Privacy Policy
The party responsible for data processing is
BIOvative GmbH
Oskar-Breitenborn-Strasse 11
04425 Taucha
Email: info@biovative.de
Phone: +491637295358
Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about how we handle your data.
1. Access Data and Hosting
You can visit our website without providing any personal data. Each time
web page, the web server only automatically saves a so-called server, server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data) and documents the request.
This access data is used exclusively for the purpose of ensuring operation of the site and the improvement of our offer analysed. This serves to safeguard our overriding legitimate interests in the balancing of interests overriding legitimate interests in the correct presentation of our website in offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All access data will be deleted at the latest deleted no later than seven days after the end of your visit to the site.
Hosting
The services for hosting and displaying the website are partly provided by our service provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in the forms provided for this purpose forms on this website are processed on their servers. For questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy. Contact option described in this privacy policy.
2. Data Processing for Contract Processing and
for making Contact
2.1 Data processing for contract processing
For the purpose of contract processing (including enquiries about and processing of any existing
existing warranty and service disruption claims as well as any statutory
legal updating obligations) in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR
personal data if you voluntarily provide it to us as part of your order.
communicate. Mandatory fields are labelled as such, as in these cases we absolutely
data is absolutely necessary to fulfil the contract and we cannot send your order
cannot dispatch your order without this information. Which data is collected can be seen from the
respective input forms.
Further information on the processing of your data, in particular on the
forwarding to our service providers for the purpose of order, payment and dispatch
and dispatch processing, can be found in the following sections of this
privacy policy. Once the contract has been fully processed, your
restricted for further processing and deleted after expiry of the retention periods under tax and
retention periods under tax and commercial law in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR
unless you expressly consent to further use of your data in accordance with Art.
6 para. 1 sentence 1 lit. a GDPR or we reserve the right to further use of your data that is permitted by law.
use of your data that is permitted by law and about which we inform you in this
declaration.
Merchandise management system
For order and contract processing, we use merchandise management systems of external
service providers. Our service providers work for us within the framework of
for us. If you have any questions about our service providers and the basis of our
cooperation with them, please use the contact option described in this
contact option described in this privacy policy.
2.2 Customer account
Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
by deciding to open a customer account, we will use your data for the purpose of
data for the purpose of opening a customer account and to store your data for
further future orders on our website. The cancellation of your account is possible at any time
and can be cancelled either by sending a message to the contact option contact option described in this
privacy policy or via a function provided for this purpose
function provided for this purpose in the customer account. After deletion of your customer account
your data will be deleted unless you expressly consent to further use of your data in accordance with
data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data
reserve the right to use data beyond this, which is permitted by law and
about which we inform you in this declaration.
2.3 Making contact
As part of customer communication, we collect the following data to process your enquiries
in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, if you provide us with this data
voluntarily when you contact us (e.g. via contact form or email).
communicate. Mandatory fields are labelled as such, as in these cases we need the
data is absolutely necessary to process your contact. Which data
collected can be seen from the respective input forms. After
your enquiry has been processed in full, your data will be deleted unless you
expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR
GDPR or we reserve the right to use your data for other purposes that are
which is permitted by law and about which we inform you in this declaration.
inform you about in this declaration.
3. Data Processing for the Purpose of
Dispatch Processing
In order to fulfil the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to
the shipping service provider commissioned with the delivery, insofar as this is necessary for the
delivery of ordered goods.
4. Data Processing for Payment Processing
When processing payments in our online shop, we work together with the following partners
partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the selected payment method, we pass on the data necessary for processing the
necessary for processing the payment transaction to our technical service providers who
processing on our behalf, or to the commissioned credit institutions or to the selected payment
or to the selected payment service provider, insofar as this is necessary to process the payment.
processing of the payment. This serves the fulfilment of the contract pursuant to Art. 6
para. 1 sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for
necessary for processing the payment themselves, e.g. on their own website
or via a technical integration in the ordering process. In this respect, the
privacy policy of the respective payment service provider.
If you have any questions about our partners for payment processing and the basis
of our cooperation with you, please use the contact option described in this
contact option described in this privacy policy.
4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes
If necessary, we provide our service providers with further data, which they process together with
data necessary for the processing of the payment as our processors
for the purpose of fraud prevention and the optimisation of our payment processes
(e.g. invoicing, processing of disputed payments, support for accounting).
accounting). In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to protect
our legitimate interests, which predominate in the context of a balancing of interests
interests in our protection against fraud and in efficient payment
payment management.
4.3 Identity and credit check when selecting Klarna
payment services
Purchase on account via Klarna
If you decide to use the payment services of Klarna Bank AB (publ), Sveavägen
46, 111 34 Stockholm, Sweden (hereinafter referred to as Klarna), we ask you for
your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR that we may process the data necessary for the
of the payment and an identity and credit check to Klarna.
may transmit. In Germany, the identity and credit check may be carried out by the
credit agencies named in Klarna’s privacy policy may be used for the identity and credit
may be used. Klarna uses the information received about the statistical probability of a
Klarna uses the information received on the statistical probability of a payment default for a balanced decision on the
establishment, execution or termination of the contractual relationship. Your
You can revoke your consent at any time by sending a message to the contact
contact option mentioned in this privacy policy. This may result in
result in us no longer being able to offer you certain payment options. You can also revoke your consent to this use of personal data
to Klarna at any time.
5. Advertising by e-mail, post
5.1 Email newsletter with registration and newsletter tracking
If you subscribe to our newsletter, we will use the data required for this purpose or
data required or separately provided by you in order to regularly send you
our e-mail newsletter on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a
DSGVO to send. You can unsubscribe from the newsletter at any time and can
either by sending a message to the contact option described below or
via a link provided for this purpose in the newsletter. After unsubscribing, we will delete
your e-mail address from the recipient list, unless you have expressly consented to the
further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR
or we reserve the right to use data beyond this, which is
permitted by law and about which we inform you in this declaration.
We would like to point out that we evaluate your user behaviour when sending the newsletter.
analyse your user behaviour. For this purpose, we also analyse your interaction with our newsletter by
measuring, storing and analysing opening rates and click rates for the purpose of
purpose of designing future newsletter campaigns (‘newsletter tracking’).
For this analysis, the emails sent contain single-pixel technologies (e.g.
so-called web beacons, tracking pixels), which are stored on our website. For the
analyses, we link the following ‘newsletter data’ in particular
the page from which the page was requested (so-called referrer URL)
the date and time of the request
the description of the type of web browser used
the IP address of the requesting computer
the e-mail address,
the date and time of registration and confirmation
and the single-pixel technologies with your e-mail address or your IP address and, if applicable
an individual ID. Links contained in the newsletter may also contain this ID.
If you do not want newsletter tracking, you can unsubscribe from the newsletter at any time as described above.
unsubscribe from the newsletter as described above.
The information will be stored for as long as you are subscribed to the newsletter.
to the newsletter.
5.2 Email newsletter without registration and your right to object
If we receive your e-mail address in connection with the sale of a product or service and you have not
service and you have not objected to this, we reserve the right to
send you regular offers on the basis of Section 7 (3) UWG for similar
products, such as those already purchased, from our range by e-mail.
This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests
overriding legitimate interests in a promotional approach to our customers.
customers.
You can object to this use of your email address at any time by sending a message to
the contact option described in this privacy policy or via a link provided for this purpose in the
link provided for this purpose in the advertising email, without incurring any costs other
costs other than the transmission costs according to the basic tariffs.
After unsubscribing, we will delete your e-mail address from the recipient list, unless you
you have not expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a
GDPR or we reserve the right to use your data for other purposes that are
use of data that is permitted by law and about which we inform you in this
declaration.
5.3 Newsletter dispatch
The newsletter and the newsletter tracking described above may also be
also sent by our service providers as part of processing on our behalf.
dispatched. If you have any questions about our service providers and the basis of our
cooperation with them, please use the contact option described in this
contact option described in this privacy policy.
Our service providers are located and/or use servers in the following countries for which
the European Commission has determined an adequate level of data protection
has determined: Canada.
Our service providers are located and/or use servers in the following countries USA, India.
There is no adequacy decision by the European Commission for this country/these countries.
Commission. Our co-operation with them is based on these guarantees:
European Commission standard data protection clauses.
5.4 Sending evaluation requests by e-mail
If you have given us your express consent to this during or after your order in accordance with
consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to ask you to submit a review of your order via the review system we use.
the rating system we use. This consent can be revoked at any time by sending a
by sending a message to the contact option described in this privacy policy
or via a link provided for this purpose in the review request.
If necessary, the rating requests are also processed by our service provider
Trusted Shops AG Subbelrather Str. 15C, 50823 Cologne (‘Trusted Shops’).
We receive information about the respective status from Trusted Shops as part of the sending of evaluation requests
status by Trusted Shops (e.g. whether the review request has been sent and
and whether it has arrived). This is done in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR to
fulfil our legitimate interest in obtaining information about the
invitations to evaluate in order to make optimisations based on this, if necessary
and to fulfil the legitimate interest of Trusted Shops,
to be able to offer this service.
For the sending of rating requests and for the collection and display of
and status information together with Trusted Shops.
responsible.
Within the scope of the joint responsibility existing between us and Trusted Shops
responsibility between us and Trusted Shops, please contact Trusted Shops if you have any data protection
your rights, please preferably contact Trusted Shops. Further information on data protection can be found at the following link
here. Irrespective of this, you can also always contact us using the contact option described in
contact option described in this privacy policy. Your enquiry
will then, if necessary, be forwarded to the other person responsible for answering
to answer your enquiry.
5.5 Postal advertising and your right to object
In addition, we reserve the right to use your first and last name and your postal
postal address for our own advertising purposes, e.g. to send you interesting offers and
interesting offers and information about our products by post. This
serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests
legitimate interests in a promotional approach to our customers in accordance with Art. 6
para. 1 sentence 1 lit. f GDPR. You can object to the storage and use of your data for
purposes at any time by sending a message to the contact option described in this privacy policy.
contact option described in this privacy policy.
6 Cookies and other technologies
6.1 General information
In order to make visiting our website attractive and to enable the use of certain
functions, we use technologies on various pages, including so-called cookies.
including so-called cookies. Cookies are small text files that are automatically
automatically stored on your end device. Some of the cookies we use
are deleted again at the end of the browser session, i.e. after you close your browser
deleted (so-called session cookies). Other cookies remain on your end device and
enable us to recognise your browser on your next visit (persistent cookies).
cookies).
Privacy protection for end devices
When using our online offer, we use absolutely necessary technologies
to provide the expressly requested telemedia service.
service. The storage of information in your end device or access to information already
information that is already stored on your device does not require your consent.
no consent.
In the case of functions that are not absolutely necessary, the storage of
information in your end device or access to information that is already stored in your end device
stored on your device requires your consent. We would like to point out that
parts of the website may not be fully usable if you do not give your consent.
may not be fully usable. Any consent you may have given will remain in place until you change the
adjust or reset the respective settings on your device.
Any downstream data processing by cookies and other technologies
We use technologies that are absolutely necessary for the use of certain functions
of our website (e.g. shopping basket function). Through these
IP address, time of visit, device and browser information as well as information on your use of our website (e.g. information on the contents of the shopping basket) are collected.
information on the contents of the shopping basket) are collected and processed. This serves the purpose of
legitimate interests in an optimised presentation of our website in accordance with Art.
optimised presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
We also use technologies to fulfil the legal obligations to which we are subject
to which we are subject (e.g. to be able to prove consent to the processing of your
personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis
for data processing can be found in the following sections of this
privacy policy.
Insofar as you have consented to the use of the technologies in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR
you can revoke your consent at any time by sending a message to the contact option
message to the contact option described in the privacy policy.
Alternatively, you can also visit the following link: https://biovative.de/datenschutz/.
If you do not accept cookies, the functionality of our website may be
be restricted.
6.2 Use of Borlabs to manage consents
We use the Borlabs Cookie Plugin (‘Borlabs’) on our website to inform you
inform you about the cookies and other technologies that we use on our website
website, as well as your consent to the processing of your personal data by these
processing of your personal data by these technologies, to obtain, manage and
manage and document. This is in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR for the
fulfilment of our legal obligation pursuant to Art. 7 para. 1 GDPR,
to be able to prove your consent to the processing of your personal data to which we are
to which we are subject. Borlabs is an offer from Borlabs – Benjamin A.
Bornschein Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany. When you visit our
website, the Borlabs web server stores a so-called Borlabs cookie, which stores
information about the cookie runtime and version, device and browser information
and information about your consent behaviour. A transmission of
personal data to Borlabs does not take place. Your data will be deleted after
deleted after one year, unless you have expressly consented to the further use of your data
in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or if we reserve the right to use your data for other
reserve the right to use data beyond this, which is permitted by law and about which
we inform you in this declaration.
7. use of cookies and other technologies
Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
we use the following cookies and other third-party technologies on our website.
technologies from third-party providers. After the end of the purpose and the end of the use of the
technology by us, the data collected in this context will be deleted.
data will be deleted. You can revoke your consent at any time with effect for the future.
revoked. You can find further information on your cancellation options in the
section ‘Cookies and other technologies’. Further information including
the basis of our cooperation with the individual providers can be found in the
the individual technologies. If you have any questions about the providers and the basis of our
cooperation with them, please use the contact option described in this
contact option described in this privacy policy.
7.1 Use of Google services
We use the following technologies from Google Ireland Ltd,
Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The information automatically collected by Google
automatically collected by Google technologies about your use of our website
website is generally transmitted to a server of Google LLC, 1600 Amphitheatre
Parkway Mountain View, CA 94043, USA and stored there. For the USA
there is no adequacy decision by the European Commission. Our
cooperation with them is based on standard data protection clauses of the
European Commission. If your IP address is collected via Google technologies
technologies, it will be truncated before being stored on Google’s servers by activating
activation of IP anonymisation. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Unless otherwise stated for the
individual technologies, the data processing is carried out on the basis
data processing is carried out on the basis of an agreement concluded for the respective technology
agreement between jointly responsible parties in accordance with Art. 26 GDPR.
You can find further information about data processing by Google in
the Google privacy policy.
Google Analytics
For the purpose of website analysis, Google Analytics collects data (IP address,
time of the visit, device and browser information as well as information about your
your use of our website) are automatically collected and stored, from which
from which user profiles are created using pseudonyms. For this purpose
cookies may be used for this purpose. Your IP address will not be merged with other data
merged with other data from Google. The data processing takes place on the basis of an
agreement on order processing by Google.
For the purpose of optimised marketing of our website, we have activated the
activated the data sharing settings for ‘Google products and services’. Thus
Google can access the data collected and processed by Google Analytics
and subsequently use it to improve Google services. The
data sharing with Google as part of these data sharing settings is based on an additional
on the basis of an additional agreement between controllers. We have
no influence on the subsequent data processing by Google.
To create and carry out tests, we also use the Google Analytics
Google Analytics extension function Google Optimise.
We use the so-called UserID function for the purpose of optimised marketing of our website.
With the help of this function, we can assign your interaction data for one or more
sessions on our online presences a unique, permanent ID and thus analyse your
and thus analyse your user behaviour across devices and sessions.
Analyse your user behaviour across devices and sessions.
For web analysis, the extension function of Google Analytics Google
Signals enables so-called ‘cross-device tracking’. Insofar as your internet-enabled
devices are linked to your Google account and you have activated the setting ‘personalised
personalised advertising’ setting in your Google account, Google can compile reports on your
behaviour (in particular cross-device user numbers), even if you change your device.
you change your device. Processing of personal data by us does not take place
we do not process personal data in this respect; we only receive statistics based on Google Signals.
statistics.
For web analysis and advertising purposes, the extension function of Google Analytics
Analytics, the so-called DoubleClick cookie enables your browser to be recognised when you
visiting other websites. Google will use this information to
compile reports on website activity and to provide other services relating to website
services associated with the use of the website.
Google Ads
For advertising purposes in Google search results and on third-party websites
the so-called Google Remarketing Cookie is set when you visit our website, which
automatically by collecting and processing data (IP address, time of visit, device and
of the visit, device and browser information and information about your use of our website
of our website) and by means of a pseudonymous cookie ID and based on the pages
based on the pages you have visited. Any further
data processing beyond this only takes place if you have deactivated the setting
‘personalised advertising’ setting in your Google account. If you are in this
logged in to Google during your visit to our website, Google will use your data
your data together with Google Analytics data to create target group lists for
create and define target group lists for cross-device remarketing.
For website analysis and event tracking, we use Google Ads
Conversion Tracking, we measure your subsequent user behaviour when you access our website via a
you have reached our website via a Google Ads advert. For this purpose
cookies are used and data (IP address, time of visit, device and browser information
browser information and information about your use of our website based on events
events specified by us, such as a visit to a website or newsletter
newsletter registration), from which usage profiles are created using
pseudonyms are used to create user profiles.
Google reCAPTCHA
For the purpose of protection against misuse of our web forms and against spam
automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information and information about your use of our website) and uses a
use of our website) and uses JavaScript and cookies to analyse your use of our website.
analyse your use of our website. In addition, other cookies stored by Google
services stored in your browser are also analysed. A reading or
or storage of personal data from the input fields of the respective
form does not take place.
YouTube video plugin
To integrate third-party content, the YouTube video plugin in the extended data protection mode
privacy mode used by us (IP address, time of the visit, device and browser
visit, device and browser information) are collected, transmitted to Google and
subsequently processed by Google only when you play a video.
7.2 Use of Microsoft services
We use the following technologies from Microsoft Ireland
Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown,
Dublin 18, D18 P521, Ireland (‘Microsoft’). The data processing takes place on the basis of
an agreement between jointly responsible parties in accordance with Art. 26 GDPR. The
information automatically collected by Microsoft technologies about your use of our
use of our website is usually transmitted to a server of Microsoft Corporation
Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there.
stored there. There is no adequacy decision by the European Commission for the USA.
Commission. Our cooperation with them is based on
standard data protection clauses of the European Commission. Further
information about data processing by Microsoft can be found in the
data protection information from Microsoft.
Microsoft Advertising
For advertising purposes in the Bing, Yahoo and MSN search results and on third-party
websites of third parties, the so-called Microsoft Advertising
remarketing cookie, which is automatically set by collecting and processing data
data (IP address, time of visit, device and browser information and information about your
information and information about your use of our website) and by means of a
pseudonymous CookieID and on the basis of the pages you have visited
interest-based advertising.
For website analysis and event tracking, we measure your subsequent user behaviour via the Microsoft
Advertising Universal Event Tracking (UET) to measure your subsequent usage behaviour,
if you have reached our website via an advert from Microsoft Advertising.
have reached our website. For this purpose, cookies may be used and data (IP address, time of the
visit, device and browser information as well as information about your use of our website
of our website based on events specified by us, such as visiting a website or
website or newsletter registration), from which usage profiles are created using
from which user profiles are created using pseudonyms. Insofar as your internet-enabled devices
are linked to your Microsoft account and you have not deactivated the setting ‘Interest-based
advertising’ setting in your Microsoft account, Microsoft can compile reports
create reports on usage behaviour (in particular the number of users across devices),
even if you change your end device, so-called ‘cross-device tracking’. Processing
of personal data does not take place by us in this respect, we only receive data
only statistics generated on the basis of Microsoft UET.
7.3 Use of Facebook services
Use of Facebook Pixel
We use the Facebook pixel as part of the technologies described below
technologies of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook
(‘Facebook (by Meta)’ or ‘Meta Platforms Ireland’). The Facebook pixel is used to
data (IP address, time of visit, device and browser information as well as
information about your use of our website based on events specified by us
events specified by us, such as visiting a website or subscribing to a newsletter) are automatically
collected and stored, from which user profiles are created using pseudonyms.
user profiles are created using pseudonyms. As part of the so-called extended data synchronisation
information is also collected and stored in hashed form for matching purposes
stored for matching purposes, which can be used to identify individuals (e.g. names, email addresses and telephone numbers). For this purpose, when you visit our website
pixel automatically sets a cookie for this purpose, which automatically uses a
pseudonymous cookie ID to recognise your browser when you visit other websites.
websites. Facebook (by Meta) will combine this information with other
data from your Facebook account and use it to compile reports on website
compile reports on website activity and to provide other services
services associated with the use of the website, in particular personalised and
personalised and group-based advertising.
The information automatically collected by Facebook (by Meta) technologies about your
about your use of our website is usually transmitted to a server of Meta Platforms, Inc.
Platforms, Inc, 1 Hacker Way, Menlo Park, California 94025, USA and stored there.
stored there. There is no adequacy decision by the European Commission for the USA.
Commission. Insofar as the data transfer to the USA is our responsibility, our
responsibility, our cooperation is based on standard data protection clauses of the
European Commission. Further information about data processing
by Facebook can be found in Facebook’s privacy policy (by Meta).
Facebook analyses
As part of the Facebook business tools, the data collected with the Facebook Pixel
data collected about your use of our website is used to compile statistics about
visitor activities on our website. The data processing takes place on the basis of
on the basis of an agreement on order processing by Facebook (by
Meta). Their analysis serves to optimise the presentation and marketing of our
website.
Facebook Ads (Ads Manager)
We use Facebook Ads to advertise this website on Facebook (by Meta) and on
other platforms. We determine the parameters of the respective advertising campaign.
Facebook is responsible for the exact implementation, in particular the decision on the placement of the
ads to individual users, is the responsibility of Facebook (by Meta). Unless otherwise stated for the
individual technologies, the data processing takes place on the basis of an
data processing is carried out on the basis of an agreement between jointly
controllers in accordance with Art. 26 GDPR. The joint responsibility
is limited to the collection of the data and its transmission to Meta Platforms
Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.
not covered by this.
Based on the statistics generated via Facebook Pixel about visitor activities on our website
on our website via Facebook Custom Audience, we operate
group-based advertising on Facebook (by Meta) by determining the characteristics of the
respective target group. In the context of the extended data comparison
target group (see above), Facebook (by Meta) acts as our processor.
Meta) acts as our processor.
On the basis of the pseudonymous cookie ID set by the Facebook pixel and the data
collected data about your usage behaviour on our website, we operate personalised
personalised advertising via Facebook Pixel Remarketing.
We use Facebook Pixel Conversions to measure web analytics and event tracking
your subsequent usage behaviour if you have reached our website via an advertisement from Facebook
Ads ad on our website. The data processing takes place on the basis of an
agreement on order processing by Facebook (by Meta).
8. Integration of the Trusted Shops Trustbadge/
other widgets
If you have given your consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
Trusted Shops widgets are integrated on this website to display the Trusted Shops
services (e.g. seal of approval, collected reviews) and to offer the
Trusted Shops products for buyers after an order.
The Trustbadge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str.
Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany (‘Trusted Shops’), with which we
are jointly responsible for data protection in accordance with Art. 26 GDPR. We
inform you in the context of this data protection information below about the
essential contents of the contract in accordance with Art. 26 para. 2 GDPR.
Within the framework of the joint responsibility existing between us and Trusted Shops AG
Trusted Shops AG, please contact Trusted Shops AG if you have any data protection
your rights, please contact Trusted Shops using the contact details provided in the
contact options specified in the data protection information. Irrespective of this
you can always contact the controller of your choice. Your enquiry
will then, if necessary, be forwarded to the other responsible party for answering.
to answer your enquiry.
8.1 Data processing when integrating the trust badge/other
widgets
The Trustbadge is provided by a US CDN provider (Content Delivery Network). An appropriate level of data protection is ensured by
standard data protection clauses and other contractual measures.
When the Trustbadge is called up, the web server automatically saves a so-called
server log file, which also contains your IP address, the date and time of access, the amount of
data volume and the requesting provider (access data) and documents the request.
documented. The IP address is anonymised immediately after collection,
so that the stored data cannot be assigned to your person. The
anonymised data is used in particular for statistical purposes and to analyse
error analysis.
8.2 Data processing after order completion
If you have given your consent, the Trustbadge accesses the order information stored in your
order information stored in your end device (order total, order number, product purchased
(order total, order number, product purchased if applicable) and e-mail address and your e-mail address is hashed using a cryptological one-way function. The hash value is then
subsequently transmitted with the order information pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR to
transmitted to Trusted Shops.
This serves to check whether you are already registered for Trusted Shops services.
are registered. If this is the case, further processing will be carried out in accordance with the contractual
contractual agreement concluded between you and Trusted Shops. If you are not yet registered for
registered for the services or do not give your consent to automatic recognition via the
the Trustbadge, you will then be given the opportunity to register manually to use the services
for the use of the services or to activate the protection within the scope of your
already existing user contract.
For this purpose, the Trustbadge accesses the following information after completion of your order
information stored in the terminal equipment you are using:
Order total, order number and email address. This is necessary so that we
be able to offer you buyer protection. The data is only transmitted to Trusted
Trusted Shops only takes place when you have actively opted for the buyer protection by
click on the correspondingly labelled button in the so-called Trustcard
decide. If you decide to use the services, further processing is based on the contractual
further processing is based on the contractual agreement with Trusted Shops in accordance with Art.
6 para. 1 lit. b GDPR, in order to complete your registration for buyer protection and to secure the
order and, if necessary, to be able to subsequently send you evaluation invitations
be able to send you review invitations by e-mail.
Trusted Shops uses service providers in the areas of hosting, monitoring and logging
are used. The legal basis is Art. 6 para. 1 lit. f GDPR for the purpose of ensuring a
trouble-free operation. Processing may take place in third countries (USA and Israel).
may take place. In the case of the USA, an appropriate level of data protection is ensured by
standard data protection clauses and other contractual measures and, in the case of
Israel by an adequacy decision. Further information
can be found here.
9. Social Media
9.1 Social plugins from Instagram (by Meta)
Social buttons from social networks are used on our website.
These are only integrated into the page as HTML links, so that when you visit our website
no connection is established with the servers of the respective provider when our website is
is established. If you click on one of the buttons, the website of the respective social
respective social network opens in a new window of your browser. e.g. press the Like or Share button.
9.2 Our online presence on Facebook (by Meta), Instagram (by
Meta), Youtube, LinkedIn
If you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR
respective social media operator, when you visit our online presences on the
online presences on the social media mentioned above, your data will be automatically
automatically collected and stored for market research and advertising purposes, from which
from which user profiles are created using pseudonyms. These can
be used, for example, to place adverts inside and outside the platforms that are
that presumably correspond to your interests. As a rule, the following are used for this
cookies are used for this purpose. Detailed information on the processing and use of the data by the
data by the respective social media operator as well as a contact option and your
your rights in this regard and setting options for the protection of your privacy
privacy, please refer to the data protection notices of the providers linked below.
providers linked below. If you still need help in this regard, you can contact us
contact us.
Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd, 4 Grand Canal
Square, Dublin 2, Ireland (‘Meta Platforms Ireland’). The information automatically collected by Meta Platforms Ireland
automatically collected by Meta Platforms Ireland about your use of our online presence on
Facebook (by Meta) is usually transmitted to a server of Meta Platforms, Inc, 1
Hacker Way, Menlo Park, California 94025, USA and stored there. For
the USA there is no adequacy decision by the European Commission.
Our cooperation with them is based on standard data protection clauses of the
European Commission. Data processing in the context of a visit to a
Facebook (by Meta) fan page is carried out on the basis of an agreement between
jointly responsible parties in accordance with Art. 26 GDPR. Further information
(information on Insights data) can be found here.
Instagram (by Meta) is an offer of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (‘Meta Platforms Ireland’).
Square, Dublin 2, Ireland (‘Meta Platforms Ireland’) The information automatically collected by Meta Platforms Ireland
automatically collected by Meta Platforms Ireland about your use of our online presence on
Instagram is generally transmitted to a server of Meta Platforms, Inc. at 1 Hacker
Way, Menlo Park, California 94025, USA and stored there. For the USA
there is no adequacy decision by the European Commission. Our
cooperation with them is based on standard data protection clauses of the
European Commission. Data processing in the context of visiting an
Instagram (by Meta) fan page is carried out on the basis of an agreement between
jointly responsible parties in accordance with Art. 26 GDPR. Further information
(information on Insights data) can be found here.
YouTube is a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin
4, Ireland (‘Google’). The information automatically collected by Google about your
use of our online presence on YouTube is generally transmitted to a server of
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there.
and stored there. For the USA, there is no adequacy decision by the
European Commission. Our cooperation with them is based on
standard data protection clauses of the European Commission.
LinkedIn is an offer of LinkedIn Ireland Unlimited Company, Wilton Place,
Dublin 2, Ireland (‘LinkedIn’). The information automatically collected by LinkedIn about your
about your use of our online presence on LinkedIn is generally transmitted to a server
server of the LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA
and stored there. For the USA, there is no adequacy decision by the
European Commission. Our cooperation with them is based on
standard data protection clauses of the European Commission.
10 Contact options and your rights
10.1 Your rights
As a data subject, you have the following rights
in accordance with Art. 15 GDPR, the right to request information to the extent specified therein
about your personal data processed by us;
pursuant to Art. 16 GDPR, the right to obtain without undue delay the rectification of inaccurate or
completion of your personal data stored by us without undue delay
to request the rectification of inaccurate data;
in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us
personal data stored by us, unless further processing is necessary
to exercise the right to freedom of expression and information
for the fulfilment of a legal obligation;
for reasons of public interest or
for the establishment, exercise or defence of legal claims
is necessary;
in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your
personal data, insofar as
the accuracy of the data is disputed by you
the processing is unlawful, but you oppose the erasure of the data
we no longer need the data, but you need it for the establishment, exercise or defence of legal claims,
exercise or defence of legal claims or
you have objected to the processing pursuant to Art. 21 GDPR
have objected to the processing;
in accordance with Art. 20 GDPR, the right to receive your personal data that you have
data that you have provided to us in a structured, commonly used and machine-readable
machine-readable format or to request the transfer to another controller
to request the transfer to another controller;
in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority.
As a rule, you can contact the supervisory authority of your usual place of residence or
your usual place of residence or workplace or our company headquarters.
Right to object
Insofar as we process personal data in order to safeguard our legitimate interests
legitimate interests as explained above, you can object to this processing with
above, you can object to this processing with effect for the future.
object to this processing. If the processing is carried out for direct marketing purposes, you can
exercise this right at any time as described above. If the processing is carried out for
purposes, you only have the right to object if there are grounds relating to your
reasons arising from your particular situation.
After you have exercised your right to object, we will no longer process your personal data
will no longer process your personal data for these purposes unless we can demonstrate compelling
legitimate grounds for the processing which override your interests, rights and freedoms, or
and freedoms, or if the processing serves the establishment, exercise or defence of legal claims,
exercise or defence of legal claims.
This does not apply if the processing is for direct marketing purposes. Then
we will no longer process your personal data for this purpose.
10.2 Contact options
For questions about the collection, processing or use of your personal data,
for information, correction, restriction or deletion of data as well as revocation of
revocation of consents granted or objection to a specific use of data
please contact us directly using the contact details in our legal notice.