Privacy Policy theelephant.house

1) Information on the collection of personal data and contact details of the responsible party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data that can be used to identify you personally.

1.2 The responsible party for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is Eva Atanasow, Beethovenstrasse 55, 98529 Suhl
The party responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

2) Data collection when visiting our website

When using our website purely for informational purposes, that is, if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Used browser
Used operating system
Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

3) Hosting

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services from Shopify, data may also be transmitted for further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. In the event of data transmission to Shopify Inc. in Canada, the appropriate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found at the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify only takes place within the framework communicated below.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow your browser to be recognized on your next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to a specific extent. Persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of the cookie settings of your web browser.

Cookies are partially used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is processed by individual cookies we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can set your browser to be informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if cookies are not accepted, the functionality of our website may be limited.

Contact

In the context of contacting us (e.g., via contact form or email), personal data is collected. The data collected when using a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been finally processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

6) Data Processing when Opening a Customer Account and for Contract Processing

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed when you provide it to us for the execution of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the responsible party. We store and use the data you provide for contract processing. After the complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods expire, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us.

7) Comment Function

As part of the comment function on this website, in addition to your comment, information about the time of creation of the comment and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is done for security reasons and in case the affected person violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you in case a third party should contest your published content as illegal. The legal bases for the storage of your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are contested as illegal by third parties.

The follow-up comments can be subscribed to by you as a user. You will receive a confirmation email to ensure that you are the owner of the specified email address (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Art. 6 para. 1 lit. a GDPR. You can unsubscribe from ongoing comment subscriptions at any time with effect for the future; please refer to the confirmation email for more information on the cancellation option.

8) Use of customer data for direct advertising

8.1 Sign up for our email newsletter

When you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For the dispatch of the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have explicitly confirmed that you agree to receive the newsletter. We will then send you a confirmation email asking you to confirm by clicking a corresponding link that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address recorded by the Internet Service Provider (ISP) as well as the date and time of registration to trace any potential misuse of your email address at a later time. The data we collect during newsletter registration will be used exclusively for the purposes of advertising communication via the newsletter. You can unsubscribe from the newsletter at any time via the designated link in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve a further data use that is legally permitted and of which we inform you in this statement.

8.2 Newsletter dispatch via Sendinblue

The dispatch of our email newsletter is carried out by the technical service provider Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, to whom we pass on the data you provided during newsletter registration. This transfer is carried out in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. The data you entered for the purpose of receiving the newsletter (e.g., email address) will be stored on Sendinblue's servers in the EU.

Sendinblue uses this information for the dispatch and statistical evaluation of the newsletters on our behalf. For the evaluation, the sent emails include so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links may have been clicked. In addition, technical information is collected (e.g., time of retrieval, IP address, browser type, and operating system). The data is collected exclusively in a pseudonymized form and is not linked to your other personal data, thus excluding direct personal reference. This data is used solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

Furthermore, Sendinblue may use this data in accordance with Art. 6 para. 1 lit. f GDPR based on its own legitimate interest in the needs-based design and optimization of the service, as well as for market research purposes, to determine, for example, from which countries the recipients come. However, Sendinblue does not use the data of our newsletter recipients to contact them directly or to pass them on to third parties.

We have concluded a data processing agreement with Sendinblue, which obliges Sendinblue to protect our customers' data and not to pass it on to third parties.

You can view the privacy policy of Sendinblue here: https://www.brevo.com/de/legal/privacypolicy/

8.3 - Advertising by mail
Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address, and - to the extent that we have received these additional details from you in the context of the contractual relationship - your title, academic degree, year of birth, and your professional, industry, or business designation in accordance with Art. 6 para. 1 lit. f GDPR, and to use them for sending interesting offers and information about our products by mail.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the responsible party.

9) Data processing for order processing

9.1 As far as necessary for the processing of contracts for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact details (name, address, email address) you provided during the order to inform you personally about upcoming updates within the legally prescribed period in accordance with our legal information obligations under Art. 6 para. 1 lit. c GDPR via suitable communication channels (e.g., by post or email). Your contact details will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s) who assist us in whole or in part with the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

9.2 Use of specialized service providers for order processing and fulfillment

- Billbee
The order processing is carried out through the service provider "Billbee" (Billbee GmbH, Arolser Str. 10, 34477 Twistetal). Name, address, and any other personal data will be passed on to Billbee in accordance with Art. 6 para. 1 lit. b GDPR solely for the purpose of processing the online order. The transfer of your data will only take place to the extent that it is actually necessary for the processing of the order. Details on the data protection of Billbee and its privacy policy can be viewed on Billbee's website at "billbee.io."

9.3 Use of payment service providers

- Amazon Pay
When selecting the payment method "Amazon Pay," the payment processing is carried out by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we will pass on the information you provided during the ordering process along with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of your data is carried out solely for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. If cookies, i.e., small text files that are stored on the device, are set when using Amazon Pay, this is done solely based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time via the "Cookie Consent Tool" implemented on the website. You can find more information about the data protection regulations of Amazon Payments at the following internet address: https://pay.amazon.de/help/82974
- Google Pay
If you choose the payment method "Google Pay" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is done through the "Google Pay" application on your mobile device, which operates with at least Android 4.4 ("KitKat") and has an NFC function, by charging a payment card stored in Google Pay or a verified payment system there (e.g., PayPal). To authorize a payment over Google Pay of more than €25, you must first unlock your mobile device using the verification method set up (such as facial recognition, password, fingerprint, or pattern).
For the purpose of payment processing, the information you provided during the ordering process, along with the information about your order, is shared with Google. Google then transmits your payment information stored in Google Pay in the form of a one-time transaction number to the originating website, which verifies that a payment has been made. This transaction number does not contain any information about the actual payment data of your payment method stored in Google Pay but is created and transmitted as a uniquely valid numerical token. In all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The execution of the transaction occurs exclusively between the user and the originating website by charging the payment method stored in Google Pay.
If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason for the transaction, and any associated offer with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR based on the legitimate interest in proper accounting, verification of transaction data, and optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with additional information collected and stored by Google when using other Google services.
The terms of use for Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna
When selecting a Klarna payment service, the payment processing is carried out by Klarna Bank AB (publ), https://klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable the processing of the payment, your personal data (first and last name, street, house number, postal code, city, gender, email address, phone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) will be passed on to Klarna for the purpose of identity and credit check, provided you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, but is not limited to, address data. The information obtained about the statistical probability of a payment default is used by Klarna for a balanced decision regarding the establishment, execution, or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the data processing responsible party or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal information will be processed in accordance with applicable data protection regulations and as stated in Klarna's data protection regulations for individuals based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for individuals based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
processed.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we will pass your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. The result of the credit check regarding the statistical probability of payment default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. For further data protection information, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment processing will be carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of your data is carried out exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. For more information on the data protection of Shopify Payments, please visit the following website: https://www.shopify.com/legal/privacy.
You can find data protection information about Stripe Payments Europe Ltd. here: https://stripe.com/de/privacy

10) Online Marketing

10.1 Facebook Pixel for creating Custom Audiences (with Cookie Consent Tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an advertisement we have placed that is displayed on Facebook, an additional parameter is added to the URL of our linked page by the Facebook Pixel. If our page allows data sharing with Facebook via the Pixel, this URL parameter is written into the user's browser via a cookie set by our linked page. This cookie is then read by the Facebook Pixel and enables the forwarding of data to Facebook.
With the help of the Facebook Pixel, Facebook can determine the visitors of our online offering as a target audience for displaying ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to show the Facebook Ads we run only to those Facebook users who have also shown interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products determined by the visited websites), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interests of users and do not appear intrusive. This way, we can further evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion").
The data collected is anonymous to us, providing no conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile, and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to display advertisements on and off Facebook.
The data processing associated with the use of the Facebook Pixel occurs solely with your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the checkmark set in the "Cookie Consent Tool" embedded on the website next to the setting for the "Facebook Pixel."

10.2 Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through which simple actions such as visitor traffic on the website can be recorded, collected, and evaluated.

The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a server of Google and stored there. This may also involve transmission to the servers of Google LLC in the USA.

Google uses the information obtained to evaluate your usage behavior regarding the AdSense ads. The IP address transmitted by your browser in the context of Google AdSense will not be merged with other data from Google. The information collected by Google may be transferred to third parties if required by law and/or to the extent that third parties process this data on behalf of Google.

Details on the processing initiated by Google AdSense and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

The described processing of data is carried out in accordance with Art. 6 para. 1 lit. f GDPR for the purpose of targeted advertising directed at the user by third-party advertisers, whose ads are displayed based on the evaluated user behavior on this website. This processing also serves our financial interest in exploiting the economic potential of our online presence through the paid display of personalized third-party advertising content.

At the internet address below, you will find more information about Google's privacy policy: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them through a corresponding setting in your browser software, or you can download and install the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the aforementioned option to make an objection.

11) Web analytics services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies," which are text files stored on your device that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to a server of Google and stored there; this may also involve transmission to the servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures the anonymization of the IP address by truncation and excludes direct personal reference. Through this extension, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide us with further services related to website usage and internet usage. The IP address transmitted by your browser in the context of Google (Universal) Analytics will not be merged with other data from Google.
Google Analytics allows for the creation of statistics regarding the age, gender, and interests of website visitors based on an analysis of interest-based advertising and the inclusion of third-party information through a special feature known as "demographic characteristics." This enables the definition and differentiation of user groups of the website for the purpose of targeted marketing measures. However, the datasets collected through the "demographic characteristics" cannot be assigned to a specific individual.
Details on the processing initiated by Google Analytics and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All of the above-described processing, especially the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Analytics will not take place during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please disable this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

12) Retargeting/ Remarketing/ Recommendation Advertising

Google Ads Remarketing
Our website uses the features of Google Ads Remarketing, which allows us to advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.
Any further data processing only takes place if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads that you view on the web. If you are logged into Google during your visit to our website, Google uses your data along with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form audiences. As part of the use of Google Ads Remarketing, there may also be a transfer of personal data to the servers of Google LLC in the USA.
Details on the processing initiated by Google Ads Remarketing and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/onweb/
You can view further information and the privacy policy regarding advertising and Google here:
https://www.google.com/policies/technologies/ads/
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the "Cookie Consent Tool" provided on the website or alternatively follow the previously described option for making an objection.

Pinterest Retargeting Pixel
A pixel (Pinterest Tag) from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") is integrated on this website. The pixel allows for the collection, storage, and evaluation of information about the browsing behavior of website visitors in pseudonymized form. If personal data is also processed in this context, this is done based on our legitimate interest in displaying personalized advertising in accordance with Art. 6 para. 1 lit. f GDPR. The information can be assigned to the user’s identity using additional information that Pinterest has stored about the user due to their ownership of an account on the social network "Pinterest." Pinterest analyzes browsing behavior using an algorithm and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest can also combine the information collected through the pixel with other information that Pinterest has collected from other websites and/or in connection with the use of the social network "Pinterest," thereby creating pseudonymized usage profiles. In no case can the collected information be used to personally identify visitors to this website.
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling pixel tracking in the "Cookie Consent Tool" integrated on this website.
If applicable, data collected via the pixel may be transferred to servers of Pinterest Inc. in the USA. More information about data protection at Pinterest Europe Limited can be found here: https://policy.pinterest.com/de/privacy-policy

Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology "Pinterest Tag" from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a pin on Pinterest, a cookie will be set on your computer that interacts with a "tag" also implemented in the form of JavaScript code from Pinterest. Cookies are small text files that are stored on your device. These cookies expire after 180 days and do not serve for personal identification.
If the user is redirected from a pin on Pinterest to pages of this website and the cookie has not yet expired, the tag captures certain predefined user actions and can track them (e.g., completed transactions, leads, searches on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie via the Pinterest tag to Pinterest's server, transmitting certain information about the action (including the type of action, time, browser type of the device).
Through this transmission, Pinterest can create statistics about user behavior on our website after being redirected from a Pinterest pin, which helps us optimize our offerings.
If personal user data is processed, this is done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical evaluation of the success of product advertisements on Pinterest and the purchasing behavior of users, thus serving to optimize our online offerings.
However, we do not receive any information that can personally identify users.
If you do not wish to participate in tracking, you can object by disabling the Pinterest Tag Conversion Tracking cookie through your internet browser under user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the opt-out page for consumers from the EU http://www.youronlinechoices.com/de/praferenzmanagement/
check whether advertising cookies from Microsoft are set in your browser and disable them.
At the following internet address, you will find further information about Pinterest's data protection regulations: https://policy.pinterest.com/de/privacy-policy
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the aforementioned option to make an objection.

13) Tools and Miscellaneous

- Lexware Office
For the completion of accounting, we use the service of the cloud-based accounting software "lexware office" from Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg.
Lexoffice processes incoming and outgoing invoices as well as, if applicable, the bank transactions of our company in order to automatically capture invoices, match them to the transactions, and create the financial accounting in a partially automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in efficient organization and documentation of our business processes.
For more information about lexoffice, the automated processing of data, and the data protection regulations, please visit https://www.lexoffice.de/datenschutz/

14) Rights of the data subject

14.1 The applicable data protection law grants you the following rights as the data subject regarding the processing of your personal data (rights of access and intervention), with reference to the respective conditions for exercise based on the cited legal basis:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to deletion pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consents granted pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERWHELMING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING AT ANY TIME. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws their consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that they are no longer necessary for the fulfillment of the contract or the initiation of a contract and/or we have no legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information of this declaration regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.