Privacy Policy

1) Information on the collection of personal data and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to personally identify you.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is coffeedrop company GmbH, Am Alten Gehaege 26, 30657 Hanover, Germany, Phone: +49 151 72259479, e-mail: office@coffeedrop-company.com. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary so that we can display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you came to this page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3) Hosting

3.1 Shopify

We use the following provider's system for hosting our website and displaying its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

The data will also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a Content Delivery Network provided by the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service allows us to deliver large media files, such as graphics, page content, or scripts, more quickly via a network of regionally distributed servers. This processing is carried out to protect our legitimate interest in improving the stability and functionality of our website, in accordance with Article 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies, which are small text files stored on your device. In some cases, these cookies are automatically deleted after you close your browser (so-called "session cookies"), while in other cases, they remain on your device for a longer period and allow us to save your website settings (so-called "persistent cookies"). In the latter case, you can find information about the storage duration in your web browser's cookie settings.

If personal data is also processed through individual cookies set by us, the processing is carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given, or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the website visit.

You can configure your browser to notify you when cookies are set, and you can decide individually whether to accept them or exclude the acceptance of cookies in certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Making contact

5.1 Our own review reminder

We use your email address solely on the basis of your explicit consent pursuant to Art. 6 (1) point a GDPR for a one-time reminder to submit a review of your order. You can withdraw your consent at any time by sending a message to the data controller.

5.2 Trustworthy businesses

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany

We will transmit your email address and, if applicable, other customer data to the provider solely on the basis of your explicit consent in accordance with Art. 6 (1) point a GDPR, in order to enable the provider to contact you by email with a review reminder.

You can withdraw your consent at any time with effect for the future by notifying us or the provider.

We are jointly responsible with the provider for the processing described above in accordance with Article 26 GDPR. You can view the joint controllership agreement here: https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

5.3 Trustpilot

For review reminders, we use the services of the following provider: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark

You can withdraw your consent at any time with effect for the future by notifying us or the provider.

We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

5.4 When you contact us (e.g., via contact form or email), personal data is collected. You can find information about which data is collected via a contact form on the respective form itself. This data is stored and used exclusively for the purpose of responding to your inquiry or contacting you and for the associated technical administration.

The legal basis for processing your data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed; this is the case when it is clear from the circumstances that the matter has been resolved, provided that no statutory retention obligations apply.

6) Use of customer data for direct marketing

6.1 Subscribe to our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing any further information is voluntary and is used to personalize our communications with you. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter after you have explicitly confirmed that you agree to receive newsletters. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to the newsletter, we store your IP address, provided by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for advertising purposes within the context of the newsletter. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller named above. After unsubscribing, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to the further use of your data or we reserve the right to use your data for other purposes that are legally permissible and about which we inform you in this statement.

6.2 Sending the newsletter to existing customers

If you provided us with your email address when purchasing products, we reserve the right to regularly send you offers for similar products to those you have already purchased via email. According to Section 7(3) of the German Act Against Unfair Competition, we do not need to obtain your separate consent for this. Data processing in this respect is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the data controller named at the beginning of this document. In this case, you will only have to pay the transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will cease immediately.

6.3 Klaviyo

Our email newsletters are sent via this provider: Klaviyo", 225 Franklin St, Boston, MA 02110, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) point f GDPR, so that they can send the newsletter on our behalf.

Subject to your explicit consent pursuant to Art. 6 (1) point a GDPR, the provider also conducts a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels in the sent emails, which measure open rates and specific interactions with the newsletter content. Device information (e.g., time of page view, IP address, browser type, and operating system) is also collected and analyzed, but not combined with other data sets. You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its transfer to third parties.

6.4 Shopping cart reminders via email

If you cancel your purchase with us before completing your order, you have the option to receive an email reminder about the contents of your virtual shopping cart.

The only mandatory information required for this reminder is your email address. Providing further information is voluntary and may be used to personalize our communications with you. We use a double opt-in process for sending emails, which ensures that you only receive a notification if you have explicitly confirmed your consent by clicking a confirmation link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR to send you a shopping cart reminder. We store your IP address, entered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you register for our email notification service will be used exclusively for the intended purpose.

You can unsubscribe from shopping cart reminders at any time by sending a message to the responsible person named above. After unsubscribing, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to the further use of your data or we reserve the right to use the data in other ways that are legally permissible and about which we inform you in this statement.

7) Data processing for order processing

7.1 Insofar as it is necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be transferred to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products under a corresponding contract, we process the contact details you provided when placing your order (name, address, email address) in order to inform you personally about upcoming updates within the legally prescribed period, using appropriate means of communication (e.g., by post or email), in accordance with our legal obligation to provide information pursuant to Art. 6 para. 1 lit. c GDPR. Your contact details will be used exclusively for the purpose of informing you about updates owed to you and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in fulfilling the concluded contracts. Certain personal data will be shared with these service providers in accordance with the information below.

7.2 Use of payment service providers

- Amazon Pay

Online payment methods from the following provider are available on this website: Amazon Payments Europe sca, 38 avenue John F. Kennedy, L-1855 Luxembourg

If you choose a payment method offered by the provider that requires you to pay in advance (e.g., credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number) as well as information about the contents of your order will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will only be shared with the provider for the purpose of payment processing and only to the extent necessary for this purpose.
- Apple Pay
If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is handled via the "Apple Pay" function on your iOS, watchOS, or macOS device by charging a payment card stored with "Apple Pay." Apple Pay uses security features built into your device's hardware and software to protect your transactions. Therefore, to authorize a payment, you will need to enter a code you previously set and verify it using your device's "Face ID" or "Touch ID" feature.
For payment processing purposes, the data you provide during the checkout process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay. This encryption ensures that only the website from which the purchase was made can access the payment information. After the payment is processed, Apple sends your device's account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, date, time, and whether the transaction was successful. Anonymization completely eliminates any personal identification. Apple uses this anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, your Mac and the authorizing device communicate over an encrypted channel on Apple's servers. Apple does not process or store this information in a format that could personally identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac."
For more information about data privacy with Apple Pay, please visit the following web address: https://support.apple.com/en-gb/HT203027
- Google Pay
If you choose the payment method "Google Pay" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is handled via the "Google Pay" application on your mobile device, which must be running at least Android 4.4 ("KitKat") and have NFC capability, by adding funds to a payment card stored in Google Pay or a payment system verified there (e.g., PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the appropriate verification method (e.g., facial recognition, password, fingerprint, or pattern).
For payment processing purposes, the data you provide during the ordering process, along with information about your order, will be forwarded to Google. Google will then transmit your payment information stored in Google Pay to the originating website in the form of a unique transaction number, which is used to verify the payment. This transaction number does not contain any information about the actual payment details of your payment method stored in Google Pay, but is generated and transmitted as a one-time valid numerical token. In all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction takes place exclusively between the user and the originating website through the debiting of the payment method stored in Google Pay.
If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store, and analyze certain transaction-specific information for each transaction made through Google Pay. This includes the date, time, and amount of the transaction; the merchant's location and description; a description of the purchased goods or services provided by the merchant; photos you attached to the transaction; the name and email address of the seller and buyer or sender and recipient; the payment method used; your description of the reason for the transaction; and, where applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data and optimization and maintenance of the functionality of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when using other Google services.
You can find the Google Pay terms of service here:
https://payments.google.com /payments /apis-secure /u /0 /get_legal_document ?ldo=0 &ldt=googlepaytos &ldl=en
Further information on data protection at Google Pay can be found at the following web address:
https://payments.google.com /payments /apis-secure /get_legal_document ?ldo=0 &ldt=privacynotice &ldl=en
- Klarna

Online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

When selecting a payment method from the provider where the provider makes advance payments (such as purchase on account, installment purchase or direct debit), you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, information on alternative payment methods).

To protect our legitimate interest in assessing the creditworthiness of our customers, we transfer this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) GDPR. The provider uses the personal data you provide, as well as other data (such as shopping cart contents, invoice total, order history, and payment history), to check whether your chosen payment option can be granted with regard to payment and/or default risks.

In addition to internal provider criteria, identity and creditworthiness information from the following credit agencies may also be used in the decision-making process during the application review, in accordance with Article 6(1)(f) GDPR:

https://cdn.klarna.com /1.0 /shared /content /legal /terms /0 /de_de /credit_rating_agencies

Credit reports may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the information used to calculate these score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
- Paypal

Online payment methods from the following provider are available on this website: PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg

If you choose a payment method offered by the provider that requires prepayment, your payment details provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number), as well as information about the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data will only be shared with the provider for the purpose of payment processing and only to the extent necessary for this purpose.

When selecting a payment method from the provider, with which the provider makes advance payments, you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, information on alternative payment methods).

This website uses PayPal Checkout, an online payment system by PayPal, which consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay later" via PayPal, we will forward your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

For payments made via credit card through PayPal, direct debit through PayPal, or – if offered – "Pay Later" through PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transferred to credit agencies in accordance with Article 6(1)(f) GDPR, based on PayPal's legitimate interest in assessing your creditworthiness. PayPal uses the result of the credit check, specifically the statistical probability of payment default, to decide whether to offer the respective payment method. The credit report may include probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

If you select the PayPal payment method "Purchase on Account," your payment details will first be transmitted to PayPal to prepare the payment. PayPal will then forward them to Ratepay GmbH, Franklinstrasse 28-29, 10587 Berlin ("Ratepay") for payment processing. The legal basis for this is Article 6(1)(b) GDPR. In this case, Ratepay conducts an identity and credit check on its own behalf to determine your creditworthiness in accordance with the principle already mentioned above and transmits your payment details to credit agencies based on its legitimate interest in determining creditworthiness pursuant to Article 6(1)(f) GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment details will first be sent to PayPal to prepare the payment in accordance with Article 6(1)(b) GDPR. Depending on your selection of an available local payment method, PayPal will then forward your payment details to the relevant provider to process the payment in accordance with Article 6(1)(b) GDPR.

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- Klarna (Klarna Bank AB ((publ), Sveavägen 46, 11134 Stockholm, Sweden))
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z oo, ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA SAS, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland).

For more information about data protection, please see PayPal's privacy policy: https://www.paypal.com /de /legalhub /paypal /privacy-full
- Instant bank transfer via Klarna

Online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden

Online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

7.3 Electronic termination option for continuing obligations with consumers

Consumers who have concluded contracts for paid continuing obligations (e.g., subscription contracts) on this website have the option to terminate these contracts via an electronic button, subject to the applicable notice periods. Clicking the button leads to a confirmation page where the consumer can provide further details regarding the termination, clearly identify themselves, and then submit their termination electronically. The collection of personal data and its transmission to us is carried out in accordance with Article 6(1)(b) GDPR and only to the extent necessary for the proper processing of the termination. In accordance with Article 6(1)(b) GDPR, the transmitted personal data is also used to confirm receipt of the termination notice and the termination date electronically in text form. The additional legal basis for this processing is Article 6(1)(c) GDPR. We are legally obligated to offer an electronic termination option for paid continuing obligations in consumer contracts concluded via electronic commerce.

8) Web analytics services

8.1 PayPal Marketing Solutions

This website uses the web analytics service of the following provider: PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg

The service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information). This data is used to statistically analyze user behavior on our website and to create pseudonymized user profiles. This enables, among other things, the analysis of movement patterns (so-called heatmaps) that show the duration of page visits and interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally precludes any direct identification of individuals. Your personal data will not be combined with data collected from other sources.

All processing described above, in particular the reading or storage of information on the device used, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

8.2 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

The data will also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

The service collects and stores pseudonymized visitor data, including information about the device used such as IP address and browser information, using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information). This data is used to statistically analyze user behavior on our website and to create pseudonymized user profiles. This enables, among other things, the analysis of movement patterns (so-called heatmaps) that show the duration of page visits and interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally precludes any direct identification of individuals. Your personal data will not be combined with data collected from other sources.

We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

9) Retargeting/ Remarketing/ Referral Advertising

Meta Pixel with enhanced data synchronization

Within our online service, we use the "Meta Pixel" service from the following provider in advanced data synchronization mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

When a user clicks on an ad we place on Facebook or Instagram, a "Meta Pixel" is used to add a parameter to the URL of our linked page. This URL parameter is then entered into the user's browser after redirection via a cookie set by our linked page itself. This cookie also collects specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram ad during processes like purchases, account logins, or registrations (enhanced data synchronization). The cookie is then read and enables the transmission of the data, including specific customer data, to Meta.

We use "Meta Pixel" with advanced matching to make our ads on Facebook and/or Instagram more effective and to ensure that they match users' interests or have certain characteristics (e.g., interests in specific topics or products, determined based on websites visited) that we transmit to Meta (so-called "Custom Audiences").

Furthermore, we analyze the effectiveness of our advertising by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of the "Meta Pixel," the enhanced data synchronization feature helps us better measure the effectiveness of our advertising campaigns by recording more associated conversions.

All transmitted data is stored and processed by Meta, so that it can be associated with the respective user profile and Meta can use the data for its own advertising purposes in accordance with Meta's data usage policy ( https://www.facebook.com/about/privacy/). ) can use this data. Meta and its partners can use it to place advertisements on and off Facebook.

All processing described above, in particular the setting of cookies to read information on your device, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transferred to and stored on a Meta server; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

10) Page functionalities

Google reCAPTCHA

This website uses the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

The data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts," i.e., fonts that are loaded from the internet by Google. No further information is processed beyond what is already mentioned above and transmitted to Google via the reCAPTCHA functionality.

The service checks whether an entry is made by a natural person or abusively through automated processing, with the aim of blocking spam, DDoS attacks, and similar automated malicious attacks. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, the browser identification data, the operating system type, and the date and duration of the visit, and transmits this data to the provider's servers for analysis. Cookies may be used in this process; these are small text files that are stored in the browser of the device.

If the processing described above is based on cookies, these will only be set if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the 'cookie consent tool' provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the Internet and preventing misuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which guarantees the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

Further information about Google's privacy standards can be found here: https://business.safety.google /privacy /

11) Tools and other items

This website uses a so-called "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users upon accessing the site in the form of an interactive user interface, where consent for specific cookies and/or cookie-based applications can be given by ticking the corresponding box.

This tool ensures that all cookies/services requiring consent are only loaded if the user grants their consent by ticking the corresponding box. This guarantees that such cookies are only placed on the user's device if consent has been given.

This tool uses technically necessary cookies to save your cookie settings. No personal user data is processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for processing is Article 6(1)(c) GDPR. As the data controller, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective consent of the users.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12) Rights of the person concerned

12.1 The applicable data protection law grants you the following comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the data controller with regard to the processing of your personal data:

Right of access by the data subject pursuant to Art. 15 GDPR;
Right to rectification pursuant to Article 16 GDPR;
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Article 77 GDPR.

12.2 Right to object

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.

If you exercise your right to object, we will cease processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data used for direct marketing purposes. You can exercise this right to object as described above.

If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.

13) Duration of storage of personal data

The duration of the storage of personal data depends on the respective legal basis, the purpose of the processing and - if relevant - on the respective statutory retention period (e.g. commercial and tax law retention periods).

If personal data is processed on the basis of explicit consent pursuant to Art. 6 (1) point a GDPR, this data will be stored until the data subject withdraws their consent.

If there are statutory retention periods for data processed in the context of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after the expiry of the retention periods if it is no longer required for the performance of the contract or for initiating a contract and/or if we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, the processing is based on Article 6(1)(f) GDPR, and this data will be stored until the data subject exercises their right to object pursuant to Article 21(2) GDPR.

Unless otherwise stated in the information contained in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.