Data protection information website
We, feco-feederle GmbH, Am Storrenacker 22, 76139 Karlsruhe (hereinafter also “we”, “us” or “feco-feederle GmbH”) would like to provide you with the following information on the processing of your personal data (hereinafter also “data”) when using our website and on your rights under data protection law
We take the protection of your personal data very seriously. Your data will be processed exclusively in accordance with the applicable data protection regulations, in particular the provisions of the European General Data Protection Regulation (hereinafter: “GDPR”) and the German Federal Data Protection Act (hereinafter: “BDSG”).
Please note that the terms used, such as “personal data” or “processing”, correspond to the definitions in Article 4 GDPR. If you would like to take a look at the GDPR yourself, you can find it online at: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679 You can access the BDSG at the following link: https://www.gesetze-im-internet.de/bdsg_2018.
This privacy policy applies exclusively to our website, which can be accessed at https://www.feco.de, including all its subpages. This privacy policy expressly does not apply to websites of third parties to which links are provided from our website.
1. Information on the person responsible
The controller within the meaning of the GDPR for the processing of your data on this website is
feco-feederle GmbH
Am Storrenacker 22
76139 Karlsruhe
Germany
E-mail: mail@feco.de
Phone: +49 721 62 89-0
If you have any questions about the processing of your data or would like to exercise your rights as a data subject, please contact us using the contact details above.
You can also contact our data protection officer directly. You can reach them by email atdatenschutz@feco.de or using the following contact details:
Michael Wagner
feco-feederle GmbH
Am Storrenacker 22
76139 Karlsruhe
Germany
E-mail: datenschutz@feco.de
Phone: +49 721 62 89-0
2. Data processing when using our website
2.1 Server log data
Logs are created when you access and use our website. The following information is automatically stored in these logs:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is required for the stable and secure operation of our website. We process it to protect our legitimate interests on the basis of Article 6(1) sentence 1 point (f) GDPR. Our legitimate interests lie in the provision of our website and in ensuring its stability and security.
Data processing takes place automatically when you access and use our website. It is not possible to use our website without this data processing. We do not use the above-mentioned data to draw conclusions about your identity unless there is a reasonable suspicion of an attack or illegal use of our website.
The server log data is stored for as long as is necessary for the above-mentioned purposes and is generally deleted after 14 days. We reserve the right to store the data for longer, in particular for the assertion, exercise or defence of legal claims.
2.2 Contact forms
You have the option of sending us enquiries using the contact form. When you use our contact forms, we collect and store the personal data you provide via the respective contact form in order to respond to your enquiry.
Data processing is carried out on the basis of Article 6(1) sentence 1 point (b) GDPR if it concerns the execution and initiation of a contractual relationship with you, or to safeguard our legitimate interest in properly responding to your enquiry on the basis of Article 6(1) sentence 1 point (f) GDPR.
If we process your data to protect our legitimate interests on the basis of Article 6 (1) sentence 1 letter f GDPR, you can object to the processing of your data at any time by sending a message to the contact details above.
2.3 Enquiry by e-mail, telephone or fax
You have the option of sending us enquiries by e-mail, telephone or fax. When answering your enquiry, we collect and store the personal data you provide in order to answer your enquiry.
Data processing is carried out on the basis of Article 6(1) sentence 1 point (b) GDPR if it concerns the execution and initiation of a contractual relationship with you, or to safeguard our legitimate interest in properly responding to your enquiry on the basis of Article 6(1) sentence 1 point (f) GDPR.
If we process your data to protect our legitimate interests on the basis of Article 6 (1) sentence 1 letter f GDPR, you can object to the processing of your data at any time by sending a message to the contact details above.
2.4 Applications
You have the option of applying to us via our careers section on the website or by e-mail. As part of your application to us, we initially process the following data in particular:
- Title, first name, surname
- E-mail address, telephone number, postal address
- Company name
- Content of your message
Depending on the nature of the position, further data may be required as the application process progresses, such as proof of certain qualifications. In this case, we would ask you to submit such additional information separately.
Data processing is carried out for the establishment of employment contracts on the basis of Article 6 (1) sentence 1 letter b, Art. 88 GDPR in conjunction with. § SECTION 26 BDSG.
You can revoke your consent to the storage of your data in our applicant pool at any time with effect for the future by sending a message to the above-mentioned contact details.
The above data will be used for personnel administration in the event of employment. If the application is unsuccessful, we will delete the data six months after announcing our decision. If you have agreed to be included in the applicant pool, we will delete the data two years after inclusion in the applicant pool, unless you are hired in the meantime or you revoke your consent to storage in the applicant pool.
2.5 Registration on our website
You can register on this website in order to use additional functions on the site. We will only use the data you enter for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse your registration.
In the event of important changes, for example to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.
The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for the initiation of further contracts on the basis of Article 6 (1) sentence 1 letter b GDPR
The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.
2.6 Webshop
You have the option of purchasing various products from us via our webshop. You also have the option of creating a customer account so that you do not have to re-enter the data required for order processing for future orders. You can also delete your customer account at any time at . We use a self-hosted instance of WooCommerce as our webshop. We process the following data as part of order processing for purchases in our online shop:
- Title, first name, surname
- E-mail address, telephone number, postal address
- Company name
- Order number, invoice number
- Payment data e.g. account data, credit card data, addresses of payment providers such as PayPal
Data processing in the context of the customer account is carried out to protect our legitimate interest in facilitating order processing in our web shop on the basis of Article 6(1) sentence 1(f) GDPR or, in the case of order processing to fulfil a purchase contract between you and us, on the basis of Article 6(1) sentence 1(b) GDPR.
If we process your data to protect our legitimate interests on the basis of Article 6 (1) sentence 1 letter f GDPR, you can object to the processing of your data at any time by sending a message to the contact details above.
2.7 Make an appointment
You can use our website to book an appointment with us, e.g. for a product consultation or an introductory meeting. We use the eTermin service from eTermin GmbH to arrange appointments. We process the following data when you book an appointment:
• Title, first name, surname
• E-mail address, telephone number, postal address
• Company name
• Content of your enquiry
Data processing in the context of making appointments is carried out to protect our legitimate interest in facilitating the making of appointments on the basis of Article 6(1) sentence 1(f) GDPR.
If we process your data to protect our legitimate interests on the basis of Article 6 (1) sentence 1 letter f GDPR, you can object to the processing of your data at any time by sending a message to the contact details above.
2.8 Newsletter
You have the option of registering to receive our newsletter, regular e-mail notifications with product-specific information and advertising content. We use the Mailchimp service of Rocket Science Group LLC to send the newsletter. If you register to receive email notifications, we process the following data:
- Title, first name, surname
- E-mail address
- Company name
- Information on interests
- Time of subscription/registration for the newsletter
- Time at which the newsletter was opened and links contained therein were clicked (open and click rates)
We use the so-called double opt-in procedure for sending newsletters, i.e. we will send you an automatic confirmation e-mail after your registration via the respective registration form and ask you to confirm your registration for the newsletter dispatch by clicking on the corresponding link. By completing this double opt-in procedure, you have given your consent to receive the newsletter.
As part of sending the newsletter, your interactions with our newsletters are tracked and analysed (so-called measurement of opening and click rates). This is done via single-pixel image files, so-called web beacons or tracking pixels, as well as correspondingly coded links contained in our newsletters. Technical information, such as information about your web browser, your operating system, your IP address and the date and time the newsletter was accessed, is collected and assigned to your email address. This is done to optimise our newsletter dispatch.
Data processing in the context of sending the newsletter is based on your consent in accordance with Article 6(1) sentence 1(a) GDPR. If the content of our newsletters is specifically described when you register for them, this is decisive for the scope of your consent. Our newsletters also contain information about our services, products, offers, promotions and our company.
Subscriptions to our newsletters are logged by us in order to be able to prove the registration process and the consent given in accordance with the legal requirements. The logging of the registration and the necessary processing of the data entered by you during registration is carried out to safeguard our legitimate interests in accordance with Article 6(1) sentence 1(f) GDPR.
If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future by sending a message in text form to the above-mentioned contact details or via the unsubscribe link in each newsletter. Please note that it is not possible to revoke your consent to the measurement of opening and click rates separately.
After you unsubscribe from the newsletter distribution list, your e-mail address may be by us or the newsletter service provider in a blacklist to prevent future mailings to you. The data from the blacklist will only be used for this purpose and will not be merged with other data. The processing of your data as part of the blacklist takes place in order to comply with the legal requirements when sending newsletters on the basis of Article 6 paragraph 1 sentence 1 letter f GDPR. Storage in the blacklist is not limited in time.
If we process your data to protect our legitimate interests on the basis of Article 6 (1) sentence 1 letter f GDPR, you can object to the processing of your data at any time by sending a message to the contact details above.
2.9 Cookies
Cookies and similar technologies (hereinafter collectively referred to as “cookies”) are used on this website to make our website more convenient, efficient and secure and to ensure economical operation.
Cookies are usually small identifiers that our server sends to your web browser and that your end device stores if the corresponding standard setting is made. These can be used, among other things, to recognise you when you visit our website again and to analyse and evaluate your use of our website. Cookies can be set by us or by third-party providers, such as our partners, e.g. for statistical and marketing purposes.
Data processing is carried out either to safeguard our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR or on the basis of Article 6(1) sentence 1(a) GDPR, provided that you have expressly consented to the storage and use of cookies via our cookie banner. The right of recourse to other legal bases is expressly reserved.
The storage of information on your end device or access to information already stored on your end device that may be associated with the use of cookies is based on your consent in accordance with Section 25 (1) sentence 1 TDDDG. If the storage of information on your end device or access to information already stored on your end device is absolutely necessary so that we can provide the telemedia service expressly requested by you (here: our website), no consent is required. The storage or access then takes place on the basis of Section 25 (2) No. 2 TDDDG).
You can revoke your consent to the use and storage of non-essential cookies at any time with effect for the future in the cookie settings of our website at the following address: feco.de/?show_cookie_banner= true. You can also object to the storage of necessary cookies at any time by selecting “Do not accept cookies” in your web browser settings. The procedures for the technical management and deletion of cookies via the settings of your web browser can be found in the “Help” function of your web browser. You can also technically prevent the storage and use of all cookies by using free browser add-ons. However, if you prevent the storage of all cookies, this can lead to functional restrictions on our website.
2.10 Web analysis
2.10.1 Google Analytics
If you have consented to this, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google Ireland”).
Google Analytics uses cookies. The information generated by the cookies about your use of this website may also be transferred to servers of Google LLC, the parent company of Google Ireland, in the USA and stored there. The US-based parent company Google LLC is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list . Any data transfers to Google LLC in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45(3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .
The legal basis is your consent pursuant to Article 6(1) sentence 1(a) GDPR. We expressly reserve the right to have recourse to other legal bases.
Google Ireland will use this information on our behalf to analyse your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Pseudonymised user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymisation. This means that your IP address will be truncated by Google Ireland within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA.
We use the function “demographic characteristics” from Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from Google’s interest-based advertising, among other things. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account.
You can revoke your consent to the use of Google Analytics at any time via the cookie settings on our website at the following address:feco.de/?show_cookie_banner=true . Furthermore, you can also technically prevent the storage and use of cookies by making the appropriate browser settings or browser add-ons. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the further processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Further information on the use of data by Google, setting and objection options can be found on the Google websites under the following links:
- https://www.google.com/intl/de/policies/privacy/partners (“Data use by Google when you use our partners’ websites or apps”),
- https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”),
(“Manage information that Google uses to show you adverts”)].
2.11 Remarketing / Retargeting
We also use retargeting/remarketing services from third-party providers on our website to optimise our offering. Data is collected on the basis of cookie/tracking technology to optimise our advertising and the entire online offering (so-called retargeting/remarketing). This data is not used by us to identify you personally, but is used solely to analyse the use of our website and to target users who have already shown an interest in our content and offers with interest-based advertising on our website and on other websites and social media offerings of our partners. We are convinced that the display of interest-based advertising is generally more interesting for the user than advertising that has no such personal reference. The display of advertising on our website or on the websites of our partners is based on an analysis of previous user behaviour. According to the providers of the retargeting/remarketing services we use, user profiles are generally created in anonymised or pseudonymised form. We also do not merge this data with other personal data stored by us at any time.
Provided you have given us your consent to do so, data processing is carried out on the legal basis of Article 6(1) sentence 1(a) GDPR. We expressly reserve the right to have recourse to other legal bases. You can find out which third-party providers we work with, how your data is processed in this context and how you can deactivate retargeting/remarketing technologies in the following sections.
2.11.1 Google Ads / Google Marketing Platform
We use the remarketing or “similar target groups” function in Google Ads/Google Marketing Platform (formerly DoubleClick by Google) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google Ireland”) on our website to optimise our offer.
Google Ireland uses cookie/tracking technologies that are stored on your end device to enable us to analyse your use of our website and to display advertisements for products or services that may be of interest to you. According to Google Ireland, the cookies used for this purpose do not contain any personal information. If you are registered with a Google service and logged in, Google Ireland can assign your visit to our website to your account. Even if you are not registered with Google, it is possible that Google Ireland will find out your IP address and use it to create and store user profiles about you. Among other things, we use Google Remarketing customer matching to create target groups. Here we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If the customers in question are Google users and are logged into their Google account, they are shown suitable advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).
The information generated by the cookie/tracking technologies about your use of this website may also be transferred to servers of Google LLC, the parent company of Google Ireland, in the USA and stored there. The US-based parent company Google LLC is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list . Any data transfers to Google LLC in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45(3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .
You can revoke your consent at any time via the cookie settings on our website at the following address:feco.de/?show_cookie_banner=true . You can also technically prevent the storage and use of cookies by making the appropriate browser settings or browser add-ons. In addition, you can deactivate interest-based advertising on Google at the following link: http://www.google.com/settings/ads/plugin.
Further information on data processing by Google can be found here:
- https://www.google.com/intl/de/policies/privacy/ and
- https://www.google.com/policies/technologies/ads/ and
- https://marketingplatform.google.com/about/enterprise/ .
2.11.2 Google Ads and Google Conversion Tracking
We use Google Ads to optimise and measure the success of our website. Google Ads is an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
As part of Google Ads, we use what is known as conversion tracking. When you click on an advert placed by Google, a cookie is set for conversion tracking. The information generated by the cookie is used to analyse the interaction of our website visitors with our ads and to compile statistics on the conversion of our ads. This data cannot be assigned to a specific person. The cookie loses its validity after 90 days and is not used to personally identify website visitors.
The information generated by the cookie is transferred to a Google server in the USA and stored there. Google’s U.S. parent company is certified in accordance with the EU-U.S. Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active . Any data transfers to the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 43(3) GDPR (see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_de ).
You can revoke your consent at any time via the cookie settings on our website at the following address:feco.de/?show_cookie_banner=true . You can also technically prevent the storage and use of cookies by making the appropriate browser settings or browser add-ons. In addition, you can deactivate interest-based advertising on Google by clicking on the following link: http://www.google.com/settings/ads/plugin .
Further information on data processing by Google can be found here:
- https://www.google.com/intl/de/policies/privacy/ and
- https://www.google.com/policies/technologies/ads/ and
- https://marketingplatform.google.com/about/enterprise/ .
2.11.3 LinkedIn Insights and conversion tracking
We use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn Ireland”) on this website for retargeting/remarketing purposes.
When you visit our website and if you have given us your consent to do so, a direct connection is established between your browser and the LinkedIn server via the LinkedIn Insight Tag. LinkedIn thus receives the information that you have visited our website and we can thus organise our LinkedIn activities more effectively and, for example, display posts or advertisements only to visitors to our website. In addition, the LinkedIn Insight Tag enables us to analyse the use of this website and to display ads for content and offers that may be of interest to you. The data collected is only transmitted to LinkedIn in encrypted form and is anonymous to us, i.e. the personal data of individual users cannot be viewed by us.
The information generated by the LinkedIn Insight Tag may also be transferred to servers of LinkedIn Corporation, the parent company of LinkedIn Ireland, in the USA and stored there. The US-based parent company LinkedIn Corporation is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list . Any data transfers to LinkedIn Corporation in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .
You can revoke your consent at any time via the cookie settings on our website at the following address: feco.de/?show_cookie_banner= true. You can also technically prevent the storage and use of cookies by making the appropriate browser settings or browser add-ons.
more information about the LinkedIn Insight Tag, data processing by LinkedIn and how to object to data processing by LinkedIn Ireland, please visit
- https://www.linkedin.com/help/linkedin/answer/a427660; and
- https://de.linkedin.com/legal/privacy-policy?; and at
- https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .
2.12 Other services and content from third-party providers
2.12.1 Webhosting
We use AIXPRO from dogado GmbH, Saarlandstr. 25, 44139 Dortmund, Germany for our web hosting.
2.12.2 Payment provider
You can use various payment providers to pay for your order in the webshop:
- PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
- American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany
- Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium
- Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom
Your data will only be passed on in the context of payment processing. The legal basis for the transfer of data to the payment provider is the fulfilment of a contract between you and us on the basis of Article 6(1) sentence 1(b) GDPR.
2.12.3 eTermin
We use the online service eTermin from eTermin GmbH, Mättivor 3, 6430 Schwyz, Switzerland, to arrange appointments.
2.12.4 Google Tag Manager
We use Google Tag Manager, a tag management service provided by Google Ireland. We use Google Tag Manager to integrate third-party services into our website. With the help of Google Tag Manager, we can integrate new services into our website more easily and also update existing services more easily without having to make changes to the website itself. Google Tag Manager also makes it possible to activate or deactivate individual services in a targeted manner. This allows us to activate or deactivate services as selected by you via our cookie banner.
When you visit our website, a connection to the servers of Google Ireland is established and your IP address is transmitted to Google Ireland. Your IP address may also be transmitted to servers of Google LLC, the parent company of Google Ireland, in the USA and stored there. The US-based parent company Google LLC is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list . Any data transfers to Google LLC in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Art. 45 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .
The processing is necessary for the stable and secure operation of our website and is carried out to protect our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR. Our legitimate interests lie in the provision of our website and in ensuring its stability and security.
This data processing takes place automatically when you visit our website. It is not possible to use our website without this data processing.
2.12.5 Vimeo
Vimeo videos are integrated on our website. Although the videos can be played directly on our website, they are provided directly by Vimeo. By playing the Vimeo videos, your browser establishes a connection to Vimeo servers. When you access a sub-page with integrated Vimeo videos, the URL of the corresponding sub-page, your IP address and a time stamp are transmitted to Vimeo servers and cookies are set. Vimeo videos are integrated on our website in “extended data protection mode”; according to Vimeo, the Vimeo video player and Vimeo do not analyse the session data when the videos are played, not even for analysis purposes. Furthermore, no cookies are used by the Vimeo video player or Vimeo when Vimeo videos are played in extended data protection mode.
- Vimeo is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”)
The legal basis for data processing when reproducing the Vimeo videos is our legitimate interest in accordance with Article 6(1) sentence 1(f) GDPR. Our legitimate interest lies in the professional and high-quality presentation of the brand and in increasing brand perception and recognisability.
We have carried out a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, with the result that there is at least a balance between the legitimate interest on the part of the controller/third party and the interests of the data subject. The balance of opposing interests required for the permissibility of data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR is therefore given.
For more information on the purposes and scope of data collection and the further processing and use of the data by Vimeo, your rights in this regard and the available setting options to protect your privacy, please refer to Vimeo’s data protection information:
- Privacy policy of Vimeo: https://vimeo.com/privacy/
If you do not want Vimeo to associate your visit to our website with your Vimeo user account, you must log out of Vimeo before visiting our website. Even if you are not logged in to Vimeo, websites with videos can send data to Vimeo that allows Vimeo, for example, to create an anonymised/pseudonymised user profile.
2.12.6 Mailchimp
To send and manage newsletters, we use Mailchimp, a service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA (hereinafter referred to as “The Rocket Science Group”). The data processed by you may also be transmitted to servers of our processor The Rocket Science Group in the USA. Any data transfers to the USA are subject to the EU standard contractual clauses concluded between us and The Rocket Science Group as part of the order processing contract pursuant to Article 28 GDPR on the basis of Article 46(2)(c) GDPR.
2.12.7 Akismet
On our website we use Akismet, a service provided by Aut O’Mattic A8C Ireland Ltd, Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland (hereinafter “Aut O’Mattic”), whose parent company is based in the USA.
Akismet enables us to analyse posted comments to determine whether they are SPAM. For this purpose, we process the specified visitor name, email address, IP address, comment text, browser type and access time. The processing is carried out to protect our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR. Our legitimate interest lies in undisturbed, spam-free communication with website visitors.
The parent company based in the USA is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list . Any data transfers to the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en . Further details can be found here:
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which guarantees that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
2.12.8 Google Maps
On our website, we integrate the maps of the Google Maps service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google Ireland”), to display locations and to create directions. Data processing is carried out on the basis of your consent in accordance with Article 6(1) sentence 1(a) GDPR, provided you have given us this consent.
When you access the maps integrated into our website, a connection to Google’s servers is established, subject to your consent, and certain information (e.g. your IP address) is transmitted to Google. We have no knowledge of the type and scope of the data collected by Google and have no influence on its use.
The data processed by them may also be transferred to servers of Google LLC, the parent company of Google Ireland, in the USA and stored there. The US-based parent company Google LLC is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list . Any data transfers to Google LLC in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45(3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .Weitere Information on data processing by Google and the cancellation options can be found at
2.12.9 Trusted Shop Widget
The Trusted Shops Trustbadge is integrated on this website to display any reviews we may have collected with Trusted Shops. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit to the site. Further personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.
2.12.10 Links to our social media presences
On our website you will find links (hyperlinks) to our presence on the social networks and platforms Instagram, Facebook, LinkedIn, Pinterest, Spotify, Threads and YouTube. These services are offered by the companies listed below (hereinafter also referred to as “SSocial Media Platforms”):
- Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta Ireland”).
- Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta Ireland”).
- LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn Ireland”).
- Pinterest is operated by Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest Ireland”).
- Spotify is operated by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden
- Threads is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta Ireland”).
- YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ireland” or “YouTube”).
The purpose and scope of the data collection and the further processing and use of the data by the SSocial Media platforms as well as your rights in this regard and the available setting options to protect your privacy can be found in the data protection information of the SSocial Media platforms:
- Instagram privacy policy: https://help.instagram.com/519522125107875 and https://privacycenter.instagram.com/policies/cookies/
- Facebook privacy policy: https://www.facebook.com/privacy/explanation , https://de-de.facebook.com/legal/terms/ and https://www.facebook.com/policies/cookies/
- LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy
- Privacy policy of Pinterest: https://policy.pinterest.com/de/privacy-policy
- Google’s privacy policy, which also includes YouTube: https://www.google.de/intl/de/policies/privacy/
- Spotify privacy policy: https://www.spotify.com/de/legal/privacy-policy/#datenschutzrichtlinie-von-spotify
- Supplementary Threads Privacy Policy: https://help.instagram.com/515230437301944 and https://privacycenter.instagram.com/policies/cookies/
If you do not want a third-party provider to be able to assign the click on a link leading to its website to your user account there, you must log out of the respective service before clicking on such a link. Even if you are not logged in with the third-party provider, data may be sent to the third-party provider via the use of cookies after clicking on a link.
3. Recipients of personal data
Your personal data will only be transferred to external recipients to the extent necessary to achieve the above-mentioned purposes, if we have your consent to do so or if another legal authorisation exists. Your data may be transferred to external service providers that we use to achieve the above-mentioned purposes and with whom we have concluded order processing contracts in accordance with Article 28 (3) GDPR. External service providers used by us will only process your data for specific purposes and in accordance with our instructions.
External recipients of your personal data may be, in particular
- service providers bound by instructions that we use to achieve the above-mentioned purposes;
- Business partners, e.. freelance employees;
- the financial administration;
- Tax consultants and auditors and;
- Courts, arbitration tribunals, authorities or legal advisors, if this is necessary for compliance with applicable law or for the assertion, exercise or defence of legal claims.
4. Data processing in third countries
If we transfer your data to third countries outside the European Union (EU) or the European Economic Area (EEA) in accordance with the above explanations, we ensure that, apart from legally permitted exceptions, the recipient either has an adequate level of data protection or that you consent to the data transfer. An adequate level of data protection can be guaranteed, for example, by the existence of an adequacy decision by the EU Commission, the conclusion of EU standard contractual clauses (SCC) or the existence of so-called Binding Corporate Rules (BCR). Please contact us using the contact details above to obtain a copy of the specific guarantees for the transfer of your data to third countries.
In the event that the existing adequacy decision for the EU-US Data Privacy Framework is declared invalid in the future, we have already agreed additional transfer instruments with the relevant service providers as a precautionary measure, such as EU standard contractual clauses in particular, or will do so in good time if necessary.
5. Storage period and deletion
We only store your personal data for as long as is necessary to fulfil the above-mentioned purposes or – in the case of consent – as long as you do not revoke your consent. In the event of an objection, we will no longer process your personal data unless further processing is permitted or even mandatory under the relevant statutory provisions (e.g. as part of retention obligations under commercial and tax law). We will also delete your personal data if we are obliged to do so for legal reasons.
For further details on the storage period of your personal data, please refer to the respective explanations in the sections listed above.
6. Your rights
As a person affected by data processing, you have the following rights in accordance with the GDPR:
Right of access (Article 15 GDPR)
You have the right to receive information about your personal data processed by us.
Right to rectification (Article 16 GDPR)
You have the right to demand the immediate correction of incorrect data and the completion of incomplete data, provided that the legal requirements are met.
Right to erasure (Article 17 GDPR)
You have the right to request the erasure of your personal data if the legal requirements are met and in particular if (1) your data is no longer required for the purposes stated in this data protection notice, (2) you have withdrawn your consent and there is no other legal basis for the processing, (3) your data has been processed unlawfully or (4) you have objected to the processing of your data and there are no overriding legitimate grounds for the processing.
Right to restriction of processing (Article 18 GDPR)
You have the right to demand that we restrict the processing of personal data concerning you, in particular if you dispute the accuracy of the data or if the processing of your data is unlawful and you demand restriction instead of erasure.
Right to data portability (Article 20 GDPR)
If your data is processed on the basis of a contract or on the basis of your consent, you have the right to receive your data in a structured, commonly used and machine-readable format or to have your data transmitted to another controller, provided that the legal requirements for this are met.
Right to object (Article 21 GDPR)
You have the right to object to our processing of your data at any time for reasons arising from your particular situation, provided that the legal basis for our processing of your data is the protection of our legitimate interests in accordance with Article 6 (1) sentence 1 letter f GDPR. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for continuing the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
Right of cancellation (Article 7 (3) GDPR)
If we process your data on the basis of your consent, you have the right to withdraw this consent at any time with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation.
Right to lodge a complaint with the supervisory authority (Article 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Article 77 GDPR). You can exercise this right with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement or with the supervisory authority responsible for us. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
If you have any questions regarding the processing of your data or would like to exercise your rights as a data subject, please contact us using the contact details above.
7. Version
This privacy policy may be subject to change. The current version of this privacy policy applies.
Status: March 2025