Privacy Policy

General

Compliance with data protection laws is not only a legal obligation for Regit GmbH, but also an important factor of trust. With the following data protection regulations, we would therefore like to inform you transparently about the type, scope and purpose of the personal data collected from you and processed within this website, as well as your rights.

Responsibility for data processing

Regit GmbH, Heinkelstr. 1, 93049 Regensburg (hereinafter: "We"), as the operator of the website www.mautpilot.com, is the responsible party pursuant to Article 4 No. 7 of the EU General Data Protection Regulation (DSGVO = GDPR). If you have any questions, you can contact legal@mautpilot.com.

Data protection officer:

Süddeutsche Datenschutzgesellschaft mbH

Contact: Maximilian Mayer

Von-Brettreich-Strasse 4

93049 Regensburg

Mail: verwaltung@sddsg.de

Data subject rights

Your rights as a data subject

As a data subject, you have the following rights in relation to us regarding your personal data. You have:

A right to information about, among other things, the categories of data processed, the purposes of processing, the storage period and any recipients, in accordance with Article 15 of the DSGVO.
The right to have inaccurate or incomplete data corrected or deleted, in accordance with Articles 16 and 17 of the DSGVO.
A right to restriction of processing under the conditions of Article 18 of the DSGVO.
A right to object to processing pursuant to Article 21(1) of the DSGVO, insofar as the data processing was carried out on the basis of a legitimate interest.
A right to revoke a given consent with effect for the future pursuant to Art. 7 (3) of the DSGVO.
A right to data portability in a common format pursuant to Art. 20 DSGVO.
You have a right under Article 22 of the DSGVO not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. This also includes profiling within the meaning of Art. 4 No. 4 DSGVO.
You also have the right to lodge a complaint about the processing of your personal data by us with a data protection supervisory authority in accordance with Art. 77 DSGVO, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.

Procedure

If you assert your rights under the DSGVO against us, we will process the data you provided to us in the process in order to fulfil your claim.

Subsequently, we will store the data transmitted by you to us and the data transmitted by us to you in return for the purpose of documentation until the expiry of the statutory limitation period (3 years).

The legal basis for the processing and storage of the data is Art. 6 para. 1 p. 1 letter f) DSGVO (legitimate interest in data processing). The legitimate interest arises from our obligation to comply with your request and the need to be able to exonerate ourselves in possible fine proceedings by proving that we have properly complied with your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 DSGVO. To do so, please use the contact details provided in the imprint. However, we would like to point out that the processing of your data to prove compliance with the rights of the data subject is mandatory within the meaning of Art. 21 (1) of the DSGVO, as other means of proof do not exist or are not equally suitable.

Data protection measures

We secure our website and other systems - and thus also your data - by technical and organisational measures against loss, destruction, access, modification or distribution by unauthorised persons. In particular, your personal data is transmitted over the Internet in encrypted form. We use the TLS (Transport Layer Security) coding system for this purpose.

However, the transmission of information via the Internet is never completely secure, which is why we cannot guarantee the security of the data transmitted from our website 100%.

Modalities of data processing

Sources and categories of personal data

We process your personal data insofar as it is required for the establishment, content-related structuring or amendment of a contractual relationship between us and you (inventory data). Inventory data can be in particular: Name, title, contact details (postal address, telephone, e-mail address), date of birth, etc.

Furthermore, we process your usage data. Usage data is data that is generated by your behaviour when using our web offer and our services, in particular your IP address, the beginning and end of your visit to our website and information about what content you have accessed on our website.

We collect the aforementioned data either directly from you (e.g. by visiting the website) or, to the extent permitted by data protection laws, from third parties or from publicly accessible sources (e.g. trade and association registers, press, media, Internet).

Data transfer to third countries outside the EU

All information that we receive from you or about you is generally processed on servers within the European Union. Your data will only be transferred to or processed in third countries without your express consent if this is provided for or permitted by law, an appropriate level of data protection is ensured in the third country or contractual obligations exist through so-called standard data protection clauses of the EU.

Please note that the USA is a so-called unsafe third country. If personal data is transferred to the USA, there is a risk that US security authorities may access this data under the "Cloud Act". EU citizens have no effective legal protection against these measures in the US or the EU.

Disclosure of data, order processing

We never disclose your personal data to third parties without authorisation. However, we may disclose your data to third parties in particular if you have consented to the disclosure of data, if the disclosure is necessary to comply with our legal obligations or if we are entitled or obliged to disclose data due to legal provisions or official or court orders. This may include, in particular, disclosure for law enforcement purposes, security purposes or to enforce intellectual property rights.

We may also transfer your data to external service providers who process data on our behalf and according to our instructions (processors) in order to simplify or relieve our own data processing. Each processor is bound by a contract in accordance with Article 28 of the DSGVO. This means, in particular, that the processor must provide sufficient guarantees that suitable technical and organisational measures will be implemented by the processor in such a way that the processing is carried out in accordance with the requirements of the DSGVO and the protection of your rights as a data subject is guaranteed. Despite the commissioning of processors, we remain the controller for the processing of your personal data within the meaning of the data protection laws.

Purpose of data processing

As a matter of principle, we only use the data for the purpose for which the data was collected from you. We may further process the data for another purpose, unless this other purpose is incompatible with the original purpose (Art. 5 para. 1 lit. c) DSGVO).

Storage period

Unless otherwise specified in detail, we only store data collected from you for as long as is necessary for the respective purpose, unless there are legal obligations to retain the data, e.g. from commercial law or tax law, that prevent deletion.

Individual processing activities

In the following, we would like to present to you as transparently as possible what data we process from you on what occasion, on what basis and for what purpose.

Server log files

Every time a website is called up and every time data is retrieved from a server, general information is automatically transmitted to the server providing the data. This data transmission is automatic and is a fundamental part of communication between devices on the Internet.

The data transmitted by default includes, but is not limited to, the following information: Your IP address, product and version information about the browser and operating system used (so-called user agent), the Internet page from which your access took place (so-called referer), date and time of the request (so-called timestamp). In addition, the http status and the amount of data transferred are recorded as part of this request.

This information is logged by the server, stored in a table and saved there for a short time (so-called server log files). By analysing these log files, we are able to detect and subsequently eliminate website errors, determine the utilisation of the website at certain times and make adjustments or improvements based on this, as well as ensure the security of the server by being able to trace from which IP address attacks were carried out on our server.

Your IP address is only stored for the time you use the website and is then immediately deleted or made partially unrecognisable by shortening it. The remaining data is stored for a limited period of time (usually 7 days).

The legal basis for the use of the server log files is Art. 6 para. 1 p. 1 letter f) DSGVO (legitimate interest in data processing). The legitimate interest results from the necessity for the operation and maintenance of our website, as we have explained above. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 DSGVO. To do so, please use the contact details provided in the imprint. However, we would like to point out in advance that the processing of your data in server log files is mandatory in the sense of Art. 21 (1) DSGVO, as otherwise the website cannot be operated at all.

Cookies and Web Storage

We use so-called "cookies" or the "web storage" of your browser, to improve the user-friendliness of our website.

Cookies

What cookies are

In very simplified terms, a cookie is a small text file that stores data about websites visited. Cookies can be used in many ways. For example, they can store a kind of "user profile", i.e. things like your preferred language and other page settings that are needed by our website to provide you with certain services. The cookie file is stored on your terminal device and can also help us to recognise you when you return to our website.

Cookies may also allow us to obtain information about your preferred activities on our website, allowing us to tailor our website to your individual interests or even increase the speed of navigation on our website.

How you can avoid cookies

You can delete cookies manually at any time in the security settings of your browser.

However, you can also prevent cookies from being stored in the first place by setting your browser accordingly. Please note, however, that you may then not be able to use all the functions of our website to their full extent or that there may be errors in the presentation and use of the website.

Cookies from third-party providers

It is possible that third-party providers with the help of which we design and operate our site, in particular through so-called plugins (see below in the section "Third-party services"), independently store their own cookies on your terminal device. If you only wish to accept our own cookies, but not cookies from these third parties, you can prevent the storage of these cookies by selecting the appropriate browser setting "Block third-party cookies".

Which cookies are used

You can see exactly which cookies we use from the list below.

Legal basis

The legal basis for the use of cookies that are absolutely necessary for the function of the website (e.g. shopping cart cookie, session cookie) is Art. 6 para. 1 sentence 1 letter f) DSGVO (legitimate interest in data processing). The legitimate interest results from our need to be able to offer you a functioning website. Cookies are necessary for this because they are an integral part of current internet technology and without cookies many functions of current websites would not be available. We therefore need cookies to provide you with the website in response to your request.

However, we would like to point out that the processing of your data in certain cookies is mandatory within the meaning of Art. 21 (1) DSGVO, as otherwise the website cannot be operated at all and we do not have the technical possibility to prevent the setting of cookies on certain individual end devices. However, you may be able to do this yourself in your browser. For more information on this, please take a look at the instructions for your browser.

The legal basis for the use of cookies that are not absolutely necessary for the function of the website is Art. 6 para. 1 sentence 1 letter a) DSGVO (consent of the person concerned). When you access the website for the first time, we ask you for your consent to the use of cookies that are not absolutely necessary by means of a message displayed on the screen. You can revoke your consent at any time with effect for the future by deleting all cookies in your browser. You can find out how to do this in your browser in the browser instructions.

Web Storage

What is Web Storage

Web storage is a technique for web applications that stores data in a web browser. Web storage can be simplified as a further development of cookies, but it differs from them in several ways.

In contrast to cookies, which can be accessed by both server and client, web storage is completely controlled by the client. This means that data is not transferred to the server every time the website is called up. Access takes place exclusively locally via scripts on the website. In concrete terms, this means that third party access to the stored information via the website is excluded. Only you and we can access the locally stored data.

Legal basis

The legal basis for the use of web storage, which is absolutely necessary for the function of the website, is Art. 6 para. 1 sentence 1 letter f) DSGVO (legitimate interest in data processing). The legitimate interest results from our need to be able to offer you a functioning website. The web storage is necessary for this because it is an integral part of current internet technology and without it many functions of current websites would not be available. We therefore need the web storage to provide you with the website in response to your request.

However, we would like to point out that the processing of your data in web storage may be mandatory within the meaning of Art. 21 (1) DSGVO, as otherwise the website cannot be operated at all and we do not have the technical possibility to prevent its use on certain individual end devices. However, you may be able to do this yourself in your browser. For more information on this, please take a look at the instructions for your browser.

The legal basis for the use of web storage, which is not absolutely necessary for the function of the website, is Art. 6 para. 1 sentence 1 letter a) DSGVO (consent of the person concerned). When you first access the website, we ask you for your consent to the use of this data by means of a text message. You can revoke your consent at any time with effect for the future by deleting all cookies in your browser. You can find out how to do this in your browser in the browser instructions.

Contact

Our website offers ways to contact us directly. By contacting us, you agree to the processing and storage of your transmitted data (in particular your e-mail address) for the purpose of processing your request. You can object to this processing at any time with effect for the future. Please use our contact details in the imprint. Please note, however, that we will then no longer process your request.

We process the data you send us exclusively until the purpose of your contact has been achieved, unless there are legal retention periods to the contrary. If the purpose of your contact is the assertion of data subject rights, the provisions in the section "Your rights as a data subject" apply.

We require the following mandatory information from you:

Name: This information is necessary for us because we attach importance to a personal address in the context of professional correspondence. We use your information exclusively for this purpose.

The legal basis for the use of the data you provide by contacting us is Art. 6 para. 1 sentence 1 letter a) DSGVO (consent of the data subject). You can revoke your consent at any time with effect for the future. To do so, please use the contact details provided in the imprint.

The legal basis for processing the mandatory data is Art. 6 para. 1 p. 1 letter f) DSGVO (legitimate interest in data processing). We have explained the legitimate interest to you in the list above.

Use of our webshop

If you wish to place an order in our webshop, it is absolutely necessary for you to provide certain data in order to conclude the contract and process your order. This information, which is essential for the processing, is marked separately, all other information can be provided voluntarily. We process the data you provide during the ordering process only for the purpose of processing your order. If you do not provide the required data, this will result in your order not being processed.

It is mandatory for the performance of the contract pursuant to Art. 6 (1) sentence 1 letter b) DSGVO that we pass on your personal data (vehicle registration number) to the Autobahnen- und Schnellstraßen-Finanzierungs-Aktiengesellschaft (ASFiNAG), Austro Tower, Schnirchgasse 17 in 1030 Vienna.

Information on data protection at ASFiNAG can be found at: https://www.asfinag.at/privacy/.

Furthermore, it may be necessary to pass on your data to other third parties in order to process the order, e.g. banks/payment service providers, logistics companies, etc. You can find more information above under "Passing on data" and below in the section "Third-party services".

The legal basis for the use of your data to process the order is Art. 6 para. 1 p. 1 letter b) DSGVO (data processing for the performance of a contract). The legal basis for the data you voluntarily provide in the ordering process is Art. 6 para. 1 p. 1 letter a) DSGVO (consent of the person concerned). You can revoke your consent at any time with effect for the future. To do so, please use the contact details provided in the imprint.

Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.

To prevent unauthorised access by third parties to your personal data, especially financial data, the ordering process is encrypted using TLS technology.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

The legal basis for the use of your contact data for this purpose is Art. 6 para. 1 p. 1 letter f) DSGVO (legitimate interest in data processing). The legitimate interest results from our need to send you interesting information about our offer and our company (direct advertising).

You can object to the processing of your data on the basis of our legitimate interest in direct advertising at any time under the conditions of Art. 21 DSGVO. To do so, please use the contact details provided in the imprint. You will not incur any costs other than the transmission costs according to the base rates.

Third party services

In order to simplify our data processing and to extend the functionality of our website, we use services/resources from third parties, for example plug-ins, external content, software or other external service providers (services). In the process, personal data may also be transmitted to the service provider. In order to protect your data, we have, if necessary, contractually obliged the service providers in accordance with Art. 28 DSGVO to only process your data in accordance with our instructions.

We expressly point out that we are regularly only responsible for the data collection and transmission by the service within the meaning of the DSGVO, but not for any subsequent processing by the respective service provider.

In detail, we use the following services:

Google services

Our website uses the following services of the company Google Ireland Limited ("Google EU"), Gordon House, Barrow Street, Dublin 4, Ireland. This company represents in the EU the company Google LLC ("Google US"), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

By using the services, data is transmitted to Google EU and, under certain circumstances, from Google EU to Google US. The Google Group may process the transmitted data to create anonymised user profiles for statistical purposes. If you also have a Google account and are logged in to it, Google can assign the transmitted data to your account - even across devices. In principle, we have no influence on this data processing. Google EU is therefore responsible for this data processing.

More information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy.

The details of the concluded standard contractual clauses (guaranteeing the level of data protection in third countries) can be found here: https://support.google.com/adspolicy/answer/10042247?hl=en.

You can manage your Google advertising preferences on the following website: https://adssettings.google.com/?hl=en (This setting will be deleted when you delete your cookies).

We use:

Google Analytics

Our website uses the "Google Analytics" service from Google. Google Analytics uses cookies (see above under "Cookies") to enable us to analyse the use of the website by website visitors. The information generated by the cookie about the use of this website by users is usually transmitted to a Google server in the USA and stored there. Among other things, the following may be transmitted: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), date and time of the request and possibly your internet service provider.

IP anonymisation has been activated on our website, so that your transmitted IP address is shortened and thus partially rendered unrecognisable, i.e. anonymised, before it is transmitted outside the scope of the DSGVO. Only in exceptional cases will the full IP address first be transmitted to a Google server in the USA and shortened immediately there.

On our behalf, Google will use the transmitted information for the purpose of evaluating your use of our website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can find more information on the terms of use and data protection for Google Analytics at http://www.google.com/analytics/terms/de.html or at https://policies.google.com/technologies/partner-sites?hl=en.

You can prevent the data generated by the cookie and related to the use of the website (incl. IP address) from being transmitted to or processed by Google by downloading the browser plug-in available at the following link and installing it in your browser. The current link is: http://tools.google.com/dlpage/gaoptout?hl=en.

You can also prevent cookies from being set altogether (see "How to avoid cookies" above).

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 letter a) DSGVO (consent of the person concerned). When you first access the website, we ask you for your consent to the use of the service via a displayed notice text. You can revoke your consent at any time with effect for the future by deleting all cookies in your browser or reopening the cookie banner. You can find out how this works in your browser in the browser instructions.

Google Ads (formerly Adwords)

We use the advertising service "Ads" from Google. This service enables us to advertise our offers on external websites with the help of so-called Google Ads. We can also determine how successful the individual advertising measures are. These ads are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies (see above under "Cookies"), through which various parameters can be measured to determine success. We ourselves do not collect or process any personal data through the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify you on the basis of this information.

On the advertising page (https://policies.google.com/technologies/ads?hl=de), you can find out more about advertising on Google, how exactly your data is used in connection with advertising and how long Google stores this data.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of ads, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

You can prevent participation in this tracking procedure in several ways:

by setting your browser software accordingly not to accept cookies (see "How to avoid cookies" above),
by deactivating cookies for conversion tracking, on the following website: https://adssettings.google.com/?hl=de (this setting will be deleted when you delete your cookies) or
by permanently deactivating them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of our website to their full extent.

The legal basis for the use of Google Ads is Art. 6 para. 1 p. 1 letter a) DSGVO (consent of the person concerned).[2] We ask you for your consent to the use of the service via a displayed notice text when you first call up the website. You can revoke your consent at any time with effect for the future by deleting all cookies in your browser. You can find out how this works in your browser in the browser instructions.

Google Maps

Our website uses the external map service "Google Maps" from Google. Google Maps is used to provide an interactive map on our website that shows you how to find and reach us. This service enables us to present our website in an appealing way by loading map material from an external server. The required data is usually requested from a Google server in the USA. Through this request, the following information, among other things, is transmitted to the Google server and stored there: Your IP address, product and version information about the browser used and the operating system (so-called user agent), the website from which your access took place (so-called referrer), date and time of the request and possibly your internet service provider.

This service uses the web storage of your browser. You can find more information on this in the section "Web Storage" above.

The legal basis for the use of Google Maps is Art. 6 para. 1 sentence 1 letter a) DSGVO (consent of the person concerned). When you first access the website, we ask you for your consent to the use of the service via a displayed message text. You can revoke your consent at any time with effect for the future by deleting all cookies in your browser or reopening the cookie banner. You can find out how to do this in your browser in the browser instructions.

Google Tag Manager

Our website uses the "Google Tag Manager" support service from Google. This service does not process any personal data itself. However, the Google Tag Manager triggers scripts that are required by other services in order to collect data. It is not possible for the Google Tag Manager to access this data.

Analysis tools

We use certain services that record data from website visitors and provide it to us for analysis. We use this data to improve our website, services and offers on a usage-oriented basis. In particular, the following visitor behaviour information may be collected: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), date and time of the request and possibly your internet service provider, approximate origin (country and city), language, clicks on content and viewing duration.

The legal basis for the use of analysis tools is Art. 6 para. 1 p. 1 letter a) DSGVO (consent of the person concerned). When you first access the website, we ask you for your consent to the use of the service via a displayed notice text. You can revoke your consent at any time with effect for the future by deleting all cookies in your browser or reopening the cookie banner. You can find out how this works in your browser from the browser instructions.

We use:

Google Analytics

Our website uses the "Google Analytics" service provided by Google. See the data protection information above.

Hotjar

Our website uses the "Hotjar" service provided by Hotjar Ltd. ("Hotjar"), 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta. This service enables us to measure and analyse mouse clicks, mouse movements and the like on our website. In doing so, information collected by a tracking code and cookies with varying lifetimes are transmitted to the Hotjar server. This information is, on the one hand, the server log files and, on the other hand, device-related data such as, in particular, the IP address of your device and your e-mail address including your first and last name, if you have provided us with this information via our website, your screen size as well as your device type, your geographical location and your preferred language. You can prevent Hotjar from collecting your data by clicking on the following link. An opt-out cookie will then be set on your terminal device, which will prevent the future collection of data when visiting this website: https://www.hotjar.com/opt-out

In addition to the legitimate interest, the legal basis for the use of Hotjar is Art. 6 para. 1 sentence 1 letter a) DSGVO (consent to data processing), insofar as you have provided us with your email address including your name.

Microsoft Clarity

Our website uses the "Clarity" service provided by Microsoft Corporation ("Microsoft"), One Microsoft Way, Redmond, WA 98052-6399, USA.

The service enables us to analyse user behaviour on the website. In the process, data such as the IP address, frequency of visit, location and time of the request are collected and transferred to Microsoft servers in the USA.

We use the anonymisation function of Microsoft Clarity, so all collected data is anonymised immediately after collection.

When using the service, cookies are stored on the end device of the website visitor.

We have concluded an order processing contract with the provider including the standard contractual clauses.

Further information on data protection at Microsoft can be found at: https://privacy.microsoft.com/en-en/privacystatement

Media services

We use certain services to fill and supplement our website with digital content. For this purpose, we usually use the integration functions of external platforms. Through this, data is transmitted from the provider's server when the content is accessed and is usually stored there, e.g. your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referer), the date and time of the request and possibly your internet service provider. For more information, see above under "Server log files".

The legal basis for the use of media services is generally Art. 6 para. 1 sentence 1 letter f) DSGVO (Legitimate Interest in Data Processing), unless otherwise stated for the respective service. The legitimate interest results from our interest in being able to offer you a website that is appealing in terms of content and appearance. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 DSGVO. To do so, please use the contact details provided in the imprint.

We use:

Google Maps

Our website uses the "Google Maps" service provided by Google. See the data protection information above.

Advertising services

We use services on our website to help us promote the sales and popularity of our offering. These services may, for example:

- record the browsing behaviour of our website visitors and provide appropriate advertisements based on this information
- collect statistical data about interaction with advertisements on our website, which we can use to optimise our advertising efforts; or
- display an average of other customers' opinions about our company (so-called ratings/testimonials).

The services may collect the following data in particular: Origin (country and city), language, operating system, end device (PC, tablet PC or smartphone), browser and any add-ons used, referrer (source where the user came from), clicks on advertising banners, viewing duration, actions after clicking on advertising banners. This data or parts thereof may also be transmitted to the respective service provider to enable the use of the service.

The data collected is automatically processed, among other things, in order to display suitable advertising to you based on your supposed preferences, for the purposes of market research or for the needs-based design of our website. This constitutes automated decision-making or profiling pursuant to Art. 4 No. 4; Art. 22 DSGVO. This automated processing is permissible pursuant to Art. 22 Para. 2 No. 2 DSGVO on the basis of Section 15 Para. 3 TMG. You have the right to object to this type of data processing at any time. To do so, please use the contact details provided in the imprint.

The legal basis for the use of advertising services is Art. 6 para. 1 p. 1 letter a) DSGVO (consent of the person concerned). When you first access the website, we ask you for your consent to the processing of your data via a displayed notice text. You can revoke your consent at any time with effect for the future by deleting all cookies in your browser or reopening the cookie banner. You can find out how this works in your browser from the browser instructions.

We use:

Bing Ads

Our website uses the "Bing Ads" service provided by Microsoft Corporation ("Microsoft"), One Microsoft Way, Redmond, WA 98052-6399, USA.

You can find further information on data protection at Microsoft at: https://privacy.microsoft.com/en-en/privacystatement.

Google Ads

Our website uses the "Ads" service of the company Google. See the data protection information above.

Google DoubleClick

Our website uses the "DoubleClick" service provided by Google. See the data protection information above.

Service providers for the processing of your order

We may pass on the personal data collected from you to third parties as part of the contract processing, for example to the transport company commissioned with the delivery or the service used for payment, insofar as this is necessary for the fulfilment of the contract.

The legal basis for the transfer of the data required to process the order is Art. 6 para. 1 sentence 1 letter b) DSGVO (data processing for the performance of a contract). The provision and transmission of your data is necessary because otherwise your order cannot be processed.

The legal basis for the data transmission voluntarily chosen by you in the ordering process (e.g. for shipping status by email) is Art. 6 para. 1 p. 1 letter a) DSGVO (consent of the person concerned). You can revoke your consent at any time with effect for the future. To do so, please use the contact details provided in the imprint.

In detail, we use the following service providers:

PayPal

We use the "PayPal" service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. ("PayPal"), 22-24 Boulevard Royal, L-2449 Luxembourg to process payments. This service enables us to provide you with various payment methods in our webshop. When you use this service, data is transmitted from our website to PayPal, in particular your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referer), the date and time of the request and possibly your internet service provider.

Furthermore, inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs as well as contract, sum and recipient-related information may be transmitted.

Details of the data collected and information on how PayPal processes the data collected can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_EN.

We have a legitimate interest in the use of PayPal within the meaning of Art. 6 (1) sentence 1 letter f) DSGVO, which is to offer an efficient and secure payment option.

For further information on data protection law, including information on the credit agencies used, please also refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_EN

Stripe

We use the "Stripe" service of Stripe, Inc., 510 Townsend Street San Francisco, CA 94103, USA for payment processing.

This service enables us to provide you with various payment methods in our webshop. When you complete an order, our website transmits data to Stripe, in particular your payment data (for example, your bank account number or credit card number), your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), the date and time of the request and possibly your Internet service provider. Furthermore, inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs as well as contract, sum and recipient-related information may be transmitted.

Details of the data collected and information on how Stripe processes the data collected can be found in Stripe's privacy policy: https://stripe.com/en/privacy.

We have a legitimate interest in the use of Stripe within the meaning of Art. 6 (1) sentence 1 letter f) DSGVO, which consists of offering a plurality of payment methods as simply as possible via a service provider and not having to commission a separate service provider for each payment method. This also reduces the recipients of your data at the same time.

Klarna

We use the Klarna service of Klarna Bank AB, Sveavägen 46, 11134 Stockholm, Sweden to process payments. In order to enable the processing of the payment, your data (first name and surname, street, house number, postcode, town, gender, e-mail address, telephone number and IP address) as well as data collected in connection with your order (invoice amount, delivery type, article) are passed on to Klarna for the purpose of checking your identity and creditworthiness.

You can find out which credit agencies your data may be forwarded to here:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_en/credit_rating_agencies

For further information on data protection, please refer to Klarna's privacy policy:

https://www.klarna.com/international/privacy_policy

Mollie

We use the „Mollie“, a service of Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, Netherlands, to process payments.

This service enables us to provide you with various payment methods in our webshop. By completing an order, our website transmits data to Mollie, in particular your payment details (for example your bank account number or credit card number), your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), date and time of the request and possibly your internet service provider. In addition, the status and the amount of data transferred are recorded as part of this request. In some cases, your first and last name, address data and other personal data that you actively provide will also be transmitted to Mollie.

If you use Mollie's services, your personal data will also be used by Mollie for, among other things, analytical purposes and for training Mollie's staff. More details about the data collected and information about how Mollie processes the data collected can be found in Mollie's privacy policy: https://www.mollie.com/de/privacy.

We have a legitimate interest in the use of Mollie within the meaning of Art. 6 (1) sentence 1 letter f) DSGVO, which is to offer a plurality of payment methods as simply as possible via a service provider and not to have to commission a separate service provider for each payment method. This also reduces the number of recipients of your data at the same time.

Other services

Cookiebot

Our website uses the "Cookiebot" service provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot is used to comply with legal obligations and to store the consent of a website visitor.

Through the service, the following data is collected and transmitted to Cybot A/S: Browser information, End device information, Time of visit to the website, Anonymised IP address, Geographical location, Opt-in and Opt-out data.

The service may set cookies and store data in the website visitor's local storage.

The retention period is the length of time that the collected data is stored for processing. The data must be deleted as soon as it is no longer needed for the specified processing purposes.

More information on the handling of user data can be found in the privacy policy of Cookiebot: https://www.cookiebot.com/de/privacy-policy/.

The legal basis for the use of the plugin is Art. 6 para. 1 p. 1 letter f) DSGVO (legitimate interest in data processing). The legitimate interest arises from our need to offer a legally compliant website and to give you the opportunity to manage your cookie settings. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 DSGVO. To do so, please use the contact details provided in the imprint.

Status of the data protection declaration: 30.03.2023

Source: Süddeutsche Datenschutzgesellschaft mbH