Data Protection Statement

1) Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Werner Lott Kfz.- und Industriebedarf GmbH, Sollinger Oberhütte 6, 37170 Uslar, Germany, Tel.: 05571 / 91511800, Fax: 05571 / 6108, E-Mail: info@lott.de. The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer who can be contacted as follows: "Nils Gustke, Pestalozzistraße 27, 34119 Kassel, datenschutz@gfp24.de"

1.4 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

2) Data collection when visiting our website

When you visit our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

3) Cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information on an individual basis, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser's cookie settings.

Partially, cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of given consent, or in accordance with Art. 6 para. 1 lit. f GDPR for the protection of our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.

Please note that you can adjust your browser settings to be informed about the setting of cookies and to individually decide on their acceptance or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contact

4.1 When you contact us (e.g. via contact form or email), personal data is collected. The data that is collected when using a contact form is apparent from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contact and associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request pursuant to Art. 6 (1) lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your request, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no statutory retention obligations.

4.2 WhatsApp Business

We offer visitors of our website the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific business transaction (e.g. a placed order), we will store and use the mobile phone number you used on WhatsApp as well as your first and last name, if provided, in accordance with Art. 6 para. 1 lit. b GDPR for the purpose of processing and answering your inquiry. On the basis of the same legal basis, we may ask you to provide additional data (order number, customer number, address, or email address) via WhatsApp to assign your request to a specific transaction.

If you use our WhatsApp contact for general inquiries (e.g. about our range of services, availability, or our website), we will store and use the mobile phone number you used on WhatsApp as well as your first and last name, if provided, in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in providing the desired information efficiently and promptly.

Your data will only be used for answering your request via WhatsApp. No data will be disclosed to third parties.

Please note that WhatsApp Business will have access to the address book of the mobile device used for this purpose, and phone numbers stored in the address book will be automatically transferred to a server of the parent company Facebook Inc. in the USA. We use a mobile device to operate our WhatsApp Business account, and only the WhatsApp contact information of users who have contacted us via WhatsApp is stored in the address book.

This ensures that every person whose WhatsApp contact information is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR by accepting the WhatsApp terms of use on their device when they first use the app. Transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

Please refer to WhatsApp's privacy policy for information on the purpose and scope of data collection, further processing and use of data by WhatsApp, as well as your rights and options to protect your privacy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

5) Data processing for the purpose of opening a customer account and contract execution

According to Art. 6 para. 1 lit. b GDPR, personal data is also collected and processed if you provide it to us for the purpose of performing a contract or when opening a customer account. The data that is collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the address of the responsible party mentioned above. We store and use the data you provide to us for the purpose of contract execution. After complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiration of these periods, unless you have expressly consented to further use of your data or we reserve the right to further use of data in accordance with the law.

6) Comment function

As part of the comment function on this website, not only your comment but also information about the time of the comment's creation and the commentator name chosen by you will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in the event that the affected person violates the rights of third parties or posts illegal content through a submitted comment. We need your email address in order to contact you in case a third party objects to your published content as unlawful. The legal basis for the storage of your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.

7) Use of Your Data for Direct Advertising

7.1 Subscription to Our Email Newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to address you personally. For sending the newsletter, we use the double opt-in procedure. This means that we will only send you an email newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you subscribe to the newsletter, we store the IP address registered by the Internet service provider (ISP) as well as the date and time of the registration in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us during registration for the newsletter will be used exclusively for advertising purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the responsible party named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and which we will inform you about in this declaration.

7.2 Sending of email newsletters to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range by email. We are not required to obtain separate consent from you for this in accordance with § 7 para. 3 UWG. The data processing is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. You will only be charged transmission costs according to the basic tariffs. After receipt of your objection, the use of your email address for advertising purposes will be immediately stopped.

7.3 Newsletter dispatch via Emarsys eMarketing Systems AG

The dispatch of our email newsletters is carried out via the technical service provider Emarsys eMarketing Systems AG, Märzstrasse 1, A-1150 Vienna (“Emarsys”), to whom we pass on the data provided by you during newsletter registration. This transfer is based on Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in the use of an effective, secure, and user-friendly newsletter system. The data you entered for the purpose of receiving the newsletter (e.g. email address) is stored on Emarsys servers in the EU.

Emarsys uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the sent emails contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have possibly been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) was taken after clicking on the link in the newsletter. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type, and operating system). The data is collected exclusively in pseudonymous form and is not linked to your other personal data. Direct personal identification is excluded. This data serves exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded a contract for order processing with Emarsys, which obliges Emarsys to protect the data of our customers and not to disclose it to third parties.

You can view Emarsys' privacy policy here:
https://www.emarsys.com/de-at/datenschutzrichtlinie/

7.4 - Advertising by postal mail
Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, postal address, and - to the extent that we have received this additional information from you in the context of the contractual relationship - your title, academic degree, year of birth, and professional, industry or business designation in accordance with Art. 6 para. 1 lit. f GDPR and to use them for sending interesting offers and information about our products by postal mail.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the responsible person.

7.5 - CleverPush
You can subscribe to receive our push notifications. We use the "CleverPush" delivery service, operated by CleverPush UG (limited liability), Tondernstr. 1, 22049 Hamburg ("CleverPush"), to send our push notifications. You will regularly receive information about our offered goods via our push notifications.
To register, you must confirm the request from your browser to receive notifications. This process is documented and stored by CleverPush. This includes the storage of the registration time as well as your browser ID or your device ID. The collection of this data is necessary so that we can trace the processes in case of misuse and therefore serves our legal protection. In order to display the push notifications to you, CleverPush collects and processes your browser ID and, in the case of mobile access, your device ID on our behalf.
By subscribing to our push notifications, you agree to receive them. The legal basis for the processing of your data after registration for our push notifications is Art. 6 para. 1 lit. a GDPR, provided that you have given your consent.
CleverPush also statistically evaluates our push notifications. CleverPush can thus determine whether and when our push notifications were displayed and clicked by you.
You can revoke your consent to the storage and use of your personal data for the receipt of our push notifications and the statistical survey described above at any time with effect for the future. For the purpose of revoking your consent, you can change the setting for receiving push notifications in your browser. If you use our push notifications on a desktop PC with the "Windows" operating system, you can also unsubscribe from our push notifications by right-clicking on the respective push notification and selecting the setting that appears.
Your data will be deleted as soon as they are no longer necessary for the purpose of their collection. Your data will therefore be stored as long as the subscription for our push notifications is active. The following link provides detailed information on the unsubscription process: https://cleverpush.com/faq

8) Data processing for order processing

8.1 - Transmission of image files for order processing via upload function
On our website, we offer customers the possibility to order personalized products by submitting image files via an upload function. The submitted image serves as a template for personalizing the selected product.
Through the upload form on our website, the customer can directly transmit one or several image files from the memory of their device to us via automated, encrypted data transfer. We subsequently capture, store, and use the transmitted files exclusively for the creation of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to specialized service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further disclosure is not made. If the transmitted files or digital motifs contain personal data (especially images of identifiable individuals), all the processing operations mentioned above are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) lit. b GDPR. After the final processing of the order, the transmitted image files are automatically and completely deleted.
- Transmission of image files for order processing via email
On our website, we offer customers the possibility to order personalized products by submitting image files via email. The submitted image serves as a template for personalizing the selected product.
The customer can transmit one or several image files from the memory of their device to us via the email address provided on our website. We subsequently capture, store, and use the transmitted files exclusively for the creation of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to specialized service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further disclosure is not made. If the transmitted files or digital motifs contain personal data (especially images of identifiable individuals), all the processing operations mentioned above are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) lit. b GDPR. After the final processing of the order, the transmitted image files are automatically and completely deleted.

8.2 To process your order, we work with the following service providers who support us wholly or partially in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will forward your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8.3 To fulfill our contractual obligations to our customers, we work with external shipping partners. We will only provide your name and delivery address, and if necessary for delivery, your telephone number, exclusively for the purpose of delivering the goods, to a shipping partner selected by us, in accordance with Art. 6 para. 1 lit. b GDPR.

8.4 Disclosure of personal data to shipping service providers

- DHL
If the delivery of goods is carried out by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will disclose your email address in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification to DHL, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery, we will only disclose the recipient's name and delivery address to DHL in accordance with Art. 6 para. 1 lit. b GDPR. The disclosure is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent can be revoked at any time with effect for the future, either to the above-mentioned data controller or to the transport service provider DHL.
- DPD
If the delivery of goods is carried out by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will disclose your email address and telephone number before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification to DPD, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery, we will only disclose the recipient's name and delivery address to DPD in accordance with Art. 6 para. 1 lit. b GDPR. The disclosure is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or delivery notification is not possible.
Consent can be revoked at any time with effect for the future, either to the above-mentioned data controller or to the transport service provider DPD.
- Schenker
If the delivery of goods is carried out by the transport service provider Schenker (Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main), we will disclose your email address and telephone number in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification to Schenker, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery, we will only disclose the recipient's name and delivery address to Schenker in accordance with Art. 6 para. 1 lit. b GDPR. The disclosure is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Schenker or delivery notification is not possible. Consent can be revoked at any time with effect for the future, either to the above-mentioned data controller or to Schenker.

8.5 Use of payment service providers

- Amazon Pay
When selecting the payment method "Amazon Pay", the payment processing is carried out by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter referred to as "Amazon Payments"), to whom we transmit the information you provided during the ordering process along with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be disclosed to Amazon Payments for the purpose of payment processing with the payment service provider and only to the extent necessary for this purpose. If cookies, i.e. small text files that are stored on your device, are set when using Amazon Pay, this is done exclusively based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time using the "Cookie Consent Tool" implemented on the website. You can find further information about the data protection regulations of Amazon Payments at the following internet address: https://pay.amazon.com/de/help/201751600
- Apple Pay
If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your device running on iOS, watchOS or macOS by charging a payment card stored in "Apple Pay". Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. To authorize a payment, you must enter a code previously set by you and verify it using the "Face ID" or "Touch ID" function of your device.
For the purpose of payment processing, your information provided during the ordering process along with information about your order is transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment success.
If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, date and time of the transaction, and whether the transaction was successfully completed. Anonymization completely excludes any reference to individuals. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and authorization device communicate over an encrypted channel to the Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in the settings on your iPhone. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac".
For further information on data protection with Apple Pay, please visit the following internet address: https://support.apple.com/de-de/HT203027
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "installment payment" via PayPal, we will forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer is made in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "installment payment" via PayPal, PayPal reserves the right to obtain a credit check. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit check may include probability values (so-called score values). To the extent that score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of the score values. For further data protection information, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- SOFORT
If you select the payment method "SOFORT", the payment processing will be carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will forward the information you provided during the ordering process, together with the information about your order, in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data is made exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find further information on the data protection regulations of SOFORT at the following internet address: https://www.klarna.com/sofort/datenschutz

9) Contact for Reminder of Review

Reminder of Review by Trusted Shops
If you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR during or after your order, we will transmit your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a reminder to review by email.
You can revoke your consent at any time by sending a message to the data controller or to the review platform.

10) Use of review and trust seal graphics

Trusted Shops Trustbadge

To display our Trusted Shops quality seal and to offer Trusted Shops membership for buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to protect our legitimate interests in optimal marketing of our offer, which outweigh any other interests, as part of a balancing of interests, pursuant to Art. 6 para. 1 lit. f DSGVO. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of access, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your website visit.

Further personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

11) Use of Social Media: Videos

Use of Youtube Videos

This website uses the YouTube embedding feature to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used, which according to the provider's statements, only starts storing user information when the video(s) are played. If playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to "YouTube", these cookies are used, among other things, to record video statistics, improve user-friendliness, and prevent abusive actions. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular according to Art. 6 para. 1 lit. f DSGVO based on Google's legitimate interests in displaying personalized advertising, market research, and/or needs-based design of its website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. When using YouTube, personal data may also be transferred to the servers of Google LLC. in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations without our influence.

For more information about data protection at "YouTube", please refer to the YouTube terms of use at https://www.youtube.com/static?template=terms and Google's privacy policy at https://www.google.com/policies/privacy/

To the extent legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a DSGVO for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

12) Online Marketing

12.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small, invisible graphics) to record, collect, and evaluate simple actions such as visitor traffic on the website to collect information.

The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is usually transmitted to a Google server and stored there. This may also involve the transfer of this information to servers of Google LLC in the USA.

Google uses the information obtained in this way to carry out an evaluation of your usage behavior with regard to AdSense advertisements. The IP address transmitted by your browser in the context of Google AdSense is not merged with other data from Google. The information collected by Google may be transferred to third parties if required by law or if third parties process this data on behalf of Google.

For details on the processing initiated by Google AdSense and how Google handles website data, please visit: https://policies.google.com/technologies/partner-sites

The described processing of data is carried out in accordance with Art. 6 (1) f GDPR for the purpose of targeted advertising of the user by advertising third parties whose ads are displayed on the basis of the evaluated user behavior on this website. This processing also serves our financial interest in exploiting the economic potential of our website through paid display of personalized third-party advertising content.

Further information on Google's privacy policy can be found at the following internet address: https://www.google.com/policies/privacy/

You can permanently deactivate cookies for ad preferences by preventing them through an appropriate setting of your browser software or you can download and install the browser plugin available at the following link:
https://www.google.com/settings/ads/plugin?hl=en

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

If legally required, we have obtained your consent in accordance with Art. 6 (1) a GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described option to object.

12.2 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers through advertising media (so-called Google AdWords) on external websites. We can determine how successful each advertising campaign is in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked by Google Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users.
When using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.
Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
The processing activities described above, in particular the setting of cookies to read information on the user's device, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.In addition, you can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=en. To target advertising even more effectively to users whose data we have received in the context of business or business-related relationships, we use a function for customer matching within Google Ads. To do this, we transmit one or more files containing aggregated customer data (especially email addresses and telephone numbers) electronically to Google. Google does not have access to the raw data, but automatically encrypts the information in the customer files using a special algorithm during the transmission process. The encrypted information can then only be used by Google to assign them to existing Google accounts that the affected parties have set up. This enables personalized advertising to be displayed across all Google services linked to the respective Google account.The transmission of customer data to Google only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182.
https://www.google.com/policies/privacy/.

13) Web analysis services

13.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your device and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there, and may also be transferred to servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. By means of the extension, your IP address is previously shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services related to website use and internet use. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also enables the creation of statistics with statements about age, gender, and interests of website visitors based on an evaluation of interest-based advertising and the use of third-party information. This allows for the definition and differentiation of user groups of the website for the purpose of targeted marketing measures. However, data sets recorded via "demographic characteristics" cannot be assigned to a specific person.
Details on the processing initiated by Google Analytics and on how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of Google Analytics during your website visit will not take place.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please disable this service in the "cookie consent tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, in which Google is obliged to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en

13.2 Google (Universal) Analytics without cookies
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
This website uses Google (Universal) Analytics exclusively without the use of cookies, which means that the service never sets cookies on your device.
Instead, your browser's local storage is used to store an individual ID assigned by Google (Universal) Analytics, which allows for an analysis of your website usage. Certain user information is processed via the ID.
The information generated by the ID about your use of this website (including the shortened IP address) is usually transmitted to and stored on a server operated by Google, which may also involve a transfer to servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by truncation and excludes direct personal identification. With the extension, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission to the US. Only in exceptional cases is the full IP address transmitted to a Google LLC server in the US and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services related to website use and internet use. The IP address transmitted by your browser as part of Google (Universal) Analytics is not associated with other data from Google.
Google Analytics also enables the creation of statistics with statements about the age, gender, and interests of website visitors based on an analysis of interest-based advertising and the use of third-party information through a special feature called "demographic characteristics". This allows for the definition and differentiation of user groups on the website for the purpose of targeted marketing measures. However, data records collected via "demographic characteristics" cannot be assigned to any specific person.
Details on the processing initiated by Google Analytics and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites
All of the above processing is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Analytics will not be used during your website visit.
You can revoke your consent at any time with effect for the future. To exercise your revocation, you can download and install the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
Alternatively, in browsers on mobile devices or if you do not want to use the browser plugin, you can revoke your consent by clicking on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again):
Deactivate Google Analytics
We have concluded a contract data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en

14) Retargeting/ Remarketing/ Referral Advertising

Criteo (Criteo SA)
On this website, information about the surfing behavior of website visitors is collected, stored and analyzed in pseudonymous form using cookie text files by Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), based on our legitimate interest in displaying personalized advertising in accordance with Art. 6 para. 1 lit. f GDPR. Criteo analyzes the surfing behavior using an algorithm and can then display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). In no case can the collected data be used to personally identify the visitor of this website. No other use or transfer to third parties takes place.
To object to the collection of data and the creation of pseudonymous user profiles for the future, you can download the following opt-out cookie:
Criteo opt-out https://www.criteo.com/de/privacy/)
Further information about Criteo's technology can be found in Criteo's privacy policy:
https://www.criteo.com/de/privacy/
If legally required, we have obtained your consent pursuant to Art. 6 para. 1 lit. a GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please follow the above-mentioned option to object.

Google Ads Remarketing
Our website uses the features of Google Ads Remarketing, through which we advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). To this end, Google places a cookie in the browser of your device, which enables interest-based advertising based on a pseudonymous cookie ID and the pages you have visited. The processing is based on our legitimate interest in optimally marketing our website in accordance with Art. 6 para. 1 lit. f GDPR.
Further data processing only takes place if you have given Google your consent to link your Internet and app browsing history with your Google account and to use information from your Google account to personalize ads that you view on the web. In this case, if you are logged in to Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to create target audiences. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Remarketing and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently opt out of Google Ads Remarketing by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/onweb/
Further information and Google's privacy policy regarding advertising can be found here:
https://www.google.com/policies/technologies/ads/
If legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR for the data processing described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the "cookie consent tool" provided on the website or alternatively follow the above-mentioned option to object.

15) Use of a live chat system

GREYHOUND
On this website, anonymous data is collected and stored for the purpose of web analysis and operating a live chat system for answering live support requests using technologies from GREYHOUND Software GmbH & Co. KG, Segelfliegerweg 53, 49324 Melle (hereinafter "GREYHOUND"). Usage profiles can be created from this anonymized data under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the internet browser cache of the page visitor. The cookies enable recognition of the internet browser. If the information collected in this way has a personal reference, processing will be carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in effective customer service and statistical analysis of user behavior for optimization purposes.
The data collected with the GREYHOUND technologies will not be used to personally identify the visitor to this website without the separately given consent of the data subject and will not be merged with personal data relating to the pseudonym's holder. To prevent the storage of GREYHOUND cookies, you can adjust your internet browser settings to prevent cookies from being stored on your computer in the future or to delete already stored cookies. However, deactivating all cookies may result in some functions on our website no longer being able to be executed. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future by sending us your objection informally by email to the email address provided in the legal notice.
For more information on the data protection regulations of GREYHOUND, please visit https://greyhound-software.com/datenschutz.

16) Tools and Miscellaneous

16.1 Google reCAPTCHA

This website also uses the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abusive due to machine and automated processing. The service includes the transmission of the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and preventing abuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to Google LLC servers in the USA.

You can view further information on Google reCAPTCHA as well as Google's privacy policy at: https://www.google.com/intl/de/policies/privacy/

If legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR for the above-mentioned processing of your data. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-mentioned option to object.

16.2 Google Customer Reviews (formerly Google Certified Merchant program)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in a Google email survey. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The rating you provide will then be summarized with our other reviews and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. Your rating will also be used for Google seller ratings. As part of the use of Google Customer Reviews, personal data may also be transferred to the servers of Google LLC. in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

For more information on data protection by Google in connection with the Google Customer Reviews program, please visit the following link: https://support.google.com/merchants/answer/7188525?hl=en

For more information on data protection by Google seller ratings, please visit this link: https://support.google.com/google-ads/answer/2375474

16.3 Applications for job vacancies via email

On our website, we advertise current vacancies in a separate section, to which interested parties can apply via email to the provided contact address.

To be considered for the application process, applicants must provide us with all the personal data necessary for a well-founded and informed evaluation and selection, together with their application via email. This includes general information about the person (name, address, telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for the position. If necessary, health-related information may also be required, which must be given special consideration in terms of labor and social law, in the interest of social protection of the applicant.

The individual components that a job application must contain for its consideration and the form in which these components must be transmitted by email can be found in the respective job advertisement.

After receipt of the application sent using the specified email contact address, we store the applicant's data and evaluate it exclusively for the purpose of processing the application. For any queries that may arise during the processing, we will use either the email address provided by the applicant with their application or a provided telephone number at our discretion.

The legal basis for these processes, including contact for queries, is generally Art. 6 para. 1 lit. b GDPR (in Germany, in conjunction with § 26 para. 1 BDSG), according to which the job application process is considered to be an initiation of an employment contract.

If special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information on severe disabilities) are requested from applicants during the application process, the processing will be carried out in accordance with Art. 9 para. 2 lit. b GDPR, so that we can exercise the rights arising from labor law and social security and social protection law, as well as fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special data categories may also be based on Art. 9 para. 1 lit. h GDPR if it is for purposes of preventive or occupational medicine, for the assessment of the applicant's work capacity, for medical diagnosis, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector.

If, as part of the evaluation process described above, a candidate is not selected or if a candidate withdraws their application prematurely, the data transmitted by email, as well as all electronic correspondence including the original application email, will be deleted no later than 6 months after the corresponding notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to fulfill our obligations to provide evidence under the provisions on equal treatment of applicants.

In the event of a successful job application, the provided data will be further processed based on Art. 6 para. 1 lit. b GDPR (in Germany, in conjunction with § 26 para. 1 BDSG) for the purposes of carrying out the employment relationship.

16.4 - Elasticsearch
This website uses the "Elasticsearch" service provided by ELASTIC, located at 800 West El Camino Real, Suite 350, Mountain View, California 94040, USA to provide a search function for articles through the search field and for navigation and filtering purposes.
For this purpose, Elasticsearch collects and stores certain user information, such as user or session IDs, in an anonymized form.
If personal data is processed in this context, the processing is based on Article 6(1)(f) of the GDPR, on the basis of our legitimate interest in providing a fault-tolerant search for articles and making it easier to find our products in the shop, thus optimizing the marketing of our offer.
For further information on Elasticsearch's privacy policy, please visit: https://www.elastic.co/de/legal/privacy-statement

17) Rights of the Data Subject

17.1 The applicable data protection law grants you the following rights (rights of data subjects) with regard to the processing of your personal data by the controller, whereby reference is made to the legal basis for each exercise:

• Right of access according to Art. 15 GDPR;
• Right to rectification according to Art. 16 GDPR;
• Right to erasure according to Art. 17 GDPR;
• Right to restriction of processing according to Art. 18 GDPR;
• Right to notification according to Art. 19 GDPR;
• Right to data portability according to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.

17.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

18) Duration of storage of personal data

The duration of storage of personal data is based on the respective legal basis, the purpose of processing and – if applicable – additionally on the respective statutory retention period (e.g. commercial and tax retention periods).

If personal data is processed on the basis of express consent pursuant to Art. 6 (1) lit. a GDPR, these data will be stored until the data subject revokes his or her consent.

If there are statutory retention periods for data that is processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 (1) lit. b GDPR, this data will be routinely deleted after expiry of the retention periods, unless it is no longer necessary for the fulfilment or initiation of the contract and/or we have a legitimate interest in further storage.

If personal data is processed on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If personal data is processed for the purpose of direct advertising on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the specific processing situations provided in this declaration, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.