Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Not providing it will have no consequences. This applies only insofar as no other statement is made in the following processing operations.
"Personal data" refers to any information relating to an identified or identifiable natural person.


Server Log Files
You can visit our websites without providing any personal information. 
Each access to our website results in usage data being transmitted to us or our web host/IT service provider via your internet browser and stored in log files (server log files). This stored data includes, for example, the name of the page accessed, date and time of access, IP address, data volume transferred, and the requesting provider.
This processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our service. 

 
Your data may be transferred to third countries outside the EU, specifically to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, the Trans-Atlantic Data Privacy Framework (TADPF) exists. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.

Contact

Controller/Data Protection Officer/
Contact us if desired. The controller for data processing is: Nagel & Köpfe GmbH, Gerhardstr. 25b, 47137 Duisburg Germany, 020393453417, mail@nagelkoepfe.de

You can reach our data protection officer directly at: mail@nagelkoepfe.de

Customer Initiated Contact by Email
When you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.
If the contact is aimed at carrying out pre-contractual measures (e.g., consultation on purchase interest, quotation preparation) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out based on Article 6(1)(f) GDPR from our overriding legitimate interest in processing and answering your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.


Collection and Processing when Using the Contact Form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.

If the contact is aimed at carrying out pre-contractual measures (e.g., consultation on purchase interest, quotation preparation) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out based on Article 6(1)(f) GDPR from our overriding legitimate interest in processing and answering your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Customer Account      Orders      

Customer Account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its revocation. Your customer account will then be deleted.


Collection, Processing, and Transfer of Personal Data in Orders
When ordering, we collect and process your personal data only as far as necessary to fulfill and process your order and to handle your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Article 6(1)(b) GDPR and is necessary for the fulfillment of a contract with you. 
Your data is transferred, for example, to the shipping companies and dropshipping providers, payment service providers, service providers involved in order processing, and IT service providers selected by you. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to a minimum.
 
Your data may be transferred to third countries outside the EU, specifically to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, the Trans-Atlantic Data Privacy Framework (TADPF) exists. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.

Advertising      


Use of Your Personal Data for Sending Postal Advertising
We use your personal data (name, address), which we have obtained during the sale of a good or service, to send you postal advertising, unless you have objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded.
The processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in direct marketing. You can object to the use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the legal disclosure.

Use of the Email Address for Sending Newsletters
We use your email address, regardless of contract execution, exclusively for our own advertising purposes for sending newsletters, provided you have expressly agreed to this. The processing is based on Article 6(1)(a) GDPR with your consent. You can revoke the consent at any time , without affecting the lawfulness of processing based on consent before its revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. 


Use of the Email Address for Sending Direct Advertising
We use your email address, which we have obtained in the course of selling a good or service, for the electronic sending of advertising for our own goods or services similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in direct marketing. You can object to the use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the legal disclosure. You can also use the link provided in the promotional email. This will incur no costs other than the transmission costs according to the basic tariffs.


Shipping Service Providers      

Transfer of the Email Address to Shipping Companies for Information on Shipping Status
We pass on your email address to the transport company as part of the contract processing, provided you have explicitly agreed to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Article 6(1)(a) GDPR with your consent. You can revoke the consent at any time by notifying us or the transport company, without affecting the lawfulness of processing based on consent before its revocation.


Payment Service Providers      

Use of PayPal
We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. With the selection and use of payment via PayPal, the data necessary for payment processing is transmitted to PayPal in order to fulfill the contract with you with the chosen payment method. This processing is based on Article 6(1)(b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full


Use of Amazon Payments
We use the payment service Amazon Payments from Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”).
The data processing serves the purpose of offering you payment via the payment service Amazon Payments.
To integrate this payment service, it is necessary for Amazon Payments to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when calling up the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is based on Article 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.
With the selection and use of “Amazon Payments,” the data necessary for payment processing is transmitted to Amazon Payments in order to fulfill the contract with you with the chosen payment method. This processing is based on Article 6(1)(b) GDPR.
You can find more information on data processing when using the payment service Amazon Payments in the corresponding privacy policy at: https://pay.amazon.com/de/help/201212490


Use of the Payment Service Provider Stripe
We use the payment service Stripe on our website from Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The data processing serves the purpose of offering you payment via the payment service. With the selection and use of Stripe, the data necessary for payment processing is transmitted to Stripe in order to fulfill the contract with you with the chosen payment method. This processing is based on Article 6(1)(b) GDPR. 
Stripe reserves the right to conduct a credit check based on mathematical-statistical procedures using credit reporting agencies. For this purpose, Stripe transmits the personal data necessary for a credit check to a credit reporting agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical procedures and include address data among other data. Your legitimate interests are taken into account according to the legal provisions. The data processing serves the purpose of credit assessment for initiating a contract. The processing is based on Article 6(1)(f) GDPR from our overriding legitimate interest in protection against default when Stripe advances payment. 
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying Stripe. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Non-provision has the consequence that the contract cannot be concluded with the payment method you have chosen.
All Stripe transactions are subject to the Stripe Privacy Policy. You can find this at https://stripe.com/de/privacy 
 

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is revisited.
 
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually about their acceptance as well as prevent the storage of cookies and transmission of the data contained. Already stored cookies can be deleted at any time. However, we point out that you may not be able to use all functions of this website to their full extent.
 
You can find out how to manage (including disabling) cookies in the main browsers by following the links below:
 
Technically Necessary Cookies
Unless otherwise stated in the privacy policy, we use only these technically necessary cookies for the purpose of making our offering more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
 
The use of cookies or similar technologies is based on § 25 Abs. 2 TTDSG. The processing of your personal data is based on Article 6(1)(f) GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offering.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.
 

Analysis      Ad Tracking       Communication      

Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet use to the website operator. 
The following information, among others, can be collected: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (website from which you accessed our website), location data, purchasing activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has on you.

Your IP address is previously shortened by us on our own servers. Thus, Google receives only pseudonymized data.

Google uses technologies such as cookies, web storage in the browser, and counting pixels, which enable an analysis of your use of the website. The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. 

The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.

We also use the service Google Signals. Google Signals enables cross-device tracking. Your data can thus be analyzed across devices if you have activated "personalized advertising" in your account settings and linked your devices with your Google account. This makes it possible to recognize which device you are searching for products on and return later to complete purchases on another device, such as a tablet.
 
The cross-device reports generated contain only aggregated data. Thus, we receive only statistics created based on Google Signals. To prevent data collection and storage across devices by Google Signals, you can disable the "personalized ads" feature in the settings of your Google account. More information on this can be found at https://support.google.com/ads/answer/2662922?hl=de
More information on data processing and privacy regarding Google Signals can be found at https://support.google.com/analytics/answer/7532985?hl=de
 
We use the extended implementation of the consent mode (Advanced Consent Mode). Here, user data is also transmitted to Google in the form of "pings" even when consent is not given. These pings can include, among other things, the following information: IP address for deriving the IP country (no logging of the IP address), date and time of the page view, URL of the visited pages, user agent, referrer URL (website from which our website was accessed), or information about triggering website events such as a conversion. Based on this information, Google models user data to conduct comprehensive usage analysis despite the refusal of consent.

The information generated about your use of this website is generally transmitted to a server of Google in the USA and stored there. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thus committed to complying with European data protection principles. Both Google and US government agencies have access to your data.

More information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Use of Google Ads Conversion Tracking
We use the online advertising program "Google Ads" on our website and, within this framework, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, contain no personal data, and thus do not serve personal identification. When you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked via the websites of Ads customers.
The information obtained using the conversion cookie is used to create conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can personally identify users.

We use the extended implementation of the consent mode (Advanced Consent Mode). Here, user data is also transmitted to Google in the form of "pings" even when consent is not given. These pings can include, among other things, the following information: IP address for deriving the IP country (no logging of the IP address), date and time of the page view, URL of the visited pages, user agent, referrer URL (website from which our website was accessed ), or information about triggering website events such as a conversion. Based on this information, Google models user data to conduct comprehensive usage analysis despite the refusal of consent. 
Your data may be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information as well as the privacy policy of Google can be found at: https://www.google.de/policies/privacy/

 
Use of Google AdSense
We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of renting out advertising space on the website and addressing the visitors of the website with interest-based advertising. Using this function, personalized, interest-based advertising ads from the Google Display Network are shown to visitors to the provider's website. Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a server of Google in the USA and stored there. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google 
is certified under the TADPF and thus committed to complying with European data protection principles. Google may transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will in no case associate your IP address with other Google data.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information as well as the privacy policy of Google can be found at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/


Use of the Remarketing or "Similar Audiences" Feature of Google Inc.
We use the remarketing or "Similar Audiences" feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application serves the purpose of analyzing visitor behavior and visitor interests. To perform the analysis of website use, which forms the basis for the creation of interest-based advertisements, Google sets cookies. The cookies record the visits to the website as well as anonymized data on the use of the website. No storage of personal data of the website visitors takes place. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed products and information areas.
Your data may be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google 
is certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDS G in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information on Google Remarketing as well as the related privacy policy can be found at: https://www.google.com/privacy/ads/

 
Use of Shopify Inbox
We use the live chat system Shopify Inbox 
from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") as part of a contract processing. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of immediate and efficient communication between you and us as the provider. Data is stored and processed for the operation of the system and for the purpose of optimizing the service.
To operate the live chat system, cookies may be used that enable the recognition of the browser. The following information can be collected and processed: IP address and personal data provided by you when using the chat system.
Your data may be transferred to third countries outside the EU, specifically to Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz and https://www.shopify.com/de/legal/dpa.

 

Plug-ins and Miscellaneous

Use of Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. 
This application is used to manage JavaScript tags and HTML tags used for implementing tracking and analytics tools. The data processing serves the purpose of needs-based design and optimization of our website.
The Google Tag Manager itself neither stores cookies nor does it process personal data. However, it enables the triggering of further tags that may collect and process personal data.
More information on terms of use and data protection can be found here.

 
Use of Social Plug-ins
We use plug-ins of social networks on our website. The integration of social plug-ins and the associated data processing serves the purpose of optimizing the advertising for our products.
When integrating social plug-ins, a connection is established between your computer and the servers of the providers of the social network and the plug-in is displayed on the page by notifying your browser, provided you have expressly consented to this. In this process, both your IP address and the information about which of our pages you have visited are transmitted to the provider servers. This applies regardless of whether you are registered or logged in to the social network. Even for unregistered or not logged in users, a transmission takes place. If you are simultaneously connected to one or more of your social network accounts, the collected information can also be assigned to your corresponding profiles. When using the plug-in functions (e.g., by activating the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
Below named social networks are integrated by means of social plug-in on our website. More information on the scope and purpose of the collection and use of the data as well as about your related rights and options to protect your privacy can be found in the linked privacy notices of the providers.


Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta 
is certified under the TADPF and thus committed to complying with European data protection principles.

Use of Google reCAPTCHA 
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. These data are processed by Google within the European Union and possibly also transferred to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information about Google reCAPTCHA as well as the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.
 
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). 
This serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. In the background, Google collects and analyzes usage data, which are used by Invisible reCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and possibly other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.

These data are processed by Google within the European Union and possibly also transferred to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information about Google reC
APTCHA as well as the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Use of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”).YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos deposited at YouTube in an iFrame on the website. At the same time, the “Extended Data Protection Mode” is activated. As a result, YouTube does not store any information about the visitors to the website. Only when you view a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube 
is certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information about the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in the privacy notices of YouTube at https://www.youtube.com/t/privacy.


Use of Vimeo
We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; “Vimeo”) on our website to embed videos from the “Vimeo” platform.
When you access pages of our website equipped with such a plug-in, a connection to the Vimeo servers is established and the plug-in is displayed on the page by notifying your browser. This transmits both your IP address and the information about which of our pages you have visited to the Vimeo servers.
If you are logged into Vimeo, Vimeo assigns this information to your personal user account. When using the plug-in functions (e.g., by starting a video by pressing the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo is not certified under the TADPF. The data transfer occurs, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: 
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information about the purpose and scope of the collection and further use and processing of data by Vimeo as well as your related rights and options to protect your privacy can be found in the privacy notices of Vimeo: https://vimeo.com/privacy


Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of uniform presentation of fonts on our website. To load the fonts, a connection to Google servers is established when you call up the page. Cookies may be used during this process. Your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thus committed to complying with European data protection principles.
The use of cookies or similar technologies occurs with your consent based on § 25 Abs. 1 S. 1 TTDSG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data occurs with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke the consent at any time, without affecting the lawfulness of processing based on consent before its revocation.
More information on data processing and privacy can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

Affected Rights and Storage Duration

Duration of Storage
After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial law storage periods, and then deleted after the period has expired, unless you have consented to further processing and use.


Rights of the Affected Person
If the legal requirements are met, you have the following rights according to Articles 15 to 20 GDPR: rights to access, to rectification, to erasure, to restriction of processing, to data portability.
In addition, according to Article 21(1) GDPR, you have a right to object to the processing based on Article 6(1) f GDPR as well as against processing for the purpose of direct marketing.


Complaint Right with the Regulatory Authority
According to Article 77 GDPR, you have the right to complain to the regulatory authority if you believe that the processing of your personal data is not legal.


You can file a complaint, among other things, with the supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de


Right to Object
If the personal data processing listed here is based on our legitimate interest according to Article 6(1 ) lit. f GDPR, you have the right for reasons arising from your particular situation to object to these processing operations with effect for the future at any time.
After the objection, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.


If the personal data processing is for the purpose of direct marketing, you can object to this processing at any time by notifying us. After the objection, we will terminate the processing of the affected data for the purpose of direct marketing.

last update: November 29, 2023