privacy policy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes this data is used. Personal data is individual information about the personal or factual circumstances of a specific or identifiable natural person (data subject), e.g. name, address, email addresses, user behavior. This is data with which we can identify you. In addition, you will also find occasional information here about data processing processes outside of this website (e.g. video conferences or newsletters).

person responsible for data processing

responsible person

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

IN & OUT HOUSE GmbH
Jahnallee 45A
53173 Bonn
Telephone: 0800 0008209
E-mail: info@in-out-house.de

data protection officer

exkulpa gmbh
Waldfeuchter Str. 266
52525 Heinsberg
Telephone: (+49) 02452 / 99 33 11
E-mail: datenschutz@in-out-house.de

General

This privacy policy meets the legal requirements for transparency in the processing of personal data. This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behavior when visiting a website. Information that we cannot relate to you (or can only do so with disproportionate effort), e.g. by anonymizing, is not personal data. The processing of personal data (e.g. collecting, querying, using, storing or transmitting) always requires a legal basis and a defined purpose.

Stored personal data is deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory retention periods.

Information according to Art. 13 GDPR

This information is aimed at customers, interested parties, suppliers and employees. We process your personal data for the following purposes:

To fulfill our contractual obligations to you (Article 6 (1) (b) GDPR).
To carry out pre-contractual obligations (Article 6 (1) (b) GDPR).
To answer inquiries (Art. 6 para. 1 lit. b GDPR).
If you have given us your consent to process your personal data for certain purposes (e.g. to receive our newsletter), the data processing will take place on the basis of your consent (Art. 6 Para. 1 Lit. a GDPR).
To fulfill legal obligations to which our company is subject (Art. 6 para. 1 lit. c GDPR).
Where necessary, we also process your data to protect our legitimate interests, in particular to assert legal claims and defend ourselves in legal disputes or to ensure IT security, to consult and exchange data with credit agencies to determine creditworthiness and default risks, for direct advertising and market research, provided you have not objected to the use of your data for this purpose, for measures to manage the business and further develop services and products, for measures to optimize products and sales, for risk management measures, for preventing or investigating criminal offenses (Art. 6 Para. 1 Letter f GDPR).

categories of recipients of the personal data

Within our company, only those employees have access to the data who absolutely need it to perform their tasks (need-to-know principle). Individual processes and services are carried out by carefully selected service providers who have been commissioned in compliance with data protection regulations and who are based within the EEA. If service providers commissioned by us receive access to personal data when carrying out their services, contract processing agreements have been concluded with them in accordance with Art. 28 Para. 3 GDPR.

duration of data storage

The data we process is stored for the duration of the existence and processing of the contractual relationship and in compliance with statutory retention periods. These are in particular commercial and tax retention obligations under the German Commercial Code (HGB) and the German Fiscal Code (AO). The regular retention or documentation periods are up to ten years. If no contractual relationship is established, we only process the data for as long as the specific purpose requires.

your rights as a data subject

As a data subject, you have the following rights with regard to the personal data concerning you:

Right to information about the data we process about you.
Right to rectification or erasure if the data we have collected is incorrect, out of date or unlawful.
Right to restriction of processing if complete deletion is not possible, e.g. because we have to comply with statutory retention periods.
Right to object to processing if the data processing is based on a balance of interests (the so-called legitimate interest), as described above under "Purpose of processing". This is the case if the processing is not necessary to fulfill a contract with you. If you assert your right of objection, we ask you to explain the reasons why we should not process your data as we do.

Of course, you can also object to the processing of your personal data for advertising purposes at any time. Please address your objection to our Imprint address provided or send us an email to the Imprint specified address.

Right to revoke, provided that you have given us your consent to process your data. You can assert your revocation to our company at any time without giving reasons. Please contact Imprint specified address.
In addition, you have the right to complain to a data protection supervisory authority about the processing of your personal data by our company.

If you have any questions about data protection, please send an email to Imprint address provided.

cookies

Cookies are small text files that we send to the browser on your device when you visit our website and that are stored there. As an alternative to using cookies, information can also be stored in your browser's local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses so that we are, for example, able to recognize the browser you use when you visit our website again and to transmit various information to us (non-necessary cookies). Cookies enable us, among other things, to make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information using cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the consent manager of this website.

consent with Usercentrics

We use the consent technology from Usercentrics to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich (hereinafter “Usercentrics”).

When you visit our website, the following personal data is transferred to Usercentrics:

Your consent(s) or the revocation of your consent(s)
your IP address
information about your browser
information about your device
time of your visit to the website

In order to be able to assign and document your consent or your revocation, the provider places a cookie in your browser. This data is stored until you delete the cookie, ask us to delete the data or the purpose for data processing no longer applies. Legal retention periods remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 (1) (c) GDPR.

order processing

To ensure that personal data is processed according to our specifications and in compliance with the GDPR, we have concluded a data processing agreement (AVV) with the provider.

your rights

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
correction pursuant to Art. 16 GDPR of incorrect or incomplete data stored by us;
deletion acc. Art.17 GDPR of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
restriction processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims or you have objected to processing pursuant to Art. 21 GDPR.
data portability in accordance with Art. 20 GDPR, provided that you have provided us with personal data as part of a consent in accordance with Art. 6 Para. 1 lit. a GDPR or on the basis of a contract in accordance with Art. 6 Para. 1 lit. b GDPR and this data has been processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another responsible party, insofar as this is technically feasible.
contradiction pursuant to Art. 21 GDPR against the processing of your personal data, insofar as this is based on Art. 6 Paragraph 1 Letters e or f of GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate reasons for the processing are proven or if the processing is carried out to assert, exercise or defend legal claims. If the right to object does not exist for individual processing operations, this is stated there.
revocation pursuant to Art. 7 Para. 3 GDPR, your consent will be revoked with effect for the future.
Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Data processing in detail

Below we will inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

provision of the website

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer
date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of providing the website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit.b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 Para. 1 lit. f GDPR).

We use the following hoster:

Shopify International Limited
Victoria Buildings, 2nd floor
1-2 Haddington Road
Dublin 4, D04 XN32, Ireland

contact form

type and scope of processing

If you send us inquiries (e.g. via contact form, email or telephone), we save all data that arises from this (e.g. name, email address, subject of the inquiry, etc.). We need this data to process your inquiry and to answer follow-up questions. We will not pass on this data without your consent.

purpose and legal basis

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if you have previously given your consent.

storage period

The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. B. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

contact form for applicants

type and scope of processing

You have the opportunity to apply to us on our website (e.g. by email, post or via online application form).

purpose and legal basis

We process the personal data of applicants in accordance with the legal requirements for the purpose of processing the application procedure and for carrying out pre-contractual measures within the meaning of Art. 6 Para. 1 lit. b. GDPR and Section 26 BDSG under German law (initiation of an employment relationship) and - if you have given your consent - Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to people who are involved in processing your application.

If the application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 6 Paragraph 1 Letter b GDPR for the purpose of carrying out the employment relationship.

storage period

Your data will be stored for a period of 6 months after the end of the application process. This is usually done to fulfill legal obligations or to defend against any claims arising from statutory provisions. We are then obliged to delete or anonymize your data. In this case, the data is only available to us as so-called metadata without any direct personal reference for statistical evaluations (for example, proportion of women or men in applications, number of applications per period, etc.).

If it is obvious that the data will be required after the 6-month period has expired (e.g. B.due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

inclusion in the applicant pool

As part of the application process, we offer applicants the opportunity to be included in our “talent pool” for a period of 12 months on the basis of consent within the meaning of Art. 6 (1) (a) GDPR.

The application documents in the talent pool are processed solely for the purpose of future job advertisements and the search for employees and are destroyed at the latest after the deadline has expired. Applicants are informed that their consent to be included in the talent pool is voluntary, has no influence on the current application process and that they can revoke this consent at any time for the future.

If you receive an offer of employment with us as part of the application process and accept it, we will store the personal data collected as part of the application process for at least the duration of the employment relationship.

registration of a customer account

processing of data (customer and contract data)

We only collect, process and use your personal data to the extent that it is necessary for the establishment, modification or fulfilment of a legal relationship. This is done to fulfil a contract or pre-contractual measures in accordance with. Art. 6 para. 1 lit. b GDPR.

The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer when concluding a contract for online shops, retailers and shipping of goods

We only transmit personal data if this is necessary for the contract processing, for example to shipping service providers or the credit institution responsible for payment processing. Any further transmission of data does not take place or only if you have expressly consented to the transmission.

The basis for data processing is the fulfillment of a contract or pre-contractual measures in accordance with. Art. 6 para. 1 lit. b GDPR.

Data transfer when concluding a contract for services and digital content

We only transmit personal data if this is necessary for the contract processing, for example to the credit institution responsible for processing payments. The data will not be transmitted beyond this or will only be transmitted if you have expressly consented to the transmission.

The basis for data processing is the fulfillment of a contract or pre-contractual measures in accordance with. Art. 6 para. 1 lit. b GDPR.

credit checks

If you purchase on account or use another payment method where we pay in advance, we may carry out a credit check (scoring). For this purpose, we transmit the data you have entered (e.g. B. name, address, age or bank details) to a credit agency. The probability of a payment default is determined on the basis of this data. If the risk of payment default is too high, we can refuse the payment method in question.

We or the payment service provider may carry out a credit check. The payment service provider uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values).If score values are included in the result of the credit report, these are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, for example, name, address, age or bank details.

The basis for data processing is the fulfillment of a contract or pre-contractual measures in accordance with. Art. 6 Para. 1 lit. b GDPR, as well as to avoid payment defaults (legitimate interest according to Art. 6 Para. 1 lit. f GDPR). If you have previously given your consent to data processing, your data will be processed solely on the basis of Art. 6 Para. 1 lit. a GDPR; your consent can be revoked at any time.

payment services

We integrate third-party payment services on our website. When you make a purchase from us, your payment details (e.g. B. name, payment amount, bank details, credit card number) is processed by the payment service provider for the purpose of payment processing, the respective contract and data protection provisions of the respective provider apply. The basis for the data processing is the fulfillment of a contract or pre-contractual measures in accordance with. Art. 6 Para. 1 lit. b GDPR and in the interest of ensuring the payment process is as smooth, convenient and secure as possible (Art. 6 Para. 1 lit. f GDPR). If you have previously given your consent to data processing, your data will be processed solely on the basis of Art. 6 Para. 1 lit. a GDPR; your consent can be revoked at any time.

We use the following payment service providers:

PayPal

The provider of this payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

For details, please see PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Apple Pay

The provider of the payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Apple's privacy policy can be found at: https://www.apple.com/legal/privacy/de-ww/.

Google Pay

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find Google's privacy policy here: https://policies.google.com/privacy.

Klarna

The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). Klarna offers various payment options (e.g. B. Installment purchase). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimize the use of the Klarna checkout solution. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

You can find details about this in Klarna’s privacy policy at the following link: https://www.klarna.com/de/datenschutz/.

Sofortüberweisung

The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH"). With the help of an "instant transfer" we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to meet our obligations.

With an “instant transfer” you send the PIN and a valid TAN to Sofort GmbH, which can then log into your online banking account.After logging in, Sofort GmbH automatically checks your account balance, your transactions, the credit limit of the overdraft facility and the existence of other accounts and carries out the transfer to us using the TAN you have provided. It then immediately sends us a transaction confirmation. In addition to the PIN and the TAN, the following data you enter is also sent to Sofort GmbH: first and last name, address, telephone number(s), email address, IP address and, if applicable, other data required for payment processing. The transmission of this data is necessary in order to establish your identity beyond doubt and to prevent attempted fraud. Details on payment with Sofortüberweisung can be found at the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Amazon Pay

The provider of this payment service is Amazon Payments Europe SCA, 38 avenue JF Kennedy, L-1855 Luxembourg.

You can find details on how your data is handled in Amazon Pay’s privacy policy at the following link: https://pay.amazon.de/help/201212490?ld=APDELPADirect.

American Express

The provider of this payment service is American Express Europe SA, Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (hereinafter “American Express”).

American Express may transfer data to its parent company in the USA. The data transfer to the USA is based on the Binding Corporate Rules. Details can be found here: https://www.americanexpress.com/en-pl/company/legal/privacy-centre/european-implementing-principles/.

For further information please see the American Express privacy policy: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter “Mastercard”).

Mastercard may transfer data to its parent company in the USA. The data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter “VISA”).

The UK is considered a safe third country in terms of data protection. This means that the UK has a level of data protection that corresponds to the level of data protection in the European Union.

VISA may transfer data to its parent company in the USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

For further information please see VISA’s privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

ideal

The provider of this payment service is Currence BV, Gustav Mahlerplein 33-35, Amsterdam, Noord-Holland 1082 MS, NL. Details on how your data is handled can be found in iDEAL’s privacy policy at https://www.ideal.nl/disclaimer-privacy/.

Bancontact

The provider of this payment service is Bancontact Payconiq Company NV/SA, Rue d'Arlon 82, 1040-Brussels, Belgium. Details on how your data is handled can be found in Bancontact's privacy policy at https://www.bancontact.com/files/privacy.pdf.

EPS

The provider of this payment service is PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria. Details on how your data is handled can be found in the PSA privacy policy at https://eservice.psa.at/de/datenschutzerklaerung.html.

presence on social media platforms

data processing by social networks

We operate publicly accessible profiles on social networks. The social networks we use in detail can be found below.

Social networks such as Facebook, Twitter, etc. can generally analyze your user behavior comprehensively. Visiting our social media presences triggers the following data protection-relevant processing operations:

If you are logged into your social media account and visit our profile, the operator of this social media can track this visit. Irrespective of this, the operator may also process your data (e.g. IP address) if you are not logged into your account or do not have an account at all.

The operator summarizes this data in user profiles in which your preferences and interests are stored. These profiles are used to display personalized advertising inside and outside the respective social media presence. If you have an account with the respective social network, the personalized advertising can be displayed on all devices on which you are or were logged in.

Depending on the platform, further processing operations may be carried out by the operators of the social media portals; we have no influence on this. Details can be found in the terms of use and data protection provisions of the respective social media portals.

legal basis

Our social media presence is intended to ensure the most comprehensive possible presence on the Internet within the meaning of Art. 6 Paragraph 1 Letter f of GDPR. The analysis processes carried out by the operators of the social networks may be based on different legal bases, which must be specified by the respective providers.

Responsible person and assertion of rights

If you visit one of our social media pages (e.g. B. Facebook), we and the operator of the social media platform are jointly responsible for the data processing operations triggered during this visit. You can generally exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. B. Facebook).

Despite our shared responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the portals. Our options are largely determined by the company policy of the respective provider.

storage period

The data we collect directly via the social media presence will be deleted from our systems as soon as you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of the data collected by the social networks. For details, please contact the operators of the social networks directly (e.g. B. in their privacy policy, see below).

Facebook page

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The data collected is also transferred to the USA and other third countries.

We have concluded a joint processing agreement (Controller Addendum) with Facebook, which specifies which data processing operations we or Facebook are responsible for. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy/.

Instagram page

We have a profile on Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For details on how they handle your personal data, please see Instagram’s privacy policy: https://help.instagram.com/519522125107875.

Pinterest

We have a profile on Pinterest. The operator is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Details on how they handle your personal data can be found in Pinterest's privacy policy: https://policy.pinterest.com/de/privacy-policy.

video conferences

data processing

We use online conference tools to communicate with our customers. The tools we use in detail are listed below. If you communicate with us via video or audio conference, your personal data will be collected and processed by us and the provider of the respective tool.

The tools collect the data you provide, including your email address and phone number. They also process the duration of the conference, when you joined the conference, number of participants and other metadata.

In addition, the provider of the tool processes all technical data required to conduct the conference. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

When you share content on this service, it is stored on the providers' servers. This includes cloud recordings, chat messages, voice messages, and photos and videos that you have shared while using this service.

Please note that we do not have full influence on the data processing procedures of the tools used. For more information on data processing by the conference tools, please refer to the privacy statements of the tools used.

purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 Para. 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR).If you have previously given your consent to data processing, your data will be processed solely on the basis of Art. 6 (1) (a) GDPR; your consent can be revoked at any time.

storage period

The data we collect directly via the video and conference tools will be deleted from our systems as soon as you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Conference tools used

We use the following conference tools:

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Details on data processing can be found in the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

Webex

We use Webex. The provider of this service is Webex Communications Deutschland GmbH, Hansaallee 249 c/o Cisco Systems GmbH, 40549 Düsseldorf, Germany.

It cannot be ruled out that the data processed with WebEx may be transferred to third countries (e.g. B. to the USA). In this case, the provider has Binding Corporate Rules (BCR) approved by Dutch, Polish, Spanish and other relevant European data protection regulators. Details can be found here: https://www.cisco.com/c/de_de/about/trust-center/data-protection-and-privacy-policy.html and https://konferenzen.telekom.de/fileadmin/Redaktion/conference/cisco-webex/Webex_Compliance_Deutsch_V1.0.pdf.

For details on data processing, please see Webex’s privacy policy: https://www.cisco.com/c/de_de/about/legal/privacy-full.html.

zoom

We use Zoom. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. Details on data processing can be found in Zoom's privacy policy: https://zoom.us/de-de/privacy.html.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://zoom.us/de-de/privacy.html.

Cookiebot

type and scope of processing

Our website uses Cookiebot's consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot").

When you visit our website, a connection is established to Cookiebot's servers to obtain your consent and other declarations regarding the use of cookies. Cookiebot then stores a cookie in your browser in order to be able to assign the consent granted or its revocation to you.

purpose and legal basis

Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) (c) GDPR.

storage period

The data collected in this way will be stored until you ask us to delete it, delete the Cookiebot cookie yourself or the purpose for storing the data no longer applies.Mandatory statutory retention periods remain unaffected.

order processing

We have concluded a data processing agreement (AVV) with the above-mentioned provider. This is a contract required by data protection law that guarantees that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Cookiebot CDN

type and scope of processing

We use Cookiebot CDN to properly deliver the content of our website. Cookiebot CDN is a service provided by Cybot A/S, which acts as a content delivery network (CDN) on our website to ensure the functionality of other services provided by Cybot A/S. You will find a separate section for said services in this privacy policy. This section only deals with the use of the CDN.

A CDN helps to deliver content from our online offering, especially files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes stated above and to maintain the security and functionality of Cookiebot CDN.

purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimization of our online offering in accordance with Art. 6 Para. 1 lit. f. GDPR.

storage period

We cannot influence the specific storage period of the processed data, but it is determined by Cybot A/S. Further information can be found in the privacy policy for Cookiebot CDN: https://www.cookiebot.com/de/privacy-policy/.

Font Awesome

type and scope of processing

This website uses Font Awesome to uniformly display fonts and symbols. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA.

When you open the page, your browser loads the required fonts into your browser cache so that text, fonts and symbols are displayed correctly. To do this, the browser you use establishes a connection to the Font Awesome servers. This allows Font Awesome to know your IP address.

If your browser does not support Font Awesome, a standard font from your computer will be used.

You can find Font Awesome’s privacy policy here: https://fontawesome.com/privacy.

purpose and legal basis

The use of Font Awesome is based on our legitimate interest in a uniform presentation of the typeface on our website (Art. 6 Para. 1 lit. f GDPR). If a corresponding consent has been requested (e.g. consent to the storage of cookies), the data will be processed exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. This can be revoked at any time.

Google Fonts

type and scope of processing

This website uses web fonts for the uniform display of fonts. These are provided by Google.When you visit the page, your browser loads the required web fonts into your browser cache so that texts and fonts are displayed correctly. To do this, the browser you use establishes a connection to Google's servers. This allows Google to know your IP address.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found here: https://developers.google.com/fonts/faq.

You can find Google’s privacy policy here: https://policies.google.com/privacy?hl=de.

purpose and legal basis

The use of Google Web Fonts is based on our legitimate interest in a uniform presentation of the typeface of our website (Art. 6 Para. 1 lit. f GDPR). If a corresponding consent has been requested (e.g. consent to the storage of cookies), the data will be processed exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. This can be revoked at any time.

Google Tag Manager

type and scope of processing

We use services and functions from Google Tag Manager on this website, which are offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that helps us use other tools on our website. It does not create user profiles, it does not store cookies, and it does not perform independent analyses. However, your IP address is recorded and may be transmitted to the USA. The Google Tag Manager itself is only used to manage these tools that are integrated through it.

purpose and legal basis

When using the Google Tag Manager on this website, we rely on Art. 6 (1) (f) GDPR as the legal basis, as we have a legitimate interest in implementing and controlling tracking tools on this website quickly and easily. If you have previously given your consent to data processing on this website by the Google Tag Manager, your data will be processed solely on the legal basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time.

Klaviyo

type and scope of processing

We have integrated components of Klaviyo on our website. Klaviyo is a service of Klaviyo, Inc. and offers marketing automation software for marketing services and products, including SEO and content creation, lead management, newsletters, email and SMS marketing, and web analytics.

Klaviyo uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity. Klaviyo is also used to store and transmit data entered in forms using cookies, including your IP address. In this case, your data will be passed on to the operator of Klaviyo, Klaviyo, Inc., 125 Summer Street, Boston, Massachusetts 02111, United States.

purpose and legal basis

We process your data with the help of Klaviyo for the purpose of optimizing our website and for marketing purposes based on your consent in accordance with Art. 6 (1) lit. a GDPR. The data transfer to the USA is based on the standard contractual clauses of the EU Commission.Details can be found here: https://www.klaviyo.com/legal/dpa

For further information, please see the privacy policy for Klaviyo: https://www.klaviyo.com/privacy/policy.

Shop Pay

type and scope of processing

We have integrated components of Shop Pay on our website. Shop Pay is a service of Shopify, Inc. and offers online payment solutions worldwide.

If you choose Shop Pay as your payment method, your data required for the payment process will be automatically transmitted to Shopify, Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

In this context, the following data is usually collected: name, address, company if applicable, email address, telephone and mobile number and IP address.

purpose and legal basis

The service is used on the basis of the execution of a contract, i.e. for the processing of payment transactions in accordance with Art. 6 (1) (b) GDPR.

storage period

We cannot influence the specific storage period of the processed data, but it is determined by Shopify, Inc. Further information can be found in the privacy policy for Shop Pay: https://www.shopify.com/legal/privacy.

Shopify CDN

type and scope of processing

We use Shopify CDN to properly deliver the content of our website. Shopify CDN is a service provided by Shopify International Limited, which acts as a content delivery network (CDN) on our website to ensure the functionality of other services provided by Shopify, Inc. You will find a separate section for said services in this privacy policy. This section only deals with the use of the CDN.

A CDN helps to deliver content from our online offering, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes stated above and to maintain the security and functionality of Shopify CDN.

purpose and legal basis

Shopify Checkout

type and scope of processing

The provider of this payment service in the EU is Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify Payment”).

For details, see Shopify Payment’s privacy policy: https://www.shopify.de/legal/datenschutz.

Yeps

We use Yeps.io to display our content, the provider is Kaya Branding Company Inc., British Columbia, Canada (hereinafter referred to as “Yeps”).

Yeps provides us with the bar you see at the top of our website to highlight special content, important information or promotions.When you access our website using the bar, personal data is collected and stored in a so-called log file, including the IP address, the date and time of access, the website from which access is made (referrer URL), and the browser used.

The use of Yeps is based on our legitimate interest in the appealing presentation of special content on our website (according to Art. 6 Para. 1 lit. f GDPR). If a corresponding consent has been requested, the data will be processed exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. This can be revoked at any time.

Your personal data may also be processed by the provider in Canada. Canada is considered a safe third country in terms of data protection. This means that Canada has a level of data protection that corresponds to the level of data protection in the European Union.

For more information on data processing, please see Yeps’ privacy policy: https://yeps.io/privacy-policy/.

REVIEWS

We use badges and widgets from REVIEWS.io 2020 GmbH, Stralauer Allee 6, 10245 Berlin, a software for product reviews (hereinafter referred to as “REVIEWS”) from the provider REVIEWS.io Limited, 29 St Nicholas Place, Leicester, LE1 4LD, Great Britain.

The REVIEWS software enables us to collect real customer reviews and publish them on our website. With the badges and widgets (a type of seal) from REVIEWS, website visitors can see our customers' reviews via REVIEWS. When the seal is called up, personal data is recorded and temporarily stored in a so-called log file, including the IP address, date and time of retrieval, the website from which access is made (referrer URL), and the browser used.

The use of REVIEWS is based on our legitimate interest in the presentation of product reviews and the satisfaction of our customers (according to Art. 6 Para. 1 lit. f GDPR). In this way, we can demonstrate to interested parties and potential buyers the satisfaction of our customers with their product purchases. If a corresponding consent has been requested, the processing of the data is carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. This can be revoked at any time.

Your personal data may also be processed by the provider in Great Britain. Great Britain is considered a safe third country in terms of data protection law. This means that Great Britain has a level of data protection that corresponds to the level of data protection in the European Union.

order processing

To ensure that personal data is processed according to our specifications and in compliance with the GDPR, we have concluded a data processing agreement (AVV) with the provider.

As soon as you submit a review via REVIEWS, the provider is responsible for processing your personal data. For further information on data processing, please refer to the REVIEWS privacy policy: https://www.reviews.io/front/business-user-privacy-policy.

LangShop

We use LangShop.io, a translation software or app provided by Aheadworks Inc., 3111 N UNIVERSITY DRIVE Suite 604, CORAL SPRING FL 33065, Florida, USA.

LangShop is used for the automated translation of our website into different languages. For this purpose, LangShop processes personal data, including location data, IP address, and device and browser data.

The use of LangShop is based on our legitimate interest in providing our website in different languages (according to Art. 6 Para. 1 lit. f GDPR). In this way, we can address our customers worldwide in their national language. If a corresponding consent has been requested, the data will be processed exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. This can be revoked at any time.

For further information on data processing, please refer to LangShop’s privacy policy: https://langshop.io/privacy-policy.

MonsterUpsells

We use MonsterUpsells, an app provided by MONSTER APPS LTD, 24-26 Arcadia Avenue, Launchese, London, N3 2JU, United Kingdom.

MonsterUpsells' app solutions enable us to design and optimize appealing upsell campaigns for purchasing processes in our shop. When you visit our online shop, your personal data may be processed by MonsterUpsells. MonsterUpsells records your IP address, details about your web browser, the time zone from which you access our site and information about the cookies installed on your device. According to the provider, technologies such as cookies, web beacons, tags or pixels are used for the purpose of data collection in order to record the user behavior of visitors.

The use of MonsterUpsells is based on our legitimate interest in optimizing our upsell campaigns (according to Art. 6 Para. 1 lit. f GDPR). If a corresponding consent was previously requested, the data will be processed exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. This can be revoked at any time.

The UK is considered a safe third country in terms of data protection. This means that the UK has a level of data protection that corresponds to the level of data protection in the European Union.

For further information on data processing, please refer to Addributes’ privacy policy: https://monsterapps.shop/privacy-policy/.

Last updated: September 30, 2024