Data Privacy Statement

Information concerning the collection of personal data and contact details of the controller

• 1.1 Thank you for visiting our website. In the following, we would like to inform you about the handling of your personal data when you use our website. As a rule, personal data refers to all data that can be used to personally identify you.


• 1.2 The controller for data processing on our website within the meaning of the General Data Protection Regulation (GDPR) is:
  
        Zoomyo UK
        Maxstrasse 16
        45127 Essen
        Germany.
        +49 (0) 201 - 20 181 200
        service@zoomyo.co.uk
  


• 1.3 To protect the security of your data during transmission, we use state-of-the art encryption methods (e.g. SSL or TSL) via HTTPS.

Data collection when visiting our website

• Every time our website is accessed, our system automatically generates data and information that your browser transfers to our server ("server log files"). We collect the following technically necessary data:
  
  Our website visited
  Date and time of access
  Quantity of data transferred in bytes
  Source/reference from which you arrived at the website
  Operating system used
  Browser used
  IP address used (in anonymised form where relevant)


• The legal basis for processing is Art. 6 (1)(f) of the GDPR based on our legitimate interest in improving the stability and maintaining the functional operation of our website. This data will not be disclosed or used otherwise. Temporary storage of the IP address by the system is necessary in order to deliver the website to the user's device. To this end, the user's IP address must be saved for the duration of the session.


• We reserve the right to subsequently review the server log files if there are concrete indications of unlawful use. The data will be erased as soon as it is no longer required to fulfil the purpose of its collection. For the collection of data to provide the website, this is the case when the respective session ends.


• For the storage of data in log files, this is the case after seven days at the latest. Storage above and beyond this is possible. In this case, the user's IP address will be deleted or altered so that it is no longer possible to identify the accessing client. The collection of data to provide the website and the storage of data in log files is required for the operation of the website. Accordingly, the user has no option of objection in this regard.

Cookies

• Our website uses cookies.


• Cookies are text files that are stored on the user's device. If a user accesses a website, a cookie may be stored on the user's operating system. Some features of our website cannot be offered without the use of cookies. These features require that your browser can be recognised after


• switching to a different website. The user data collected by technically necessary cookies will not be used to create user profiles. The above purposes also include our legitimate interest in the processing of personal data pursuant to Art. 6 (1)(f) of the GDPR.


• Our website also uses cookies that enable analysis of user browsing behaviour (so-called third-party cookies). You can find more information about the extent, purpose, legal purpose and objection options in the relevant sections of the relevant chapter of this privacy policy.


• As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies or delete cookies. If you deactivate cookies for our website, it may not be possible to use all features of this website to their full extent. You can prevent the transfer of Flash cookies by changing the settings for Flash Player.


• You can find instructions for settings in the relevant help menu for your browser under the following links:
  
  Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
  
  Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
  
  Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
  
  Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
  
  Opera: https://help.opera.com/en/latest/web-preferences/#cookies
  


• Some of the cookies used here are deleted when you close your browser (session cookies). Other cookies stay on your device and allow us or our partner companies (third-party cookies) to identify your browser when you visit us again (persistent cookies). If cookies are stored, they collect and process specific user information to a certain extent, such as browser and location data as well as IP addresses. Persistent cookies are automatically deleted after a preset period that varies depending on the cookie.

Data processing for order handling

• 4.1 To establish a contract when ordering from our online shop, you must provide us with the personal data that we require to handle your order. We process the data you provide in order to process your order.


• In some cases, we work together with external service providers in order to process your order. To this end, we are required to pass on the necessary personal data.


• If we engage transport companies to deliver your goods, we transfer your data that is required for the delivery of the goods to the respective transport company. To process payments, we pass on your data to the authorised bank as part of the payment process. If we engage payment service providers, you will also be informed of this in the following.
  
  The legal basis for disclosing your data is Art. 6 (1)(b) of the GDPR.


• 4.2 Use of payment service providers


• – PayPal When selecting the payment methods of PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "instalment payment", the payment is settled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
  
  We share your personal data with PayPal to the extent necessary in accordance with Art. 6 (1)(b) of the GDPR. PayPal reserves the right to carry out a credit check when paying via PayPal with credit card, direct debit or – if offered – by “purchase on account” or “instalment payment”.
  
  To this end, your payment data may be passed on to credit rating agencies to determine your ability to pay based on PayPal's legitimate interest pursuant to Art. 6 (1)(f) of the GDPR. PayPal uses the result of the credit check with respect to probability of non-payment for the purpose of deciding on the availability of the respective payment method.
  
  The credit check can generate probability values (score values). As far as score values are used in the results of the credit check, these have their basis in a scientifically recognised mathematical and statistical process. The information used to calculate score values includes, but is not limited to, address data.
  
  Any other data collected by PayPal can be determined by consulting PayPal’s relevant privacy statement. This statement can be found at: https://www.paypal.com/uk/webapps/mpp/home.
  
  You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal remains entitled to process your personal data if this is required for the proper contractual settlement of payment.

Data processing when creating a customer account and for performance of contract

• If you open a customer account with us, personal data will be collected and processed in this context in accordance with Art. 6 (1)(b) of the GDPR. The scope of data can be seen in the input form. We will store and use the data you provide for contract performance.
  
  You can delete your customer account at any time. This can be accomplished by sending a message to the controller's address or directly in the customer account if this option is offered. In that case, we will also block your data taking into account retention periods in accordance with tax and commercial law, and then delete it once these periods are over. We will only proceed otherwise if you consent to long-term storage or if we continue to use the data as permitted by law.

Contact

• If you contact us using the contact form, the data you enter in the input screen will be transferred to us and stored. The data collected can be derived from the respective input screen. For contact by e-mail, only the data you provide in this way will be transferred to us.
  
  The data will exclusively be used to process the correspondence and your request. The legal basis for data processing where the user has given consent is Art. 6 (1)(a) of the GDPR. The legal basis for data processing for data sent when transmitting an e-mail is Art. 6 (1)(f) of the GDPR. If the purpose of e-mail contact is to establish a contract, an additional legal basis for processing is Art. 6 (1)(b) of the GDPR. The data will be erased as soon as it is no longer required to fulfil the purpose of its collection and as long as no statutory retention obligations oppose this. For personal data from the input screen of the contact form and data sent by e-mail, this is the case once the respective conservation with the user has ended. The conversation is deemed to have ended when it can be assumed that the relevant matter has been conclusively resolved. The user has the right to withdraw consent to the processing of personal data at any time. If users contact us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.


• 6.1 WhatsApp Business


• Visitors to our website have the option of communicating with us via WhatsApp (a service of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA).
  To this end, we use the "Business Version" of WhatsApp. If you contact us via WhatsApp concerning a specific contract, we store and use the mobile phone number that you use for WhatsApp and – if this information is disclosed and/or transmitted – your first and last name (Art. 6 (1)(b) of the GDPR) for the purpose of processing your request.
  
  You may also be requested to provide additional data if this is necessary in order to process your request (Art. 6 (1)(b) of the GDPR).


• If contact via WhatsApp business is used for general requests that do not concern a specific contract, we store and use the mobile phone number that you use for WhatsApp and – if this information is disclosed and/or provided – your first and last name (Art. 6 (1)(b) of the GDPR) for the purpose of processing your request.
  
  Our legitimate interest here is responding quickly to questions from our customers or interested parties. This data will not be disclosed to third parties.
  
  WhatsApp Business receives access to the Contacts of the mobile device used. The phone numbers stored there are automatically transmitted to a Facebook server in the USA.
  
  The mobile device we use for WhatsApp Business only contains the WhatsApp contact details of those users who have already contacted us via WhatsApp.


• Facebook Inc. with its registered office in the USA is certified for the US-European data protection agreement called "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU. For more details concerning the handling of data by WhatsApp, please consult WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1&lang=en

Use of single sign-on procedure

• Facebook Connect sign-in
  
  On our website, we use "Facebook Connect", a plugin of the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) (hereinafter referred to as "Facebook"). This allows you to create a customer account or log in using a procedure called single sign-on if you have a Facebook profile. When you call up a page on our website containing such a plugin, your browser establish a direct connection to Facebook’s servers. During the process, Facebook transmits the content of the plugin directly to your browser, where it is incorporated into the page. In this way, Facebook receives a notification that your browser has called up the website in question, even if you do not have a Facebook profile or if you happen not to be logged in to Facebook at that time. This information (which includes your IP address) is sent directly from your browser to a Facebook server and stored there; transfer to the USA is also possible.


• Our legitimate interest lies in enabling a fast and easy registration process for our customers. For this reason, the legal basis is Art. 6 (1)(f) of the GDPR.


• Facebook has a legitimate interest in displaying personalised advertising based on the browser behaviour of users, the legal basis is Art. 6 (1)(f) of the GDPR.
  
  You can also register and log in to our website with your Facebook data without using the Facebook button.
  
  When you use the Facebook button, we will only receive the general and publicly available information from your Facebook profile if you have granted your express consent to the exchange of data with Facebook before the registration process pursuant to Art. 6 (1)(a) of the GDPR. This data is only disclosed according to your personal data protection settings in Facebook. This information can include user ID, name, profile picture, age and gender.


• Please note that according to the changes to Facebook's privacy conditions and terms of use, provided you have given your consent, it is possible that your profile pictures, the user IDs of your friends and your friends list may also be transferred if you have marked them as "public" in your privacy settings in Facebook.
  
  We store and process the data Facebook transmits to us in order to create a user account with the necessary data. Based on your consent, we may also transfer data (e.g. information about your browsing or purchasing behaviour) to your Facebook profile.
  
  Consent can be withdrawn at any time after it is granted by sending a message to the controller responsible for processing your data.
  
  Facebook Inc., with its registered office in the USA, is certified for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.


• For more information, please consult the privacy policy of Facebook: http://www.facebook.com/policy.php
  
  If you don’t want Facebook to attribute the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website.
  
  You can also completely prevent the Facebook plugins from loading by using add-ons for your browser such as "Adblock Plus" (https://adblockplus.org/en/).

Comment function

• If you use the comment function on our website, the content of your comment will be stored and published on the website along with information about the time the comment was created and the username you selected. Your IP address will also be recorded and stored.
  
  The legal basis for the storage of your data is Art. 6 (1)(b) and (f) of the GDPR. Your IP address is stored for security reasons and in case the data subject violates third-party rights or publishes unlawful content when submitting a comment. Your e-mail address is required in order to contact you if a third party reports content you have published as unlawful. We reserve the right to delete comments if third parties report them as unlawful.


• 8.1 If you opt to follow subsequent comments, you will first receive a confirmation e-mail (double opt-in procedure) in which you must confirm that you are the owner of the e-mail address provided. The legal basis for data processing in case of following comments is Art. 6 (1)(a) of the GDPR. The decision to follow comments can be revoked at any time with effect for the future by following the information in the confirmation e-mail.

Use of your data for direct marketing

• 9.1 Newsletter


• On our website, we provide the option of subscribing to a free newsletter. During newsletter subscription, the data from the input screen is transmitted to us. The only mandatory field is your e-mail address. If you provide other information voluntarily, this will only be used to personalize our contact with you.
  
  The legal basis for data processing for newsletter subscription where the user has given consent is Art. 6 (1)(a) of the GDPR. We obtain this by sending you a confirmation e-mail after newsletter subscription that contains a confirmation link. If you click on this link, you also consent to receiving the newsletter mailing.
  
  When sending the newsletter subscription, we save your IP address along with the date and time of registration. This information is saved in order to trace a potential misuse of your e-mail address.
  
  We use the data that we collect during newsletter subscription exclusively for the purpose of newsletter mailing.
  
  You can cancel the newsletter subscription at any time. Each newsletter contains a link for this purpose. This also includes an option to withdraw consent to the storage of the personal data collected during the registration process.


• 9.2 Newsletter for existing customers


• If you purchase goods or services on our website and store your e-mail address in the process, we may use this subsequently in order to send a newsletter. In such cases, the newsletter exclusively sends direct marketing for our similar goods or services.
  
  The legal basis for newsletter mailing after the sale of goods or services is Section 7 (3) UWG and Art. 6 (1)(f) of the GDPR. In this regard, data processing occurs exclusively based on our legitimate interest in personalised direct marketing.
  
  If you have already objected to the use of your e-mail address for the purpose of direct marketing, you will not receive this newsletter. You also have the option to object later at any time to the use of your e-mail address for the above-mentioned marketing purpose with effect for the future by sending a message to the contact named above. After your objection has been received, the use of your e-mail address for marketing purposes will promptly cease.


• 9.3 Newsletter2Go


• We send our newsletter via Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, Germany (hereinafter referred to as "Newsletter2GO").
  In order to pursue our legitimate interest in the use of a secure and user-friendly newsletter system that has an effective promotional impact, we transfer the data you enter during newsletter subscription to Newsletter2Go pursuant to Art. 6 (1)(f) of the GDPR.
  
  The data entered during newsletter subscription (e.g. e-mail address) will be stored on the Newsletter2Go servers in Germany. Your data will be used by Newsletter2Go for mailing and statistical analysis of the newsletter on our behalf. To this purpose, the newsletter e-mail contains so-called web beacons or tracking pixels, single-pixel image files that are saved on our website. This makes it possible to track whether a newsletter e-mail is opened and which links are clicked in the e-mail. Using this conversion tracking, it is also possible to trace whether an action was taken (such as purchasing an item from our shop) after opening a link in the newsletter. Technical information is also collected (e.g. the time of access, your IP address, browser type and/or operating system). This data is only collected in pseudonymised form and will not be linked with your other personal data. If you do not want the data analysis described here, you must unsubscribe from the newsletter. A data processing agreement was concluded with Newsletter2Go.
  
  You can find details regarding data protection for Newsletter2Go at:


• 9.4 WhatsApp newsletter


• If you order our WhatsApp newsletter, you will also receive this via WhatsApp. For registration, we only require your mobile phone number. To subscribe to the newsletter, save the mobile phone number we provide in your contacts on your mobile device and send the message "Start" to this number via WhatsApp. By doing so, you are also consenting that we use your personal data pursuant to Art. 6 (1)(a) of the GDPR to mail our WhatsApp newsletter.
  
  You can unsubscribe from the newsletter at any time by sending the message "Stop" via WhatsApp. After this, we will erase your mobile phone number from our distribution list unless you have explicitly consented to further use of your data or we retain your data based on statutory regulations.

Use of social media: social plugins

• 10.1 Facebook as standard plugin


• On our website, we use social plugins ("plugins") from the Facebook social network (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) (hereinafter referred to as "Facebook").
  
  You can generally identify the plugins by the Facebook logo, usually a white "f" with a blue background. You can see other designs of the Facebook plugin here: https://developers.facebook.com/docs/plugins
  
  When visiting a page on our website containing such a plugin, your browser establishes a direct connection to Facebook’s servers and Facebook transmits the content of the plugin directly to your browser even if you do not have a Facebook profile or if you happen not to be logged in to Facebook at that time. This information (which includes your IP address) is sent directly from your browser to a Facebook server in the USA, where it is stored.
  
  If you are logged in to Facebook at the time, Facebook can attribute your visit to our website directly to your Facebook profile. If you interact with a plugin (for example by clicking the ‘Like’ button or by entering a comment), this information will also be sent directly to a Facebook server and saved there. These actions may also be published on your Facebook profile and displayed to your Facebook friends.
  
  We have a legitimate interest in displaying personalised marketing and exhausting the full financial potential of our website. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  Facebook has a legitimate interest in displaying personalised advertising to enable a needs-based design of its service. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  If you don’t want Facebook to attribute the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent the loading of Facebook plugins by using add-ons for your browser, for example with the script blocker "NoScript" (http://noscript.net/).
  
  Facebook Inc., with its registered office in the USA, is certified for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  For more information, please consult Facebook’s privacy policy: http://www.facebook.com/policy.php


• 10.2 Google+ as standard plugin


• On our website, we use "Google+", a plugin from the social network Google+ (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) (hereinafter referred to as "Google+").
  
  You can recognise the plugin by the "+1" symbol on a white or coloured background. Additional possible designs can be consulted here: https://developers.google.com/+/plugins.
  
  If you are logged in to Google+ at the time, Google+ can attribute your visit to our website directly to your Google+ profile. If you interact with a plugin, this information will also be sent directly to a Google+ server and saved there. It is possible that data may be transferred to the USA in this process.
  
  We have a legitimate interest in displaying personalised marketing and exhausting the full financial potential of our website. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  Google+ has a legitimate interest in displaying personalised advertising to enable a needs-based design of its service. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  If you don’t want Google+ to attribute the data collected via our website to your Google+ profile, you must log out of Google+ before visiting our website. You can also prevent the loading of Google+ plugins by using add-ons for your browser, for example with the script blocker "NoScript" (http://noscript.net/).
  
  In the event that data is transferred to the USA, Google LLC, with its registered office in the USA, is certified for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  For more information, please consult the privacy policy of Google+: https://www.google.de/intl/en/policies/privacy


• 10.3 Instagram as standard plugin


• On our website, we use social plugins ("plugins") from the Instagram social network (Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA) (hereinafter referred to as "Instagram").
  
  You can generally identify the plugins by the "Instagram camera". You can see other designs of the Instagram plugin here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
  
  When visiting a page on our website containing such a plugin, your browser establishes a direct connection to Instagram’s servers and Instagram transmits the content of the plugin directly to your browser even if you do not have a Instagram profile or if you happen not to be logged in to Instagram at that time. This information (which includes your IP address) is sent directly from your browser to a Instagram server in the USA, where it is stored.
  
  If you are logged in to Instagram at the time, Instagram can attribute your visit to our website directly to your Instagram profile. If you interact with a plugin (for example by clicking the "Instagram" button or by entering a comment), this information will also be sent directly to an Instagram server and saved there. These actions may also be published on your Instagram profile and displayed to your Instagram friends.
  
  We have a legitimate interest in displaying personalised marketing and exhausting the full financial potential of our website. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  Instagram has a legitimate interest in displaying personalised advertising to enable a needs-based design of its service. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  If you don’t want Instagram to attribute the data collected via our website to your Instagram profile, you must log out of Instagram before visiting our website. You can also prevent the loading of Instagram plugins by using add-ons for your browser, for example with the script blocker "NoScript" (http://noscript.net/).
  
  Instagram’s privacy policy: https://help.instagram.com/155833707900388/


• 10.4 LinkedIn as standard plugin


• On our website, we use social plugins ("plugins") from the LinkedIn social network (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA) (hereinafter referred to as "LinkedIn").
  
  You can generally identify the plugins by the LinkedIn logo or the "Recommend" button.
  
  When visiting a page on our website containing such a plugin, your browser establishes a direct connection to LinkedIn’s servers and LinkedIn transmits the content of the plugin directly to your browser even if you do not have a LinkedIn profile or if you happen not to be logged in to LinkedIn at that time. This information (which includes your IP address) is sent directly from your browser to a LinkedIn server in the USA, where it is stored.
  
  If you are logged in to LinkedIn at the time, LinkedIn can attribute your visit to our website directly to your LinkedIn profile. If you interact with a plugin (e.g. by clicking a "LinkedIn" button), this information will also be sent directly to a LinkedIn server and saved there. These actions may also be published on your LinkedIn profile and displayed to your LinkedIn friends.
  
  We have a legitimate interest in displaying personalised marketing and exhausting the full financial potential of our website. The legal basis is Art. 6 (1)(f) of the GDPR. LinkedIn has a legitimate interest in displaying personalised advertising to enable a needs-based design of its service. The legal basis is Art. 6 (1)(f) of the GDPR. If you don’t want LinkedIn to attribute the data collected via our website to your LinkedIn profile, you must log out of LinkedIn before visiting our website. You can also prevent the loading of LinkedIn plugins by using add-ons for your browser, for example with the script blocker "NoScript" (http://noscript.net/).
  
  LinkedIn’s Privacy policy: https://www.linkedin.com/legal/privacy-policy


• 10.5 Pinterest as standard plugin


• On our website, we use social plugins ("plugins") from the social network Pinterest, (Pinterest Inc., 808 Brannan Street, San Francisco, CA, 94103, USA) (hereinafter referred to as "Pinterest").
  
  You can generally identify the plugins by the "Pin it" button. You will find additional designs of the Pinterest plugin here: https://developers.pinterest.com/docs/getting-started/introduction/
  
  When visiting a page on our website containing such a plugin, your browser establishes a direct connection to Pinterest’s servers and Pinterest transmits the content of the plugin directly to your browser even if you do not have a Pinterest profile or if you happen not to be logged in to Pinterest at that time. This information (which includes your IP address) is sent directly from your browser to a Pinterest server in the USA, where it is stored.
  
  If you are logged in to Pinterest at the time, Pinterest can attribute your visit to our website directly to your Pinterest profile. If you interact with a plugin (e.g. by clicking a "Pin it" button), this information will also be sent directly to a Pinterest server and saved there. These actions may also be published on your Pinterest profile and displayed to your Pinterest friends.
  
  We have a legitimate interest in displaying personalised marketing and exhausting the full financial potential of our website. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  Pinterest has a legitimate interest in displaying personalised advertising to enable a needs-based design of its service. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  If you don’t want Pinterest to attribute the data collected via our website to your Pinterest profile, you must log out of Pinterest before visiting our website. You can also prevent the loading of Pinterest plugins by using add-ons for your browser, for example with the script blocker "NoScript" (http://noscript.net/).
  
  Pinterest’s Privacy policy: https://about.pinterest.com/en/privacy-policy


• 10.6 Twitter as standard plugin


• On our website, we use social plugins ("plugins") from the online service Twitter (Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA) (hereinafter referred to as "Twitter").
  
  You can recognise the plugins by the Twitter logo, for instance a blue "Twitter bird".
  You will find additional designs of the Twitter plugin here:
  https://about.twitter.com/en/resources/buttons
  
  When visiting a page on our website containing such a plugin, your browser establishes a direct connection to Twitter's servers and Twitter transmits the content of the plugin directly to your browser even if you do not have a Twitter profile or if you happen not to be logged in to Twitter at that time. This information (which includes your IP address) is sent directly from your browser to a Twitter server in the USA, where it is stored.
  
  If you are logged in to Twitter at the time, Twitter can attribute your visit to our website directly to your Twitter profile. If you interact with a plugin (e.g. by clicking a "Twitter" button), this information will also be sent directly to a Twitter server and saved there. These actions may also be published on your Twitter profile and displayed to your Twitter friends.
  
  We have a legitimate interest in displaying personalised marketing and exhausting the full financial potential of our website. The legal basis is Art. 6 (1)(f) of the GDPR.
  Twitter has a legitimate interest in displaying personalised advertising to enable a needs-based design of its service. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  If you don’t want Twitter to attribute the data collected via our website to your Twitter profile, you must log out of Twitter before visiting our website. You can also prevent the loading of Twitter plugins by using add-ons for your browser, for example with the script blocker "NoScript" (http://noscript.net/).
  
  Twitter’s privacy policy: https://twitter.com/privacy


• 10.7 Xing plugins


• We have embedded the "XING Share button" on our website.
  
  When you access our website, your browser establishes a temporary connection to the servers of XING SE, Caffamacherreihe 8, 20355 Hamburg, Germany (hereinafter referred to as “XING”), which performs the "XING Share button" functions (particularly calculating/displaying the count value). However, XING does not save any personal data concerning you during your visit to this website; in particular it does not store your IP addresses. No analysis will be performed concerning your usage behaviour by using cookies in connection with the "XING Share button".
  
  You can access details here: https://www.xing.com/app/share?op=data_protection

Use of social media: videos

• Use of YouTube videos
  
  On this website, we use the YouTube embedded video function to display and play videos from the provider "YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). In this regard, we use the privacy enhanced mode, which only initiates storage of user information when the video(s) is/are reproduced, according to the provider. If you press play on embedded YouTube videos, the provider "YouTube" uses cookies to collect information about your user behaviour. According to "YouTube", these cookies are used, among other things, to collect video statistics, improve user-friendliness and prevent fraudulent activities. If you are logged into Google at the time, your data will be directly attributed to your account.


• If you do not want YouTube to attribute this data to your profile, you must log out before activating the button. Google will store your data (even for users that are not logged in) as a usage profile and analyse this. This analysis occurs particularly according to Art. 6 (1)(f) of the GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or needs-based design of a website, as well as our legitimate interest in embedding videos in accordance with Art. 6 (1)(f) of the GDPR for the analysis of user behaviour, design of our website according to user interests and exhausting the financial potential of our website.
• You have the right to object against the formation of these user profiles; to do so, you must contact YouTube. Independently of whether the embedded videos are played, every time this website is accessed, a connection is established with the Google "DoubleClick" network that can trigger additional data processing operations that are beyond our control.
• Data may also be transferred to the servers of Google LLC in the USA. For cases in which personal data is transmitted to Google LLC, which has its registered office in the USA, Google LLC obtained certification for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU. You can find more information about data protection at "YouTube" in the provider's privacy policy at https://www.google.de/intl/de/policies/privacyOpt-out or at: https://adssettings.google.com/authenticated

Online marketing

• 12.1 DoubleClick by Google
  
  This website uses the online marketing tool DoubleClick by Google provided by the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") ("DoubleClick").


• DoubleClick by Google uses cookies to display advertising that is relevant for you. A pseudonymised identification number (ID) is assigned to your browser to check which ads were displayed in your browser and which ads were clicked on. In this way, we obtain valuable information to enhance our website for faster and more customer-friendly design. The present analysis is based on the pursuit of our legitimate interests pursuant to Art. 6 (1)(f) of the GDPR. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to display ads based on prior visits to our website or other websites.
• The information generated by the cookies is generally transferred by Google to a server in the USA and stored there. Transfer of data from Google to third parties will only take place based on statutory regulations or in the context of commissioned data processing. Google will not aggregate your data with other data collected by Google under any circumstances. You have the option to prevent the storage of cookies on your computer by way of a relevant setting in your browser software; we would like to point out, however, that such a setting may prevent your utilisation of our website and its functions to their full extent.
• You can also prevent the collection of the data generated by the cookies concerning your use of this website as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link (https://adssettings.google.com/) under the item Double Click deactivation extension.
  Alternatively, you can deactivate DoubleClick cookies on the website of the Digital Advertising Alliance at the following link (http://optout.aboutads.info/?c=2#!/).
  
  For cases in which data is transmitted to Google LLC, which has its registered office in the USA, Google LLC obtained certification for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  You can find further information about the privacy policy for DoubleClick by Google under the following link:
  http://www.google.de/policies/privacy


• 12.2 Use of Google Ads conversion tracking
  
  This website uses the online marketing program "Google Ads" and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").


• In this context, advertising materials (“Google AdWords”) are used to advertise our services on external websites. Our legitimate interest is to display ads that are relevant for you and to achieve a fair calculation of ad costs. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  Google Ads uses cookies for conversion tracking that are set if you click an AdWords ad displayed by Google.
• These cookies generally lose their validity after 30 days and are not used for personal identification. Every Google Ads client receives a different cookie. As a result, cookies cannot be traced across the websites of Ads clients.
• The information obtained using the conversion cookie serves to generate conversion statistics for Ads clients about the total number of users that clicked on their ad and were forwarded to a website containing a conversion tracking tag.
  
  You cannot be personally identified from this information.
  
  If you would like to prevent tracking, you can deactivate the Google conversion tracking cookie in the user settings of your internet browser.
  
  For cases in which data is transmitted to Google LLC, which has its registered office in the USA, Google LLC obtained certification for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  You can find further information about Google’s data protection provisions here: http://www.google.de/policies/privacy/
  
  You can permanently deactivate the conversion cookies by changing your browser settings accordingly or by downloading and installing the browser plugin available at the following link: http://www.google.com/settings/ads/plugin?hl=en
  
  In this case, it may not be possible to use certain functions of this website or only to use them in a limited way.

Web analysis services

• 13.1 Google Universal Analytics
  
  This website uses the web analysis service Google Analytics (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
  Google Analytics uses “cookies”. These are text files that are stored on your computer, making it possible to analyse your use of our website.
  The information generated in this way about your use of this website (including the truncated IP address) is generally transmitted to one of Google’s servers and stored there; transfer to the USA is possible in this context.


• We use Google Analytics with the extension “_anonymizeIp()”, which guarantees anonymisation of the IP address through truncation and prevents direct personal identification. Your IP address will be truncated by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. In exceptional cases, your full IP address be transmitted to a Google-owned server in the USA and then shortened there. In these exceptional cases, processing occurs based on Art. 6 (1)(f) of the GDPR. Our legitimate interest lies in statistical analysis of user behaviour for the purposes of optimisation and marketing.
• Google will use this information to analyse your use of the website on our behalf, to compile reports about website activity and to perform other services associated with website use and internet use on our behalf. In this process, the IP address transmitted by your browser will not be linked with other data held by Google.
• You can prevent the storage of cookies by changing your browser settings accordingly.
  You may also prevent the collection of data generated by the cookie in connection with your utilisation of this website (incl. your IP address) and the subsequent processing of that data by Google by downloading and installing the following browser plugin:
  http://tools.google.com/dlpage/gaoptout?hl=en
  
  Alternatively, you can set an opt-out cookie:
  
  Deactivate Google Analytics
  
  The opt-out cookie is only valid in this browser and only for this domain. If you delete your cookies in this browser, you will need to click on this link again.
  
  For cases in which data is transmitted to Google LLC, which has its registered office in the USA, Google LLC obtained certification for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  This website also uses Google Analytics for cross-device analysis of visitor flows carried out using a user ID. You can deactivate cross-device analysis of your usage in your customer account under "My Data", "Personal Data".
  
  Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en


• 13.2 Hotjar (hotjar Ltd.)
  
  On this website, we use the web analysis service Hotjar provided by Hotjar Ltd (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, Phone: +1 (855) 464-6788).
  This tool makes it possible to trace movement on our websites (“heat maps”). For instance, this detects how far you scroll and which buttons you click with what frequency. In this way, we obtain necessary information to enhance our website for faster and more customer-friendly design. Our legitimate interest lies in interest-based design of our website and marketing purposes. The legal basis is Art. 6 (1)(f) of the GDPR. Areas of the website where personal data concerning you or third parties is displayed are automatically hidden by Hotjar and not analysed. You can prevent the use of the Hotjar tool using a "Do Not Track" header. This is a setting that all common browsers support in their latest versions. If you use our website with different browsers, you have to set up the "Do Not Track" header separately for each of these browsers/devices. You can find a detailed guide with information about your browser here: https://www.hotjar.com/opt-out. More information about Hotjar Ltd and the Hotjar tool is available here: https://www.hotjar.com


• You can find the Hotjar Ltd.’s privacy policy here:
  https://www.hotjar.com/privacy

Retargeting / remarketing / recommendation marketing

• 14.1 Bing Ads (Microsoft Corporation)
  
  This website uses the conversion tracking technology "Bing Ads" by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA).
  If you were referred to our website from a Microsoft Bing ad, Bing Ads will store a cookie on your device. The information obtained using the conversion cookies is used to generate conversion statistics. In this way, we learn the total number of users that clicked on our ad and were forwarded to a website containing a conversion tracking tag. We do not receive any information that could allow users to be personally identified.
  
  These cookies expire after 180 days.
  If the user visits a website and the cookie has not yet expired, we and Bing Ads can see that the user clicked on the ad and was forwarded to this website (conversion page).
  To the extent that personal data is processed, this occurs in accordance with Art. 6 (1)(f) of the GDPR, based on our legitimate interest in effective marketing and exhausting the financial potential of our website.


• The Microsoft Corporation, with its registered office in the USA, is certified for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.


• You can prevent tracking by deactivating the Bing Ads conversion tracking cookie in the user settings of your internet browser.
  Alternatively, you can use the deactivation page for consumers from the EU http://www.youronlinechoices.com/uk/your-ad-choices/ to check whether Microsoft advertising cookies are stored in your browser and then deactivate them.
• Privacy Policy of Microsoft Bing Ads: https://privacy.microsoft.com/en-us/privacystatement


• 14.2 Facebook Custom Audience using Pixel
  
  On this website, we use the "Facebook Pixel" provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If express consent has been given, this makes it possible to track the behaviour of users after they view or click a Facebook ad. This method is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can contribute to the optimisation of future advertising activities. The data collected is anonymous for us, meaning that we are unable to draw conclusions about the identity of users. However, Facebook stores and processes data, so a connection to the corresponding user profile is possible and Facebook may use the data for its own marketing purposes in accordance with the Facebook privacy policy (https://www.facebook.com/about/privacy/).
  
  You can enable Facebook and its partners to display ads both on Facebook and on other websites. For these purposes, a cookie can be stored on your device. These processing operations exclusively occur when express consent is granted pursuant to Art. 6 (1)(a) of the GDPR. Consent to the use of Facebook pixels may only be given by users who are 13 and older. If you are younger, please ask your legal guardian for permission. Facebook Inc., with its registered office in the USA, is certified for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU. You can deactivate the storage of cookies on your computer by changing your browser settings accordingly. However, in this case it may not be possible to use all features of this website to their full extent. You can also deactivate the use of cookies by third-party providers like Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/


• 14.3 Google AdWords Remarketing
  
  Our website uses the features of Google Ads (formerly "Google AdWords") Remarketing to advertise for our website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). For this purpose, Google sets a cookie in your device's browser that automatically enables interest-based advertising using a pseudonymised cookie ID and based on the websites you have visited which generally loses its validity after 30 days. Processing is carried out based on our legitimate interest in optimal marketing of our website and exhausting the financial potential of our website. The legal basis is Art. 6 (1)(f) of the GDPR.
  
  Data processing that exceeds this purpose will only occur if you have given Google your consent to let Google link your internet and app browser history with your Google account and use information from your Google account to personalise ads that you view online. If you are logged into Google when you visit our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to create target groups.
  
  You can permanently deactivate the storage of cookies for ad preferences by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/onweb/
  
  Alternatively, you can obtain information from the Digital Advertising Alliance concerning the storage of cookies at the website www.aboutads.info and change your settings accordingly. You can also adjust your browser in such a way that you will be informed about the setting of cookies, so you can either decide on a case-by-case basis to accept or reject a specific cookie, or reject the acceptance of all cookies. The functionality of our website can be restricted if cookies are not accepted.
  
  For cases in which data is transmitted to Google LLC, which has its registered office in the USA, Google LLC obtained certification for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  Privacy policy concerning ads and Google:
  https://policies.google.com/technologies/ads?hl=en

Use of a live chat system

• Livehelperchat
  
  On this website, we use the live chat system of Livehelperchat, Remigijus Kiminas, Dazelio 31, 5400 Siauliai, Lithuania, (www.livehelperchat.com).
  In this context, anonymised data is collected and stored for the purpose of web analysis and to operate the live chat system to answer live support queries. Using this anonymised data, usage profiles may be created under a pseudonym. Cookies may also be set for this purpose. These cookies make it possible to recognise your internet browser. If the information collected in this way is of a personal nature, the legal basis for data processing is Art. 6 (1)(f) of the GDPR.
  
  Our legitimate interest lies in effective customer support and statistical analysis of user behaviour for the purposes of optimisation and marketing. Without the consent of the data subject, the data will not be used to personally identify visitors to this website. No data will be brought together with personal data concerning the bearer of the pseudonym.


• You can prevent the storage of cookies by changing your browser settings to no longer store cookies on your computer in the future or to delete previously stored cookies. However, in this case it may not be possible to use all features of this website.


• You have the option to object to the collection and storage of data for the purpose of creating a pseudonymous usage profile at any time with future effect. Send your informal objection by email to our e-mail address listed at the start of the privacy policy.

Tools and miscellaneous

• 16.1 Google reCAPTCHA
  
  We use the reCAPTCHA function provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") according to Art. 6 (1)(f) of the GDPR based on our legitimate interest in preventing misuse and spam.
  reCAPTCHA is a function designed to ensure that information is entered by a natural person.
  The service sends your IP address and any other data required by Google for the reCAPTCHA service to Google.
  
  When using Google reCAPTCHA, your personal data may also be transferred to the servers of Google LLC in the USA.
  Google LLC, with its registered office in the USA, is certified for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU. The certificate can be accessed on the following website: https://www.privacyshield.gov/list.
  You can view details about Google reCAPTCHA and the privacy policy of Google at:
  https://www.google.com/intl/en/policies/privacy


• 16.2 Google Maps
  
  We use "Google Maps" (API) provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
  
  Google Maps is used to display interactive maps and generate route descriptions. The use of Google Maps may involve the transmission of information about your use of this website to Google in the USA, including your IP address and the (starting) address entered using the route planner function. If you access a page on our website that contains Google Maps, your browser establishes a direct connection with the servers of Google. Google directly transmits the map content to your browser and your browser displays it as part of the website. We have no influence over the handling of data collected by Google in this manner. To the best of our knowledge, this involves at least the following data:
  
  • Date and time of access to the website in question,
  • Internet address or URL of the website accessed,
  • IP address, (starting) address entered during route planning.
  
  We have no influence over the further processing and use of data by Google, and therefore cannot accept any responsibility in this regard. If you are logged into Google at the time, your data will be directly attributed to your Google account. If you do not want your account to be recognised, you must log out of Google. Google will store your data (even for users that are not logged in) as a usage profile and analyse this. This analysis occurs particularly according to Art. 6 (1)(f) of the GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or needs-based design of its website. You have the right to object against the creation of these user profiles; to do so, you must contact Google.
  
  If you would not like Google to collect, process or use your personal data via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display. For the purpose and scope of data collection and the subsequent processing and use of the data performed by Google as well as your rights in this respect and ways to protect your privacy, please refer to Google’s privacy policy: (https://policies.google.com/privacy?hl=en). For cases in which data is transmitted to the USA, Google LLC, which has its registered office in the USA, obtained certification for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  Google’s terms of use can be accessed here:
  http://www.google.de/intl/en/policies/terms/regional.html
  
  The terms of use for Google Maps can be accessed here:
  https://www.google.com/intl/en_US/help/terms_maps.html
  More information about data protection can be found here:
  
  http://www.google.de/intl/en/policies/privacy/
  


• 16.3 Google Web Fonts
  
  For a unified display of typefaces, we use the Web Fonts service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
  When you access our website, your browser loads the required web fonts into the browser cache.
  
  To do so, your browser must establish a connection with the servers of Google for which your IP address is transmitted. In this case, your personal data may also be transferred to the servers of Google LLC in the USA. Our legitimate interest within the meaning of Art. 6 (1)(f) of the GDPR is in the unified and attractive display of our online services.
  
  If your browser does not support Web Fonts, your computer will use a standard typeface.
  
  For cases in which personal data is transmitted to Google LLC, USA, Google obtained certification for the US-European data protection agreement "Privacy Shield”, which guarantees compliance with the level of data protection required in the EU.
  
  Details about Google Web Fonts can be found here:
  https://developers.google.com/fonts/faq
  and in Google's privacy policy:
  https://www.google.com/policies/privacy

Rights of the data subject

• 17.1 The applicable data protection laws grant you comprehensive rights as a data subject in dealings with the controller concerning the processing of your personal data (rights of information and intervention), which are outlined below:
  
  – Right of access pursuant to Art. 15 of the GDPR:
  You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed. You also have the right to information concerning the purpose, the categories of personal data, the recipients, the envisaged period for which the personal data will be stored and the existence of other rights such as rectification of data or the existence of the right to lodge a complaint with a supervisory authority, the source of your data if the personal data was not collected by us, the existence of automated decision-making, including profiling and any meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you, and your right to be informed which safeguards exist pursuant to Art. 46 of the GDPR when your data is forwarded to third countries;
  
  – Right to rectification pursuant to Art. 16 of the GDPR:
  You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and/or the completion of incomplete data concerning you that we have stored; the rectification or completion must occur promptly.
  
  When using Google reCAPTCHA, your personal data may also be transferred to the servers of Google LLC in the USA.
  
  – Right to restriction of processing pursuant to Art. 18 of the GDPR:
  You shall have the right to obtain restriction of processing for your personal data if you contest the accuracy of your personal data as long as the accuracy contested by you is still under review, if you oppose the erasure of your data due to unlawful processing and instead request the restriction of processing of your data, if you require your data for the establishment, exercise or defence of legal claims, after we no longer need the data to achieve its intended purpose, or if you have objected to processing for reasons owing to your particular situation pending the verification whether our legitimate grounds override yours.
  Where processing of your data has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural person or legal entity or for reasons of important public interest of the Union or of a Member State. If restriction of processing has taken effect, you will be informed by the controller before the restriction of processing is lifted.
  
  – Right to erasure pursuant to Art. 17 of the GDPR:
  You have the right to request the erasure of your personal data without undue delay as long as the requirements of Art. 17 (1) of the GDPR are met. This right to erasure does not apply, including, but not limited to, if this processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  
  – Right to be notified pursuant to Art. 19 of the GDPR:
  If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify each recipient to whom your personal data have been disclosed about this rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed of these recipients.
  
  – Right to data portability pursuant to Art. 20 of the GDPR:
  You have the right to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller where this is technically feasible;
  
  – Right to withdraw consent pursuant to Art. 7 (3) of the GDPR:
  You have the right to object at any time to processing of your personal data which is based on Art. 6 (1)(e) or (f) of the GDPR, including profiling based on these provisions.
  You also have the right to withdraw your consent to data processing at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  
  – Right to lodge a complaint pursuant to Art. 77 of the GDPR:
  Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.


• 17.2 Right to object
  
  You have the right to object to the processing of your data at any time with future effect if we process your data based on our overriding legitimate interest after weighing the interests concerned.
  If you make use of this right to object, we will stop processing your data unless compelling legitimate grounds for the processing can be demonstrated which override the termination of processing or if further processing is for the establishment or defence of legal claims.

Duration of storage for personal data

• The duration of storage for personal data depends on the statutory retention periods in each case. After the end of such periods, we routinely erase the data if it is no longer required for contract performance or taking steps prior to entering into a contract and/or we have no ongoing legitimate interest in continued storage