1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data refers to any data that can be used to personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Jonathan Seethaler, JS Massivholz, Oberndorfer Str. 10, 74585 Rot am See, Germany, Tel.: 01774043603, E-Mail: js-massivholz@email.de. The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 When you use our website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to the website server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential information (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the padlock icon in your browser’s address bar.
3) Hosting & content delivery network
For the hosting of our website and the presentation of the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers, unless different data recipients are specified below for specific data processing activities.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
4) Cookies
To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies—small text files that are stored on your device. If so-called “session cookies” are set, they are automatically deleted when you close your browser. If persistent cookies are set, they remain on your device for a longer period and allow us to save page settings. In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Making contact
5.1 WhatsApp Business
You have the option to contact us via WhatsApp, a messaging service provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction (such as a completed order), we will store and use the cell phone number you use with WhatsApp, as well as—if provided—your first and last name, in accordance with Article 6(1)(b) GDPR to process and respond to your inquiry. Based on the same legal basis, we may ask you via WhatsApp to provide additional information (order number, customer number, address, or email address) so that we can associate your inquiry with a specific transaction.
If you use our WhatsApp contact for general inquiries (such as regarding our range of services, availability, or our website), we will store and use the mobile phone number you use on WhatsApp as well as—if provided — your first and last names in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in providing the requested information efficiently and in a timely manner.
Your information will only ever be used to respond to your inquiry via WhatsApp. It will not be shared with third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server operated by our parent company, Meta Platforms Inc., in the United States. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact information of users who have actually contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact information is stored in our address book consents, upon first use of the app on their device by accepting the WhatsApp Terms of Service, to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6, para.
The purpose and scope of the data collection and the further processing and use of the data by WhatsApp as well as your rights in this regard and setting options for protecting your privacy can be found in WhatsApp’s data protection information: https:
We have concluded an order processing contract with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
As part of the processing activities described above, data may be transferred to servers operated by Meta Platforms Inc.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
5.2 When you contact us (e.g. via contact form or e-mail), personal data will be processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Data processing for order processing
6.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data we collect will be processed in accordance with Art. 6(
If, based on a relevant contract, we are obligated to provide you with updates for goods containing digital elements or for digital products, we will process the contact information you provided when placing your order in order to fulfill our legal obligations to inform you pursuant to Art. 6(
6.2 Transfer of personal data to shipping service providers
– Cargoboard
We use the following provider as our transportation service provider: Cargoboard GmbH & Co KG, Technologiepark 22, 33100 Paderborn, Germany
We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or notification of delivery is not possible.
Consent can be withdrawn at any time with effect for the future from the controller named above or from the provider.
– Hermes
We use the following provider as our transport service provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany
We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or notification of delivery is not possible.
Consent can be withdrawn at any time with effect for the future from the controller named above or from the provider.
6.3 Use of payment service providers (payment services)
– Google Pay
If you choose the “Google Pay” payment method offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), the payment will be processed using the payment method stored in your Google Account.
To authorize a payment via Google Pay on a desktop, you must first log in to your Google Account; to authorize a payment on a mobile device, you must complete the corresponding verification process (such as facial recognition, password, fingerprint, or pattern).
For the purpose of processing payments, the information you provide during the ordering process, along with the details of your order, will be shared with Google.
If personal data is processed in the transfers described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.
Google reserves the right to collect, store, and analyze certain transaction-specific information for every transaction made through Google Pay.
According to Google, this processing is carried out exclusively in accordance with Art. 6(1)(a)
Google also reserves the right to combine the processed transaction data with other information that is collected and stored by Google when using other Google services.
Google Pay’s terms of service can be found here:
https://payments.google.com
You can find more information about data protection at Google Pay at the following internet address:
https://payments.google.com
– Paypal
One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method offered by the provider that requires you to pay in advance, the provider will receive the payment details you provided during the ordering process (including your name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, in accordance with Art. 6, para.
If you select a payment method for which we make advance payments, you will also be asked to provide certain personal data (first and last name, street, house number, zip code, city, date of birth, e-mail address, telephone number, data on an alternative means of payment if applicable) during the order process.
Um in solchen Fällen unser berechtigtes Interesse an der Feststellung Ihrer Zahlungsfähigkeit zu wahren, werden diese Daten von uns gemäß Art. 6 Abs. 1 lit. f DSGVO zum Zwecke einer Bonitätsprüfung an den Anbieter weitergeleitet. Der Anbieter prüft auf Basis der von Ihnen angegebenen persönlichen Daten sowie weiterer Daten (wie etwa Warenkorb, Rechnungsbetrag, Bestellhistorie, Zahlungserfahrungen), ob die von Ihnen ausgewählte Zahlungsmöglichkeit im Hinblick auf Zahlungs- und/oder Forderungsausfallrisiken gewährt werden kann.
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
– Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal’s own payment methods and local payment methods from third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “Pay later” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to perform a credit check for the following payment methods: credit card via PayPal, direct debit via PayPal, or—if offered—“Pay Later” via PayPal. For this purpose, your payment information may be shared with credit bureaus in accordance with Article 6(1)(f) of the GDPR, based on PayPal’s legitimate interest in verifying your creditworthiness. PayPal uses the results of the credit check—specifically, the statistical probability of default—to determine whether to offer the respective payment method. The credit report may contain probability values (so-called “scores”). To the extent that score values are factored into the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values takes into account, among other things—but not exclusively—address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
If the PayPal payment method “purchase on account” is available and selected, your payment data will first be transmitted to PayPal to prepare the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) to process the payment. The legal basis in each case is Art. 6 para. 1 lit. b GDPR. In this case, RatePay carries out an identity and credit check in its own name to determine solvency in accordance with the principle already mentioned above and passes on your payment data to credit agencies on the basis of the legitimate interest in determining solvency in accordance with Art. 6 Para. 1 lit. f GDPR. A list of the credit agencies that Ratepay may use can be found here: https:
If you use the payment method of a local third-party provider, your payment data will first be forwarded to PayPal to prepare the payment in accordance with Art. 6 para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the relevant provider to process the payment in accordance with Art. 6 para. 1 lit. b GDPR:
– Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
– Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
– iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
– bancontact (Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium)
– blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
– eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
– MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
– Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further information on data protection law, please refer to PayPal’s privacy policy: https://www.paypal.com
– Stripe
This website offers one or more online payment methods from the following provider: Stripe Payments Europe, Ltd., One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland
If you select one of the provider’s payment methods, the payment information you provided during the ordering process (including your name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
– WooCommerce Payments
One or more online payment methods of the following provider are available on this website: Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA
If you select a payment method of the provider for which you make an advance payment (such as credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this purpose.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
6.4 Sanction List Matching
In the context of the initiation of business relationships and the processing of orders, we reserve the right to compare the personal data provided by you with those from sanctions lists of the European Union and/or its individual member states and to decide on the establishment of the business relationship or the execution of the order on the basis of the results of this comparison.
This data processing is carried out in accordance with Art. 6 (1) (c) GDPR on the basis of our legal obligation to check and ensure that we do not enter into business relationships with sanctioned natural or legal persons and thus prevent the provision of resources to such persons.
7) Online marketing
YITH Woocommerce Affiliate
We participate in the affiliate program of the following provider: Your Inspiration Solutions S.L.U., Calle Valentin Sanz 37,38002, Santa Cruz de Tenerife, Spain
In this context, we have placed links on our website that lead to offers on websites of the provider or third parties (“partner sites”).
To measure the success of an affiliate link, the evaluation of orders generated via such a link and the corresponding settlement of commission payments, the provider uses cookies and/or comparable technologies, which are generally set on the partner pages and for which we are not responsible in this respect under data protection law. The provider also regularly processes the IP address and, if applicable, other end device information.
All processing described above, in particular the reading or storage of information on the terminal device you use, will only take place if you have given your express consent to this in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.
8) Web analysis services
8.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables your use of our website to be analyzed.
By default, Google Analytics sets 4 cookies when you visit the website, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude a direct personal reference.
The information is transferred to Google servers and processed there. Transmission to Google LLC, based in the USA, is also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage. The abbreviated IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the terminal device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.
We have concluded an order processing contract with Google, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
Weitere rechtliche Hinweise zu Google Analytics 4 finden Sie unter https://business.safety.google
Demographic Characteristics
If the specific “demographic characteristics” feature is enabled within Google Analytics 4, it can be used to generate statistics that provide insights into the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target audiences to be identified for marketing activities. However, the collected data cannot be linked to any specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to generate cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the “Personalized advertising” function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com
Weitere Informationen zu Google Signals finden Sie unter folgendem Link: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
8.2 Google Tag Manager
This website uses the “Google Tag Manager”, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and linking them to conditions via a standardized user interface. Google Tag Manager itself does not store or read any information on user devices. The service also does not carry out any independent data analyses. However, Google Tag Manager transmits your IP address to Google when you access a page and may store it there. Transmission to servers of Google LLC. in the USA is possible.
This processing will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Weitere rechtliche Hinweise zu Google Tag Manager finden Sie unter https://business.safety.google
8.3 Matomo
This website uses a web analytics service provided by the following company: InnoCraft Ltd., 7 Waterloo Quay, P.O. Box 625, 6140 Wellington, New Zealand, (“Matomo”)
To protect site visitors, Matomo uses a so-called “config_id” to enable various analyses of site usage within a short time window of up to 24 hours. The “config_id” is a randomly set, time-limited hash of a limited set of settings and attributes of the visitor. The config_id or config hash is a string of characters calculated for a visitor based on their operating system, browser, browser plugins, IP address, and browser language. Matomo does not use device fingerprinting and uses an anonymized IP address of the site visitor to create the “config_id”.
If the information processed in this way includes personal user data, the processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. In order to object to the processing of your visitor data in the future, we provide you with a separate objection option on our website.
Data is only transmitted to the provider if the service itself is not hosted on our servers. In the case of self-hosting, data collected via the service will not be transmitted to the provider.
If the service is not hosted on our servers itself, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
In this case, data transfers to New Zealand are governed by an adequacy decision issued by the European Commission, which certifies compliance with European data protection standards in international data transfers.
9) Retargeting/remarketing and conversion tracking
9.1 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
To this end, Google places a cookie in your device’s browser that automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. The information collected in this process generally includes your IP address.
Any additional data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize the ads you see on the web. In this case, if you are signed in to Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target audiences. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the United States.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) (a) GDPR. Without this consent, the use of retargeting technology during your site visit will not be used.
You can revoke your consent at any time with effect for the future. To exercise your withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Details on the processing initiated by Google and Google’s handling of data from websites can be found here: https://policies.google.com
Weitere Informationen zu den Datenschutzbestimmungen von Google finden sich hier: https://business.safety.google
9.2 Google Ads conversion tracking
This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
We use Google Ads to draw attention to our offerings on external websites through advertisements (known as Google AdWords). Based on the data from these advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you ads that are of interest to you, make our website more appealing to you, and ensure a fair calculation of the associated advertising costs.
The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used to identify you personally. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie—which includes your IP address—is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
In the context of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https:
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
You can also permanently opt out of Google Ads conversion tracking by disabling personalized ads from Google in the settings at https://myadcenter.google.com.
In order to target users whose data we have received in the context of business or business-like relationships even more effectively, we use a customer matching function as part of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily email addresses and telephone numbers) to Google electronically. Google does not have access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables the display of personalized advertising across all Google services linked to the respective Google account.
Customer data will only be transmitted to Google if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google’s data protection measures in relation to the customer matching function can be found here: https://support.google.com
Googles Datenschutzbestimmungen sind hier einsehbar: https://business.safety.google
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
9.3 Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used to identify you personally. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie—which includes your IP address—is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. In the context of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https:
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
You can also permanently opt out of Google Ads conversion tracking by disabling personalized ads from Google in the settings at https://myadcenter.google.com.
Please note that if you have deactivated the use of cookies, certain functions of this website may not be available or may only be available to a limited extent.
Googles Datenschutzbestimmungen sind hier einsehbar: https://business.safety.google
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
9.4 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).
GMP uses cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later visits the advertiser’s website using the same browser and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server.
We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge as follows: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it. When using GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Die Datenschutzbestimmungen von GMP by Google finden Sie hier: https://business.safety.google
10) Page functionalities
10.1 Google Maps
This website uses an online map service from the following provider: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive (land) maps in order to visualize geographical information. Using this service will show you our location and make it easier for you to find us.
Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there when you access those subpages in which the Google Maps map is integrated; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.
Your personal data is processed in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in designing our website to meet user needs. If you do not consent to the future transmission of your data to the provider, you have the option to completely disable the provider’s online map service by turning off JavaScript in your browser. The online map service on this website will then no longer be available for use.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https:
10.2 Google Web Fonts
This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In the process, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https:
10.3 – hCaptcha
On this website, we use the CAPTCHA service provided by the following vendor: Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA
The service checks whether an input is made by a natural person or abusively through machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. In order to ensure that an action is carried out by a human and not by an automated bot, the Provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit and transmits them to the Provider’s servers for evaluation.
The legal basis is our legitimate interest in establishing individual personal responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 (1) (f) GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.4 Google Photos
This website uses the image service “Google Photos” of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) for the integration and display of photographs.
Google Photos itself does not store or read any information on user devices. The service also does not carry out any independent data analyses.
However, in order to load the image files from the Google network when the page is accessed, your IP address will be transmitted to Google and stored there if necessary. Also a transmission to servers of Google LLC. In the USA is possible.
This processing will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, image files will not be loaded via Google Photos.
You can revoke your consent at any time with effect for the future. To exercise your withdrawal, please disable this service in the “Cookie Consent Tool” provided on the website. We have entered into a data processing agreement with Google that requires Google to protect the data of our website visitors and not to disclose it to third parties.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.5 Google Customer Reviews (formerly Google Certified Merchant Program)
We partner with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website. After you use our services, you will be asked on our website whether you would like to participate in an email survey conducted by Google.
If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your e-mail address to Google. You will receive an email from Google Customer Reviews asking you to rate the buying experience on our website. The review you provide will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your review will also be used for Google seller reviews. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can withdraw your consent at any time by sending a message to the data controller or to Google.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https:
11) Tools and miscellaneous
Cookie Consent Tool
This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are only set on the user’s end device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is not processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
12) Rights of the data subject
12.1 The applicable data protection law grants you the following data subject rights (information and intervention rights) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:
- Right to information pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
12.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
13) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If there are statutory retention periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
