Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and
thank you for your interest. In the following, we inform you about the
handling of your personal data when using our website. Personal data
hereby refers to all data with which you can be personally identified.

1.2 The controller for data processing on this
website within the meaning of the General Data Protection Regulation (GDPR)
is GS Modevertriebs GmbH, Marktstr. 11, 88356 Ostrach, Germany, Tel.:
075859358475, Fax: 075859242951, E-Mail: crefo@gluecksstern.de. The
controller for the processing of personal data is the natural or legal
person who, alone or jointly with others, determines the purposes and
means of the processing of personal data.

1.3 This website uses SSL or
TLS encryption for security reasons and to protect the transmission of
personal data and other confidential content (e.g., orders or inquiries to
the controller). You can recognize an encrypted connection by the string
"https://" and the lock symbol in your browser line.

2) Data Collection when Visiting our Website

When using our website for informational purposes only, i.e., if you do
not register or otherwise provide us with information, we only collect
data that your browser transmits to the page server (so-called
"server log files"). When you access our website, we collect the
following data, which are technically necessary for us to display the
website to you:

Our visited website

Date and time of access

Amount of data sent in bytes

Source/reference from which you accessed the page

Browser used

Operating system used

IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f
GDPR on the basis of our legitimate interest in improving the stability
and functionality of our website. No transfer or other use of the data
takes place. However, we reserve the right to review the server log
files retrospectively if there are concrete indications of illegal use.

3) Cookies

To make visiting our website attractive and to enable the use of
certain functions, we use cookies, which are small text files stored on
your device. Some of these cookies are automatically deleted after
closing the browser (so-called "session cookies"), while others remain
on your device for a longer period and allow page settings to be saved
(so-called "persistent cookies"). In the latter case, you can find the
storage duration in the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies used by us,
the processing is carried out in accordance with Art. 6 (1) lit. b GDPR
lit. a GDPR in the case of a given consent, or in accordance with Art. 6
(1) lit. f GDPR to safeguard our legitimate interests in the best
possible functionality of the website and a customer-friendly and
effective design of the website visit.

You can configure your browser so that you are informed about the
setting of cookies and can decide individually about their acceptance or
Please note that if cookies are not accepted, the functionality of our website may be limited.

4) Contacting Us

4.1 We use your email address exclusively based on
one-time reminder to submit a review of your order. You can withdraw
your consent at any time by sending a message to the controller.

4.2 When contacting us (e.g., via contact form or
email), personal data will be processed exclusively for the purpose of
handling and responding to your request and only to the extent
The legal basis for the processing of this data is our
(1) lit. f GDPR. If your contact aims at concluding a contract, the
additional legal basis for the processing is Art. 6 (1) lit. b
matter concerned has been conclusively resolved and provided that no
4.3 WhatsApp Business

We offer visitors to our website the opportunity to contact us via the
messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal
Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use
the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction
(e.g., an order placed), we will store and use your mobile phone number
accordance with Art. 6 (1) lit. b GDPR to process and respond to your
request. On the basis of the same legal basis, we may ask you via
WhatsApp to provide further data (order number, customer number, address
process.

If you use our WhatsApp contact for general inquiries (e.g., about the
range of services, availability, or our website), we will store and use
your mobile phone number used on WhatsApp and - if provided - your first
and last name in accordance with Art. 6 (1) lit. f GDPR on the basis of
our legitimate interest in the efficient and timely provision of the
requested information.

Your data will always only be used to respond to your request via
WhatsApp. No data will be passed on to third parties.

Please note that WhatsApp Business gains access to the address book
of the mobile device we use for this purpose and automatically transmits
company Meta Platforms Inc. in the USA. For the operation of our WhatsApp
the WhatsApp contact details of users who have also contacted us via
This ensures that every person whose WhatsApp contact details are
their WhatsApp phone number from the address books of their chat contacts
their device by accepting the WhatsApp terms of use. The transmission of
WhatsApp is excluded in this respect.

For the purpose and scope of data collection and the further processing
and use of data by WhatsApp, as well as your related rights and setting
policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

5) Data Processing when Opening a Customer Account

In accordance with Art. 6 (1) lit. b GDPR, personal data will
provide it to us when opening a customer account. You can find out which
corresponding form on our website.

Your customer account can be deleted at any time by sending a message
customer account, your data will be deleted, provided that all contracts
retention periods prevent deletion, and we no longer have a legitimate
6) Use of Customer Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our email newsletter, we will regularly send you
the newsletter is your email address. The provision of further data is
dispatch, we use the so-called double opt-in procedure, which ensures
your consent to receive newsletters by clicking a verification link sent
By activating the confirmation link, you give us your consent to the
this process, we store your IP address registered by the Internet Service
be able to trace any possible misuse of your email address at a later
strictly for this purpose.

You can unsubscribe from the newsletter at any time via the designated
controller mentioned at the beginning. After unsubscribing, your email
unless you have expressly consented to further use of your data or we
about which we inform you in this statement.

6.2 Advertising by Post

Based on our legitimate interest in personalized direct advertising, we
and - if we have received this additional information from you within the
year of birth and your professional, industry or business designation in
interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time.

6.3 Email Notifications for Product Availability

For temporarily unavailable items, you can sign up to receive email
notification about the availability of the item you have selected. The
address. The provision of further data is voluntary and may be used to
opt-in procedure, which ensures that you will only receive a notification
verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to the
this process, we store your IP address registered by the Internet Service
be able to trace any possible misuse of your email address at a later
service for product availability is used strictly for this purpose.

You can unsubscribe from availability notifications at any time by
beginning. After unsubscribing, your email address will be immediately
have expressly consented to further use of your data or we reserve the
we inform you in this statement.

6.4 In the event that you abandon your purchase with us
by email of the contents of your virtual shopping cart.

The only mandatory information for sending this reminder is your email
address you personally. For email delivery, we use the so-called double
after you have explicitly confirmed your consent to this by clicking a
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR for sending a shopping cart reminder. We store your IP address registered by the Internet Service Provider (ISP) and the date and time of registration to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when you register for our e-mail notification service will be used strictly for the intended purpose.

You can unsubscribe from the shopping cart reminders at any time by sending a message to the controller mentioned at the beginning. After successful unsubscription, your e-mail address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

7) Data processing for order fulfillment

7.1 Where necessary for the fulfillment of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data (name, address, e-mail address) transmitted by you when ordering to inform you personally about upcoming updates within the legally stipulated period in an appropriate communication channel (e.g. by post or e-mail) in accordance with Art. 6 (1) (c) GDPR as part of our legal information obligations. Your contact data will be used strictly for the purpose of communicating updates owed by us and processed by us only to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s) who assist us fully or partially in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.2 Use of payment service providers

7.3 Amazon Pay

One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg

If you select a payment method from the provider where you pay in advance (e.g. credit card payment), your payment data communicated during the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 (1) (b) GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

7.4 Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider where you pay in advance (e.g. credit card payment), your payment data communicated during the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 (1) (b) GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where the provider pays in advance (e.g. invoice or installment purchase or direct debit), you will also be asked during the order process to provide certain personal data (first name and surname, street, house number, postcode, city, date of birth, e-mail address, telephone number, optionally data on an alternative payment method).

To safeguard our legitimate interest in determining the creditworthiness of our customers, we transmit this data to the provider for a credit check in accordance with Art. 6 (1) (f) GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

In addition to internal provider criteria, identity and credit information from the following credit agencies may also be included in the decision-making process for the application review in accordance with Art. 6 (1) (f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

7.5 Mollie

One or more online payment methods from the following provider are available on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

If you select a payment method from the provider where you pay in advance (e.g. credit card payment), your payment data communicated during the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 (1) (b) GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

7.6 PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you pay in advance (e.g. credit card payment), your payment data communicated during the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 (1) (b) GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where the provider pays in advance (e.g. invoice or installment purchase or direct debit), you will also be asked during the order process to provide certain personal data (first name and surname, street, house number, postcode, city, date of birth, e-mail address, telephone number, optionally data on an alternative payment method).

To safeguard our legitimate interest in determining the creditworthiness of our customers, we transmit this data to the provider for a credit check in accordance with Art. 6 (1) (f) GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

7.7 PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, we transmit your payment data during payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transmission takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

If you select the PayPal payment method "invoice purchase", your payment data will first be transmitted to PayPal for payment preparation, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment execution. The legal basis is Art. 6 (1) (b) GDPR in each case. In this case, RatePay carries out an identity and credit check on its own behalf to determine creditworthiness according to the principle already mentioned above and transmits your payment data to credit agencies based on the legitimate interest in determining creditworthiness in accordance with Art. 6 (1) (f) GDPR. A list of the credit agencies that Ratepay can use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data will first be transmitted to PayPal for payment preparation in accordance with Art. 6 (1) (b) GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider for payment execution in accordance with Art. 6 (1) (b) GDPR:

- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)

- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)

- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main

- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)

- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)

- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2

1200 Vienna, Austria)

- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)

- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Further information on data protection can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

7.8 SOFORT

One or more online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

If you select a payment method from the provider that requires you to
pay in advance (e.g., credit card payment), your payment data
provided during the ordering process (including name, address, bank and
payment card information, currency, and transaction number) as well as
information about the content of your order will be transmitted to this
provider in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of
your data in this case is solely for the purpose of payment processing
with the provider and only to the extent necessary for this purpose.

7.9 We reserve the right to transfer your data to
the collection service provider Creditreform Reutlingen if our payment
claim has not been settled despite a prior reminder. In this case, the
claim will be collected directly by the collection service provider.

The transfer of your data serves to fulfill the contract in accordance
with Art. 6 para. 1 sentence 1 lit. b GDPR and to protect our
enforcement of our payment claim in accordance with Art. 6 para. 1
sentence 1 lit. f GDPR, as part of a balancing of interests.

8) Web Analysis Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service
provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin,
D04 E5W5, Ireland ("Google"), which allows an analysis of your use of
our website.

By default, when you visit the website, Google (Universal) Analytics
sets cookies, which are small text files stored on your device and
collect certain information. This information includes your IP address,
direct personal identification.

The information is transmitted to Google servers and processed there.
Transfers to Google LLC, located in the USA, are also possible.

Google uses the collected information on our behalf to evaluate your use
of the website, compile reports on website activity for us, and provide
address transmitted by your browser within the scope of Google Analytics
Google (Universal) Analytics is stored for a period of two months and
All processing described above, in particular the setting of cookies on
the device used, will only be carried out if you have given us your

Without your consent, Google (Universal) Analytics will not be used
time with effect for the future. To exercise your right of revocation,
We have concluded a data processing agreement with Google, which
unauthorized transfer to third parties.

clauses of the European Commission, which are intended to ensure

copy of the aforementioned standard contractual clauses, can be found
https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic features

Google (Universal) Analytics uses the special function "demographic
analyzing advertising and information from third-party providers. This
the collected data cannot be assigned to a specific person and is
Google Signals

As an extension to Google (Universal) Analytics, Google Signals can be
enabled personalized ads and linked your devices to your Google account,
accordance with Art. 6 para. 1 lit. a GDPR, can analyze your usage
cross-device conversions. We do not receive personal data from Google,
deactivate the "Personalized advertising" function in your Google
https://support.google.com/ads/answer/2662922?hl=de Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

User IDs

As an extension to Google (Universal) Analytics, the "User IDs" function
(Universal) Analytics in accordance with Art. 6 para. 1 lit. a GDPR,
different devices, your activities, including conversions, can be
9) Retargeting/Remarketing and Conversion Tracking

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, through which
websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow
interest-based advertising by means of a pseudonymous cookie ID and on
place if you have agreed with Google that your internet and app browser
your Google account will be used to personalize ads that you view on the
our website, Google uses your data together with Google Analytics data
this purpose, your personal data is temporarily linked by Google with
Google Ads Remarketing, personal data may also be transmitted to the

Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

Remarketing by downloading and installing the browser plug-in from

https://support.google.com/ads/answer/7395996?


https://www.google.com/policies/technologies/ads/

reading information on the used device, will only be carried out if you
lit. a GDPR. You can revoke your given consent at any time with effect
Pinterest Retargeting Pixel

This website uses retargeting technology from the following provider:
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street,
This allows us to specifically address visitors to our websites with
in our shop and our products. The advertising is displayed on the basis
personal data is stored. In cases of retargeting technology, a cookie
about your interests and thus customize the advertising to the stored
computer or mobile device. This allows you to be shown advertising that
All processing described above, in particular the setting of cookies for
have given us your express consent in accordance with Art. 6 para. 1
will not take place during your visit to the site.

You can revoke your given consent at any time with effect for the
service in the "Cookie Consent Tool" provided on the website.

10) Site Functionalities

10.1 Integration of Instagram Feed via Lightwidget

On our website, we use the services of Lightwidget, a widget from the
43-445 Dziegielow, Poland (www.lightwidget.com), to display thumbnails of
text files stored locally in your internet browser's cache.

The widget establishes a connection to servers of Meta Platforms Ireland
("Instagram") when visitors access our website. This provides Instagram
cases, a transfer to servers of Meta Platforms Inc. based in the USA is
All processing described above, in particular the setting of cookies for
have given us your express consent in accordance with Art. 6 para. 1
for the future by deactivating this service in the "Cookie Consent Tool"
For the transfer of data to the USA, the provider relies on standard
ensure compliance with the European level of data protection.

10.2 Integration of Instagram Feed via SnapWidget

On our website, we use the services of SnapWidget, a widget from
(www.snapwidget.com), to display thumbnails of our Instagram profile.
locally in your internet browser's cache.

The widget establishes a connection to servers of Meta Platforms Ireland
("Instagram") when visitors access our website. This provides Instagram
cases, a transfer to servers of Meta Platforms Inc. based in the USA is
All processing described above, in particular the setting of cookies for
have given us your express consent in accordance with Art. 6 para. 1
for the future by deactivating this service in the "Cookie Consent Tool"
For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with the European level of data protection.

10.3 Facebook Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that no connection to the provider's servers is established when you access a page of our website that contains such plugins.

Only when you activate the plugins and thus give your consent to data transmission in accordance with Art. 6 (1) (a) GDPR, will your browser establish a direct connection to the provider's servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your used end device (including your IP address), your browser, and your page history is transmitted to the provider and may be further processed there.



If you are logged into an existing user profile on the provider's social network, information about interactions made via the plugins will also be published there and displayed to your contacts.

You can revoke your consent at any time by reactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with the European level of data protection.

10.4 Instagram Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that no connection to the provider's servers is established when you access a page of our website that contains such plugins.

Only when you activate the plugins and thus give your consent to data transmission in accordance with Art. 6 (1) (a) GDPR, will your browser establish a direct connection to the provider's servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your used end device (including your IP address), your browser, and your page history is transmitted to the provider and may be further processed there.



If you are logged into an existing user profile on the provider's social network, information about interactions made via the plugins will also be published there and displayed to your contacts.

You can revoke your consent at any time by reactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with the European level of data protection.

10.5 Pinterest Plugins

Our website uses plugins from the social network of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that no connection to the provider's servers is established when you access a page of our website that contains such plugins.

Only when you activate the plugins and thus give your consent to data transmission in accordance with Art. 6 (1) (a) GDPR, will your browser establish a direct connection to the provider's servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your used end device (including your IP address), your browser, and your page history is transmitted to the provider and may be further processed there.



If you are logged into an existing user profile on the provider's social network, information about interactions made via the plugins will also be published there and displayed to your contacts.

You can revoke your consent at any time by reactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data may also be transferred to: Pinterest Inc., USA

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with the European level of data protection.

10.6 Vimeo

This website uses plugins for the display and playback of videos from the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be directly assigned to your account when you click on a video. If you do not wish the assignment to your account, you must log out before pressing the playback button.

All the aforementioned processing operations, in particular the setting of cookies for reading out information on the end device used, only take place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with the European level of data protection.

10.7 Zoom

We use this provider for conducting online meetings, video conferences and/or webinars: Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA

The provider processes various data, the scope of the processed data depending on what data you provide before or during participation in an online meeting, video conference or webinar. Your data as a communication participant will be processed and stored on the provider's servers. This may include, in particular, your registration data (name, email address, telephone number (optional) and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, image and sound contributions from participants as well as voice input in chats can be processed.

For the processing of personal data that is necessary for the fulfillment of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6 (1) (b) GDPR serves as the legal basis. Insofar as you have given us consent to the processing of your data, the processing takes place on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

Furthermore, the legal basis for data processing during online meetings, video conferences or webinars is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in the effective conduct of the online meeting, webinar or video conference.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with the European level of data protection.

10.8 Google reCAPTCHA

On this website, we use the CAPTCHA service from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA. For the visual design of the captcha window, the provider uses "Google Fonts", i.e. fonts loaded from the internet by Google. No further information beyond that already transmitted to Google via the ReCaptcha functionality, as mentioned above, is processed here.

The service checks whether an entry is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, and similar automated harmful accesses. To ensure that an action is performed by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the used end device, identification data of the used browser and operating system type, as well as the date and duration of the visit and transmits this for evaluation to the provider's servers.

The legal basis is our legitimate interest in establishing individual accountability on the internet and preventing abuse and spam in accordance with Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with the European level of data protection.

11) Tools and Other

Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications requiring consent. The "Cookie Consent Tool" is displayed to users when they access the page in the form of an interactive interface, on which consent for certain cookies and/or cookie-based applications can be given by checking a box. Through the use of this tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the appropriate box. This ensures that such cookies are only placed on the user's respective end device if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies, and thus in a legally compliant design of our website.

Another legal basis for processing is also Art. 6 (1)
lit. c GDPR. As the controller, we are subject to the legal
obligation to make the use of technically non-essential cookies dependent on the
respective user's consent.

We have concluded a data processing agreement with the provider
that ensures the protection of our site visitors' data
and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options
of the cookie consent tool can be found directly in the corresponding
user interface on our website.

12) Data subject rights

12.1 The applicable data protection law grants you the following
data subject rights (rights of access and intervention) against the
controller with regard to the processing of your personal
data, whereby reference is made to the stated legal basis
for the respective exercise conditions:

Right of access according to Art. 15 GDPR;

Right to rectification according to Art. 16 GDPR;

Right to erasure according to Art. 17 GDPR;

Right to restriction of processing according to Art. 18 GDPR;

Right to notification according to Art. 19 GDPR;

Right to data portability according to Art. 20 GDPR;

Right to withdraw consent according to Art. 7 (3) GDPR;

Right to lodge a complaint according to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE
INTERESTS WITHIN THE SCOPE OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO
OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM
YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE
AFFECTED DATA. FURTHER PROCESSING REMAINS RESERVED, HOWEVER, IF WE CAN
DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT
OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND
FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING
PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF
PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN
EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data

The duration of the storage of personal data is determined
by the respective legal basis, the purpose of processing and –
if applicable – additionally by the respective statutory
retention period (e.g. commercial and tax law
retention periods).

When processing personal data based on explicit consent
pursuant to Art. 6 (1) lit. a GDPR, the
data concerned will be stored until you withdraw your consent.

If there are legal retention periods for data processed
within the framework of legal or quasi-legal obligations based on
Art. 6 (1) lit. b GDPR, this data will be routinely deleted
after the retention periods have expired,
provided that it is no longer required for contract fulfillment or contract initiation
and/or we no longer have a legitimate interest in
further storage.

When processing personal data based on
Art. 6 (1) lit. f GDPR, this data will be stored until
you exercise your right to object according to Art. 21 (1) GDPR,
unless we can demonstrate compelling legitimate grounds for the processing
that override your interests, rights and freedoms, or
the processing serves the assertion, exercise or defence
of legal claims.

When processing personal data for direct marketing
purposes based on Art. 6 (1) lit. f GDPR, this
data will be stored until you exercise your right to object according to Art. 21
(2) GDPR.

Unless otherwise stated in the other information in this declaration
on specific processing situations,
stored personal data will otherwise be deleted when it
is no longer necessary for the purposes for which it was collected or otherwise processed.