All personal information will be handled confidentially. Our data protection practice is in accordance with the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR). Below we inform you about the details of data protection:

1. Responsible body within the meaning of the GDPR and the BDSG

EK/servicegroup eG
Elpke 109, 33605 Bielefeld
Phone: +49 (521) 20 92 – 0
E-mail: info@ek-servicegroup.de

2. Data Protection Officer

The data protection officer of the person responsible is:

Mr. Dipl.-Inform. Olaf Tenti
GDI Society for data protection and information security mbH
Körnerstr. 45, 58095 Hagen (NRW)
Phone: +49 (2331) 35 68 32 – 0
E-mail: datenschutz@gdi-mbh.eu
Internet: www.gdi-mbh.eu

3. Reasons for Data Collection

We collect and process your data to provide our website and to provide you with the best possible service through convenient access to our services.

4. Collection, processing and use of data

4.1 Visiting our website

When you access our website, our servers automatically collect information of a general nature, in particular for the purpose of establishing a connection, functionality and system security.

Information collected in this way includes:

• the IP address, 
• date and time of the request, 
• Time zone difference to Greenwich Mean Time (GMT), 
• Content of the request (specific page), 
• access status/HTTP status code, 
• the amount of data transferred, 
• the website from which the request comes (so-called referrer), 
• Type and version of the browser used along with the language version used, 
• Type and version of the operating system and the interface used, 
• the domain name of the internet service provider (ISP) as well as 
• the duration of the visit to our website.

We automatically analyze the data collected in order to detect functional impairments of our website and services as well as attacks on our technical infrastructure (e.g. through so-called denial-of-service attacks) and to be able to take the necessary countermeasures. It is not possible for us to draw conclusions about specific persons from this data due to the pseudonymization we have carried out. This data is not merged with other data sources.

The data mentioned is generally deleted after 24 hours, or after seven days in the event of longer-lasting threats, but at the latest when the data is no longer required for the aforementioned purposes. If there are statutory retention requirements, we restrict the processing.

The legal basis is our legitimate interest in displaying our website and ensuring the stability and security of the data connection and our technical systems within the meaning of Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR.

4.2 Contact Form

If you contact us via a contact form, personal data will be collected. Which data is collected can be seen from the contact form used. Mandatory information is marked in each case, in particular by an asterisk (*). As a rule, at least an e-mail address is required so that we can contact you. All other details are optional.

The data will be saved for the purpose of processing your request. We delete the data generated in connection with the contact form after the storage is no longer necessary, or restrict the processing if there are statutory storage requirements.

The legal basis for the processing of your personal data is Article 6 Paragraph 1 Subparagraph 1 Letter b) GDPR if your request is about the conclusion of a contract. In addition, it is our legitimate interest to answer your inquiries, even if they are not related to a contract or a potential contract conclusion, so that in this case Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR is the legal basis.

4.3 Newsletter by email / Family Club

We use the service provider CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany ("CleverReach") to send our newsletter as part of the "FamilyClub" program. The data protection information for participation/membership in the "FamilyClub ' can be found additionally here.

With your consent to the use of the data you have provided (in particular e-mail address, name and, if applicable, areas of interest), you can subscribe to our e-mail newsletter, with which we will inform you about current interesting offers. We use the so-called double opt-in procedure to register for the newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter.

In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to be able to clarify any possible misuse of your personal data. We are legally obliged to do this.

Our newsletter e-mails contain individual images that are automatically retrieved from our servers when the respective e-mail is opened, provided your e-mail program has activated this function. By calling up the images, we can trace back whether and when newsletter e-mails were opened. Our newsletters also contain individual links which, when called up, enable us to allocate any purchase to a newsletter campaign. We use this knowledge to optimize our advertising measures, in particular to be able to provide our newsletter subscribers with more interesting and relevant offers.

As part of the registration and the sending of the newsletter, we transmit your data to CleverReach. CleverReach's data protection declaration can be found under the following link: https://www.cleverreach.com/de/datenschutz/

The legal basis for the described processing of your personal data in the context of the newsletter is your consent within the meaning of Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR.

You have the right to revoke your consent or parts of your consent at any time. This has no influence on the legality of the data processing that had already taken place up until the revocation. You can declare your revocation, for example, by clicking on the unsubscribe link contained in the newsletter or by sending a message to the above-mentioned contact details for our data protection officer. For technical reasons, it can take up to 48 hours to unsubscribe, so we cannot rule out the possibility that you will still receive individual newsletter e-mails during this time. We will delete the data that you have made available to us for sending the newsletter no later than 3 months after you unsubscribe. Insofar as the deletion conflicts with statutory retention requirements, we will block your data for further processing.

4.4 Involvement of External Service Providers

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

4.4.1 Embedding YouTube videos

On our website we use the "YouTube" service operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your company headquarters or residence in the EU, Google Ireland Limited, Gordon House , Barrow Street, Dublin 4, Ireland ("Google").

YouTube videos are integrated into our online offering in such a way that the content on www.youtube.com are stored and can be played directly from our website. These are integrated in the "extended data protection mode", i. H. that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data specified below be transmitted. We have no influence on this data transmission. By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. It will

• the IP address, 
• date and time of the request, 
• Time zone difference to Greenwich Mean Time (GMT), 
• Content of the request (specific page), 
• access status/HTTP status code, 
• the amount of data transferred, 
• the website from which the request comes (so-called referrer), 
• Type and version of the browser used together with the language version used as well as
• Type and version of the operating system along with the interface used

transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out of YouTube before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de.

The legal basis for processing by us is your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR. The legal basis for the transfer of data to the USA is your consent in accordance with Article 49 (1) sentence 1 lit. a) GDPR. Furthermore, we have concluded Google standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA. 

You can revoke your consent to data processing and transmission at any time without giving reasons by sending a message to the contact details provided for our data protection officer, deleting the cookies in your browser or by clicking on the following link:

Cookie Settings

The legality of processing that has already taken place is not affected by the revocation of consent

4.4.2 Dealer search / integration of Google Maps

On this website we use the offer of "Google Maps", operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your company headquarters or your place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. Based on this function, we offer you the option of finding the nearest HappyBaby specialist retailer to the location you specified or determined. For this purpose, the address or location you have entered will be transmitted to Google. If you activate the transmission of GPS coordinates in your browser, your current GPS coordinates may also be transmitted to Google as part of the retailer search.

By visiting the website, Google also receives the information that you have accessed the corresponding subpage of our website. Also become 

• the IP address, 
• date and time of the request, 
• Time zone difference to Greenwich Mean Time (GMT), 
• Content of the request (specific page), 
• access status/HTTP status code, 
• the amount of data transferred, 
• the website from which the request comes (so-called referrer), 
• Type and version of the browser used together with the language version used as well as
• Type and version of the operating system along with the interface used

transmitted. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there. These data processing operations are carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

The transmission takes place regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out of your Google profile before using our website. Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. 

You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

The legal basis for processing by us is your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR, which you may have given when you first visited this website. The legal basis for the transfer of data to the USA is your consent in accordance with Article 49 (1) sentence 1 lit. a) GDPR. Furthermore, we have concluded Google standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA.

You can revoke your consent to data processing and transmission at any time without giving reasons by sending a message to the contact details provided for our data protection officer, deleting the cookies in your browser or by clicking on the following link:

Cookie Settings

The legality of processing that has already taken place is not affected by the revocation of consent

4.4.3 Use of Jetpack

This website uses the web analysis service "Jetpack", operated by Automattic Inc., 60 29th Street #343, San Francisco, California 94110, USA or, if you have your company headquarters or your place of residence in the EU, Aut O'Mattic A8C Ireland Ltd. , Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland ("Automattic").

The purpose of data collection is the creation and technical analysis of calls to individual articles or pages, as well as gaining knowledge about user behavior and interests in general and, based on this, improving our website. Furthermore, the web analysis service "Jetpack" offers basic technical protection of the website against attacks. The data collected for this purpose is also processed.

For this purpose, the following data can be collected if you have consented to us collecting the data:

• IP address of the calling end device,
• WordPress.com User ID and Username (if logged in),
• the information with which software you access our website,
• the visited URL of our website,
• the URL referring to our website (so-called referrer),
• the time our website was accessed,
• the language settings of your browser as well as
• the associated country code.

The IP address is anonymised before it is saved by deleting the last octet (e.g. 192.168.172.xxx). By deleting the last octet, a rough geolocation is possible, but recognizing your end device based on the IP address is impossible.

The legal basis for processing by us is your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR, which you may have given when you first visited this website. The legal basis for the transfer of data to the USA is your consent in accordance with Article 49 (1) sentence 1 lit. a) GDPR. Furthermore, we have concluded Automattic standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA.

You can revoke your consent to data processing and transmission at any time without giving reasons by sending a message to the contact details provided for our data protection officer, deleting the cookies in your browser or by clicking on the following link:

Cookie Settings

The legality of processing that has already taken place is not affected by the revocation of consent.

4.4.4 Yumpu integration

We use the "Yumpu" service on our website to display catalogs and magazines. The service is operated by i-magazine AG, Gewerbestrasse 3, 9444 Diepoldsau, Switzerland ("i-mag").

By calling up or displaying PDF documents, information is transmitted directly from your browser to the Yumpu servers. Yumpu receives the information that you have accessed the corresponding sub-page of our website. In addition:

• the IP address, 
• date and time of the request, 
• Time zone difference to Greenwich Mean Time (GMT), 
• Content of the request (specific page), 
• access status/HTTP status code, 
• the amount of data transferred, 
• the website from which the request comes (so-called referrer), 
• Type and version of the browser used together with the language version used as well as
• Type and version of the operating system along with the interface used

transmitted. This information (including your IP address) is transmitted directly from your browser to a Yumpu server and stored there. These data processing operations are carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. Among other things, Yumpu uses this data to correctly display the PDF documents you have accessed in your browser.

The data protection declaration and further information on data processing by Yumpu can be found under the following link: https://www.yumpu.com/de/info/privacy_policy

For Switzerland, there is an adequacy decision by the European Commission within the meaning of Art. 45 GDPR, on the basis of which no further special approval is required for data transmission to Switzerland. The European Commission's adequacy decision is available at: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32000D0518

The legal basis for the processing is our legitimate interest in the uniform display of advertising for products on our website within the meaning of Article 6 (1) sentence 1 lit. f) GDPR.

4.4.5 Use of Google Tag Manager

We use "Google Tag Manager" on our websites. The service is operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your registered office or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager provides a functionality that enables us to easily, efficiently and dynamically integrate other services on our website. In addition, we can quickly configure and adapt services integrated via Google Tag Manager without having to make technical changes to our website. Services, the use of which you have already objected to, are not delivered to your browser by the Google Tag Manager.

When using Google Tag Manager, Google does not collect any personal data. Google collects technical data without personal reference for the general use and implementation of Google Tag Manager.

Data processing takes place on the basis of Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. Our legitimate interest lies in the efficient provision of our website, including the embedded services and functions. We have concluded Google standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transfer of data to the USA.

Please refer to the following link for Google's data protection declaration: https://policies.google.com/privacy?hl=de.

The Google Tag Manager Terms of Service can be found at the following link: https://www.google.de/tagmanager/use-policy.html

4.4.6 Use of Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The service is operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your registered office or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

With reCAPTCHA it should be checked whether the data entry on our websites (e.g. in a contact form) is done by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the website visitor spends on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyzes run completely in the background. Website visitors are not informed that an analysis is taking place. For individual functions (e.g. sending forms), the manual entry of a so-called captcha is required in order to prove in individual cases that you are acting yourself and not a program.

Data processing takes place on the basis of Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying, the submission of abusive orders and spam. We have concluded Google standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transfer of data to the USA.

For more information about Google reCAPTCHA and Google's privacy policy, see the following links: https://www.google.com/recaptcha/intro/v3.html and https://policies.google.com/privacy?hl=de

4.4.7 Google Ads with Remarketing

Our website uses the functions of "Google Ads" with the "Remaketing" module, operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your company headquarters or your place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

With Google Ads Remarketing, we advertise this website in Google search results and on third-party websites. For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit.

Any further data processing will only take place if you have given your consent to Google linking your Internet and app browser history to your Google account and using information from your Google account to personalize ads that you view on the web . In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data in order to form target groups.

You can permanently deactivate the setting of cookies for advertising preferences by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can find out more about the setting of cookies and make settings for this from the Digital Advertising Alliance at the Internet address www.aboutads.info. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.

Further information and the data protection regulations regarding advertising and Google can be found here: http://www.google.com/policies/technologies/ads/

The legal basis for processing by us is your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR, which you may have given when you first visited this website. The legal basis for the transfer of data to the USA is your consent in accordance with Article 49 (1) sentence 1 lit. a) GDPR. Furthermore, we have concluded Google standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA.

You can revoke your consent to data processing and transmission at any time without giving reasons by sending a message to the contact details provided for our data protection officer, deleting the cookies in your browser or by clicking on the following link:

Cookie Settings

The legality of processing that has already taken place is not affected by the revocation of consent.

4.4.8 Use of Google Analytics

This website uses the web analysis service "Google Analytics", operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your company headquarters or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses so-called "cookies", text files which are stored on your computer and which enable an analysis of your use of the website if you have consented to the use of cookies for marketing purposes.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. The data will be deleted after 60 months.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de.

The terms of use and information on data protection can be found at http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/.

 Google processes your personal data on our behalf. We have therefore concluded an order processing contract with Google in accordance with Art. 28 (3) GDPR, in which Google undertakes to protect your personal data and not to pass it on to third parties for purposes other than those mentioned above.

The legal basis for the use of Google Analytics is your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. The legal basis for the transfer of data to the USA is your consent in accordance with Article 49 (1) sentence 1 lit. a) GDPR. Furthermore, we have concluded Google standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA.

You can revoke your consent to data processing and transmission at any time without giving reasons by sending a message to the contact details provided for our data protection officer, deleting the cookies in your browser or by clicking on the following link:

Cookie Settings

The legality of data processing that has already taken place is not affected by the withdrawal of consent.

5. Cookies and Similar Technologies

5.1 Web Browser Cookies

A web browser cookie is a small text file that is sent from a website to your computer or mobile device, where it is stored by your web browser. Web browser cookies may store information such as your IP address or other identifier, browser type, and information about the content you view and interact with on the Digital Services. By storing such information, web browser cookies can store your preferences and settings for online services and analyze how you use online services. Which data is stored and read depends on the type of cookie. We will explain this to you in the following sections.

5.2 Tracking Technologies: Web Beacons, Gifs, Pixels, Page Tags, Scripts

Web pages, emails, and mobile applications may contain small, transparent image files or lines of code to record how you interact with them. This information is used to help website and app publishers better analyze and improve their services. 

5.3 Use, legal basis and purpose of data processing

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified after a page change.

Two technically necessary cookies ("essential") are set before any consent to processing is given: The "PHPSESSID" cookie is used to identify your session and to assign a specific session to your browser. After closing the browser, this cookie is deleted. The "borlabs-cookie" cookie is used to give you the option of giving or refusing your consent to the use of non-essential cookies. If you have already done so, we don't want to show the banner again for a certain period of time. Otherwise we would have to query this again with every page view.

The cookies mentioned and the storage of the data in local storage only enable functionalities that are intended to contribute to a positive user experience on our website. We do not set cookies with personal data without consent.

We also use cookies on our website, which enable an analysis of the surfing behavior of users. When accessing our website, the user is informed by our cookie management tool about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration.

5.3.1 Legal Bases

The legal basis for the processing of personal data using technically necessary cookies ("essential") is Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR.

The legal basis for the processing of personal data due to legal obligations, e.g. B. the provision of the cookie banner, is Article 6 Paragraph 1 Subparagraph 1 lit. c) GDPR.

The legal basis for the processing of personal data using technically unnecessary cookies, e.g. B. for analysis purposes, if the respective user has given their consent, Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR.

5.3.2 Purposes of Use

The purpose of using technically necessary cookies ("essential") is to ensure the usability of our website. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies are not used to create user profiles.

Analysis and statistics cookies are used for the purpose of improving the quality of our website and its content. Analysis cookies tell us how the website is used and so we can constantly optimize our offer.

5.3.3 Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted to our website. Therefore, as a user, you also have full control over the use of cookies. 

By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. 

Cookies that have already been saved can be deleted at any time. All you have to do is click on the "Cookie Settings' at the end of this section. This opens our so-called consent management tool, in which you can deactivate individual technologies and/or providers. This is a revocation of any previously given declaration of consent. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

You can view the cookies currently stored in your browser via your browser (see instructions below), or more simply and clearly, including the values stored in the cookies, using the following plugins:

• Mozilla Firefox:      
  https://addons.mozilla.org/de/firefox/addon/cookie-quick-manager/
• Google Chrome:    
  https://chrome.google.com/webstore/detail/editthiscookie/fngmhnnpilhplaeedifhccceomclgfbg?hl=de
• Microsoft Edge:     
  https://www.microsoft.com/de-de/p/editthiscookie-for-edge/9n9tt0mk6zj0?activetab=pivot:overviewtab

The use of the plugins mentioned is not required to solve the cookies.

5.4 Cookies and cookie-like technologies used

Below you will find a description of the individual cookies we use and the categories of cookies used on our website.

We and our partners use technologies such as cookies or targeting and process personal data such as IP addresses or browser information to personalize the advertising you see. This allows us to show you more relevant ads and improve your browsing experience. We also use it to measure results or to tune the content of our website.

You can later change or revoke your consent at any time by clicking on the "Cookie settings" button at the end of this section and making the desired settings.

In particular, we use cookies and similar technologies for the following purposes:

5.4.1 Essential cookies

These cookies and cookie-like technologies are necessary to enable the basic functions of this site, such as providing a secure login.

The legal basis for the processing of necessary cookies is Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. Our legitimate interest lies in the technically flawless provision and operation of our website and in enabling basic functions of our website.

5.4.2 “Statistics” category cookies

With these cookies or cookie-like technologies we can count website visits and analyze traffic sources in order to further improve our offer on our website. With the help of these cookies we can, for example, also measure the effect of certain pages on our website and optimize the content of our website accordingly. If you do not allow these cookies, we will not be able to know when you have visited our website, making it difficult to optimize our content for the future.

The legal basis for the processing of statistical cookies is your consent within the meaning of Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR, which you may have given us when you first visited this website. You can revoke your consent to us at any time with effect for the future. To do this, send an email to the contact address given for the data protection officer, delete the cookies in your browser or revoke your consent via the "Cookie Settings' linked at the bottom of this section.

Data collection and processing already carried out remain lawful even in the event of revocation. If you delete your cookies, your browser will ask you again the next time you visit our site whether you 

+Agree to the use of statistical cookies.

5.4.3 “External media” category cookies

We use these cookies or technologies similar to cookies to embed external media on our website and thereby offer you a better user experience. This can be the case in particular by integrating external video sources and embedding posts from social media sources that provide a better description of the products and retailers we reference and their ratings and reviews by other users.

The legal basis for the processing of cookies is your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. You can revoke this consent at any time with effect for the future. To do this, send an email to the contact address provided by the data protection officer, delete the cookies in your browser (you can find information on this below) or revoke your consent via the "Cookie Settings' linked at the bottom of this section. Data collection and processing already carried out remain lawful even in the event of revocation. If you delete your cookies, your browser will ask you again the next time you visit our site whether you agree to our use of functional cookies.

It may happen that our website or parts of it, in particular the integration of external media sources, does not work or does not work correctly if you have not consented to calling up the external media or to the transmission of data to the service providers there.

5.5 Deleting Cookies

Cookies are stored on your end device for varying periods of time, some however until you delete these cookies, which is possible at any time. Furthermore, expired cookies are automatically deleted from your browser if you have set up your browser accordingly. Expired cookies are no longer sent to our servers by your browser and can therefore no longer be used by us.

Here you will find information on how to delete cookies in your browser and manage the cookie settings for the most common browsers:

Desktop PC / Laptop

• Microsoft Edge:
  https://support.microsoft.com/de-de/help/4464209
• Mozilla Firefox:
  https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• AppleSafari: 
  ttps://support.apple.com/de-de/guide/safari/sfri11471/mac
• Google Chrome:
  https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de

mobile devices

• Google Chrome (Android):
  https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid&hl=de&oco=0
• Google Chrome (iOS):
  https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DiOS&hl=de&oco=0
• AppleSafari (iOS):
  https://support.apple.com/de-de/HT201265
• Samsung Internet (Android):
  https://www.samsung.com/de/support/mobile-devices/cache-und-cookies-loeschen/
• Mozilla Firefox (Android):
  https://support.mozilla.org/de/kb/cookies-aktivieren-deaktivieren-firefox-android

6. Data Security

We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Depending on the browser used, data is transmitted with 128-bit or 256-bit SSL encryption (transport encryption). Transport encryption ensures that third parties who intercept data transmitted over the Internet cannot gain knowledge of the content of the transmission. Metadata are not suitable for transport encryption, i.e. in particular the time of data transmission, IP addresses of the communication participants and the quantity and size of the data transmitted.

We pointed out that despite regular checks and constant improvement of our security measures, complete protection against all dangers is not possible.

7. Fan and Company Pages on Other Services and Networks

7.1 Facebook

The social network Facebook is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you have your registered office or residence in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2 , Ireland (“Facebook”).

We have our own fan page on Facebook. Our presence there is used for active and up-to-date communication with our customers and interested parties. We provide information there about our services, products and interesting special offers relating to our company and our services.

When you visit our online presence in social media, your data can be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used to e.g. B. Place advertisements on and off the Platforms that are believed to match your interests. 

If you are asked by Facebook for your consent (consent) to data processing, e.g. B. with the help of a checkbox, the legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR.

For detailed information on the processing and use of the data by the providers on their pages, as well as a contact option and your rights in this regard and setting options to protect your privacy, in particular objection options (so-called opt-out), please refer to Facebook's data protection information: https://www.facebook.com/about/privacy/

The possibility of objection (opt-out) can be found as follows: https://www.facebook.com/settings?tab=ads

Data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum

The transmission of data to the USA takes place on the basis of your consent in accordance with Article 6 Paragraph 1 Subsection 1 Letter a) and Article 49 Paragraph 1 Clause 1 Letter a) GDPR. Furthermore, we have concluded standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA.

7.2 Instagram

The "Instagram" social network is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you have your registered office or residence in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

We have our own account on Instagram. Our presence there is used for active and up-to-date communication with our customers and interested parties. We provide information there about our services, products and interesting special offers relating to our company and our services.

When you visit our online presence in social media, your data can be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used to e.g. B. Place advertisements on and off the Platforms that are believed to match your interests. 

If you are asked by Facebook to give your consent (consent) to data processing when using Instagram, e.g. B. with the help of a checkbox, the legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR.

For detailed information on the processing and use of the data by the providers on their websites, as well as a contact option and your rights and setting options in this regard, please refer to Instagram's data protection information: https://de-de.facebook.com/help/instagram/519522125107875

Data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum

The transmission of data to the USA takes place on the basis of your consent in accordance with Article 6 Paragraph 1 Subsection 1 Letter a) and Article 49 Paragraph 1 Clause 1 Letter a) GDPR. Furthermore, we have concluded standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA.

7.3 Pinterest

The “Pinterest” social network is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA, or by Pinterest Europe Ltd., Palmerston House if you are resident or have your registered office within the EU , 2nd Floor, Fenian Street, Dublin 2, Ireland.

We maintain our own fan page on Pinterest. Our presence there is used for active and up-to-date communication with our customers and interested parties. We provide information there about our services, products and interesting special offers relating to our company and our services.

When you visit our online presence in social media, your data can be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used to e.g. B. Place advertisements on and off the Platforms that are believed to match your interests.

If you are asked by Pinterest for your consent (consent) to the data processing, e.g. B. with the help of a checkbox, the legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR.

For detailed information on the processing and use of the data by the providers on their websites as well as a contact option and your rights in this regard and setting options for protecting your privacy, please refer to Pinterest's data protection information: https://policy.pinterest.com/de/privacy-policy

The transmission of data to the USA takes place on the basis of your consent in accordance with Article 6 Paragraph 1 Subsection 1 Letter a) and Article 49 Paragraph 1 Clause 1 Letter a) GDPR. Furthermore, we have concluded standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transfer of data to the USA with Pinterest.

7.4 Xing

The professional network "Xing" is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg.

We maintain our own company page on Xing. This serves as an active and up-to-date approach to potential employees in a professional environment. We also share information about our company on this page and present ourselves to the outside world in this way. We provide information there about our services, products, interesting special offers and job opportunities in our company. This serves the 

If you are asked by Xing for your consent (consent) to the data processing, e.g. B. with the help of a checkbox, the legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR.

For detailed information on the processing and use of the data by the providers on their websites, as well as a contact option and your rights in this regard and setting options for protecting your privacy, please refer to the Xing data protection information: https://privacy.xing.com/de/datenschutzerklaerung

7.5 LinkedIn

The "LinkedIn" professional network is operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA or, if you are resident or resident in the EU, by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn").

We maintain our own company page on LinkedIn. This serves as an active and up-to-date way of addressing potential employees in a professional environment. We also share information about our company on this page and present ourselves to the outside world in this way. We provide information there about our services, products, interesting special offers and job opportunities in our company. This serves the 

If you are asked by LinkedIn for your consent (consent) to the data processing, e.g. B. with the help of a checkbox, the legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR.

For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your rights in this regard and setting options for protecting your privacy, please refer to LinkedIn's data protection information: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

The transmission of data to the USA takes place on the basis of your consent in accordance with Article 6 Paragraph 1 Subsection 1 Letter a) and Article 49 Paragraph 1 Clause 1 Letter a) GDPR. Furthermore, we have concluded LinkedIn standard data protection clauses within the meaning of Article 46 (2) (c) GDPR for the transmission of data to the USA.

8. Deletion

Personal data will be deleted or blocked as soon as the purpose of storage no longer applies or you request deletion. The data will also be deleted if a storage period prescribed by the standard mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract or you have given your consent in this regard.

9. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

9.1 Right to information

You can request confirmation from the person responsible as to whether personal data relating to you is being processed by us.

If such processing is present, you can request information from the person responsible for the following information:

• the purposes for which the personal data are processed;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom your personal data has been or will be disclosed;
• the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage duration;
• the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the person responsible or a right to object to this processing;
• the existence of a right of appeal to a supervisory authority;
• all available information about the origin of the data if the personal data are not collected from the data subject.

9.2 Right to Rectification

You have a right to correction and/or completion to the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

9.3 Right to Restriction of Processing

Under the following conditions, you can request the restriction of the processing of your personal data:

• if you contest the accuracy of the personal data concerning you for a period that enables the person responsible to check the accuracy of the personal data;
• the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
• the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
• if you have lodged an objection to the processing pursuant to Art. 21 Para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State are processed.

If the restriction of processing has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

9.4 Right to erasure

9.4.1 Erasure Obligation

You can request the person responsible to delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

• The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 Clause 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR and there is no other legal basis for the processing .
• You object to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21 (2) GDPR.
• The personal data concerning you have been processed unlawfully.
• The deletion of the personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
• The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

9.4.2 Information to Third Parties

If the person responsible has made the personal data relating to you public and is obliged to delete it in accordance with Art. 17 (1) GDPR, he shall take appropriate measures, including technical measures, to protect the person responsible for data processing, taking into account the available technology and the implementation costs , who process the personal data, that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

9.4.3 Exceptions

The right to erasure does not exist if processing is necessary

• to exercise the right to freedom of expression and information;
• to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to the controller;
• for reasons of public interest in the field of public health in accordance with Art. 9 (2) lit. h) and i) and Art. 9 (3) GDPR;
• to assert, exercise or defend legal claims.

9.5 Right to Information

If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the person responsible.

9.6 Right to data portability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another person responsible without hindrance by the person responsible for providing the personal data, provided that

• the processing is based on consent pursuant to Article 6 Paragraph 1 Clause 1 Letter a) GDPR or Article 9 Paragraph 2 Letter a) GDPR or on a contract pursuant to Article 6 Paragraph 1 Clause 1 lit. b) GDPR is based and
• the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other people must not be impaired by this.

9.7 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

9.8 Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the person responsible, is permissible on the basis of legal provisions of the Union or the Member States to which the person responsible is subject and these legal provisions take appropriate measures to protect your rights and freedoms and your legitimate interests or with your express consent.

However, these decisions must not be based on special categories of personal data according to Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 lit. a) or g) GDPR applies and appropriate measures to protect the rights and freedoms and your legitimate interests were hit.

9.9 Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 Sentence 1 lit. e) or f) GDPR to insert this also applies to profiling based on these provisions.

The person responsible no longer processes the personal data relating to you unless he can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to the processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.

In connection with the use of information society services, you have the option – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures that use technical specifications.

9.10 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data is contrary to violates the GDPR.

The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

10. Changes to this website, update of the data protection declaration

Our website is constantly being developed. We will therefore update this data protection declaration from time to time. In order to stay up to date, we therefore recommend that you visit this data protection declaration regularly. You can see whether there have been any changes by looking at the status below.

Status: 16.11.2020