Privacy Policy

The protection of personal data is an important asset, especially in today's world, and is therefore particularly close to our hearts.

Our privacy policy informs you about the type, scope and purpose of the personal data we collect, process and use.

Furthermore, you can also find information about your rights in connection with the processing of your personal data by us in the text below.

At the end of the privacy policy, we have explained some terms that we use to make it easier for you to understand the privacy policy.

1. Name and contact details of the data controller

First, we would like to introduce ourselves as the controller responsible for processing your personal data. The website www.chronofactum.com is operated by us, the

Tankred Tescher
CHRONOFACTUM
Rosenheimer Str. 5
83059 Kolbermoor

Tel.: +49 (0)8031 2087 192

Email: info(at)chronofactum.com

We are responsible for the collection, processing, and use of your personal data, which may be collected from you during your visit to our website. If you have any questions, please feel free to contact us using the contact details provided.

2. Your rights

If we process your personal data, you have the right to access, rectification, erasure, restriction of processing, and data portability. Furthermore, you have the right to object and the right to lodge a complaint. You can find more detailed information about your rights below.

To exercise your rights, please contact us or our data protection officer using the contact details above.

The right to confirmation and access, Article 15 GDPR

You can request confirmation as to whether we process personal data about you.

If we process your personal data, you are entitled to information on the following points:

– the processing purposes

– the categories of personal data that are processed,

– the recipients or categories of recipients to whom the personal data are disclosed, in particular recipients in third countries or international organisations,

– where possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria used to determine that duration,

– the existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing,

– the existence of a right to lodge a complaint with a supervisory authority,

– if the personal data are not collected from the data subject, all available information about the source of the data,

– the existence of automated decision-making, including profiling, pursuant to Article 22 paragraphs 1 and 4 GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The right to rectification, Article 16 GDPR

You have the right to request that we immediately correct any inaccurate personal data concerning you.

Furthermore, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – including by means of a supplementary statement.

The right to erasure, Article 17 GDPR

You can request that we delete your personal data without undue delay. In this case, we are obligated to delete personal data without undue delay if one of the following grounds applies:

– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

– You withdraw your consent on which the processing was based, and there is no other legal basis for the processing;

– You object to the processing and there are no overriding legitimate grounds for the processing, or you object to the processing;

– the personal data were processed unlawfully;

– the erasure of personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject;

– the personal data were collected in relation to information society services offered in accordance with Article 8(1) GDPR.

The right to erasure does not apply in exceptional cases where the processing

– to exercise the right to freedom of expression and information;

– to fulfill a legal obligation which requires processing under Union or Member State law to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;

– for reasons of public interest in the area of public health;

– for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the processing objectives, or

– for the assertion, exercise or defense of legal claims.

If we are obliged to erase your personal data in accordance with the aforementioned principles, and we have made your personal data public, we will take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers who are processing the personal data that you have requested the erasure of all links to, copies of, or replications of that personal data.

The right to restriction of processing, Article 18 GDPR

Under the following conditions, you have the right to request that we restrict the processing of your personal data, namely if:

– the accuracy of your personal data is contested, for a period that allows us to verify the accuracy of the personal data;

– the processing is unlawful and you object to the erasure of the personal data and instead request the restriction of its use;

– we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims, or

– You have objected to the processing, as long as it is not yet clear whether our legitimate grounds override yours.

The right to data portability, Article 20 GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.

Furthermore, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

– the processing is based on consent or on a contract and

– processing is carried out using automated procedures.

When exercising your right to data portability, you have the right to have your personal data transmitted directly from one controller to another, where technically feasible.

Right to object to data processing, Article 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on your consent or on our legitimate interests; this also applies to profiling.

After you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

Direct marketing:

If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes, unless the processing is necessary for the performance of a task carried out in the public interest.

Right to withdraw consent

Have you given us your consent to process your personal data (z.BIf you have given your consent (e.g., for newsletter distribution), you also have the right to revoke this consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

The cancellation can be made informally.

Right to lodge a complaint with a supervisory authority, Article 77 GDPR

Furthermore, you also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you believe that our processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for us is the
Bavarian State Office for Data Protection Supervision, Promenade 27 (Schloss), 91522 Ansbach, Telephone: +49 (0) 981 53 1300, Fax: +49 (0) 981 53 98 1300, E-mail: poststelle@lda.bayern.de.

3. Data processing when visiting our website

The use of our website is generally possible without actively providing personal data.However, every time you access our website, even for purely informational purposes, various data and information are collected by us for technical reasons and stored in so-called log files or server log files (protocol files) on our server. This only includes personal or personally identifiable data that your browser transmits to our server.

The following data will be recorded and stored:

– the IP address (Internet Protocol address),

– the date and time of access to our website,

– the browser software/browser types (computer programs for displaying web pages) used to access our website, as well as their versions and language,

– the operating system and its version that accesses our system,

– the Internet service provider of the accessing system,

– Content of the request (content of the specific pages requested),

– Access status/HTTP status code (response delivered by the server to each HTTP request, representing the status of the request),

– the website from which our website is accessed,

– Time zone difference to Greenwich Mean Time (GMT).

Storing your IP address – even if only for a short time – is technically necessary due to the way the internet functions. However, before we process and store your IP address, it is shortened and used only in this unidentifiable (anonymous) form. The full IP address is not stored. After shortening, it is no longer possible to associate it with you.

We also do not use the other information and data mentioned above to draw conclusions about you and/or to identify you. Data that could potentially identify you will be anonymized as soon as possible.

The data and information listed above are collected by us solely for the purpose of displaying our website to you, ensuring its stability and security, and optimizing our website in this regard. The collection of this data serves the purpose of improving the data security of the programs and systems we use. Furthermore, we use the data for the anonymous, statistical analysis of your activity on our website.

The log files are stored separately from your other personal data that you may have provided to us yourself when visiting our pages and are not combined with this data.

The log files are deleted after 7 days.

The legal basis for collecting the aforementioned data is our legitimate interest (Article 6(1)(f) GDPR) in the functionality and security of our website. Furthermore, we have a legitimate interest in using the anonymous or anonymized data to analyze user behavior on our pages in order to evaluate the effectiveness of our website design and structure.

4. Cookies

We use so-called cookies on our websites.

Cookies are small text files that our server sends to your browser along with the requested webpage when you first access our website. Your browser then stores the cookie(s) on your device's hard drive.

Cookies cannot transmit malware or viruses to your device, run programs, or open pop-up windows. They are also not used to send spam.

Rather, cookies are used to obtain certain information.

We use this data, and the cookies we employ, to make our website more effective, secure, and user-friendly overall. For example, we can determine which items are already in your shopping cart or whether you have already seen a pop-up window. Furthermore, we use cookies to compile web statistics. This information allows us to evaluate the effectiveness of our advertising, improve our marketing campaigns, and tailor our product offerings to the users of our website.

The data will never be combined with your personal data.

Cookies that are stored on your device beyond the current session can be removed from your device – in addition to the option of blocking them – regardless of whether their use is time-limited or unlimited.

You can access the relevant functions in your browser to delete your history.

Flash cookies can be disabled by installing a corresponding "add-on", z.B. “Better Privacy” for Mozilla Firefox or the Adobe Flash Killer Cookie for Google Chrome can be prevented.

By selecting private mode in your browser, you can prevent the setting or use of HTML5 Storage Objects.

In general, we recommend regularly deleting your browser history and cookies.

Below you will find the cookies that are used by third parties via our websites.

Name of provider Purpose & Cookie name(s) Cookie expiry date

Google Analytics is a web analytics tool that helps us track the number of visitors and their browsing behavior on our website after 24 months. Google Analytics stores the following cookies for this purpose: _utma, _utmb, _utmc, and _utmz. Further information can be found at [link to Google Analytics cookie policy]. http://www.google.com/policies/privacy

Legal basis for use

We have a legitimate interest (Article 5(1)(f) GDPR) in using cookies. This applies, firstly, to cookies that are necessary for the use of the functions of our website (z.B. Shopping cart function) are required, as these are necessary for the functionality and best possible provision of our services.

Regarding the other cookies we use, we also have a legitimate interest in using them to analyze the use of our websites and the referring page from which you accessed our websites, etc., as well as to evaluate and adapt and improve the effectiveness of our advertising materials and measures based on user behavior.

5. Sending newsletters

We offer newsletter subscriptions (regular circulars with promotional content). We send our newsletter a maximum of 60 times per year.

Registration

You can subscribe to our newsletter via our website or by using the newsletter subscription form at the bottom right of our pages by entering your email address in the designated field and then clicking the "Subscribe to Newsletter" button, or during the order process by checking the consent box. Providing your email address is voluntary, but required to receive the newsletter.

Providing your first and/or last name when subscribing to our newsletter is voluntary and not required to receive the newsletter. However, if you do provide us with your name during registration, we will use it to address you personally in the newsletters.

Double opt-in and logging

If you subscribe to our newsletter via our website or the newsletter subscription form, we use the so-called double opt-in procedure. After you click the newsletter subscription button, you will receive an automatically generated email from us at the email address you provided, asking you to click the confirmation link in this email to activate the delivery of our newsletter to you.

In addition to your email address and your first and/or last name, if provided, we also store the IP address (Internet Protocol address) assigned to you or the device you used to register for the newsletter at the time of registration, as well as the date and time of registration. Collecting this additional data serves our legal protection. It is necessary to be able to trace and prove any potential misuse of your email address by a third party.

If you give your consent during the ordering process, the IP address assigned to your device, as well as the date and time of your order, will also be stored. For further details on the storage of personal data during the ordering process, please refer to section “…” of our privacy policy.

Use of login data

The data you provide when subscribing to the newsletter will be used exclusively for sending the newsletter. Personal data collected through the newsletter service will not be shared with third parties.

Revocation of consent

You can withdraw your consent to receive our newsletter at any time, i.e., unsubscribe. You will find a corresponding unsubscribe link at the end of every newsletter we send. Furthermore, you can contact us (Tankred Tescher) CHRONOFACTUM Rosenheimer Str. 5, 83059 Kolbermoor, Email info@chronofactum.com, Tel. +49 (0)8031 2087 192) to unsubscribe from the newsletter in any other way.

6.1 Data processing when using the contact form

You have the option of sending us an inquiry via our contact form.

Using the contact form

Take advantage of this opportunity, Only the personal data you provide as part of your inquiry will be collected. Providing your email address and last name is required; unfortunately, we cannot submit your inquiry without this information.

You are welcome to also provide us with your first name and/or title (Mrs/Mr) so that we can address you correctly in our reply.

Data processing

The processing of your data, which you provide as part of your inquiry via our contact form, is based on the consent to processing (Article 6 Paragraph 1 lit. a GDPR) that you give us by sending your inquiry, or on the basis of our legitimate interest (Article 6 Paragraph 1 lit. f GDPR) in being able to answer inquiries addressed to us.

Should a contractual relationship arise between us as a result of your contacting us, the data processing will be carried out for the purpose of carrying out pre-contractual measures (Article 6 Paragraph 1 Letter b GDPR).

Storage duration

We store the data we receive from you via the contact form until your request has been fully processed. This is subject to your consent to store your data for other purposes (z.B.(For newsletter distribution) we delete your data after processing your request, unless a contractual relationship has been established between us as a result of the contact. In this case, we store the data, as necessary, until the expiry of the retention periods required by commercial and tax law.

Right of withdrawal of consent

You can withdraw this consent at any time with effect for the future. Your withdrawal does not affect the lawfulness of the processing of your personal data prior to your withdrawal.

In the event that a contract should be concluded between us and you as a result of the contact, the data storage is based on the contract or on necessary pre-contractual measures.

To exercise your right of withdrawal, simply send us a brief email or choose another form of contact. You can find our contact details in our legal notice or at the beginning of this statement.

6.2 Data processing for inquiries via email or telephone

If you contact us by email or telephone, we collect and process the personal data that you provide to us in this context (name, inquiry, telephone number, email address, if provided as part of the inquiry). z.B(e.g., email signature, your address). We use your personal data exclusively to process your request. Your data will not be shared with third parties without your consent.

Data processing

The processing of your data, which you provide as part of your inquiry via our contact form, is based on your consent to processing. (Article 6 paragraph 1 letter a) GDPR), which you grant by sending your request, or based on our legitimate interest (Article 6 paragraph 1 letter f) GDPR) the ability to respond to inquiries addressed to us.

Should a contractual relationship (membership) arise as a result of contacting us, the data processing will be carried out for the purpose of implementing pre-contractual measures. (Article 6 paragraph 1 letter b) GDPR).

Storage duration

We store the data we receive from you via the contact form until your request has been fully processed. This is subject to your consent to store your data for other purposes (z.B(e.g., newsletter distribution) we delete your data after processing your request, unless a contractual relationship has been established between us as a result of the contact. In this case, we store the data, as necessary, until the expiry of the retention periods required by commercial and tax law.

Right of withdrawal of consent

You can withdraw your consent to data processing at any time with effect for the future. Your withdrawal does not affect the lawfulness of the processing of your personal data prior to your withdrawal.

To exercise your right of withdrawal, simply send us a brief email or choose another form of contact. You can find our contact details in our legal notice or at the beginning of this statement.

7. Processing of contract and customer data

When ordering goods/services in our online shop, you will need to provide additional personal data. Before concluding the contract, you will therefore be directed to an input form for your personal data if you do not (yet) have a customer account with us, or you will have the option to log in to your customer account to continue the ordering process.

In the input form, the information required for concluding and processing the contract is marked as such. You are also free to provide additional personal data. Providing this additional data is voluntary and not mandatory for the execution or conclusion of the contract. Providing the required information is also voluntary and is neither contractually nor legally mandated. However, a contract cannot be concluded between us if you do not provide us with the data necessary for concluding and fulfilling the contract.

Legal basis:

We use the data provided during the ordering process solely for the purpose of processing the contract.

The legal basis for data processing is the contract concluded between you and us (Article 6 paragraph 1 letter b) GDPR).

Data transfer for the purpose of fulfilling the contractual relationship

To fulfill our contractual obligations, we will, if necessary, disclose your personal data to third parties to the extent required. This includes, in particular, our suppliers, parcel service providers (for the delivery of goods), and our bank (for processing payments).

Your data will not be shared with third parties beyond what is stated above, unless we are legally obligated to do so (z.B. court decision) are obliged to do so, or we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Creating a customer account

If you wish, you can create a customer account with us. By creating a customer account, we save your data for future orders. Once you have logged into your customer account and place orders through it, these orders will also be saved in your account and can be viewed there.

You can delete your customer account at any time. To do so, use the corresponding function in your customer account or via one of the o.gContact options. If you delete your customer account, only the data necessary for processing your orders will be stored, or data that can be used to prove the existence of a legitimate interest. compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims

Voluntary creation and right of withdrawal

Creating a customer account is voluntary; there is no obligation to do so (neither contractual nor legal). Data processing is based on your consent, which you can withdraw at any time with effect for the future. The withdrawal of consent does not affect processing that took place before the withdrawal.

If you revoke your consent, we will delete your customer account immediately.

Storage duration

Your data will be deleted once the purpose for which it was stored has been fulfilled. However, this does not apply if we are legally obligated to retain your data due to commercial and tax regulations. This data includes your address, payment, and order information.

Furthermore, if there is a legitimate interest, we may store the data until the expiry of the civil law limitation periods in order to be able to assert any civil law claims.

In any case, we will restrict the processing of your data after two years.This means that your data will only be used to comply with legal obligations or to defend against legitimate or, if necessary, unjustified civil claims.

If you have set up a customer account with us, we will store your data stored there at least until you delete the customer account or send us your revocation of consent to the use of the data.

Any further storage, if necessary, will only take place to the extent described above.

8. SSL or TLS encryption

On our websites where personal data can be entered (in particular during the ordering process, logging into your customer account, and subscribing to our newsletter), we use TLS (Transport Layer Security) encryption technology. This is a protocol for encrypting data transmissions to prevent unauthorized access to your personal data, especially your banking and financial information, by third parties. You can recognize the encryption by the "https://" designation.

9. Google Analytics

We use the web analytics service Google Analytics from the provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, on our website.

function

The web analytics service Google Analytics collects and analyzes data about the usage behavior of visitors to our websites.

In order to perform web analytics, Google Analytics stores cookies from your visit to our website on the device you are using.

With each visit to one of our websites (whether main or subpages) where the analytics service is integrated, the following data is collected and stored, among other things: the duration of your visit to our individual websites, the subpages of our online presence that you visited, the frequency of visits to our respective pages, the referring page (referrer) from which you came to our websites, the access location (i.e., the location from which you accessed our website), the access time, and the IP address of the device you are using.

The collected data is evaluated by Google Analytics and the results are made available to us in an online report.

Purpose and legal basis

The purpose of using Google Analytics on our websites is to analyze visitor traffic, the origin of visitors, the number of clicks on our websites, and for commission billing, ….

We use this information to optimize our websites and for cost-benefit analysis of the advertising materials we use.

The analyses enable us to adapt our website and our offers and make them more interesting for users.

We have a legitimate interest in using the web analytics service (Article 6(1)(f) GDPR), which lies in continuously improving our websites and adapting them to changing situations (in particular, changing user behavior and interests) in order to remain competitive and present our offerings optimally on the market. Furthermore, we have a legitimate interest in optimizing our advertising and thus making the best possible use of our advertising budget.

IP anonymization and disclosure of personal data

The data collected for web analytics, including your IP address, is usually transferred to a Google server in the USA.

We use IP address anonymization on our websites (both on our main page and on the subpages) through the extension “_gat_anonymizeIp”.This additional function shortens the IP addresses collected by Google within the member states of the European Union or in a member state of the Agreement on the European Economic Area before they are forwarded to the USA. Shortening the IP address prevents it from being linked to a specific individual.

In exceptional cases, the IP address may be transmitted to the USA in its entirety and shortened there. For this specific case, Google Inc. has committed to the EU-US Privacy Shield, which you can view at the following link: https://www.privacyshield.gov/EU-US-Framework.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Prevention of data collection

You can prevent the collection of your data related to your visit to our websites (including your IP address) by the cookie used for this purpose by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout/

Furthermore, you can prevent the storage of cookies in the settings of your browser software. In this context, we would like to point out that you may not be able to fully utilize all the functions of our website.

Furthermore, you can prevent Google Analytics from collecting your data by setting an opt-out cookie via the following link, which will prevent the collection of your data on future visits:

Disable Google Analytics

Please note that this cookie will also be deleted when cookies are deleted and therefore must be renewed after cookies are deleted.

Demographic characteristics

Google Analytics offers the "demographic characteristics" feature, which we use on our websites. The analytics logs transmitted to us contain data such as the age, gender, and interests of website visitors.

The data is obtained from interest-based advertising and from visitor data provided by third parties. It is not possible to link this data to a specific individual.

You can deactivate this feature in your Google account. Alternatively, you can also prevent its use by using the opt-out cookie under "Prevent data collection".

Order data processing

In accordance with European and German legal regulations and the requirements of the German data protection authorities, we have concluded a data processing agreement with CleverReach. We also ensure that data protection requirements are met and adhered to within the framework of this data processing agreement.

Storage duration

Data stored by Google at the user and results level is automatically deleted or anonymized after 26 months.

This applies to data collected using cookies, usage identifiers (s.B. User ID) and advertising IDs (z.B. DoubleClick cookies, Android advertising ID, IDFA [Apple Identifier for Advertisers]) are linked.

You can find more details at the following link:

https://support.google.com/analytics/answer/7667196?hl=de.

10. YouTube

We have embedded YouTube videos on some pages of our website. These videos can be played directly from our website and on the page. https://youtube.com saved.

The page http://www.youtube.com is operated by YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Inc., which is also represented by Google Inc.

Deployment in enhanced privacy mode

The YouTube videos displayed on our website are all embedded using the "enhanced privacy mode." This means that YouTube does not store any data unless you actually watch the embedded video. When you watch a video, or begin watching it, the following information is sent to YouTube: your IP address, the date and time the video was accessed, the video content, the access status, the amount of data transferred, the website from which the request originates, your browser (including its version and language), your operating system and its interface, the unique device identifier (the string assigned by a manufacturer to a device that uniquely identifies it), the hardware used, and the referrer URL. This information is then processed by YouTube. Furthermore, YouTube receives confirmation that you have watched the video in question.

Further information on the collection and processing of data when accessing or playing YouTube videos can be found at https://policies.google.com/privacy?hl=de&gl=de.

If you are logged into YouTube or your Google account on the device you are using when you select or watch the video, the collected data will be directly associated with your account. If you wish to prevent this, you must log out of your YouTube or Google account before watching the video.

Our interest in using YouTube

We use YouTube videos to make our websites more interesting and diverse for our users and visitors. We strive to create varied content and presentations to continue driving traffic to our websites and attracting new customers. This constitutes a legitimate interest (Article 6(1) GDPR). lit.f GDPR) of every website operator.

Processing of personal data by YouTube or Google in the USA

YouTube and Google also process the collected personal data in the USA. In this context, Google (as the legal representative of YouTube LLC) has committed to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework.

11. Google Webfonts

We use web fonts on our websites to ensure that the content is displayed attractively, correctly, and consistently across different browsers. The attractive and correct presentation of our content constitutes a legitimate interest.

The web fonts we use are Google Webfonts from Google LLC (Google), Amphitheatre Parkway, Mountain View, CA 94043, USA.

A font is generally defined as a typeface located on a device or its connected environment. Web fonts make it possible to use fonts that are not installed on the visitor's computer or the device used to access our website.

The fonts used on the website you are visiting are loaded into your browser cache by your browser when you access this page, so that the content (text and characters) is displayed correctly. In doing so, your browser connects to Google's servers. As part of this connection between your browser and Google, Google receives information that your IP address has accessed our website. However, according to Google, this information is not combined with any other known personal data (z.B.(if you are logged into your Google account at the time you access our website) and the fact that your IP address is transmitted to Google when you access a website.

According to Google, CSS (Cascading Style Sheets – a programming or stylesheet language used to give the content on our site its appearance, e.g. the color representation of individual words or paragraphs) is stored in the cache for 24 hours.

According to Google, the font files themselves are stored in the cache for one year.

Further information on data storage and Google Webfonts can be found at the following link: https://developers.google.com/fonts/faq.

Further information on Google's data usage can be found here: https://policies.google.com/privacy?hl=de.

If your browser does not support Google Webfonts or access is blocked, the content will be displayed in a standard font that is stored on the device you are using.

Data transmission

When you access a website that uses Google Web, Google receives and processes information including your IP address, the date and time of access, access status, the amount of data transferred, the website from which the request originates, your browser and its version and language, the operating system and interface you are using, the unique device identifier (the string of characters assigned by a manufacturer to the device, allowing it to be uniquely identified), the hardware used, and the referrer URL.

Data storage by Google

If you are logged into a Google account when you visit the website, this data will be linked to your account and added to your profile. If you wish to prevent this, you must log out of your Google account before visiting the site.

Regardless of whether you are logged in with your Google account, Google stores your data as part of user profiles. Google uses these profiles for market research and (needs-based or interest-based) advertising, as well as for tailoring its own websites to user interests.

If necessary, you must exercise your right to object to the creation of user profiles with Google.

Further information on the purpose and scope of data collection by Google can be found at the following link. https://policies.google.com/privacy?hl=de.

EU-US Privacy Shield

Your data is also processed and stored in the USA. For this reason, Google Inc. has committed to the EU-US Privacy Shield, which you can view at the following link: https://www.privacyshield.gov/EU-US-Framework.

12. Regarding the use of PayPal

We offer our customers the option of paying via the online payment service provider PayPal. In Europe, PayPal is operated by PayPal (Europe) S.à r. r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (PayPal).

With PayPal, you can process payments via your PayPal account. Unlike other payment providers, PayPal doesn't issue account numbers; instead, your account is managed through the email address registered with PayPal. Setting up a PayPal account is not required for certain payments; you can find details on the PayPal website and at [link to PayPal website]. https://www.paypal.com/de/webapps/mpp/ua/privacywax-full.

In addition to the service of sending and receiving payments to and from third parties, PayPal also offers a buyer protection service under certain conditions. You can find more information about this here. https://www.paypal.com/de/webapps/mpp/ua/buyerprotection-full.

You can therefore pay for goods purchased from us using PayPal. To do this, select PayPal as your payment method during the checkout process. You will then need to log in to your PayPal account or check out as a guest, if this option is available.

Transfer of data to PayPal for the purpose of contract processing

To process your payment via PayPal, it is necessary to forward personal data to PayPal. This typically includes your first and last name, address, telephone and/or mobile phone number, email address, and other data related to the order and required for payment processing, such as invoice number information.

When using "purchase on account", your name, address and email address, the goods/services you have purchased, the amount due and other relevant data will be transmitted to PayPal to ensure a smooth process. This data will then appear as pre-filled data in the application form, but can still be changed by you.

We have a legitimate interest in transferring the data to PayPal for the purpose of fulfilling or processing the contract. Furthermore, it serves to prevent fraud.

Data we receive from PayPal

PayPal will share your personal data with us if it is necessary to complete the transaction.

Furthermore, we receive personal data from you via PayPal, which we use to resolve disputes (z.B. as part of PayPal Buyer Protection) or for fraud prevention and investigation.

We also receive anonymized data and performance analyses from PayPal, which help us to better understand the use of PayPal services and to increase customer satisfaction.

Disclosure of personal data by PayPal to third parties

PayPal may share your personal data with third parties. For example, your data may be shared with credit agencies and data processors for credit checks and fraud prevention purposes.

For more information on how PayPal handles personal data, please see [link to PayPal privacy policy]. https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DEInformation about credit checks by PayPal can be found at the following link. https://www.paypal.com/de/webapps/mpp/ua/creditchk?locale.x=de_DE.

Cancellation

You have the right to withdraw your consent to PayPal's processing of your personal data at any time. This withdrawal will not affect processing that occurred prior to the withdrawal. Furthermore, withdrawal is not possible with regard to the processing of personal data that is absolutely necessary for the performance of the contract, i.e., for processing the payment via PayPal.

13. Explanation of terms

The following definitions are based on the General Data Protection Regulation (GDPR) of the European Union (Regulation (EU) 2016/679 of the European Parliament and of the Council).

"Person in charge"

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.

Therefore, the controller is generally the natural person or company which, alone or together with others, determines the purpose and manner of processing personal data.

“personal data”

Personal data is any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data includes, in addition to your first and last name, address, telephone number, email address, date of birth, etc., your IP address, information about the devices you use, voice recordings, your customer card number, your account details, your credit card numbers, and, for example, physical characteristics such as your gait or appearance.

"Processing"

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Your data is also processed, for example, when you present your customer card at the checkout during the payment process or make a payment with your debit card.

“Third”

A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

“Restriction of processing”

Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.

“Pseudonymization”

The processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information is called pseudonymization. This additional information includes, but is not limited to, the following: Furthermore, technical and organizational measures must be taken to ensure that the personal data is not attributed to an identified or identifiable natural person.

"Consent"

Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.