Privacy Policy Overview
You can print or save this privacy policy in PDF format. » [Download Privacy Policy as PDF] (link to file “EN_Datenschutzerklärung”)

To open the PDF document, you need the appropriate software. If no program for viewing PDF files is installed on your computer, you can download the free “Adobe Acrobat Reader” here: : Adobe Reader kostenlos herunterladen

In the following, we inform you about the handling of your personal data collected during the use of our website or our services. This privacy policy describes what personal data is collected, the purposes for which it is processed, and the rights you have as a data subject.

1. General Information and Mandatory Disclosures

Data Protection
We, Premiery Cosmetics GmbH, take the protection of your personal data very seriously and treat it confidentially, in accordance with legal data protection regulations and this privacy policy. When you visit our website, various personal data is collected. Personal data refers to information that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this occurs. 

Please note that data transmission over the internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data from third-party access is not possible. 

Information about the responsible entity 

The responsible entity for data processing on this website is: 
Premiery Cosmetics GmbH 
Lichtentaler Str. 7 
76530 Baden-Baden 
Email: info@tresorclinic.de 

The responsible entity is the natural or legal person who decides, alone or together with others, on the purposes and means of processing personal data.

Revocation of Your Consent to Data Processing
Certain data processing operations are only possible with your explicit consent. You can revoke consent that you have already given at any time by sending us an informal message via email. The revocation does not affect the legality of data processing carried out prior to the revocation.

Right to Data Portability
The processing of your personal data only takes place if it is legally permitted. This may occur if the data processing is necessary to fulfill a contract or to carry out pre-contractual measures (Art. 6(1)(b) GDPR). Data processing may also take place based on our legitimate interest, such as ensuring the stability and functionality of our website (Art. 6(1)(f) GDPR).

SSL or TLS Encryption
To protect the security of your data, we use modern encryption methods on our website, such as SSL or TLS encryption. This protects all confidential data you transmit to us via the website, for example during orders or contact inquiries. You can recognize a secure connection by the fact that the URL in your browser’s address bar begins with “https://” and a lock symbol is displayed. This encryption ensures that your data cannot be viewed by unauthorized third parties during transmission.

Information, Blocking, Deletion
Within the scope of applicable legal provisions, you have the right at any time to request free information about your stored personal data, as well as to demand its correction, blocking, or deletion. You can contact us at any time using the contact details provided in the legal notice.

Review of Server Log Files
To ensure the security of our website, we reserve the right to review the data stored in server log files subsequently, should there be any indications of illegal use. This serves to protect our systems and prevent misuse.

Objection to Advertising Emails
We hereby expressly object to the use of contact details published in the context of the legal notice obligation for the unsolicited sending of advertising materials. We reserve the right to take legal action in the event of unsolicited advertising information being sent.

Note on Data Transmission over the Internet
Although we use security measures such as encryption, we would like to point out that data transmission over the internet (e.g., during email communication) can never be fully protected from access by unauthorized third parties. Therefore, ensure that you send confidential information only through secure communication channels.

2. Data Collection on Our Website

2.1 Cookies
To provide you with a user-friendly, efficient, and secure experience on our website, we use cookies. Some cookies are essential for the operation of the website, while others are used for analysis and marketing purposes. For non-essential cookies, we obtain your consent through our cookie consent tool, which allows you to manage your cookie settings or revoke your consent at any time.

Cookies are small text files stored on your device. They do not cause any harm and do not contain viruses. Cookies help make our services more user-friendly, efficient, and secure. Most of the cookies we use are “session cookies,” which are automatically deleted after your browser session ends. Other cookies, called “persistent cookies,” remain on your device until you delete them manually. These cookies allow us to recognize your browser on your next visit and, for example, save settings or the contents of a virtual shopping cart for future visits.

Depending on the type and purpose of the cookies, they may process personal data such as browser and location data or IP addresses. The storage and processing of this data is carried out in accordance with Art. 6(1)(b) GDPR (for contract fulfillment), Art. 6(1)(a) GDPR (based on your consent), or Art. 6(1)(f) GDPR (based on our legitimate interest in a functional and optimized website).

You can adjust your browser settings to inform you when cookies are set, allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Please note that disabling cookies may limit the functionality of our website.

Here you will find instructions for managing cookie settings for the most common browsers:

• Internet Explorer
• Firefox
• Chrome
• Safari
• Opera

By setting cookies, we can facilitate certain processes, such as saving the contents of a shopping cart for a later visit, making your use of our website more convenient.

The storage of technically necessary cookies is based on Art. 6(1)(f) GDPR, where our legitimate interest lies in ensuring the technically flawless and optimized provision of our services.

Server Log Files
The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

These data are not assignable to specific individuals and are not merged with other data sources. The basis for this data processing is Art. 6(1)(f) GDPR, our legitimate interest in the technical optimization of our website.

2.2 Contact Form
If you contact us (e.g., via the contact form or email), the personal data you provide will be used solely for the purpose of processing your inquiry and for the associated technical administration. The data collected can be found in the respective contact form. We do not share this data without your explicit consent.

The processing of your data is based on your consent (Art. 6(1)(a) GDPR), which you can revoke at any time. Alternatively, processing may be based on our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR). If your inquiry aims to conclude a contract, the processing is additionally based on Art. 6(1)(b) GDPR (for contract fulfillment).

Your data will be deleted once the inquiry has been fully processed, provided that the circumstances indicate that the matter has been resolved and no legal retention obligations apply.

2.3 Registration on This Website and Data Processing for Contract Fulfillment
If you create a customer account with us or provide data for contract processing, your personal data will be processed in accordance with Art. 6(1)(b) GDPR. This data is necessary to fulfill the contract or manage the customer account. The specific information collected can be seen in the respective input fields.

You can request the deletion of your customer account at any time by sending a simple message to the contact address provided in the legal notice. We use and store the data you provide solely for contract processing. After the contract has been fully executed or your customer account has been deleted, your data will be blocked from further use and deleted after the legal retention periods (e.g., tax and commercial regulations) expire, unless you have expressly consented to further use of your data or there is a legal basis allowing for continued data usage.

2.4 Data Processing in the Context of Appointment Booking
In the context of appointment booking, we collect personal data that you voluntarily provide to us. Mandatory fields are marked as such, as this information is essential for booking an appointment. Without providing this data, booking an appointment is not possible. The specific data collected can be seen in the respective input forms. Information in free text fields is optional and not required for appointment booking. We kindly ask you not to disclose sensitive information (e.g., health-related details) in these free text fields.

The processing of the data you submit is carried out in accordance with Art. 6(1)(b) GDPR for the purpose of completing the appointment booking. After the booked appointment has been fully processed, your data will be restricted for further processing and deleted following the expiration of statutory retention periods in accordance with Art. 6(1)(c) GDPR, unless you have consented to further use of your data in accordance with Art. 6(1)(a) GDPR, or if we reserve the right to further use the data, as permitted by law, which we inform you about in this statement.

Appointment Booking Solution: SimplyScheduleAppointments

For the management of appointment bookings, we use the SimplyScheduleAppointments booking solution, operated by N Squared Digital, LLC, 530 S Lake Ave #333, Pasadena, CA 91101, USA. This service provider acts on our behalf and processes data in accordance with applicable data protection regulations.

Our service providers are located in countries where the European Commission has determined an adequate level of data protection, including the USA. The transfer of personal data to the USA takes place based on the adequacy decision, provided that the service provider holds the relevant certification. Such certification is in place.

If we process your personal data in order to defend ourselves against legal claims you may assert, this processing is based on Art. 6(1)(f) GDPR, with our legitimate interest being the preservation of evidence, for example, in a case under the General Equal Treatment Act (AGG).

For more information on data processing by SimplyScheduleAppointments, please refer to their privacy policy at: https://mooveagency.com/privacy-policy

3. Use of the Comment Function
   When using the comment function on our website, in addition to your comment, the time of posting and the name you provide will be stored and publicly displayed on our website. Your IP address will also be stored for security reasons to prevent possible legal violations, such as infringement of third-party rights or the posting of illegal content through your comment. We store your email address to contact you in case of complaints from third parties related to your comment. The legal basis for storing your data is derived from Art. 6(1)(b) and (f) GDPR. We reserve the right to remove comments if they are reported as unlawful.

4. Analysis Tools and Advertising

4.1 Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

The use of Google Analytics is in our legitimate interest to optimize our website and analyze user behavior to improve our offerings. The legal basis for this is Art. 6(1)(f) GDPR (“legitimate interest”).

We have activated IP anonymization, so your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area (EEA) before transmission to Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data from Google.

We have entered into a data processing agreement with Google in accordance with Art. 28 GDPR to ensure that Google processes your personal data only on our behalf and in compliance with applicable data protection regulations. Additionally, the transfer of personal data to the USA is based on the European Commission’s Standard Contractual Clauses according to Art. 46 GDPR to ensure an adequate level of data protection.

For more information about data protection at Google, please visit hier.

4.2 Demographic Features in Google Analytics
This website uses the “demographic features” function of Google Analytics. This allows reports to be generated that contain information about the age, gender, and interests of site visitors. These data come from Google’s interest-based advertising as well as visitor data from third-party providers. This data cannot be linked to any specific individual. You can disable this feature at any time via the ad settings in your Google account, or you can generally prohibit the collection of your data by Google Analytics as described in the “Objection to Data Collection” section.

4.3 Google Analytics Remarketing
Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device capabilities of Google Ads and Google DoubleClick. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device features of Google Ads and Google DoubleClick. In this way, interest-based, personalized advertising messages that were displayed on one device (e.g., a smartphone) based on your previous usage and browsing behavior can also appear on another device (e.g., tablet or PC).

If you have given the corresponding consent, Google will link your web and app browsing history to your Google account for this purpose. This allows the same personalized advertising messages to be displayed on all devices where you are signed in with your Google account. To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by disabling personalized advertising in your Google account. To do so, follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of data in your Google account is based solely on your consent in accordance with Art. 6(1)(a) GDPR. You can revoke this consent with Google at any time. For data collection processes that are not merged with your Google account (e.g., if you do not have a Google account or have objected to the data merging), the data collection is based on Art. 6(1)(f) GDPR. The legitimate interest arises from the website operator’s interest in the anonymized analysis of website visitors for advertising purposes.

For more detailed information and Google’s privacy policy, please refer to the following link: https://www.google.com/policies/technologies/ads/.

4.4 Google AdWords and Google Conversion Tracking
This website uses Google AdWords, an online advertising program by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. As part of Google AdWords, we use conversion tracking. When you click on a Google ad, a cookie for conversion tracking is set.

These cookies expire after 30 days and do not serve to personally identify users. If you visit certain pages of this website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page.

Each Google AdWords customer receives a different cookie. The information collected through the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.

If you do not wish to participate in tracking, you can opt out by easily disabling the Google Conversion Tracking cookie through your internet browser settings. The storage of “conversion cookies” is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website offerings and its advertising.

For more information on Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy at: https://www.google.de/policies/privacy/.

4.5 Facebook Pixel
Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, for conversion measurement.

With the help of the Facebook pixel, we can track the behavior of visitors after they have been redirected to our website by clicking on a Facebook ad. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.

The data collected is anonymous to us as the operators of this website, meaning we cannot draw any conclusions about the identity of users. However, Facebook stores and processes this data, allowing it to be linked to the respective user profile. Facebook may use this data for its own advertising purposes, enabling ads to be displayed on and off Facebook. We, as the website operators, cannot influence this use of the data.

For more information on protecting your privacy, please refer to Facebook’s privacy policy at: https://www.facebook.com/about/privacy/.

You can also disable the “Custom Audiences” remarketing function in the ad settings section athttps://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website at: http://www.youronlinechoices.com/de/praferenzmanagement/.

4.6 IP-Anonymization
The IP anonymization feature is activated on this website. This means that your IP address is shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage for the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

We have entered into a data processing agreement with Google in accordance with Art. 28 GDPR. The transfer of personal data to the USA is based on the European Commission’s Standard Contractual Clauses under Art. 46 GDPR to ensure an adequate level of data protection.

4.7 Browser-Plugin
You can prevent the storage of cookies by adjusting the settings in your browser software. However, please note that in this case, you may not be able to fully use all the features of this website. Additionally, you can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Alternatively, you can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the future collection of your data when visiting this website: [Disable Google Analytics].

4.8 Legal Basis and Withdrawal of Your Consent
The processing of your personal data by Google Analytics is based on your consent in accordance with Art. 6(1)(a) GDPR. You can withdraw this consent at any time with future effect by adjusting the appropriate settings in the cookie settings or by using the opt-out link mentioned above. The legality of the data processing carried out up until the withdrawal remains unaffected.

5. Use of Customer Data for Direct Marketing
   5.1 Sign-Up for Our Email Newsletter
   If you subscribe to our email newsletter, we will regularly inform you about our current offers. For this, we only need your email address. Providing additional information is optional and allows for a more personalized greeting. The subscription process follows the double opt-in procedure, meaning you will receive a confirmation email after registering, which you must confirm by clicking a link to receive the newsletter.

By activating the confirmation link, you give us your consent to use your data in accordance with Art. 6(1)(a) GDPR. For security reasons, we store the IP address, date, and time of registration to prevent misuse. The data collected will be used exclusively for sending the newsletter. You can unsubscribe from the newsletter at any time via a link in the email or by contacting us through the details provided in this privacy policy. Your data will be deleted after unsubscribing, unless you have consented to further use.5.2 Versand des E-Mail-Newsletters an bestehende Kunden
Wenn Sie bei einem Kauf Ihre E-Mail-Adresse angegeben haben, können wir Ihnen ähnliche Produkte per E-Mail empfehlen. Dies geschieht auf Grundlage unseres berechtigten Interesses gemäß Art. 6 Abs. 1 lit. f DSGVO und § 7 Abs. 3 UWG. Ein gesondertes Einverständnis ist nicht erforderlich. Sollten Sie jedoch keine weiteren Werbe-E-Mails erhalten wollen, können Sie jederzeit widersprechen. Nach Eingang des Widerspruchs stellen wir den Versand umgehend ein.

5.3 Sending of the Newsletter via MailChimp
Our email newsletters are sent through the service provider MailChimp (The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). MailChimp is a service that helps organize and analyze the sending of newsletters. If you provide data to subscribe to the newsletter (e.g., your email address), it is stored on MailChimp’s servers in the USA.

MailChimp stores your data in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in using a secure and efficient system for sending newsletters. MailChimp is certified under the EU Standard Contractual Clauses, which regulate the transfer and processing of personal data in the USA and comply with European data protection standards.

To optimize our newsletter campaigns, MailChimp analyzes how newsletters are used, such as whether they are opened and which links are clicked. This is done using web beacons and tracking pixels embedded in the emails. Additionally, technical information such as the time of retrieval, IP address, browser type, and operating system is collected. This information is partly anonymized and partly personalized. You can opt out of this analysis by unsubscribing from the newsletter. A corresponding unsubscribe link is provided in every newsletter message.

MailChimp also processes the data based on legitimate interests under Art. 6(1)(f) GDPR, but does not use it for its own purposes or share it with third parties. The data you provide for the newsletter subscription will be stored by us until you unsubscribe. After you unsubscribe, your data will be deleted from both our servers and MailChimp’s servers unless there are legal retention obligations or you have consented to further use of your data.

To protect your data, we have entered into a data processing agreement with MailChimp based on the EU Standard Contractual Clauses to ensure the security of your personal data. You can review MailChimp’s privacy policy here: https://mailchimp.com/legal/privacy/.

6. Data Processing for Order Fulfillment
6.1 Contract Processing for Delivery and Payment
To process your order, we forward your personal data, in accordance with Art. 6(1)(b) GDPR, to the respective transport company and payment service providers, as necessary for delivery and payment processing.

If, based on a contract, we owe you updates for goods with digital content or for digital products, we will use the contact details provided with your order (e.g., name, address, email address) to inform you about these updates as required by law, in compliance with Art. 6(1)(c) GDPR. The data is used solely for this purpose and is processed only as long as necessary.

To process your order, we collaborate with service providers who support us in fulfilling contracts. Personal data is only shared to the extent necessary and in accordance with the following information.

6.2 Disclosure of Personal Data to Shipping Service Providers

• DHL
  If your goods are delivered by the shipping service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will share your email address with DHL, provided you have given us your explicit consent during the ordering process (Art. 6(1)(a) GDPR), for the purpose of coordinating the delivery date or providing a delivery notification. If no consent has been given, we will only share the recipient’s name and delivery address with DHL in accordance with Art. 6(1)(b) GDPR, as necessary for the delivery. This disclosure is limited to what is required for the delivery. Without your consent, delivery coordination or notifications will not be possible.

You can revoke your consent to share your email address with DHL at any time, either directly with us or with DHL, with future effect.

6.3 Use of Payment Service Providers

• Advance Payment (Bank Transfer)
  If you choose the payment method of advance payment (bank transfer), we will process your personal data (e.g., name, account number, bank details) for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR. This data is used solely for fulfilling the contract and processing the bank transfer.
• Visa / Mastercard
  If you pay by Visa or Mastercard, we will forward your payment data to the respective credit card provider for payment processing. The transfer is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for the payment process.
• Amazon Pay
  If you pay via Amazon Pay, the data required for payment processing (e.g., name, payment information, billing, and shipping address) will be forwarded to Amazon Payments Europe S.C.A., 38 avenue John F. Kennedy, L-1855 Luxembourg. The data processing is carried out in accordance with Art. 6(1)(b) GDPR. For more information about data protection at Amazon Pay, please refer to Amazon’s privacy policy: https://pay.amazon.de/help/201212490.
• Apple Pay
  If you pay via Apple Pay, the data required for payment processing (e.g., name, payment information, payment amount) will be forwarded to Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA. The data processing is carried out in accordance with Art. 6(1)(b) GDPR. Please note that Apple also applies its own privacy policies when using Apple Pay, which you can review here: https://www.apple.com/legal/privacy/de-ww/.

• PayPal
  If you make a payment via PayPal, credit card via PayPal, direct debit via PayPal, or—if available—”purchase on account” or “installment payment” via PayPal, we will forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, as part of the payment process. This transfer is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for the payment processing.

PayPal reserves the right to conduct a credit check for certain payment methods (credit card via PayPal, direct debit via PayPal, “purchase on account,” “installment payment”). For this purpose, your payment data may be forwarded to credit agencies, in accordance with Art. 6(1)(f) GDPR, based on PayPal’s legitimate interest in assessing your creditworthiness. The result of this check, which may include probability scores (so-called score values), is used by PayPal to determine whether to provide the respective payment method. These score values are based on a scientifically recognized mathematical-statistical method, which also includes address data. For more information on the processing of your data and the credit agencies involved, please refer to PayPal’s privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You can object to the processing of your data by PayPal at any time. However, PayPal remains entitled to process your personal data if it is necessary for the proper execution of the payment process.

7. Plugins and Tools
   7.1 Cookie Consent Tool Based on the Technology of Moove Agency Ltd
   This website uses a cookie consent tool from Moove Agency Ltd, London, United Kingdom, Reg. 07291892, to obtain effective consent from users for cookies and cookie-based applications that require consent.

By embedding a corresponding JavaScript code, a banner is displayed to users when they access the page, allowing them to grant their consent for certain cookies and/or cookie-based applications by clicking on checkboxes. The tool blocks the setting of all consent-required cookies until the user provides their consent by selecting the appropriate options. This ensures that such cookies are only set on the user’s device when explicit consent has been given.

To ensure that the cookie consent tool can uniquely associate page views with a specific user and store and document their consent settings, the tool collects certain information (including the IP address) when visiting our website. This information is transmitted to servers operated by Moove Agency Ltd and stored there.

These data processing activities are carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in having a legally secure, user-friendly, and individualized consent management system for cookies, as well as in ensuring legal compliance of our online presence. An additional legal basis is provided by Art. 6(1)(c) GDPR, as we are legally obligated to make the use of technically non-essential cookies dependent on the respective user’s consent.

We have entered into a data processing agreement with Moove Agency Ltd, which obligates the company to protect the data of our website visitors and not to disclose it to third parties.

For more information on data processing by Moove Agency Ltd, please refer to their privacy policy at: https://mooveagency.com/privacy-policy

7.2 Adobe Fonts (Typekit)
Our website uses so-called web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA, for the uniform display of fonts. When you access our pages, your browser loads the required fonts (web fonts) into the browser cache to correctly display text and fonts.

To do this, your browser must establish a connection to Adobe’s servers. This connection informs Adobe that your IP address has accessed our website, and it may result in the transmission of personal data to Adobe’s servers in the USA. The use of Adobe Fonts is based on our legitimate interest in having a uniform and appealing presentation of our website in accordance with Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

For more information about Adobe Fonts, please visit: https://fonts.adobe.com/ and Adobe’s privacy policy at: https://www.adobe.com/de/privacy.html.

7.3 Google Web Fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into its browser cache to correctly display text and fonts.

To do this, the browser you are using must establish a connection to Google’s servers. This allows Google to learn that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of having a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

For more information about Google Web Fonts, please visit: https://developers.google.com/fonts/faq and in Google’s privacy policy at: https://www.google.com/policies/privacy/.

7.4 Google reCAPTCHA
On our website, we use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is used to determine whether an input is made by a natural person or if it is being made abusively through automated or machine processes. The IP address and, if necessary, other data required for the reCAPTCHA service are transmitted to Google. The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in securing our website against abuse and spam.

In the context of using Google reCAPTCHA, there may also be a transfer of personal data to the servers of Google LLC in the USA. For more information about Google reCAPTCHA and Google’s privacy policy, please visit: https://www.google.com/intl/de/policies/privacy/.

As far as required by law, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the data processing described above. You can revoke your consent at any time with future effect. Please follow the instructions in this privacy policy to exercise your right of withdrawal.

7.5 Google Customer Reviews (formerly Google Certified Shops Program)
We cooperate with Google as part of the “Google Customer Reviews” program. The provider of this program is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The program allows us to collect reviews from users of our website who have made a purchase with us. After the purchase, you have the opportunity to participate in an email survey from Google, where you can rate your shopping experience.

If you give us your consent in accordance with Art. 6(1)(a) GDPR, your email address will be forwarded to Google, and you will receive an email from Google Customer Reviews asking you to provide a rating. The rating you provide will be collected along with other ratings and displayed in our “Google Customer Reviews” logo as well as in our Merchant Center dashboard. Additionally, your rating may contribute to Google Seller Ratings.

In the context of using Google Customer Reviews, there may also be a transfer of personal data to the servers of Google LLC in the USA. You can revoke your consent to data processing at any time, either to us or to Google.

For more information about Google’s data protection related to the Google Customer Reviews program, please visit: https://support.google.com/merchants/answer/7188525?hl=de. You can find information about data protection in relation to Google Seller Ratings here: https://support.google.com/google-ads/answer/2375474.

7.6 Google Maps
This page uses the mapping service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of providing an appealing representation of our online offerings and facilitating the easy location of places indicated on our website. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR.

For more information on how user data is handled, please refer to Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.

7.7 Use of YouTube Videos
Our website uses the embedding feature of YouTube to display and play videos offered by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

We utilize the enhanced privacy mode, which according to YouTube only starts storing user information once the video is played. When you play an embedded YouTube video on our website, YouTube uses cookies to collect information about user behavior. According to YouTube, this information is used for purposes such as creating video statistics, improving user-friendliness, and preventing abusive activities.

If you are logged into your YouTube or Google account, YouTube may directly associate your browsing behavior with your personal profile. To prevent this, please log out of your YouTube account before playing the video.

The use of YouTube is based on your consent in accordance with Art. 6(1)(a) GDPR, which you have granted us through our cookie consent tool. You can revoke your consent at any time with future effect by adjusting the relevant settings in the cookie consent tool on our website.

Regardless of whether a video is played, a connection to the YouTube network is established with every visit to our website, which may trigger further data processing operations by YouTube without our influence.

There may also be a transfer of personal data to the servers of Google LLC in the USA. The USA is considered a third country without an equivalent level of protection under EU data protection law. There is a risk that your data may be processed by US authorities for control and monitoring purposes, without you having legal remedies available as an EU citizen.

For more information on data protection at YouTube, please refer to the YouTube terms of service at: https://www.youtube.com/static?template=terms and in Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

8. Retention Period of Personal Data
   The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, the legally mandated retention periods (e.g., under commercial or tax regulations).

If the processing of personal data is based on your consent in accordance with Art. 6(1)(a) GDPR, the data will be stored until you revoke this consent. 

Personal data processed based on Art. 6(1)(b) GDPR in the context of contractual relationships or pre-contractual measures will be stored only as long as necessary to fulfill the contract or to initiate the contract. After the expiration of the statutory retention periods, the data will be routinely deleted unless further storage is necessary (e.g., in the case of a continuing legitimate interest). 

If personal data is processed based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless there are compelling legitimate grounds for the processing or the data is still required for the assertion, exercise, or defense of legal claims. 

Data processed for the purposes of direct marketing based on Art. 6(1)(f) GDPR will be retained until you object to the processing in accordance with Art. 21(2) GDPR. 

Unless specific retention periods are mentioned in this privacy policy, personal data will be deleted as soon as it is no longer needed for the original processing purposes.

9. Processing of Personal Data by Social Networks

We operate publicly accessible profiles on various social networks. The social networks used are detailed below.

Social networks like Facebook, Twitter, and others can generally analyze user behavior comprehensively when you visit their websites or interact with social media content (such as “Like” buttons or advertisements). When you visit our profiles on these networks, several data protection-related processes are triggered.

If you are logged into your social media account and visit one of our profiles, the operator of the respective network can associate your visit with your account. However, your personal data can also be collected even if you are not logged in or do not have a user account with the respective network. This often happens through cookies stored on your device or by capturing your IP address.

The data collected in this way enables social network operators to create user profiles that reflect your preferences and interests. As a result, personalized advertising can be displayed both within the respective platform and on other websites. If you have a user account with the respective social network, ads may appear on all devices where you are or have been logged in.

We would like to point out that we cannot fully trace all data processing processes of the social networks. The respective platform may carry out additional processing operations that are beyond our control. For details, please refer to the privacy policies of the respective networks.Rechtsgrundlage
Unsere Social-Media-Präsenzen sollen eine möglichst umfassende Sichtbarkeit im Internet gewährleisten, was ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO darstellt. Die durch die sozialen Netzwerke angestoßenen Analyseprozesse basieren möglicherweise auf anderen Rechtsgrundlagen, die von den jeweiligen Betreibern der Plattformen festgelegt werden müssen (z. B. Einwilligung nach Art. 6 Abs. 1 lit. a DSGVO).

Responsibility and Exercise of Rights
When you visit one of our social media profiles (e.g., on Facebook), we are jointly responsible with the platform operator for the data processing activities triggered. You can assert your rights (e.g., access, rectification, deletion, restriction of processing, data portability, or complaint) against both us and the operator of the respective network (e.g., Facebook).

Please note that despite the joint responsibility, we do not have complete control over the data processing carried out by the operators of social networks. The respective processes are governed by the policies and business practices of the individual platform operators.

Retention Period
The data we collect directly through our social media presences will be deleted as soon as the purpose of storage ceases, you request deletion, you revoke your consent, or the reason for storage no longer applies. Cookies stored on your device will remain until you delete them yourself. Legal retention periods remain unaffected.

We have no influence over the retention period of data processed by the operators of social networks for their own purposes. For further information, please contact the respective platforms directly (see the privacy policy of the respective providers below).

Social Networks in Detail:

• Facebook
  Our profile on Facebook is provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook also transfers collected data to the USA and other third countries. We have entered into an agreement with Facebook regarding joint processing (Controller Addendum) that outlines the responsibilities. You can view this agreement here: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings on Facebook here: https://www.facebook.com/settings?tab=ads.

The transfer of data to the USA is based on the Standard Contractual Clauses of the EU Commission. For more information, please visit: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

For more information about data protection at Facebook, please visit: https://www.facebook.com/about/privacy.

• Instagram
  Our Instagram profile is provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

The transfer of data to the USA is based on the Standard Contractual Clauses of the EU Commission. For more information, please visit: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For more information about data protection at Instagram, please visit: https://help.instagram.com/519522125107875.

• Pinterest
  Our profile on Pinterest is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

For more information about data protection at Pinterest, please visit: https://policy.pinterest.com/de/privacy-policy.

• LinkedIn
  Our LinkedIn profile is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. You can disable the advertising cookies here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The transfer of data to the USA is based on the Standard Contractual Clauses of the EU Commission. For more information, please visit: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

You can find LinkedIn’s privacy policy here: https://www.linkedin.com/legal/privacy-policy.

• YouTube
  Our YouTube profile is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For more information about data protection at YouTube, please visit: https://policies.google.com/privacy?hl=de.

• TikTok
  Our TikTok profile is provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

For more information about data protection at TikTok, please visit: https://www.tiktok.com/legal/privacy-policy?lang=de.

The transfer of data to third countries is based on the Standard Contractual Clauses of the EU Commission. For details, please visit: https://www.tiktok.com/legal/privacy-policy?lang=de.

10. 
    Rights of Affected Persons
    Applicable data protection law grants you various rights against the data controller regarding the processing of your personal data. These rights of the affected individuals (such as rights of access and intervention) can be exercised under the specified conditions based on the respective legal basis:

• Right of Access according to Art. 15 GDPR: You have the right to request information about the personal data we process.
• Right to Rectification according to Art. 16 GDPR: You can request the correction of inaccurate or incomplete data stored about you.
• Right to Deletion according to Art. 17 GDPR: You can request the deletion of your personal data, unless further processing is necessary, e.g., to fulfill legal obligations.
• Right to Restriction of Processing according to Art. 18 GDPR: You can request the restriction of the processing of your data if, for example, the accuracy of the data is contested or the processing is unlawful.
• Right to Data Portability according to Art. 20 GDPR: You have the right to receive the data you provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller.
• Right to Withdraw Consent according to Art. 7(3) GDPR: You have the right to withdraw consent you have given at any time.
• Right to Complain to a Supervisory Authority according to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection authority.

Right to Object
If we process your personal data based on our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing at any time for reasons arising from your particular situation.

If you exercise this right, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you may object to this processing at any time. In this case, we will immediately cease processing for these purposes.