Data protection

Privacy Notice

  1. Data controller; data protection officer

The data controller within the meaning of the EU-General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

ECOM Electronic Components Trading GmbH
Siemensstr. 9
85221 Dachau
Deutschland
Tel.: +49 8131 5695-650
Fax: +49 8131 5695-659
E-Mail: kontakt@ecom-trading.de

The data protection officer of the data controller can be contacted by email to datenschutz@ecom-trading.de and by mail to:

CB ADDATA GmbH
Christian Bößl
Reitmeierfeld 23
94099 Ruhstorf a.d. Rott
Telefon: +49 8531 978 447 0

  1. General provisions on data processing
  1. Description and scope of the data processing

We only process our users' personal data to the extent necessary to provide a functional website and our content and services.

  1. Legal basis for the processing of personal data

Where we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sent. 1 lit. a of the GDPR is the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sent. 1 lit. b GDPR is the legal basis. The same applies to processing activities required for the performance of pre-contractual measures.

Where processing of personal data is necessary to comply with a legal obligation of our company, Art. 6 para. 1 sent. 1 lit. c GDPR provides the legal basis.

If the processing is necessary for the purposes of the legitimate interests of our company or a third party and if such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 sent. 1 lit. f GDPR provides the legal basis for the processing. If you have any questions regarding our consideration criteria, please also feel free to contact us or our data protection officer.

  1. Recipients

In principle, we only forward your personal data to other recipients if this is required to fulfil the described purposes, you gave your consent or if we are entitled or obliged to do so by law or by a court or administrative order. In general, this may concern in particular the following recipients:

  • external service providers (e.g. IT, marketing, print, logistics, debt collection, file and data carrier disposal)
  • public bodies (e.g. financial authorities, courts and public prosecutors)
  • potential and actual acquirers of the company
  1. Transfer of personal data to third countries

In principle, your personal data is processed in Germany and in other European countries. However, if your personal data is processed in countries outside the European Union or European Economic Area (non-member countries) by way of exception, this will only be done if an adequate level of data protection is ensured by certain protective measures. In general, we take the following protective measures:

  1. Erasure of data and period of storage

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. The time periods required for this will be reviewed by careful assessment within the framework of which the necessity of the data processing is thoroughly evaluated:

  • If we process your personal data on the basis of your consent, this will end at the latest when you withdraw your consent.
  • If we process your personal data on the basis of our legitimate interests, this will end at the latest when you object to such processing for legitimate reasons.
  • Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions which apply to the data controller. Data will be blocked or erased if a storage period set forth by the aforementioned provisions expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract. The most important statutory retention obligations are set forth in Sec. 257 of the German Commercial Code (Handelsgesetzbuch, HGB) and Sec. 147 of the German Fiscal Code (Abgabenordnung, AO) and the retention periods amount to six or ten years, respectively. Pursuant to Secs. 195 et seqq. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), the statutory limitation periods can be up to thirty years; the regular limitation period is, however, three years.

This privacy notice may contain further information for individual cases.

  1. Voluntary or obligatory provision of data

In principle, you only have to provide us with the personal data that is required for the respective processing purpose. If you do not provide necessary data (e.g. data required for the conclusion of a contract or data required by law), it may not be possible to achieve the respective processing purpose. This may mean, for example, that it is not possible to conclude a contract or that certain services cannot be provided.

  1. Origin of your personal data

Essentially, we process personal data which we have obtained from you directly.

If, by way of exception, we process personal data which we have not directly received from you, this concerns any data which we legitimately obtain from publicly accessible sources (e.g. the Internet, press, trade register and register of associations) or which is legitimately provided to us by third parties.

  1. Job applications and application procedures
  1. Description and scope of the data processing

We collect and process the personal data of job applicants for the purpose of performing the application procedure. The data may also be processed electronically. This is in particular the case if applicants provide their application documents by electronic means, e.g. by email. In principle, we only process the data that is necessary for the application procedure, such as

  • surname, first name
  • email address
  • phone number
  • possible start date
  • salary expectations
  • details of career and qualifications

Please note that an unencrypted email is generally not a secure means of communication for applications. We recommend that applicants send their application as an encrypted email.

  1. Legal basis for the processing of personal data

The legal basis for the processing of applicant data is specified in Art. 6 para. 1 sent. 1 lit. b GDPR.

If a longer storage of the application documents beyond the specific application procedure is desired, for example in order to be able to consider the application for other positions with us, the consent according to Art. 6 I 1 lit. a GDPR (in conjunction with Sec. 26 II of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) is the legal basis for this.

  1. Purpose of the data processing

Personal data is processed exclusively for the purpose of carrying out the application procedure.

  1. Sources of personal data in case of applications

If we receive applications and the associated personal data via external personnel service providers, we process personal data from this source accordingly.

  1. Duration of storage, objection and removal options

If an employment contract is concluded between the data controller and an applicant, the data provided will be stored for the performance of the employment relationship in accordance with the statutory provisions. If no employment contract is concluded between the data controller and the applicant, the application documents will be automatically erased after six months from the notification that the application was not successful unless the data subject consented to a longer storage period or other legitimate interests of the data controller prevent such erasure. Another legitimate interest in this sense is, for example, the obligation to provide evidence in proceedings pursuant to the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).

If an applicant decides to object to the processing of their personal data, this can make it more difficult to carry out the application process.

  1. Provision of the website and creation of log files
  1. Description and scope of the data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected in this context:

  • type and version of the user's browser;
  • the user’s operating system;
  • IP address/Internet service provider of the user;
  • date/time of the access;
  • websites from which the user's system reaches our website;
  • websites accessed by the user's system via our website.

The data will be stored in the log files of our system. This data is not stored together with other personal data of the user.

  1. Legal basis for the processing of personal data

The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 sent. 1 lit. f GDPR.

  1. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the provision of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.

  1. Duration of storage, objection and removal options

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. If the data is collected for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. It is possible to store data beyond this. In this case, the IP addresses of the users are deleted or distorted so that it is no longer possible to identify the accessing client.

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

  1. Online shop

To place an order in our online store, you must have registered with us as a customer and your account must have been activated.

  1. Description and scope of the data processing

1.1. Collection of data upon registration

If you have decided to register and create a personalised customer account, the data entered in the respective input mask will be transmitted to us and stored. Online registration is not possible without providing the fields marked as mandatory. We also store the user's IP address and the date and time of access. By submitting the digital application form, you initiate the creation of a personalised, password-protected customer account. When you submit such an application, the data submitted is first checked manually and then your customer account is activated.

1.2. Collection of data after registration

Once you have registered, your personal customer number will be assigned and stored. In addition, your purchases (date, article, article number, quantity, price, currency, type of transaction) are stored.

1.3. Data transmission and contract processing

We involve third-party service providers in order to process your order; they support us with the performance (in full or in part) of concluded contracts. Certain personal data is transmitted to such service providers.

  1. Legal basis for the data processing

The processing of this data is necessary for the initiation or fulfilment of the contract which is why the legal basis for this data processing is Art. 6 para. 1 sent. 1 lit. b GDPR.

  1. Purpose of the data processing

The customer account allows you to conveniently use your saved data for further orders without having to enter it again. You can also view the data of your completed, open or recently sent orders and correct/manage the data you entered during registration.

  1. Duration of storage, objection and removal options

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is the case for the data collected during the registration process if the registration on our website is cancelled. As a user, you have the option of deleting your shop account or changing the data stored about you at any time. This can be done via the customer area on our website, by email to kontakt@ecom-trading.de or by sending a message (e.g. fax or letter) to the contact details given in I. of this declaration.

  1. Recipients in the context of processing the contract

Within the framework of the payment processing, we will forward your payment data to the instructed credit institution as required for the processing of the payment. If payment service providers are used, we provide explicit information about this below. Within the framework of the order processing, the personal data collected by us will be forwarded to our forwarding agency as required to effect delivery of the goods. In this context, the legal basis for the disclosure of data is Art. 6 para. 1 sent. 1 lit. b GDPR.

5.1. Payment transactions; PayPal

Payment transactions via the usual means of payment are made exclusively via an encrypted SSL or TLS connection.

We pass on your data to payment service providers on the basis of Art. 6 para. 1 sent. 1 lit. a GDPR, provided that you have given your express consent. Otherwise, we will pass on your data to fulfil the contract pursuant to Art. 6 para. 1 sent. 1 lit. b GDPR. The information will only be passed on if this is necessary for the payment.

You have the option of withdrawing your consent to the data processing or objecting to the data processing at any time. A withdrawal does not affect the effectiveness of data processing operations carried out in the past.

On our website we also offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

5.2. Shipping service provider

Our goods will be delivered to you by the shipping service provider selected or specified in the order process.

We will forward your email address to the shipping service provider in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the order process. Otherwise, we will only pass on the name of the recipient and the delivery address to the shipping service provider for the purpose of delivery in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the shipping service provider or notification of delivery is not possible.

Consent can be revoked at any time with effect for the future vis-à-vis the data controller named above or vis-à-vis the shipping service provider. A revocation does not affect the effectiveness of data processing operations carried out in the past.

  1. Newsletter; product recommendations for similar goods; direct advertising by letter
  1. Newsletter

1.1. Description and scope of the data processing

On our website you have the option of subscribing to a free newsletter, which we use to inform you about our current interesting offers. The only mandatory information for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to address you personally.

We use the so-called double opt-in procedure for the subscription to our newsletter. This means that after you have registered, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to receive the newsletter. You must confirm your registration within 24 hours in order to activate your registration. In addition, we store the IP addresses used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

After your confirmation, we will save your email address for the purpose of sending you the newsletter.

1.2. Legal basis for the data processing

We send you our newsletter on the basis of your consent, Art. 6 para. 1 sent. 1 lit. a GDPR.

The legal basis for data processing as part of the double opt-in procedure and in connection with the proof of your consent is Art. 6 para. 1 sent. 1 lit. c in conjunction with Art. 5 para. 1 lit. a, para. 2, Art. 7 para. 1 GDPR and 6 para. 1 sent. 1 lit. f GDPR.

1.3. Purpose of the data processing

The collection of the email address serves to ensure the proper delivery of the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse and to prove your consent.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.

1.4. Duration of storage, objection and removal options

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's email address will be stored for as long as the subscription to the newsletter is active.

The subscription can be cancelled by the respective user at any time for the future by revoking the consent given. For this purpose, there is a corresponding unsubscribe link at the end of each newsletter. However, a user can also contact us directly by other means to unsubscribe from the newsletter (e.g. by sending an email to kontakt@ecom-trading.de ).

If you unsubscribe from our newsletter or revoke your consent, you will be immediately removed from our newsletter mailing list and your personal data will be deleted. However, we may store your email address and proof of your consent for the duration of the statutory limitation period, i.e. three years, in the interest of and for the purpose of proving your consent and in defence against possible claims.

If you do not confirm your registration for our newsletter as part of the double opt-in procedure within 24 hours , your information will be automatically deleted.

  1. Product recommendations for similar goods

2.1. Description and scope of the data processing

We use the email address you provide in connection with the purchase of goods or services, in addition to processing the contract, to inform you regularly by email about our own similar goods by way of direct advertising. This takes place regardless of whether you have registered for the newsletter or not.

2.2. Legal basis of the processing

The legal basis for sending product recommendation emails following the sale of goods or services is Art. 6 para. 1 sent. 1 lit f GDPR in conjunction with Sec. 7 para. 3 UWG.

2.3. Purpose of the data processing

The purpose of collecting the user's email address is to send relevant product recommendation emails.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.

2.4. Duration of storage, objection and removal options

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

You can object to the use of your email address for sending product information at any time without incurring any costs other than the transmission costs according to the basic rates. You can declare your objection by clicking on the link provided in every product recommendation email or by sending an email to kontakt@ecom-trading.de .

  1. Direct advertising by letter

3.1. Description and scope of the data processing

We use the postal address provided by you in connection with the purchase of goods or services (together with your name) to inform you regularly by letter by way of direct advertising (e.g. to send you interesting offers and information about our products).

3.2. Legal basis of the processing

The legal basis for direct advertising by letter is Art. 6 para. 1 sent. 1 lit. f GDPR.

3.3. Purpose of the data processing

The collection of your name and address is also used to send you direct advertising by letter. According to Recital 47 of the GDPR, the processing of personal data for the purpose of direct advertising can be considered as processing for the purposes of a legitimate interest. In this context, it must be taken into account in particular that a customer relationship exists between you and us due to your purchase and we therefore have a legitimate interest in informing you about current offers in the future.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.

3.4. Duration of storage, objection and removal options

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

You can object to this form of direct marketing by letter at any time. You can declare your objection by email to kontakt@ecom-trading.de or by sending a message (e.g. fax or letter) to the contact details given in this data protection notice.

  1. Forms and email contact
  1. Description and scope of the data processing

When you contact us via a form on our website or by email, the data you provide (your email address and any other data you provide) will be transmitted to us and stored by us. The data will not be passed on to third parties in this context. The data will be used exclusively for processing the conversation.

If and insofar as this is necessary for the initiation, establishment, performance and/or termination of a legal transaction with our company, we will continue to process your personal data. If the data processing is necessary for the conclusion of a contract, it may be impossible to conclude, execute and/or terminate a legal transaction with our company if the data is not provided.

  1. Legal basis for the processing of personal data

The legal basis for the processing of the data transmitted in the course of contacting us is also Art. 6 para. 1 sent. 1 lit. f GDPR.

If you contact us in order to conclude a contract, Art. 6 para. 1 sent. 1 lit. b GDPR constitutes an additional legal basis.

  1. Purpose of the data processing

The processing of personal data from the input mask serves solely to process the contact. We cannot answer your enquiry if you do not provide us with your personal data. The other personal data processed during the form submission process is used to prevent misuse of the contact form.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.

  1. Duration of storage, objection and removal options

We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations.

You can object to the processing. You have the right to object on grounds relating to your particular situation. You can send us your objection using the contact details provided in the "Responsible provider" section.

  1. Use of cookies and similar technologies
  1. Description and scope of the data processing

Our website uses technologies with which information can be stored in your end device (e.g. computer, notebook, mobile phone) or access to information that is already stored in your end device is made possible. For example, when a user accesses a website, a cookie may be stored on the user's operating system. This cookie may contain a characteristic string of characters that enables the browser to be clearly identified when the website is called up again. In this way, the following data, for example, can be transmitted in pseudonymised form:

  • Frequency of page views
  • Utilisation of website functions

Some elements of our website require that the accessing user can be identified even after a page change. This website uses different types of cookies. When accessing our website, users are informed about the use of these technologies by an information banner.

In principle, the storage of information in your end device or access to information that is already stored in your end device only takes place on the basis of your consent (Sec. 25 para. 1 TTDSG). Without your consent, the storage of information in your end device or access to information that is already stored in your end device will only take place if this is absolutely necessary so that a telemedia service expressly requested by you can be provided (Sec. 25 para. 2 TTDSG).

  1. Legal basis for the processing of personal data

The legal basis for the processing of personal data using cookies is legitimate interests, Art. 6 para. 1 sent. 1 lit. f GDPR. Insofar as we use cookies for statistical or marketing purposes, this is done exclusively on the basis of your consent, Art. 6 para. 1 sent. 1 lit. a GDPR.

  1. Purpose of the data processing

Cookies and similar technologies are used (1) to provide this website and the functions that are fundamentally necessary for this website, (2) to analyse the use of our website (e.g. which pages were visited most frequently) in order to make the website more user-friendly, (3) to be able to display personalised advertising and (4) to be able to measure the success of our marketing activities. The settings in the privacy settings are decisive.

  1. Duration of storage, objection and removal options

The functional duration of cookies and similar technologies generally depends on your visit to our website, i.e. cookies are e.g. deleted when you leave our website (so-called "session cookies"). The functional duration of cookies and similar technologies may also depend on a specified expiry date. The functional life of cookies and similar technologies requiring consent ends in any case with the revocation of your consent. If you withdraw your consent, the legality of the storage of information on your end device or access to information that is already stored on your end device up until the withdrawal of your consent will not be affected. If you do not accept cookies and similar technologies that require your consent, you will not suffer any disadvantages therefrom. There is no obligation to grant consent to cookies and similar technologies requiring consent.

Further details regarding the cookies and similar technologies we use can be found via "Cookie Details" in the Privacy Settings.

You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Any cookies already set can be removed at any time. This can also be completed automatically by setting the maximum storage period in your browser settings. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

The following links will help you to make settings for rejecting or accepting cookies in the most commonly used browsers:

  1. Other plugins and tools
  1. Web analysis tools, Google Analytics

1.1. Description and scope of the data processing

We use Google Analytics on our website, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google), to evaluate the use of our website and to compile reports on website activity. Using this web analysis, we can, for example, identify at what time our website is visited or which functions or content are used most frequently and in which areas our website needs to be optimised.

1.2. Legal basis for the processing of personal data

The legal basis for the processing of personal data of users is the consent according to Art. 6 para. 1 sent. 1 lit. a GDPR.

1.3. Purpose of the data processing

We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

1.4. Duration of storage, objection and removal options

The processed data will be deleted as soon as it is no longer required to fulfil the purpose. In case of Google Analytics this is the case after two months.

You can withdraw your consent at any time for the future. You can withdraw your consent in the Privacy Settings . If you revoke your consent, your data will no longer be used for the specified purposes and your personal data will be erased. The lawfulness of the processing carried out on the basis of your consent prior to such withdrawal will not be affected.

As already mentioned, you may prevent cookies from being stored by selecting the respective settings on your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent. In addition to that, you may prevent Google from collecting the data generated by the cookies and related to your use of the website (including your IP address) as well as from processing such data by downloading and installing the browser add-on available at http://tools.google.com/dlpage/gaoptout?hl=de.

In addition to that, you may prevent Google from collecting the data generated by the cookies and related to your use of the website (including your IP address) as well as from processing such data by refusing your consent to set cookies.

1.5. Cross-device analysis

This website also uses Google Analytics for a cross-device analysis of visitor flows. You can deactivate the cross-device analysis of your usage in your Google account under "My data", "Personal data".

1.6. Demographic details

This website uses the "demographics details" feature of Google Analytics. As a result, reports can be produced that contain information on the age, gender and interests of the site visitors. This data comes from interest-based advertising of Google and third-party visitor data. This data cannot be attributed to a specific person. You can disable this feature at any time through the ad settings in your Google account, or generally prohibit the collection of your data by Google Analytics as outlined in the section "Objection to Data Collection".

  1. Social media, fan pages

2.1. Description and scope of the data processing

We operate so-called "fan pages" on various platforms in order to be able to present ourselves via such company pages.

In some cases, we use the analysis options provided by the service providers to obtain statistical analyses ("Insights"). Different service providers may use different cookies and similar technologies for this purpose. We have no direct knowledge of the identity of the visitor. If you are registered with the respective service provider with a user account, the platform operators can link your data to the user account and process it for their own purposes.
As the operator of the following pages, we are joint controllers together with the respective service providers within the meaning of Art. 4 no. 7 GDPR.

Als Betreiber der nachfolgenden Seiten sind wir gemeinsam mit den jeweiligen Diensteanbietern gemeinsam Verantwortliche im Sinne von Art. 4 Nr. 7 DSGVO.

  • Facebook of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter: Facebook);
  • LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland, im (hereinafter: LinkedIn);
  • Google LLc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, (hereinafter: Youtube);
  • Instagram of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter: Instagram);
  • TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Irland (hereinafterTikTok);

This is subject to the following information:

In this context, the following data may, among others, be processed:

  • IP addresses
  • device- and browser-related data
  • use-related information
  • location data

Social media buttons from these social networks are sometimes used on our website. In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plugins but only as an HTML link. This integration ensures that no connection is yet established with the servers of the service provider of the respective social network when a page of our website which contains such buttons is accessed.

If you click on one of the buttons, a new browser window with the website of the respective service provider opens where you can, for example, click on the Like or Share button (after entering your login data, if necessary).

2.2. Legal basis for the processing of personal data

The legal basis for the processing of data is the legitimate interest pursuant to Art. 6 I 1 lit. f) GDPR. It is in our legitimate interest to be able to present ourselves via our respective fan page and to use Insights to analyse how our fan page is used.

2.3. Purpose of the data processing

The purpose of the Facebook fan page is to present our company on Facebook and to analyse the use of our Facebook fan page in order to be able to design and optimise it in line with requirements based on the findings. In order to better promote our business objectives, the service providers may also provide us with demographic and geographic analyses that we can use to place interest-based advertisements. If you are registered with the respective platform, a cross-device analysis may also be performed.

The service providers use the information in part to distribute and improve their advertising system on the respective platform.

2.4. Objection and removal options

You can object to the processing of data at any time.

Facebook: As a user, you can influence the extent to which your user behaviour may be recorded under the settings for advertising preferences. Further options for objecting are offered by the settings (available at https://www.facebook.com/settings) or the form provided via Facebook for the right to object (available at https://www.facebook.com/help/contact/612141586937373).

LinkedIn: You can object to the processing by LinkedIn online (available at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out).

YouTube: As a user, you can object to the processing by YouTube via the settings in your account (available at https://adssettings.google.com/authenticated). You can find more information on how to make adjustments to the data protection settings in the Help (available at https://support.google.com/youtube/topic/9257518?hl=de&ref_topic=9257107,3230811,3256124,&sjid=14435722167943552034-EU).

Twitter: You can partially object to the processing by Twitter. More information on this can be found in the Help Center (available at https://help.twitter.com/de/safety-and-security/privacy-controls-for-tailored-ads).

2.5. Additional information

Facebook is the primary point of contact for the exercise of data subject rights insofar as only Facebook, as the provider of the social network, has direct access to the necessary information and can take any necessary measures and provide any necessary information. Should our support nevertheless be required, we can be contacted at any time.

LinkedIn informs us as soon as data subjects exercise their data subject rights. LinkedIn will provide support with respect to access requests. You can exercise your data subject rights against us and LinkedIn.

You can exercise your data subject rights regarding our YouTube channel against us and Google.

  1. Reddit Conversion Pixel

Our website also uses "Reddit Conversion Pixel", an analysis service of Reddit Inc, 520 Third Street, Suite 305, San Francisco, CA 94107, United States, to track user interactions on our website if you click on an advertisement. In this context, the following data can be processed:

  • IP addresses
  • device-related data (e.g. device operating system) and browser-related data (e.g. type of browser)
  • use-related information (e.g. interactions with advertisements such as clicks, displayed advertisements / advertising content, website visits), including so-called "identifiers" (e.g. Facebook user ID, pixel ID or device ID)

This enables us to analyse the success of our advertisements so that we can design and optimise them in line with requirements based on the findings. In addition, we can again show you targeted and personalised advertising.

You can find out more about Reddit's privacy policy at https://www.reddit.com/help/privacypolicy/. https://www.reddit.com/help/privacypolicy/.

If you wish to avoid this, you can deactivate the storage of cookies via your Internet browser as described in this privacy notice. If necessary, use the Help function of your browser for further information.

The legal basis for the processing of personal data of users is the consent according to Art. 6 para. 1 sent. 1 lit. a GDPR.

You can withdraw your consent at any time for the future. You can withdraw your consent in the Privacy Settings. If you revoke your consent, your data will no longer be used for the specified purposes and your personal data will be erased. The lawfulness of the processing carried out on the basis of your consent prior to such withdrawal will not be affected. Personal data will be erased after three months at the latest, even if you have not withdrawn your consent by then.

  1. Microsoft Clarity

We use Microsoft Clarity on our website, a web analysis service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter: Microsoft), to evaluate the use of our website and to compile reports on website activity. Using this web analysis, we can, for example, identify at what time our website is visited or which functions or content are used most frequently and in which areas our website needs to be optimised. Microsoft Clarity collects user data such as

  • access times;
  • IP addresses; and
  • cursor and scroll movements.

You can find out more about Microsoft's privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

To recognise users, Microsoft Clarity places a cookie in your browser with your consent.

You can withdraw your consent at any time for the future. You can withdraw your consent in the privacy settings. If you revoke your consent, your data will no longer be used for the specified purposes and your personal data will be erased. The lawfulness of the processing carried out on the basis of your consent prior to such withdrawal will not be affected. Personal data will be erased after three months at the latest, even if you have not withdrawn your consent by then.

  1. Google Tag Manager

We use "Google Tag Manager" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Tag Manager enables us as marketers to manage website tags via a single interface. The Google Tag Manager tool is a domain that is used to implement tags (e.g. a JavaScript tag). Google Tag Manager triggers other tags which in turn may collect data. Google Tag Manager does not access data processed by loaded tags. Cookies that are implemented with the Google Tag Manager can be managed via the cookie banner. Any deactivations will remain in place for the respective tracking tags.

Information of the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

Further information on data protection can be found on the following Google websites:

  1. Google AdWords Conversion

We use Google AdWords to draw attention to our attractive offers with the help of advertising material (so-called Google AdWords) on external websites. In relation to the advertising campaign data, we can determine how successful the individual advertising measures are. This serves the purpose of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These advertising materials are delivered by Google via "ad servers". For this purpose, we use ad server cookies through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google AdWords will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your Internet browser on your next visit. If the user visits certain pages of the website of an AdWord customer and the cookie stored on the user's computer has not yet expired, Google and the customer can tell that the user clicked on the ad and proceeded to that page. A different cookie is assigned to each AdWords customer. Cookies can thus not be tracked using the website of an AdWords customer. We do not collect and process any personal data in the aforementioned advertising measures ourselves. We only receive statistical analyses from Google. Based on these analyses, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can relate the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the service provider will find out and store your IP address.

The legal basis for the processing of personal data of users is the consent according to Art. 6 para. 1 sent. 1 lit. a GDPR.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

You can prevent participation in this tracking procedure in various ways: a) by setting your browser software accordingly, in particular suppressing third-party cookies will prevent you from receiving ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices. com", https://www.google.de/settings/ads, this setting will, however, be deleted when you delete your cookies; c) by deactivating the interest-based ads of the service providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices; this setting will, however, be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of the offering to their full extent.

  1. Bing Ads

(1) This website uses the remarketing function "Bing Ads" of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft Advertising"). If you access our website via a Microsoft Bing ad, Microsoft Bing Ads will store a cookie on your computer. This enables Microsoft Bing and us to recognize that a user has clicked on an ad, visited our website and reached a specific target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were redirected to the conversion page. Personal information about the identity of the user is not transmitted.

(2) If you do not want Microsoft to use information about your behavior as described above, you can refuse the setting of the cookies required for this - for example, by using browser settings that generally deactivate the automatic setting of cookies. In addition, you can object to the collection and processing by Microsoft of the data generated by the cookie relating to your use of the website. You can do this at the following link: http://choice.microsoft.com/de-DE/opt-out. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement.

  1. Bing Universal Event Tracking (UET)

Bing Ads technologies are used to collect and store data on our website. These are used to create user profiles using pseudonyms. This service is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. It enables us to track the activities of users on our website if they have reached our website via ads from Bing Ads. A cookie is set in your browser during such access. Our website uses a Bing UET tag, a code that, in conjunction with the cookie, stores some non-personal data about the use of the website. This data includes, among other things, the time spent on the website, which areas of the website were visited and from which advertisement the user reached the website. Information about your identity is not collected or stored.

The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection and processing of the data generated by the cookie relating to your use of the website by deactivating the setting of cookies. However, this may impair the functionality of the website.

In addition, Microsoft can use cross-device tracking to track your usage behavior across multiple electronic devices and display personalized advertising on Microsoft websites and apps. You can deactivate this behavior at https://choice.microsoft.com/de-de/opt-out.

You can find more information about Bing's analytics services on the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). Further information on data protection and the cookies used can be found at https://privacy.microsoft.com/de-de/privacystatement.

  1. Consent Management Platform
  1. Description and scope of the data processing

We use the "consent management platform" (CMP) of consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg (hereinafter: ConsentManager) on our website to manage and document your consents and data protection settings for data processing as well as for cookies and similar technologies so that we can fulfil our obligations under data protection and privacy law. In this context, the following data can be processed:

  • IP addresses
  • Consent-related information and data protection settings
  1. Legal basis for the processing of personal data

Data processing is necessary for the fulfilment of our legal obligations. This is our legitimate interest pursuant to Art. 6 para. 1 sent. 1 lit. f GDPR.

  1. Purpose of the data processing

The purpose of the use is the management and documentation of consents and data protection settings for data processing as well as cookies and similar technologies so that we can fulfil our obligations under data protection and privacy law.

  1. Duration of storage, objection and removal options

The processed data will be deleted as soon as it is no longer required to fulfil the purpose.

  1. Data subject rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:

  • right to information (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restrict the processing (Art. 18 GDPR)
  • right to notification (Art. 19 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object (Art. 21 GDPR)
  • right to withdraw the declaration of consent under data protection law (Art. 7 para. 3 GDPR)
  • right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Viewed

All prices incl. value added tax