and last name are required information; without them, unfortunately, sending your inquiry to us is not possible.

You are also welcome to provide us with your first name and/or title (Mrs./Mr.) so that we can address you correctly in our reply.

Data processing

The processing of your data, which you provide as part of your enquiry via our contact form, is based on the consent to processing (Article 6 (1) (a) GDPR), which you give us when sending your enquiry, or on the basis of our legitimate interest (Article 6 (1) (f) GDPR) in the ability to answer enquiries addressed to us.

If a contractual relationship is established between us as a result of you contacting us, the data will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR).

Storage period

We will store the data we receive from you via the contact form until your request has been fully processed. Subject to your consent to store your data for further purposes (e.g., sending newsletters), we will delete your data after your request has been processed, unless a contractual relationship has been established between us as a result of the contact. In this case, we will store the data, if necessary, until the expiration of the retention periods under commercial and tax law.

Right to withdraw consent

You can revoke this consent at any time with future effect. Your revocation does not invalidate the legality of the processing of your personal data until your revocation.

In the event that a contract is concluded between you and us as a result of contacting us, the data storage is based on the contract or on necessary pre-contractual measures.

To exercise your right of withdrawal, simply send us a short email or choose another method of contact. You can find the contact details in our legal notice or at the beginning of this statement.

6.2 Data processing for inquiries via email or telephone

If you contact us by email or telephone, we will collect and process the personal data you provide in this context (name, inquiry, telephone number, email address (if provided as part of the inquiry), e.g., email signature, your address). We will use your personal data exclusively to process your request. Your data will not be passed on to third parties without your consent.

Data processing

The processing of your data, which you provide as part of your enquiry via our contact form, is based on the consent to processing (Article 6 (1) (a) GDPR), which you give when sending your enquiry, or on the basis of our legitimate interest (Article 6 (1) (f) GDPR) in being able to answer enquiries addressed to us.

If a contractual relationship arises as a result of contacting us (membership), the data will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR).

Storage period

We will store the data we receive from you via the contact form until your request has been fully processed. Subject to your consent to store your data for further purposes (e.g., sending newsletters), we will delete your data after your request has been processed, unless a contractual relationship has been established between us as a result of the contact. In this case, we will store the data, if necessary, until the expiry of the retention periods under commercial and tax law.

Right to withdraw consent

You can revoke your consent to data processing at any time with future effect. Your revocation does not invalidate the legality of the processing of your personal data until your revocation.

To exercise your right of withdrawal, simply send us a short email or choose another method of contact. You can find the contact details in our legal notice or at the beginning of this statement.

7. Processing of contract and customer data

When ordering goods/services in our online shop, you will be required to provide additional personal data. Before concluding the contract, you will be directed to a form for entering your personal data if you have not (yet) created a customer account with us, or you will have the option to log into your customer account to continue the ordering process.

In the input mask, the information required for the conclusion and execution of the contract is marked as such. You are also free to provide additional personal data. Providing this additional data is voluntary and not mandatory for the execution or conclusion of the contract. Providing the required information is also voluntary and is contractually and legally required. However, no contract can be concluded between us if you do not provide us with the data required for the conclusion and fulfillment of the contract.

Legal basis:

We use the data provided during the order process solely to process the contract.

The legal basis for data processing is the contract concluded between you and us (Article 6 (1) (b) GDPR).

Transfer of data to fulfill the contractual relationship

To fulfill our contractual obligations, we will share your personal data with third parties, if necessary and to the extent necessary for this purpose. These include, in particular, our suppliers, parcel service providers (for delivery of goods), and our bank (for processing payments).

Any further transfer of data to third parties will not take place unless we are obliged to do so for statutory or legal reasons (e.g. court decision) or we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Creating a customer account

If you wish, you can create a customer account with us. By creating a customer account, we will save your stored data for future orders. If you have logged into your customer account and confirm orders via your customer account, these orders will also be saved in your customer account and can be viewed there.

You can delete your customer account at any time. To do so, use the corresponding function in your customer account or via one of the contact options mentioned above. If you delete your customer account, only the data still required for any contract processing of your orders will be stored, or if there is evidence of compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

Voluntary creation and revocation

Creating a customer account is voluntary; there is no obligation (either contractual or legal) to do so. Data processing is based on your consent, which you can revoke at any time with future effect. The revocation will not affect the processing carried out up to the time of revocation.

If you revoke your consent, we will delete your customer account immediately.

Duration of storage

Your data will be deleted once its storage purpose has been fulfilled. However, this does not apply if we are required to retain your data due to commercial or tax law requirements. This data includes your address, payment, and order details.

Furthermore, if there is a legitimate interest, we may store the data until the expiry of the civil law limitation period in order to be able to assert any civil law claims.

In any case, we restrict the processing of your data after two years. This means that your data will only be used to comply with legal obligations or to defend against legitimate or, if applicable, unjustified civil law claims.

If you have set up a customer account with us, we will store the data stored there at least until you delete the customer account or send us your revocation of consent to the use of the data.

Any further storage will only take place, if necessary, to the extent described above.

8. SSL or TLS encryption

We use TLS (Transport Layer Security) encryption technology on our websites where personal data can be entered (in particular, the order process, logging into your customer account, and subscribing to our newsletter). This is a protocol for encrypting data transmissions to prevent unauthorized third-party access to your personal data, especially your banking or financial information. You can recognize the encryption by the designation "https://."

9. Google Analytics

We use the web analysis service Google Analytics on our website, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

function

The web analysis service Google Analytics collects and evaluates data about the usage behavior of visitors to our websites.

In order to carry out web analysis, Google Analytics stores cookies from your visit to our website on the device you use.

Each time you access one of our websites (whether main pages or subpages) on which the analysis service has been integrated, the length of time you spend on our individual websites, the subpages of our online presence that you visit, the frequency with which you access our respective pages, the page of origin (referrer) from which you came to our websites, the access location (i.e. the location from which you accessed our website) and the access time as well as the IP address of the device you use are collected and stored.

The collected data is evaluated by Google Analytics and the results are made available to us in an online report.

Purpose and legal basis

The purpose of using Google Analytics on our websites is to analyze visitor flows, the origin of visitors, the number of clicks on our websites, as well as for commission billing, etc.

We use this information to optimize our websites and for the cost-benefit analysis of the advertising materials we use.

The analyses enable us to adapt our website and our offers and make them more interesting for users.

We have a legitimate interest in using the web analytics service (Article 6 (1) (f) GDPR), which is to continuously improve our websites and adapt them to changing situations (particularly changes in user behavior and interests) in order to remain competitive and optimally present our offerings on the market. Furthermore, we have a legitimate interest in optimizing our advertising and thus making the best possible use of our advertising budget.

IP anonymization and transfer of personal data

The data collected for web analysis, including your IP address, is usually transferred to a Google server in the USA.

We use IP address anonymization on our websites (both on our main page and on its subpages) through the extension "_gat_anonymizeIp." This additional function shortens the collected IP addresses by Google within the member states of the European Union or in a member state of the Agreement on the European Economic Area before forwarding them to the USA. Shortening the IP address does not allow any personal reference to the user.

In exceptional cases, the IP address may be transmitted unabridged to the USA and truncated there. For this special case, Google Inc. has committed to the EU-US Privacy Shield, which you can view at the following link: https://www.privacyshield.gov/EU-US-Framework .

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

Preventing data collection

You can prevent the collection of your data related to your visit to our website (including your IP address) by the cookie used for this purpose by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout/

You can also prevent cookies from being saved in the settings of your browser software. Please note that if you do this, you may not be able to use all the features of our website to their full extent.

You can also prevent Google Analytics from collecting your data by setting an opt-out cookie at the following link, which will prevent your data from being collected on future visits:

Deactivate Google Analytics

Please note that this cookie is also deleted when cookies are deleted and therefore needs to be renewed after cookies are deleted.

Demographic characteristics

Google Analytics offers a "demographics" feature, which we use on our websites. The analytics logs sent to us contain data such as the age, gender, and interests of site visitors.

The data is obtained from interest-based advertising and visitor data from third parties. It is not possible to assign it to a specific person.

You can deactivate this feature in your Google Account. You can also prevent its use by using the opt-out cookie under "Preventing data collection."

Contract data processing

In accordance with European and German law and the requirements of the German data protection authorities, we have concluded a contract for contract data processing with CleverReach. We also ensure that data protection requirements are met and complied with within the scope of contract data processing.

Storage period

Data stored by Google at the user and result level is automatically deleted or anonymized after 26 months.

This applies to data linked to cookies, user IDs (sB User ID) and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]).

Further details can be found at the following link:

https://support.google.com/analytics/answer/7667196?hl=de .

10. YouTube

We have embedded YouTube videos on some pages of our website. These videos can be played directly on our website and are stored on https://youtube.com .

The page http://www.youtube.com is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Inc., which is also represented by Google.

Deployment in enhanced privacy mode

The YouTube videos shown on our website are all embedded using the "enhanced data protection mode" function. This means that YouTube does not store any data as long as you do not watch the video embedded on our website. If you watch a video or start watching it, the following information will be sent to YouTube and processed: your IP address, the date and time the video was accessed, the content of the video, the access status, the amount of data transferred, the website from which the request was made, your browser, its version and language, the operating system and interface you use, the unique device identifier (the string of characters that a manufacturer assigns to the device and by which the device can be uniquely identified), the hardware used, and the referrer URL. In addition, YouTube will know that you have watched the video in question.

Further information on the collection and processing of data when accessing or playing YouTube videos can be found at https://policies.google.com/privacy?hl=de&gl=de .

If you are logged into YouTube or your Google account on the device you are using when you select or view the video, the collected data will be directly assigned to your account. If you want to avoid this, you must log out of your YouTube or Google account before viewing the video.

Our interest in using YouTube

We use YouTube videos to make our website more interesting and diverse for users and visitors. We strive to create a diverse content and presentation in order to continue to attract traffic to our website and attract additional visitors. This constitutes a legitimate interest (Article 6 (1) (f) GDPR) of every website operator.

Processing of personal data by YouTube or Google in the USA

YouTube and Google also process the personal data collected in the USA. In this context, Google (as the legal representative of YouTube LLC) has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

11. Google Web Fonts

We use so-called web fonts on our websites to display the content on our websites in an appealing, accurate, and consistent manner across all browsers. The appealing and accurate presentation of our content represents a legitimate interest.

The web fonts we use are Google Web Fonts from Google LLC (Google), Amphitheatre Parkway, Mountain View, CA 94043, USA,

A font is generally defined as a typeface located on a device or the environment connected to it. Web fonts allow the use of fonts that are not stored on the PC of the visitor to our site or the device used to visit our site.

The fonts used on the website you visit are loaded into your browser cache when you visit this page so that the content (text and characters) is displayed correctly. The browser you use connects to Google's servers. As part of this connection between your browser and Google, Google receives information that your IP address has accessed our website. According to Google, however, no other personal data known to us (e.g. if you are logged into your Google Account when you visit our website) is merged with the fact that your IP address is transmitted to Google when you visit a website.

According to Google, CSS (Cascading Style Sheets – a programming or stylesheet language used to give the content on our site its appearance, e.g. the color representation of individual words or paragraphs) are stored in the cache for 24 hours.

According to Google, the font files themselves are stored in the cache for one year.

Further information on data storage and Google Webfonts can be found at the following link: https://developers.google.com/fonts/faq .

Further information on data usage by Google can be found here: https://policies.google.com/privacy?hl=de .

If your browser does not support Google Webfonts or access is blocked, the content will be displayed in a standard font that is stored on the device you are using.

Data transfer

If you access the website on which Google Web is stored, your IP address, the date and time of accessing the website, access status, the amount of data transferred, the website from which the query is made, your browser, its version and language, the operating system you use and its interface, the unique device identifier (the string of characters that a manufacturer assigns to the device and by which the device can be uniquely identified), the hardware used and the referrer URL will be sent to Google and processed there.

Data storage by Google

If you are logged in to a Google Account when you visit the website, this data will be linked to your account and added to your profile. If you want to avoid this, you must log out of your Google Account before visiting the page.

Regardless of whether you are logged in with your Google Account, Google stores your data as part of user profiles. Google uses these profiles for market research and (needs- or interest-based) advertising, as well as to tailor its own websites to suit your interests.

You must exercise your right to object to the creation of user profiles against Google, if necessary.

Further information on the purpose and scope of data collection by Google can be found under the following link https://policies.google.com/privacy?hl=de .

EU-US Privacy Shield

Your data is also processed and stored in the USA. For this reason, Google Inc. has submitted to the EU-US Privacy Shield, which you can view at the following link: https://www.privacyshield.gov/EU-US-Framework .

12. On the use of PayPal

We offer our customers the option of paying using the online payment service provider PayPal. In Europe, PayPal is operated by PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (PayPal).

With PayPal, you can process payments using so-called "PayPal" accounts. Unlike other payment service providers, PayPal does not issue account numbers; instead, the account is managed via the email address stored with PayPal. Setting up a PayPal account is not required for certain payments; details can be found on the PayPal website and at https://www.paypal.com/de/webapps/mpp/ua/privacywax-full .

In addition to the service of sending or receiving payments to third parties, PayPal also offers, for example, a buyer protection service under certain conditions. Information about this can be found at https://www.paypal.com/de/webapps/mpp/ua/buyerprotection-full .

You therefore have the option of paying for goods purchased from us using PayPal. To do so, select PayPal as your payment option during the ordering process. You will then be required to log in to PayPal or register as a guest, if this option is available.

Transfer of data to PayPal for the purpose of contract processing

To process payments via PayPal, it is necessary to forward personal data to PayPal. This usually includes your first and last name, your address, your telephone and/or mobile number, your email address, as well as other data related to the order and required for payment processing, such as your invoice number.

When you choose to purchase on account, your name, address, email address, the goods/services you have purchased, the amount due, and other relevant information will be sent to PayPal to ensure a smooth transaction. This information will then appear as pre-filled data in the application form, but you can still change it.

We have a legitimate interest in sharing data with PayPal for the purpose of fulfilling or processing the contract. Furthermore, it serves to prevent fraud.

Data we receive from PayPal

PayPal will share your personal information with us if it is necessary to complete the transaction.

In addition, we receive personal data from you from PayPal, which we need to resolve disputes (e.g. within the framework of PayPal Buyer Protection) or to investigate and prevent fraud.

We also receive anonymized data and performance analyses from PayPal, which help us better understand the use of PayPal services and increase customer satisfaction.

Transfer of personal data by PayPal to third parties

PayPal may share your personal information with third parties. For example, your data may be shared with credit agencies and data processors for credit checks, reference credit checks, and fraud prevention.

Further information on how PayPal handles personal data can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE . Information on PayPal's credit checks can be found at the following link : https://www.paypal.com/de/webapps/mpp/ua/creditchk?locale.x=de_DE .

Revocation

You have the right to revoke your consent to PayPal's handling of your personal data at any time. This revocation will not affect any processing carried out prior to the revocation. Furthermore, revocation is not possible with regard to the processing of personal data that is absolutely necessary for the execution of the contract, i.e., for processing the payment via PayPal.

13. Definition of terms

The basis for the following definitions is the General Data Protection Regulation (GDPR) of the European Union (Regulation EU 2016/679 of the European Parliament and of the Council).

“person responsible”

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Thus, the controller is generally the natural person or company which, alone or jointly with others, determines the reason for and the manner in which personal data is processed.

“personal data”

Personal data is all information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data includes first and last names, addresses, telephone numbers, email addresses, and dates of birth, as well as information about the IP address you use, voice recordings, your customer card number, your account details, your credit card numbers, and physical characteristics such as your gait or appearance.

"Processing"

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or linking, restriction, erasure, or destruction. Your data is also processed, for example, when you present your customer card at the checkout during the payment process or make a payment with your debit card.

“Third”

Third party means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct authority of the controller or processor.

“Restriction of processing”

Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.

“Pseudonymization”

The processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information is called pseudonymization. This additional information is used. Furthermore, technical and organizational measures must be taken to ensure that the personal data is not attributed to an identified or identifiable natural person.

"Consent"

Consent is understood to mean any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her.