Germany
Privacy Policy | or24.de
Unless otherwise stated below, the provision of your personal data is neither required by law or by contract, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is given regarding the processing operations described below. "Personal data" means any information relating to an identified or identifiable natural person.
Controller
The controller responsible for data processing is: Original Räder 24 GmbH, Albert-Schweitzer-Straße 18, 18442 Wendorf Germany, 03831 6677110, [email protected]
Server Log Files
You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or to our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer. The server log files are deleted as soon as they are no longer required for these purposes.
Hosting and Email Dispatch
Hosting
Our online shop is operated by maxcluster GmbH (Lise-Meitner-Str. 1b, 33104 Paderborn, Germany; "maxcluster"). maxcluster processes the data collected via our online shop, including the server log files, on our behalf on the basis of a data processing agreement. The processing is based on Art. 6(1)(b) GDPR insofar as it serves the performance of a contract, and otherwise on Art. 6(1)(f) GDPR from our overriding legitimate interest in the secure and reliable operation of our online shop.
Email services
For our email communication (e.g. order confirmations and replies to your enquiries), we use Microsoft 365 provided by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; "Microsoft") as part of a data processing arrangement. Your data may be transmitted to Microsoft Corporation in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has thus committed to comply with European data protection principles. The processing is based on Art. 6(1)(b) GDPR insofar as the communication concerns the initiation or performance of a contract, and otherwise on Art. 6(1)(f) GDPR from our overriding legitimate interest in reliable email communication.
Contact
Proactive customer contact via email
If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to process and respond to your contact request. If the contact serves to carry out pre-contractual measures (e.g. advice in the case of purchase interest, preparation of quotations) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. We use your email address only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use. The same applies if you contact us by telephone.
WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you are located outside the European Economic Area, this service is provided by WhatsApp LLC (1601 Willow Road, Menlo Park, CA 94025, USA). The data processing serves to process and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, and other data to the extent provided by you. We use a mobile device for the service, in whose address book only data of users who have contacted us via WhatsApp is stored. Personal data is therefore not passed on to WhatsApp unless you have already consented to this vis-à-vis WhatsApp. Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thus committed to comply with European data protection principles. If the contact serves to carry out pre-contractual measures (e.g. advice in the case of purchase interest, preparation of quotations) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in providing quick and easy contact and in responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. We use your personal data only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Orders
Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary for the fulfilment and processing of your order and for handling your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data is disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the statutory requirements. The scope of data transmission is limited to a minimum.
Customer account
You can create a customer account with us. In doing so, we store the data you provide during registration (in particular your name, address, email address and your password in encrypted form) as well as your orders. The customer account allows you to place orders without re-entering your data and to view your previous orders. The processing is based on Art. 6(1)(b) GDPR. You can request the deletion of your customer account at any time by notifying us. Data that we are required to retain under commercial and tax law will be blocked until the relevant periods have expired and will then be deleted.
Reviews & Advertising
Trustami Customer Reviews
The Trustami trust seal is integrated on this website to display collected reviews and social media feedback. This serves to implement our legitimate interests in the optimal marketing of our offer on our own website pursuant to Art. 6(1) sentence 1 point (f) GDPR. When the Trustami trust seal is accessed, the web server automatically stores data (access data) in the form of a server log file, which contains the name of the web page accessed, the file, the date and time of access, your IP address in shortened form, the amount of data transferred, the message about a successful retrieval, the browser type, the user's operating system, the referrer URL (the previously visited page) and the requesting provider. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the page. The Trustami trust seal and the services promoted with it are offered by Trustami GmbH, Friedrich-Wilhelm-Str. 68, 12103 Berlin, Germany. The privacy policy of Trustami applies to the processing of data collected by Trustami at www.trustami.com/datenschutz.
Newsletter
If you subscribe to our newsletter (e.g. via the subscription form on our website or during the ordering process), we use your email address and, if you provide them, your first name and your preferred vehicle brand to send you regular information about our products, promotions and vouchers. In addition, we store the language in which you subscribed and the route of your subscription (e.g. subscription form or ordering process). To prove your consent, we record the date and time of subscription and confirmation, the version of the consent text and the type of device and browser used (e.g. "Smartphone, Chrome"). We do not store your IP address in the process.
We use the so-called double opt-in procedure: after subscribing, you will receive an email with a confirmation link. Your subscription is only complete once you have clicked this link. If you do not confirm the subscription, we will send you one reminder at most. We delete unconfirmed subscriptions after 30 days at the latest, and immediately if your email address cannot be delivered to. The confirmation email does not contain any measurement of opens. After confirmation, you will receive a welcome email, which may include a voucher code.
Measurement of opens and clicks: our newsletters contain a so-called tracking pixel (an invisible image file) that is loaded from our server when the email is opened. The links contained in the newsletter first lead via our server before you are forwarded to the target page. In this way, we learn whether and when you opened a newsletter and which links you clicked. We store this information assigned to your recipient record and summarise it into a rating of your activity (active, medium, inactive, no longer active). This serves to adapt content and sending frequency to your interests and to stop writing to recipients who permanently no longer read the newsletter. If you do not want this measurement, you can unsubscribe from the newsletter at any time. In many email programs, you can also switch off the automatic loading of images.
Dispatch service provider: for dispatch, we use Amazon Simple Email Service (Amazon SES) provided by Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855 Luxembourg; "AWS") as part of a data processing arrangement. The emails are sent via data centres in the Stockholm region (Sweden). AWS informs us whether an email was delivered, could not be delivered or was reported as spam. We store these events assigned to your recipient record in order to take unreachable addresses and complaints into account. Access by the parent company Amazon Web Services, Inc. in the USA cannot be ruled out. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Amazon Web Services, Inc. has certified itself under the TADPF and has thus committed to comply with European data protection principles. Further information can be found in the AWS privacy policy at https://aws.amazon.com/de/privacy/.
The processing for sending the newsletter and for measuring opens and clicks is carried out with your consent on the basis of Art. 6(1)(a) GDPR, and the loading of the tracking pixel additionally on the basis of Section 25(1) sentence 1 TDDDG (German Telecommunications Digital Services Data Protection Act). The recording of subscription and confirmation is based on Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent). You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. We retain the proof of your consent and its withdrawal insofar as this is necessary to meet our obligations to provide evidence.
Reminder about your shopping basket
If you add items to your shopping basket but do not complete the order, we offer you a voucher in a notification window. If you enter your email address for this purpose and consent to receiving it, we will send you the voucher as well as up to six reminder emails about your shopping basket within up to 25 days. For this purpose, we store your email address, the contents and value of your shopping basket, the language and the date and time of entry. The reminders end as soon as you place an order or unsubscribe.
To compare different variants of our offer (e.g. voucher, timing and texts), we randomly divide visitors into groups and evaluate which variant more often leads to an order. We measure opens and clicks in the reminder emails as described for the newsletter (tracking pixel and forwarding links). For dispatch, we use Amazon SES (see "Newsletter").
To recognise your shopping basket when you visit again and to show you the same variant of our offer, we store a random identifier in a cookie named "or24_wka_vid" in your browser (lifetime 180 days). This cookie is set regardless of your selection in the cookie banner. It is used on the basis of Section 25(2) no. 2 TDDDG.
The processing for the reminder emails and their measurement is carried out with your consent on the basis of Art. 6(1)(a) GDPR. The division into groups and the evaluation are based on Art. 6(1)(f) GDPR from our overriding legitimate interest in improving our offer. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal, via the unsubscribe link in each reminder email or by notifying us. We delete your data as soon as it is no longer required for the stated purposes, unless statutory retention obligations apply.
Use of the email address for sending direct advertising
We use your email address, which we have received in connection with the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the legal notice. You can also use the link provided for this purpose in the advertising email. This does not incur any costs other than the transmission costs according to the basic tariffs.
Use of the email address for availability notifications
We offer an availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address for the respective item and being informed by us by email when it becomes available, provided you have consented to this. When the goods become available, you will receive a one-time notification by email about the availability of the respective item. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the distribution list.
Inventory Management
Use of an external inventory management system
We use an inventory management system as part of a data processing arrangement for the handling of contracts. For this purpose, your personal data collected in connection with the order is transmitted to PlentyONE GmbH, Johanna-Waescher-Straße 7, 34131 Kassel, Germany. The processing of your personal data serves the purpose of performing the contract concluded with you and is based on Art. 6(1)(b) GDPR.
Payment Service Providers & Credit Information
Use of Mollie
We use the payment service provider Mollie of Mollie B.V. (Keizersgracht 126, 1015 CW Amsterdam, Netherlands; "Mollie") on our website. The data processing serves the purpose of being able to offer you various payment methods. If you select a payment method that is processed via Mollie during the ordering process, the data required for payment processing (e.g. name, address, email address, order number, invoice amount and currency) is transmitted to Mollie in order to be able to perform the contract with you using the selected payment method. You enter payment data such as card numbers directly with Mollie or the respective payment provider; we do not receive them. To carry out the payment, the data may be passed on by Mollie to the provider of the selected payment method. Insofar as Mollie fulfils statutory obligations (e.g. checks to prevent money laundering and fraud), Mollie processes the data under its own responsibility. This processing is based on Art. 6(1)(b) GDPR. Further information on data processing by Mollie can be found in the associated privacy policy at https://www.mollie.com/de/privacy.
Use of Klarna
If you select a Klarna payment method, the data required for payment processing and for identity and credit checks (e.g. name, address, email address, telephone number, order contents and invoice amount) is transmitted to Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna"), where applicable via the payment service provider through which the payment method is processed. Klarna may obtain a credit report based on mathematical-statistical methods using credit agencies and decides under its own responsibility which payment methods are offered to you. The data is transmitted on the basis of Art. 6(1)(b) GDPR in order to be able to perform the contract with you using the selected payment method. The credit check by Klarna is based on Art. 6(1)(f) GDPR from Klarna's legitimate interest in protection against payment default. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract using the payment method you have requested. Failure to provide it means that the contract cannot be concluded using the payment method you have selected. Further information can be found in the Klarna privacy policy at https://www.klarna.com/de/datenschutz/.
Use of PayPal Express
We use the PayPal Express payment service of PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We use the PayPal Check-Out payment service of PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
Cookies that enable your browser to be recognised may be stored in the process. The data processing that takes place as a result is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain, where necessary, a credit report based on mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on establishing, performing or terminating the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical methods and in the calculation of which address data, among other things, is included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit checking for the initiation of a contract. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in protection against payment default when PayPal advances payment. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using the payment method you have requested. Failure to provide it means that the contract cannot be concluded using the payment method you have selected.
Third-party providers
When paying via the payment method of a third-party provider, the data required for payment processing is transmitted to the payment service provider through which the payment method is processed (PayPal or Mollie). This processing is based on Art. 6(1)(b) GDPR. To carry out this payment method, the data may then be passed on by the payment service provider to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers may include, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Purchase on invoice via PayPal
When paying via the payment method purchase on invoice, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin, Germany; "Ratepay") in order to be able to perform the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Where applicable, Ratepay carries out a credit check based on mathematical-statistical methods (probability or score values) using credit agencies, following the procedure already described above. The data processing serves the purpose of credit checking for the initiation of a contract. The processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in protection against payment default when Ratepay advances payment. Further information on data protection and on which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Amazon Pay
We use the Amazon Pay payment service of Amazon Payments Europe S.C.A. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Pay") on our website. The data processing serves the purpose of being able to offer you payment via the Amazon Pay payment service. To integrate this payment service, it is necessary for Amazon Pay to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. When you select and use "Amazon Pay", the data required for payment processing is transmitted to Amazon Pay in order to be able to perform the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Further information on data processing when using the Amazon Pay payment service can be found in the associated privacy policy at: https://pay.amazon.com/de/help/201212490
Cookies
Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. If a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
You can find out how to manage (including disabling) cookies in the most important browsers at the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/edge/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated below in this privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
The use of cookies or comparable technologies is based on Section 25(2) no. 2 TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Consent management (cookie banner)
When you first visit our website, we ask you in a notification window which services and technologies you consent to. The notification window is operated by ourselves; no external provider is involved. We store your selection in a cookie named "CookieConsent" in your browser so that we do not have to ask you again on every page view. To prove your consent, we additionally record on our servers a random identifier, the time of your decision and the categories selected. We do not store your full IP address in the process. You can change or withdraw your selection at any time via the cookie settings on our website. The cookie is used on the basis of Section 25(2) no. 2 TDDDG. The recording is carried out to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. We retain the records for as long as we need to be able to prove consent.
Analytics & Advertising Tracking
Server-side transmission of measurement and advertising data
We integrate some of the services described in this section not only directly in your browser, but forward the data via an intermediary server (so-called server-side tracking, i.e. measurement via a server instead of directly from your browser). In this process, your browser first sends the data to an address under our own domain, which we operate via Cloudflare (see "Use of Cloudflare"). From there, the data is forwarded to a server container of Google Tag Manager (an intermediary server controlled by us), which we have operated by Stape Europe OÜ (Sepapaja tn 6, 15551 Tallinn, Estonia; "Stape") as part of a data processing arrangement, and only from there to the respective services (Google Analytics, Google Ads, Meta, TikTok and Microsoft Advertising). We also load the program libraries of Google via an address under our own domain (so-called Google Tag Gateway). The cookies set in the process are stored under our own domain (so-called first-party cookies, i.e. cookies of our own website). In this way, we can control which data is passed on to the individual services.
In the case of orders, we additionally transmit order information to Google Ads, Meta, TikTok and Microsoft Advertising (e.g. order value, items, order number and click identifiers of the advertising providers such as gclid, fbclid, ttclid and msclkid) as well as your email address in obscured form (so-called hash value). The services compare this hash value with the user data available to them in order to attribute an order to an advertisement clicked previously (at Google "enhanced conversions", at Meta "Conversions API", at TikTok "Events API"). A hash value cannot be converted back into the email address, but can be assigned to your user account by a service that already knows your email address. We also subsequently attribute orders to ad clicks in Google Ads (so-called import of offline conversions).
The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent to the respective service on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. A transmission of data by Stape to third countries, in particular to the USA, cannot be ruled out. In this case, it takes place on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data. Further information on data protection at Stape can be found at https://stape.io/eu-privacy-notice. The pings of the advanced consent mode are excluded (see "Use of Google Analytics 4").
In-house evaluation of visits and advertising sources
To understand which advertising channels customers use to find us and how many visits precede an order, we store on our own servers for each visit a random visitor identifier, the date and time, the landing page, the origin of the visit (e.g. search engine, advertisement or newsletter), markers in the address accessed (so-called UTM parameters, e.g. the name of an advertising campaign) and click identifiers of advertising providers (gclid, fbclid, ttclid and msclkid). We combine visits from the same browser and attribute them to a later order. We do not pass this data on to third parties, with the exception of the click identifier from Google and the associated order data, which we transmit to Google Ads for success measurement (see "Server-side transmission of measurement and advertising data"). The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. We delete the visit data as soon as it is no longer required for the evaluation. Origin information attributed to an order is retained together with the order.
Use of Google Analytics 4
We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator relating to website use and internet use. The following information, among others, may be collected: IP address, date and time of the page view, click path, information about the browser and the device you use, pages visited, referrer URL (the website via which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you. The data is transmitted to Google via our server container (see "Server-side transmission of measurement and advertising data").
Google uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. In this context, we also use the Google Signals service. Google Signals enables cross-device tracking. Your data can thus be analysed across devices if you have activated "personalised advertising" in your account settings and your devices are linked to your Google account. This makes it possible to recognise on which device you search for products and later return to complete purchases on another device, such as a tablet.
The cross-device reports created in this context contain aggregated data only. We therefore only receive statistics created on the basis of Google Signals. To prevent the collection and storage of data by Google Signals across devices, you can deactivate the "personalised ads" function in the settings of your Google account. Further information on this can be found at https://support.google.com/ads/answer/2662922?hl=de. Further information on data processing and data protection for Google Signals can be found at https://support.google.com/analytics/answer/7532985?hl=de.
We use the advanced implementation of the consent mode (Advanced Consent Mode). In this case, user data is transmitted to Google in the form of "pings" even if consent has not been given. These pings may contain the following information, among others: IP address for deriving the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent. These pings are transmitted on the basis of Art. 6(1)(f) GDPR from our legitimate interest in success measurement without cookies. You have the right to object to this processing at any time, on grounds relating to your particular situation.
The information generated in this way about your use of this website is generally transmitted to a Google server in the USA and stored there. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to comply with European data protection principles. Access to your data by US authorities cannot be ruled out. Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.
Use of shopware Analytics
We use the analysis tool "shopware Analytics" of shopware AG (Ebbinghoff 10, 48624 Schöppingen, Germany; "shopware") on our website. Shopware and we are joint controllers for the collection of your data that takes place when the service is used and for the transmission of this data to shopware. This is based on an agreement between us and shopware on the joint processing of personal data, in which the respective responsibilities are set out. Under this agreement, shopware is responsible for all obligations, with the exception of obtaining your consent to the use of cookies or comparable technologies and the fulfilment of these information obligations. This applies in particular to the exercise of data subject rights pursuant to Art. 15 - 21 GDPR. You can also assert your data subject rights against us; we will then forward your request to shopware accordingly. The data processing serves the purpose of analysing this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and made available in reports, analyses and statistics. The following information, among others, may be collected and processed: the customer group, pages visited, click paths, date and time of the visit, information about the device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and the time zone. Cookies or comparable technologies are used for this purpose. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on shopware Analytics can be found at https://docs.shopware.com/de/shopware-6-de/erweiterungen/shopware-analytics.
Use of Microsoft Clarity
We use the analysis tool "Microsoft Clarity" of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; "Microsoft") on our website. Microsoft is a company affiliated with Microsoft Corporation (One Microsoft Way, Redmond, Washington 98052, USA). The data processing serves the purpose of designing, optimising and analysing our website in line with requirements. The tool records the movements of website visitors on the website on a sample basis. This produces a log of mouse movements, scrolling behaviour, time spent and clicks on the website (so-called heatmap). Cookies or comparable technologies are used for this purpose. The following information, among others, may be collected: IP address, time of access, click path, information about the device you use (device type, screen size and resolution, unique device identifier, operating system), information about the browser you use (browser type and browser version), location data, preferred language for displaying the website, subpages visited, time spent, content viewed, website or file requested. User profiles are created from this data under a pseudonym. The data is not used to identify the website visitor personally and is not merged with personal data of the bearer of the pseudonym. Microsoft is contractually prohibited from selling the collected data to other third parties. Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Detailed information on the cookies used and their function can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list. Information on the storage period of the collected information can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention. Further information on data protection when using Microsoft Clarity can be found at https://learn.microsoft.com/en-us/clarity/faq#privacy, https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-data and https://clarity.microsoft.com/terms. General information on data protection at Microsoft can be found at https://privacy.microsoft.com/de-de/privacystatement.
Use of the Meta Pixel
We use the Meta Pixel of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland; "Meta") on our website. Meta and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are set out. The agreement can be accessed at https://de-de.facebook.com/legal/terms/businesstools. Under this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights pursuant to Art. 15 - 20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns Meta's obligations under the joint processing agreement.
The application serves the purpose of addressing website visitors in a targeted manner with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. Via this tag, a direct connection to the Meta servers is established when the website is visited. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalised, interest-based ads.
The application also serves the purpose of creating conversion statistics. In this way, we learn the total number of users who have clicked on one of our ads and were forwarded to a page provided with a conversion tracking tag, as well as which actions are taken after the forwarding to this website. In addition, we transmit data server-side via the Conversions API of Meta (see "Server-side transmission of measurement and advertising data").
Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thus committed to comply with European data protection principles.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on the collection and use of data by Meta, on your rights in this regard and on options for protecting your privacy can be found in Meta's privacy information at https://www.facebook.com/privacy/policy/.
Use of Google Ads Conversion Tracking
We use the online advertising programme "Google Ads" on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google). If you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the advertisement and were forwarded to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers. The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. In this way, we learn the total number of users who have clicked on one of our advertisements and were forwarded to a page provided with a conversion tracking tag. In addition, we use enhanced conversions and the import of offline conversions (see "Server-side transmission of measurement and advertising data"). We use the advanced implementation of the consent mode (Advanced Consent Mode). In this case, user data is transmitted to Google in the form of "pings" even if consent has not been given. These pings may contain the following information, among others: IP address for deriving the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent. Your data may be transmitted to the servers of Google LLC in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to comply with European data protection principles. These pings are transmitted on the basis of Art. 6(1)(f) GDPR from our legitimate interest in success measurement without cookies. You have the right to object to this processing at any time, on grounds relating to your particular situation.
The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information and the privacy policy of Google can be found at: https://www.google.de/policies/privacy/
Use of Google Remarketing
We use the remarketing function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The application serves the purpose of analysing visitor behaviour and visitor interests. To carry out the analysis of website use, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies record visits to the website as well as pseudonymous data on the use of the website. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account the product and information areas you previously accessed. Your data may be transmitted to servers of Google LLC in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/
Use of Microsoft Advertising
We use Microsoft Advertising of Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft") on our website. The data processing serves marketing and advertising purposes and the purpose of measuring the success of advertising measures (conversion tracking). We learn the total number of users who have clicked on one of our advertisements and were forwarded to a page provided with a conversion tracking tag. Microsoft Advertising uses technologies such as cookies and tracking pixels, which enable an analysis of your use of the website. When you click on an advertisement placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognise that you clicked on the advertisement and were forwarded to this page. The following information, among others, may be collected: IP address, identifiers assigned by Microsoft, information about the browser you use and the device you use, referrer URL (the website via which you accessed our website), URL of our website. In addition, we transmit data server-side to Microsoft Advertising (see "Server-side transmission of measurement and advertising data").
Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on data protection and the cookies used at Microsoft can be found in the Microsoft privacy statement.
Use of the LinkedIn Insight Tag
We use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland; "LinkedIn") on our website for conversion tracking (visit action evaluation) and for retargeting (display of personalised advertisements). The LinkedIn Insight Tag places a unique LinkedIn browser cookie (conversion cookie) in your browser and enables the collection of the following data for this cookie: metadata such as IP address, timestamp and page events (e.g. page views). These cookies have a limited validity. If you visit certain pages of our website and the cookie has not yet expired, LinkedIn and we can recognise that you clicked on the advertisement and were forwarded to this page. The LinkedIn Insight Tag also enables LinkedIn to collect data on visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. This data is transmitted to LinkedIn in encrypted form, the IP addresses are shortened and the direct IDs of LinkedIn members are removed within seven days in order to pseudonymise the data. This remaining pseudonymised data is then deleted by LinkedIn within 90 days.
LinkedIn does not share any personal data with us, but only provides aggregated reports on the website audience and advertisement performance. LinkedIn members can determine the use of their personal data for advertising purposes in their account settings. The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. In this way, we learn the total number of users who have clicked on one of our advertisements and were forwarded to a page provided with a conversion tracking tag.
Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedIn has certified itself under the TADPF and has thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on cookies and the privacy policy of LinkedIn can be found at: https://www.linkedin.com/legal/cookie-policy and https://www.linkedin.com/legal/privacy-policy.
Use of the Pinterest Tag
We use the Pinterest Tag of Pinterest Europe Limited (2nd Floor, Palmerston House, Fenian Street, Dublin 2, D02 WD37, Ireland; "Pinterest") on our website. The application serves the purpose of addressing website visitors in a targeted manner with interest-based advertising on the social network Pinterest. For this purpose, the Pinterest conversion tag has been implemented on the website. Via this tag, a direct connection to the Pinterest servers is established when the website is visited. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, you will then be shown personalised, interest-based Pinterest ads. If you reach our website via a Pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognise that you clicked on the Pin and were forwarded to this page. The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics and thus of optimising our website. The following information, among others, may be processed in this context: total number of users who have clicked on one of our Pins and were forwarded to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, the contents of your shopping basket, completed transactions. Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest has certified itself under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on the collection and use of data by Pinterest, on your rights in this regard and on options for protecting your privacy can be found in Pinterest's privacy information at https://policy.pinterest.com/de/privacy-policy.
Use of the TikTok Pixel
We use the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website. Both companies are joint controllers for the data processing (hereinafter "TikTok"). The data processing serves the purpose of identifying and analysing website visits by our customers, as well as of better addressing customers by placing targeted advertisements and evaluating the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels, which enable your browser to be recognised. The following information, among others, may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution, IP address. TikTok may assign this information to your personal TikTok user account. Usage profiles may be created from the data collected in this way using pseudonyms. In addition, we transmit data server-side via the Events API of TikTok (see "Server-side transmission of measurement and advertising data"). Your data may be transmitted to third countries, such as the USA. Access by employees of the TikTok group of companies from further third countries, including China, is possible. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. The data transmission to the USA and to third countries without an adequacy decision takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.
Artificial Intelligence
Rim preview with artificial intelligence
On our website, you can upload a photo of your vehicle and have a preview displayed of how the selected rims look on your vehicle. The preview is generated using artificial intelligence. For this purpose, we transmit your photo together with the selected rim via the "Gemini API" interface to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Please only upload photos in which no persons can be recognised, and make licence plates unrecognisable before uploading. According to its own statements, Google does not use the transmitted photos and the generated images to improve its products and stores them for a limited period exclusively for the detection and prevention of abuse. Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to comply with European data protection principles. We do not store your photo or the generated preview. The use of the rim preview is voluntary. The processing is based on Art. 6(1)(b) GDPR in order to be able to provide you with the preview you have requested. Further information on data processing by Google can be found at https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy?hl=de.
Plug-ins and Other Services
Use of Google Tag Manager
We use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application is used to manage JavaScript tags and HTML tags that are used in particular to implement tracking and analysis tools. The data processing serves the purpose of designing and optimising our website in line with requirements. Google Tag Manager in your browser does not set any cookies itself. However, it enables the triggering of further tags that may collect and process personal data. For the server-side part, see "Server-side transmission of measurement and advertising data". Tags that use cookies or comparable technologies or process personal data are only triggered with your consent to the respective service on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR, with the exception of the pings described under "Use of Google Analytics 4". Further information on terms of use and data protection can be found in the Google Tag Manager use policy.
Use of Cloudflare
We use the content delivery network Cloudflare CDN of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare") on our website. This is a supra-regional network of servers in various data centres to which our web server connects and via which certain content of our website is delivered. The data processing serves the purpose of optimising the loading times of our website, protecting our website against attacks and overload and thereby making our offer more user-friendly and secure. In addition, we use Cloudflare to forward measurement and advertising data to our server container (see "Server-side transmission of measurement and advertising data"). Which data is forwarded in the process depends on your selection in the cookie banner. Without consent, only the pings described under "Use of Google Analytics 4" are transmitted without cookies. The following information, among others, may be collected in the process: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and has thus committed to comply with European data protection principles. The processing of your personal data is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.
Protection against abuse (Cloudflare Turnstile)
To protect our forms (e.g. the newsletter subscription) against automated spam entries, we use Cloudflare Turnstile of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA; "Cloudflare"). In the process, technical characteristics of your browser and your IP address are transmitted to Cloudflare in order to determine whether the entry comes from a human. No cookies are set. The reading of the browser characteristics takes place on the basis of Section 25(2) no. 2 TDDDG, as it is strictly necessary for the protection of the form you are using. The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interest in preventing abuse). You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. Cloudflare additionally uses the data under its own responsibility to improve its detection of automated access. Cloudflare has certified itself under the TADPF and has thus committed to comply with European data protection principles. Further information can be found in Cloudflare's Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/.
Use of YouTube
We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about the visitors to the website. Only when you watch a video is information about this transmitted to YouTube and stored there. Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further information on the collection and use of data by YouTube and Google, on your rights in this regard and on options for protecting your privacy can be found in YouTube's privacy information at https://www.youtube.com/t/privacy.
Integration of the Händlerbund member logo
The Händlerbund member logo (Händlerbund Management AG, Torgauer Str. 233, 04347 Leipzig, Germany) is integrated on our website. When you access our website, the browser used on your device automatically sends information to the server of Händlerbund Management AG. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until automated deletion:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the file retrieved,
- website from which access is made (referrer URL),
- browser used and, where applicable, the operating system of your computer as well as the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered. For this, the IP address must remain stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for the data processing is Art. 6(1) sentence 1 point (f) GDPR.
Data Subject Rights and Storage Period
Storage period
After the contract has been fully processed, the data is stored first for the duration of the warranty period, then in compliance with statutory retention periods, in particular under tax and commercial law, and is then deleted after expiry of the period, unless you have consented to further processing and use.
For the other processing operations described in this privacy policy, the following applies: we store personal data only for as long as is necessary for the respective purpose or statutory retention periods exist. Where a specific storage period is stated for individual processing operations, this period applies.
Rights of the data subject
Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing and data portability.
In addition, under Art. 21(1) GDPR you have the right to object to processing that is based on Art. 6(1)(f) GDPR, as well as to processing for the purpose of direct marketing.
Pursuant to Art. 7(3) GDPR, you can withdraw any consent you have given at any time with effect for the future, without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
Automated decisions
We do not make any decisions based solely on automated processing pursuant to Art. 22 GDPR. In the case of payment methods with a credit check, PayPal, Ratepay or Klarna decide under their own responsibility, on the basis of score values, which payment methods are offered.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful. The authority responsible for us is: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern (the State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Western Pomerania), Schloss Schwerin, Lennéstraße 1, 19053 Schwerin, Germany, https://www.datenschutz-mv.de.
Right to object
Where the personal data processing operations listed here are based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to these processing operations at any time with effect for the future, on grounds relating to your particular situation. Following an objection, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Objection to direct marketing
If personal data is processed for the purpose of direct marketing, you can object to this processing at any time by notifying us. Following an objection, we will stop processing the data concerned for the purpose of direct marketing.
Last updated: October 2026
