Privacy Policy
1) Introduction and Contact Information of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The data controller for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is IDEAL-ALPHA GmbH, Kaiser-Friedrich-Str. 90, 10585 Berlin, Germany, Tel.: 03020847855, E-Mail: a.wagemann@ideal-alpha.com. The data controller for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website solely for informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Used browser
- Used operating system
- Used IP address (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not transferred or used in any other way. However, we reserve the right to check the server log files retrospectively should specific indications of illegal use arise.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
For hosting our website and displaying the pages, we use a provider who provides these services either independently or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
4) Cookies
To make the visit to our website attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage duration from the overview in the cookie settings of your web browser.
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the execution of the contract, in accordance with Art. 6 (1) lit. a GDPR in case of granted consent, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
When you contact us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively clarified and provided that no legal retention obligations exist.
6) Comment Function
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator's name chosen by you will be saved and published on this website. Furthermore, your IP address will be logged and stored. This IP address storage is for security reasons and in case the person concerned infringes on the rights of third parties or posts illegal content via a submitted comment. We need your email address to contact you if a third party complains about your published content as being unlawful.
The legal bases for storing your data are Art. 6 (1) lit. b and f GDPR. We reserve the right to delete comments if they are complained about as being unlawful by third parties.
7) Data Processing When Opening a Customer Account
According to Art. 6 (1) lit. b GDPR, personal data is collected and processed when you provide it to us during the opening of a customer account, to the extent necessary. You can find out which data is required for opening an account from the input form on our website.
You can delete your customer account at any time by sending a message to the above address of the data controller. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods oppose deletion, and we have no legitimate interest in further storage.
8) Use of Customer Data for Direct Marketing
8.1 Subscription to Our Email Newsletter
If you sign up for our email newsletter, we will send you regular information about our offers. The only mandatory information required for sending the newsletter is your email address. Any additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. When registering for the newsletter, we store your IP address, entered by your internet service provider (ISP), as well as the date and time of registration, to trace any possible misuse of your email address at a later date. The data collected by us during the registration process for the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the above data controller. After unsubscribing, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data beyond what is legally permissible, about which we inform you in this declaration.
8.2 Cart Reminders by Email
If you abandon your shopping process before completing the order, you have the option to receive a one-time reminder by email about the contents of your virtual shopping cart.
The only mandatory information required for sending this reminder is your email address. Any additional data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification after you have expressly confirmed your consent to receive the reminder by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR for sending a cart reminder. When registering for our email notification service, we store your IP address, entered by your internet service provider (ISP), as well as the date and time of registration, to trace any possible misuse of your email address at a later date. The data collected by us during the registration process for our email notification service is used strictly for the intended purpose.
You can unsubscribe from cart reminders at any time by sending a message to the above data controller. After unsubscribing, your email address will be immediately removed from our distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data beyond what is legally permissible, about which we inform you in this declaration.
9) Data Processing for Order Handling
9.1 To the extent necessary for the contractual processing for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
If, based on a corresponding contract, we owe you updates for goods with digital elements or digital products, we will process the contact data (name, address, email address) you provided when ordering, to inform you personally about upcoming updates within the legally specified period using the appropriate communication method (e.g., post or email) in accordance with Art. 6 (1) lit. c GDPR. Your contact data will be strictly used for notifications about updates we owe and will only be processed by us as necessary for the respective information.
To process your order, we also work with the following service provider(s) who fully or partially support us in the execution of concluded contracts. According to the following information, certain personal data is transferred to these service providers.
9.2 Forwarding Personal Data to Shipping Service Providers
- DHL
We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We forward your email address and/or phone number to the provider before delivery of the goods for the purpose of coordinating a delivery date or delivery notification in accordance with Art. 6 (1) lit. a GDPR, provided you have expressly consented to this during the order process. Otherwise, we will only forward the recipient's name and delivery address to the provider for delivery in accordance with Art. 6 (1) lit. b GDPR. The data transfer only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
The consent can be revoked at any time with effect for the future to the above-mentioned responsible person or to the provider.
9.3 Use of Payment Service Providers (Payment Services)
- Apple Pay
If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment is processed via the "Apple Pay" function of your device operated with iOS, watchOS, or macOS by debiting a payment card stored in "Apple Pay." Apple Pay uses security features built into the hardware and software of your device to protect your transactions. Thus, the release of a payment requires the input of a code previously defined by you and the verification using the "Face ID" or "Touch ID" function of your device.
For the purpose of processing the payment, the information provided by you during the ordering process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting the data for payment processing to the payment service provider of the payment card stored in Apple Pay. The encryption ensures that only the website where the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.
If personal data is processed during the described transmissions, the processing is carried out solely for payment processing purposes in accordance with Art. 6 (1) lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on the Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that allows your identification. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."
For more information on Apple Pay privacy, visit the following link: https://support.apple.com
- Google Pay
If you choose the "Google Pay" payment method of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment is processed via the "Google Pay" application on your mobile device, which operates with at least Android 4.4 ("KitKat") and has NFC functionality, by debiting a payment card stored in Google Pay or a verified payment system (e.g., PayPal). To authorize a payment of more than 25 euros via Google Pay, the prior unlocking of your mobile device through the configured verification measure (such as facial recognition, password, fingerprint, or pattern) is required.
For the purpose of processing the payment, the information provided by you during the ordering process, along with information about your order, is forwarded to Google. Google then transmits your payment information stored in Google Pay in the form of a one-time transaction number to the originating website to verify that a payment has been made. This transaction number contains no real payment data for your payment methods stored with Google Pay but is created and transmitted as a one-time valid numerical token. In all transactions made via Google Pay, Google only acts as an intermediary to process the payment. The execution of the transaction is carried out exclusively in relation to the user and the originating website by debiting the payment method stored with Google Pay.
If personal data is processed during the described transmissions, the processing is carried out solely for payment processing purposes in accordance with Art. 6 (1) lit. b GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the goods or services purchased, photos attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason for the transaction, and any offer associated with the transaction.
According to Google, this processing is carried out solely in accordance with Art. 6 (1) lit. f GDPR based on the legitimate interest in proper accounting, verification of transaction data, and the optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.
Google Pay's terms of use can be found here:
https://payments.google.com
Further information on Google Pay privacy can be found at the following link:
https://payments.google.com
- PayPal
One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method of the provider where you make an advance payment, your payment data provided during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) lit. b GDPR. The data is forwarded solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you choose a payment method where we make an advance payment, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data on an alternative payment method) during the ordering process.
To protect our legitimate interest in determining your ability to pay, this data will be forwarded by us to the provider in accordance with Art. 6 (1) lit. f GDPR for the purpose of a credit check. The provider checks, based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experience), whether the payment option you selected can be granted concerning payment and/or default risk.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. In addition to address data, other factors also flow into the calculation of the score values.
You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider remains entitled to process your personal data if this is necessary for the contractual payment processing.
- Stripe
One or more online payment methods of the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
If you choose a payment method of the provider where you make an advance payment (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) lit. b GDPR. The data is forwarded solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you choose a payment method where the provider makes an advance payment (such as invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data on an alternative payment method) during the ordering process.
To protect our legitimate interest in determining the creditworthiness of our customers, this data will be forwarded by us to the provider in accordance with Art. 6 (1) lit. f GDPR for the purpose of a credit check. The provider checks, based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experience), whether the payment option you selected can be granted concerning payment and/or default risk.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. In addition to address data, other factors also flow into the calculation of the score values.
You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider remains entitled to process your personal data if this is necessary for the contractual payment processing.
10) Web Analysis Services
10.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.
By default, cookies are set when you visit the website via Google Analytics 4, which are small text blocks that are stored on your device and collect certain information. This information also includes your IP address, which is truncated by Google to exclude direct personal reference.
The information is transmitted to servers of Google and further processed there. Data transfers to Google LLC with headquarters in the USA are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website use and internet use. The IP address transmitted by your browser and shortened by Google as part of Google Analytics is not merged with other data by Google. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All of the processing described above, in particular the setting of cookies on the device used, will only be carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR.
Without your consent, the use of Google Analytics 4 will not take place during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please disable this service via the "cookie consent tool" provided on the website.
We have concluded a data processing agreement with Google to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://policies.google.com
Demographic Characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can thus create statistics that provide information about the age, gender, and interests of website visitors. This is done by analyzing ads and information from third parties. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and is deleted after a storage period of two months.
Google Signals
As an extension to Google Analytics 4, "Google Signals" may be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to use Google Analytics in accordance with Art. 6 (1) lit. a GDPR, analyze your usage behavior across devices and create database models, among other things, for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the "Personalized Ads" function in your Google account settings. Follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, set up an account on this website, and log in with this account on different devices, your activities, including conversions, may be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on a European Commission adequacy decision.
10.2 Matomo
This website uses a web analysis service of the following provider: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, ("Matomo")
From this data, pseudonymized usage profiles may be created and evaluated for the same purpose. Cookies may be used for this purpose. Cookies are small text files stored locally in the cache of the internet browser of the site visitor. Cookies allow, among other things, the recognition of the internet browser. If data collected with the Matomo technology (including your pseudonymized IP address) is transferred to servers of Matomo in New Zealand and processed for usage analysis purposes, we inform you that the European Commission has issued an adequacy decision for New Zealand, certifying compliance with European data protection standards in international data transfers.
The pseudonymized information generated by the cookie will not be used to personally identify the visitor to this website and will not be combined with personal data about the carrier of the pseudonym.
If data is also transmitted to servers of the provider and the web analysis service is not installed locally on our server, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
All the above-described processing, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. Without this consent, Matomo will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
11) Retargeting/Remarketing and Conversion Tracking
11.1 Meta Pixel with Extended Data Matching
Within our online offering, we use the "Meta Pixel" service in the extended data matching mode of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")
If a user clicks on an ad we have placed on Facebook or Instagram, the URL of our linked page is extended with a parameter using "Meta Pixel." This URL parameter is then entered into the user's browser after the redirection by a cookie that our linked page itself sets. Furthermore, this cookie collects specific customer data such as the email address, which we collect on our website linked to the Facebook or Instagram ad during transactions such as purchases, account registrations, or registrations (extended data matching). The cookie is then read and allows the transmission of data, including specific customer data, to Meta.
We use "Meta Pixel" with extended data matching to make our ads ("Ads") on Facebook and/or Instagram more effective and to ensure that they match users' interests or have certain characteristics (e.g., interests in specific topics or products determined by visited websites) that we transmit to Meta ("Custom Audiences").
In addition, we analyze the effectiveness of our ads by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of "Meta Pixel," the extended data matching function helps us measure the effectiveness of our advertising campaigns better by capturing more attributed conversions.
All transmitted data is stored and processed by Meta, enabling a connection to the respective user profile and allowing Meta to use the data for its advertising purposes in accordance with Meta's Data Usage Policy (https://www.facebook.com
All the above-described processing, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to a server of Meta and stored there; in this context, data may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on a European Commission adequacy decision.
11.2 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful individual advertising measures are in relation to the data of the advertising campaigns. We pursue the goal of displaying advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Thus, cookies cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users.
In the context of using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.
Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com
All the above-described processing, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in provided by Google under the following link:
https://www.google.com
To address users whose data we have received in the context of business or business-like relationships even more appropriately in advertising, we use a customer match function within Google Ads. For this purpose, we electronically transmit one or more files with aggregated customer data (mainly email addresses and phone numbers) to Google. Google does not gain access to plain data but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to match existing Google accounts that the data subjects have set up. This enables personalized advertising to be displayed across all Google services linked to the respective Google account.
The transmission of customer data to Google only takes place if you have expressly given us consent to do so in accordance with Art. 6 (1) lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in connection with the customer matching function can be found here: https://support.google.com
Google's privacy policy is available here: https://www.google.de
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on a European Commission adequacy decision.
11.3 Google Marketing Platform
This website uses the Google Marketing Platform online marketing tool operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to display relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google collects which ads are shown in which browser using a cookie ID and can thus prevent them from being displayed multiple times. Furthermore, GMP can capture conversions related to ad requests using cookie IDs. This is the case, for example, when a user sees a GMP ad and later purchases something on the advertiser's website using the same browser. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server.
We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, the provider may still obtain and store your IP address. In the context of using GMP, personal data may also be transferred to the servers of Google LLC. in the USA.
All the above-described processing, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on a European Commission adequacy decision.
The privacy policy of GMP by Google can be found here: https://www.google.de
11.4 Snap Pixel (Snapchat)
This website uses the conversion tracking technology of the following provider: Snap Inc., 63 Market Street, Venice, CA 90291, USA
If you have accessed our website from an ad on the provider's domain, the success of the ad can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).
Specific device and browser information, including your IP address, may be read via the tracking technology to capture and evaluate predefined user actions (e.g., completed transactions, leads, search queries on the website, product page views). This allows the creation of statistics about user behavior on our website after being redirected from an ad, which serves to optimize our offering.
All the above-described processing, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
11.5 TikTok Pixel
This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
If you have accessed our website from an ad on the provider's domain, the success of the ad can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).
Specific device and browser information, including your IP address, may be read via the tracking technology to capture and evaluate predefined user actions (e.g., completed transactions, leads, search queries on the website, product page views). This allows the creation of statistics about user behavior on our website after being redirected from an ad, which serves to optimize our offering.
All the above-described processing, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
12) Site Features
Google Maps API
To enable real-time checking of certain inputs in the address form of the ordering process of our webshop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data can also be transmitted to: Google LLC., USA
The provider validates the entered address, verifies the spelling, and, if necessary, adds missing data. In the case of unclear addresses, correct alternative suggestions are displayed. For this purpose, the address data entered by you is transmitted to the provider, stored, and evaluated there.
This processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in correctly recording the correct address data of the customer to conscientiously fulfill our contractual delivery obligations and to prevent problems with contract execution.
The provider processes the affected data separately and does not merge it with other data sets, and deletes it as soon as its status or correctness has been confirmed, but no later than 30 days.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on a European Commission adequacy decision.
13) Tools and Miscellaneous
13.1 - easybill
For the bookkeeping, we use the service of the cloud-based accounting software provided by easybill GmbH, Düsselstr. 21, 41564 Kaarst ("easybill"). easybill processes incoming and outgoing invoices and, if necessary, the bank transactions of our company to automatically record invoices, match them to transactions, and create financial accounting in a semi-automated process.
If personal data is processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in efficient organization and documentation of our business transactions.
Further information on easybill GmbH, the automated processing of data, and the data protection regulations can be found at easybill.de/privacy
13.2 Cookie Consent Tool
This website uses a "cookie consent tool" to obtain effective user consent for consent-requiring cookies and cookie-based applications. The "cookie consent tool" is displayed to users as an interactive user interface when they access the page, where consent for certain cookies and/or cookie-based applications can be given by ticking a box. This ensures that such cookies are only set on the respective user's device if they have given the corresponding consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not generally processed here.
If personal data is processed for storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for processing is also Art. 6 (1) lit. c GDPR. As responsible parties, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
If necessary, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prevent unauthorized disclosure to third parties.
Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
14) Rights of the Data Subject
14.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) against the data controller regarding the processing of your personal data, whereby the prerequisites for exercising these rights are referred to in the respective legal basis:
- Right to information according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent given according to Art. 7 (3) GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES. YOU CAN EXERCISE THE RIGHT OF OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
15) Duration of Storage of Personal Data
The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and – if relevant – additionally based on the respective statutory retention period (e.g., commercial and tax retention periods).
If personal data is processed based on explicit consent in accordance with Art. 6 (1) lit. a GDPR, the data concerned will be stored until you revoke your consent.
If statutory retention periods exist for data processed within the scope of legal or similar obligations based on Art. 6 (1) lit. b GDPR, such data will be routinely deleted after the retention periods expire, provided that they are no longer required for contract fulfillment or initiation and/or there is no legitimate interest on our part in further storage.
If personal data is processed based on Art. 6 (1) lit. f GDPR, such data will be stored until you exercise your right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If personal data is processed for the purpose of direct marketing based on Art. 6 (1) lit. f GDPR, such data will be stored until you exercise your right to object in accordance with Art. 21 (2) GDPR.
If nothing else is specified in the other information of this declaration concerning specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
Data Protection Declaration
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is IDEAL-ALPHA Ltd., 71-75 Shelton Street Covent Garden, WC2H 9JQ London, England, Phone.: 015125848649, Fax: IDEAL-ALPHA GmbH, e-mail: info@ideal-alpha.com. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When You Visit Our Website
2.1 When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
For the hosting of our website and the presentation of the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
4) Cookies
In order to make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted again after the browser is closed (so-called "session cookies"), in other cases, these cookies remain on your end device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the duration of the storage in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies set by us, the processing is carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
You can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting Us
When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration.
The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.
6) Commentary Function
Within the scope of the commentary function on this website, in addition to your comment, information on the time of writing the comment and the name of the commentator you have chosen is stored and published on the website. Furthermore, your IP address is logged and stored. This IP address is stored for security reasons in case the person concerned violates the rights of third parties or posts illegal content by submitting a comment. We need your e-mail address to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 (1) point b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
7) Data Processing When Opening a Customer Account and for Contract Processing
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.
8) Use of Client Data for Direct Advertising
Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration for the purpose of tracing any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the promotional purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data, or we reserve the right to a more extensive use your data which is permitted by law and about which we inform you in this declaration.
9) Processing of Data for the Purpose of Order Handling
9.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally stipulated period of time within the framework of our statutory duty to inform pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.
In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.
9.2 Passing on Personal Data to Shipping Service Providers
- DHL
We use the following provider as transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, if you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The transmission only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.
9.3 Use of Payment Service Providers
- Stripe
Online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
If you select a payment method of the provider for which you make an advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
10) Web Analysis Services
10.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there and may also be transferred to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes the possibility of direct personal reference. Through the extension, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a server of Google LLC. in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google (Universal) Analytics is not combined with other Google data.
All the processing described above, in particular the setting of Google Analytics cookies for reading information on the terminal device used, is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 letter a GDPR. Without this consent, the use of Google Analytics during your visit to our website will not take place.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal of consent, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com
Demographics
Via a special function called "Demographics", Google Analytics also enables the compilation of statistics with statements about the age, gender and interests of site visitors based on an evaluation of interest-related advertising and with the use of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target-group-optimized marketing measures. However, data sets collected via "Demographics" cannot be assigned to a specific person.
Details on the processing operations initiated and on Google's handling of data collected from websites can be found here: https://policies.google.com
Google Signals
On this website, the "Google Signals" service can also be used as an extension of Google Analytics. With Google Signals, cross-device reports can be created by Google (so-called "cross-device tracking"). If you have activated "personalised ads" in your Google account settings and you have linked your internet-enabled devices to your Google account, Google can analyse user behaviour across devices and create database models based on this, provided you have given your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 letter a GDPR (see above). The logins and device types of all page visitors who were logged into a Google account and performed a conversion are taken into account. The data shows, among other things, on which device you first clicked on an ad and on which device the associated conversion took place. Insofar as Google Signals is used, we do not receive any personal data from Google, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalised ads" function in the settings of your Google account and thus turning off the cross-device analysis. To do this, follow the instructions on this page: https://support.google.com
Further information can be found here: https://support.google.com
UserIDs
As an extension of Google Analytics, the "UserIDs" function can also be used on this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behaviour can also be analysed across devices if you have given your corresponding consent to the use of Google Analytics in accordance with Art. 6 Para. 1 letter a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the relevant conversion took place.
10.2 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the use of websites.
When using Google Analytics 4, so-called "cookies" are used as standard. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, a company based in the USA, where the information is further processed.
When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed by default and automatically only in an anonymized manner, so that a direct personal reference of the collected information is excluded. This automatic anonymization is carried out by shortening the IP address transmitted by your terminal device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports (reports) on your website activities or your usage behavior and to provide us with other services related to your website usage and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be retained for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish between groups of website users for the purpose of targeting marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic characteristics" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website.
You can revoke your consent once given at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
Google Signals
On this website, the "Google Signals" service can also be used as an extension of Google Analytics 4. With Google Signals, cross-device reports can be created by Google (so-called "cross-device tracking"). If you have activated "personalised ads" in your Google account settings and you have linked your internet-enabled devices to your Google account, Google can analyse user behaviour across devices and create database models based on this, provided you have given your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 letter a GDPR (see above). The logins and device types of all page visitors who were logged into a Google account and performed a conversion are taken into account. The data shows, among other things, on which device you first clicked on an ad and on which device the associated conversion took place. Insofar as Google Signals is used, we do not receive any personal data from Google, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalised ads" function in the settings of your Google account and thus turning off the cross-device analysis. To do this, follow the instructions on this page: https://support.google.com
Further information can be found here: https://support.google.com
UserIDs
As an extension of Google Analytics 4, the "UserIDs" function can also be used on this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behaviour can also be analysed across devices if you have given your corresponding consent to the use of Google Analytics in accordance with Art. 6 Para. 1 letter a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the relevant conversion took place.
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further legal information on Google Analytics 4 can be found at the following link: https://policies.google.com
Details on the processing triggered by Google Analytics 4 and Google's handling of data from websites can be found here: https://policies.google.com
11) Retargeting/Remarketing/ Referral Advertising
Meta Pixel with extended data synchronisation
Within our online offering, we use the "Meta Pixel" service of the following provider in extended data synchronisation mode: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")
If a user clicks on an advert placed by us on Facebook or Instagram, "Meta Pixel" is used to add a parameter to the URL of our linked page. This URL parameter is then entered in the user's browser after redirection by a cookie that our linked page sets itself. In addition, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram ad during processes such as purchase transactions, account logins or registrations (extended data synchronisation). The cookie is then read and enables the data, including specific customer data, to be transmitted to Meta.
We use "Meta Pixel" with extended data matching to make our adverts (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Meta (so-called "Custom Audiences").
In addition, we analyse the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Meta Pixel", the extended data synchronisation function helps us to better measure the effectiveness of our advertising campaigns by recording more associated conversions.
All transmitted data is stored and processed by Meta so that an assignment to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with Meta's data usage guidelines (https://www.facebook.com
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
The information generated by Meta is usually transferred to a Meta server and stored there; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
12) Tools and Miscellaneous
12.1 - Easybill
We use the cloud-based accounting software of easybill GmbH, Düsselstr. 21, 41564 Kaarst („easybill “) to handle our accounting.
Easybill processes incoming and outgoing invoices and, if applicable, also the bank transactions of our business to automatically record invoices, match them to the transactions and create the financial accounting from this in a semi-automated process.
If personal data is also processed in this process, the processing is carried out in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in the efficient organization and documentation of our business transactions.
You can find more information about Easybill, the automated processing of data and its privacy policy at www.easybill.de/privacy.
12.2 This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users in the form of an interactive user interface when they access the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box.
Using the tool, all cookies/services requiring consent are only loaded if the respective user provides the corresponding consent by ticking the corresponding box. This ensures that such cookies are only set on the respective end device of the user if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) point GDPR based on our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the processing is Art. 6 (1) point c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
13) Rights of the Data Subject
13.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:
- Right of access by the data subject pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
13.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
14) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed basis on an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing based on Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.