The protection and security of your personal data is important to us

Privacy policy

Personal data (subsequently referred to as "data") is processed by us only if necessary and for the purpose of providing a functional and user-friendly website, including all content and services offered.

In accordance with Art. 4 no. 1. of European Union (EU) Regulation 2016/679, i.e. the General Data Protection Regulation (subsequently referred to only as "GDPR"), "processing" means any operation or set of operations performed upon personal data, whether or not by automated means, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The following privacy policy informs you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide alone or jointly with others on the purposes and means of processing. In addition, we inform you below about third-party components used by us for optimization purposes as well as for increasing the quality of use, insofar as third parties process data through this, again under their own responsibility.

Our privacy policy declaration is structured as follows:

I. Information about us as responsible party

II. Rights of users and data subjects

III. Information on data processing

I. Information about us as the responsible party

The responsible provider of this website in the sense of privacy policy legislation is:
ORION Light Manufactory
Molecz & Son Ges.m.b.H
Oberlaaer Strasse 284
A-1232 Vienna, Austria
Phone: +43 (0)1 616 80 91
Fax: +43 (0)1 616 71 40
E-Mail: datenschutz@orionleuchten.at
Web: www.orionleuchten.at
We have not appointed a data protection officer, as we are not legally required to do so.

II. Rights of users and data subjects

With regard to data processing described in more detail below, users and data subjects have the right to

to receive confirmation as to whether data relating to them is being processed, to information about the processed data, to further information about data processing and to copies of the data in question (cf. also Art. 15 GDPR);
To correction or completion of incorrect or incomplete data (cf. also Art. 16 GDPR);
To immediate deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, insofar as further processing is necessary pursuant to Art. 17 (3) GDPR to the restriction of processing in accordance with Art. 18 GDPR;
To receive data concerning them and provided by them and to transfer these data to other providers/controllers (cf. also Art. 20 GDPR);
To file a complaint to the Austrian Data Protection Authority (data-protection-authority.gv.at) if they believe that data concerning them is being processed by the provider in violation of data protection regulations (cf. also Art. 77 GDPR).

In addition, the Provider is obliged to inform all recipients to whom data has been disclosed about any data correction or deletion or restriction of processing based on Articles 16, 17 (1), 18 GDPR. However, this obligation does not exist insofar as this notification is impossible or involves a disproportionate effort. Notwithstanding the above, the user has a right to information about these recipients.

Likewise according to Art. 21 GDPR, users and data subjects have the right to object to future processing of personal data, provided that data is processed by the provider in accordance with Art. 6 (1) (f) GDPR (protection of legitimate interests). In particular, objection to data processing for the purpose of direct advertising is permissible.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of data does not conflict with any legal retention obligations and no other information is provided below on individual processing procedures.

Server data (web server)

For technical reasons, in particular to ensure a secure and stable internet presence, data is transmitted by your internet browser to us or to our web services provider. These so-called server log files include type and version of your internet browser, its operating system, the website from which you accessed our website (referrer URL), the page(s) of our website that you visit, date and time of the respective access as well as the IP address of the internet connection from which our website is accessed.

The data collected is stored temporarily, but not together with other data about you.

This storage is legally based of Art. 6 (1 f) GDPR. Our legitimate interests are the improvement, stability, functionality and security of our website.

This data is deleted again at the latest after seven days, unless further storage is required for evidence purposes. In that event, relevant data is exempt from deletion in whole or part until final clarification of an incident.

Cookies

a) Session cookies

We use so-called cookies in our online presence. Cookies are small text files or other storage technologies that are placed and stored on your device by your internet browser. These cookies, allow for individualized processing of certain information from you, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective and secure, as processing enables, for example, the reproduction of our website in different languages or a shopping cart function.

Legal basis for processing is Art. 6 (1 b) GDPR, insofar data generated by these cookies is processed for contract initiation or execution.

If processing does not serve the purpose of initiating or executing a contract, our legitimate interests lie in improving our website’s functionality. In this case, the legal basis is Art. 6 (1 f) GDPR.

When you close your internet browser, these session cookies are deleted.

In addition to cookies, we use so-called pixels (also called tracking pixels or web beacons) and similar technologies such as plug-ins on our website.

These are integrated into the website and used to evaluate information regarding use of our website by users.

b) Third-party cookies

Where applicable, cookies from partner companies with which we cooperate for the purposes of advertising, analysis or functionalities are also applied by our website.

All details in reference of this, in particular purposes of and legal basis for processing such third-party cookies, can be found in the following information.

c) Removal option

You can prevent or restrict the installation of cookies by setting your internet browser. Likewise, you can delete already stored cookies at any time. Necessary steps and measures for this depend on your specific internet browser. If you have any questions, please use the help function or your internet browser history or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented via browser settings. Instead, you must change the settings of your Flash player. Necessary steps and measures required for this depend on the specific Flash player. If you have any questions, please use the help function or Flash player cache or contact the manufacturer or user support.

However, if you prevent or restrict cookie installation, this may mean that not all functions of our website can be fully used.

Contract processing in our online shop

Data transmitted by you for the purpose of using our range of goods and/or services will be processed by us for the purposes of answering your inquiries, for contract processing (e.g. processing your order in our online store) as well as for statistical evaluations and are necessary to this extent. Conclusion and processing of contracts is not possible without the provision of your data.

We store the data you provide for the duration of the contract and fulfilment of any warranty claims and claims for damages, and beyond, to the extent that legal retention periods exist.

Legal basis for processing is Art. 6 (1 b) GDPR (contract processing) as well as Art. 6, 1 f) GDPR (safeguarding our legitimate interests in statistical evaluations of orders to optimize our range of services).

In the context of contract processing, we pass on your data to the shipping agent commissioned with the delivery of goods or to the financial service provider, insofar as data transfer is necessary for the delivery of goods or for payment purposes.

Legal basis for this data transfer is Art. 6 (1 b) GDPR.

Customer account / registration function

If you create a customer account with us on our website, we collect and store the data you enter during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for contract fulfilment or for purposes of customer care (e.g. to provide you with an overview of your previous orders or to offer you the so-called memo function). Simultaneously, we store IP address and date and time of your registration. Of course, this data will not be passed on to third parties.

In the course of the further registration process, your consent to this processing will be obtained and reference will be made to this data privacy declaration. Data collected by us in this process will be used for provision of your customer account and for statistical purposes.

Insofar as you consent, Art. 6 (1 a) GDPR is the legal basis for this processing.

If opening a customer account serves as pre-contractual measure or for contract fulfilment, legal basis for this processing is Art. 6 (1 b) GDPR.

Insofar as opening a customer account also serves statistical purposes, legal basis for this processing is Art. 6 (1 f) GDPR (safeguarding our legitimate interests in statistical evaluations of orders to optimize our range of services).

In accordance with Art. 7 (3) GDPR, you can withdraw consent given to us for opening and maintenance of your customer account any time with effect for the future. You only need to inform us of your withdrawal. You have the option any time to request deletion of your registration for a customer account at datenschutz@orion.co.at without giving reasons.

Data collected by us in your customer account will be deleted as soon as and insofar as processing is no longer necessary. Yet we are obliged to observe retention periods under tax and commercial law.

If you register for our free newsletter, the data requested from you for this purpose, i.e. your e-mail address and - optionally - your name and address, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent/consent in accordance with § 107 öTKG to the sending of the newsletter (double opt-in), describe the content in detail and refer you to this privacy policy. We use the data collected in this process exclusively for sending the newsletter - in particular, it is therefore not passed on to third parties (with the exception of our newsletter provider Brevo).
The legal basis for this is Art. 6 para. 1 lit. a) GDPR.
You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation (datenschutz@orion.co.at) or click on the unsubscribe link contained in every newsletter. We will then immediately delete your data in connection with the newsletter dispatch.

BREVO - Newsletter

We offer you the opportunity to subscribe to our free newsletter via our website.
We use Brevo, a service provided by Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, to send newsletters.
Sendinblue GmbH also offers further data protection information at https://www.brevo.com/de/dsgvo/ and https://www.brevo.com/de/datenschutz-uebersicht/
for further data protection information.
If you register to receive our newsletter, the data requested during the registration process, such as your email address and, optionally, your name and address, will be processed by Sendinblue GmbH. In addition, your IP address and the date and time of your registration will be stored. As part of the further registration process, your consent to the sending of the newsletter is obtained (double opt-in), the content is described in detail and reference is made to this privacy policy.
The newsletter subsequently sent via Sendinblue GmbH also contains a so-called tracking pixel, also known as a "web beacon". With the help of this tracking pixel, we can analyse whether and when you have read our newsletter and whether you have followed any links contained in the newsletter. In addition to other technical data, such as the data of your IT system and your IP address, the processed data is stored so that we can optimise our newsletter offer and respond to the wishes of our readers. The data is therefore processed to improve the quality and attractiveness of our newsletter offering.

The legal basis for sending the newsletter and analysing the opening and click rates is Art. 6 para. 1 lit. a.) GDPR.
You can revoke your consent to the sending of the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation or click on the unsubscribe link contained in every newsletter.

The appendix on data processing by Brevo with the EU Standard Contract Clauses (SCCs) is part of the Brevo standard terms of use, which constitute the contract with the controller. By using Brevo or registering for a Brevo account, we as the controller have agreed to these terms and conditions.
Contact requests / contact option

If you contact us via contact form or e-mail, the data you provide will be used to process your request and for statistical purposes. This data provision is necessary for processing and answering your request - without them, we cannot answer your request or at best limited.

Legal basis for processing is Art. 6 (1 b) GDPR.

Insofar as evaluating your inquiries also serves statistical purposes, then legal basis for processing is Art. 6 (1 f) GDPR (safeguarding our legitimate interests in statistical evaluations of orders to optimize our range of services).

Your data will be reviewed after three years and, if necessary, deleted, provided that your inquiry has been answered conclusively and deletion does not conflict with legal retention obligations, such as, for example, in the case of subsequent contract processing.

Online job applications / publication of job advertisements

We offer you the opportunity to apply to us via our website. In the case of digital job applications, your application data will be collected and processed electronically by us for the purpose of handling the application process. This includes title, first name, last name, your e-mail address and telephone number as well as your cover letter and submitted resume.

If an employment contract is concluded after application process, we will store the data you submitted during application in your personnel file for purposes of regular organizational and administrative processes and fulfilment of the employment contract (Art. 6, 1 b GDPR) – naturally in compliance with all legal obligations.

Your data will generally be retained for six months from the date of completing an unsuccessful application process. It is possible to retain this data for up to 18 months if you have consented to this longer retention period. If your job application is successful, we will retain your data collected in connection with the application process in for as long as legal retention obligations or legal claims have not yet become time-barred.

If you expressly consent to longer storage of your data, e.g. for your inclusion in our applicant database or of interested parties, this data will be further processed based on your consent. Legal basis then is Art. 6 1a GDPR. However, you can withdraw your consent any time in accordance with Art. 7 (3) GDPR by informing us with effect to the future.

Sweepstakes

Our website occasionally offers you the opportunity to participate in sweepstakes. If you participate in one of our sweepstakes, the data you entered participating will be processed without your further consent, but exclusively for implementing and processing the respective sweepstakes.

As part of sweepstake processing, we pass your data on to the shipping agent commissioned with the delivery of the goods or to a financial service provider, insofar as transfer is necessary for delivery or payment of your prize. If your data is published in event of winning, you will be informed as part of the declaration of consent.

Legal basis for forwarding this data is Art. 6, 1 b GDPR.

In accordance with Art. 7 (3) GDPR, you can withdraw your consent to data processing for participating in our sweepstakes any time with effect to the future. To do so, you only need to inform us of your withdrawal.

We maintain an online presence on Pinterest to present our company and services and to communicate with customers/prospects. Pinterest is a service of Pinterest Inc, 651 Brannan Street, San Francisco, CA, 94107, USA.

In this context, we would like to point out that there is the possibility of user data being processed outside of the European Union, in particular in the USA. This may pose increased risks to users in that, for example, it may be more difficult to access user data at a later date. We also do not have access to this user data as access lies exclusively with Pinterest.

Pinterest’s data privacy policy can be found at
https://policy.pinterest.com/de/privacy-policy

YouTube

We maintain an online presence on YouTube to present our company and services and to communicate with customers/interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

YouTube's data privacy policy can be found at
https://policies.google.com/privacy

Facebook

To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Facebook platform.

On this social media platform, we are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

Facebook's data protection officer can be reached via contact form:
https://www.facebook.com/help/contact/540977946302970

We have regulated this joint responsibility in an agreement regarding respective obligations based on GDPR terms. This agreement, from which mutual obligations arise, can be accessed at this link:
https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data that thereby takes place and is reproduced below is Art. 6, 1f GDPR. Our legitimate interest is in the analysis, communication and sales and promotion of our products and services.

Legal basis may also be the user's consent pursuant to Art. 6, 1a GDPR vis-à-vis the platform operator. The user can withdraw this consent for the future any time by notifying the platform operator in accordance with Art. 7 (3) GDPR.

When accessing our online presence on the Facebook platform, user data (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as platform operator in the EU.

This user data is used for statistical information about use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, it is possible for Facebook Ireland Ltd., for example, to advertise to users within and outside of Facebook according to their interests. If the user is logged into his Facebook account at the time of access, Facebook Ireland Ltd. can link this data to the respective user account.

In the event that users contact us via Facebook, the user's personal data entered on this occasion will be used to process the request. The user's data will be deleted by us, provided the user's inquiry has been conclusively answered and there are no legal retention obligations to the contrary, such as in cases of subsequent contract processing.

In order to process the data, Facebook Ireland Ltd. may also set cookies.

If the user does not agree to this processing, it is possible to prevent cookie installation by setting the browser accordingly. Cookies that have already been stored can be deleted any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via browser settings, but by corresponding Flash player settings. If the user prevents or restricts cookie installation, this may mean that not all Facebook can be fully used.

More details about processing, their prevention and deletion of data processed by Facebook can be found in Facebook's data privacy policy:
https://www.facebook.com/privacy/explanation

It is not excluded that the processing by Facebook Ireland Ltd. is also carried out via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Linking social media via graphic or text link

We also advertise our presence on social media listed below on our website. Integration takes place via linked graphic of the respective social media. Using this linked graphic prevents a connection to the respective social media server from being automatically established when a website featuring social media advertisement is opened. Only by clicking on the corresponding graphic will the user be redirected to the service of the respective social media.

After the user has been forwarded, user information is collected by the respective social media. It cannot be ruled out that processing of data collected via this channel is carried out in the USA.

Initially this is data such as IP address, date, time and page visited. If the user is logged into his social media user account at this time, the operator may be able to assign collected data regarding the user’s specific visit to his/her personal account. If the user interacts via "share" button of the respective social media, this information can be stored in the user's personal account and may be published. If the user wants to prevent collected data from being directly assigned to his/her user account, he/she must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.

The following social networks are integrated into our site by linking:

Facebook

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.
Privacy policy: https://www.facebook.com/policy.php

Pinterest Inc, 651 Brannan Street, San Francisco, CA, 94107, USA.
Privacy policy: https://policy.pinterest.com/de/privacy-policy

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Privacy Policy: https://policies.google.com/privacy

"Facebook" social plug-in"

On our website, we use Facebook’s social media plug-in. Facebook is an internet service of Meta Platforms, Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is in turn operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, subsequently both referred to as "Facebook".

Legal basis is Art. 6, 1 f GDPR. Our legitimate interest lies in the quality improvement of our website.

Facebook provides further information about possible plug-ins and their respective functions at
https://developers.facebook.com/docs/plugins/

If the plug-in is stored on one of the pages of our website you visit, your internet browser downloads a representation of the plug-in from Facebook's servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, date and time of your visit on our website are also recorded.

If you are logged in to Facebook while visiting one of our web pages featuring a plug-in, data it collects regarding your specific visit will be recognized by Facebook. Facebook may assign data thus collected your personal user account. If, for example, you use the so-called "Like" Facebook button, this data will be stored in your Facebook user account and possibly published via its platform. If you wish to prevent this, you must either log out of Facebook before visiting our website or prevent the Facebook plug-in from loading by using an add-on for your internet browser.

Facebook provides further information on data collection and use as well as your rights and protection options in its privacy policy available at
https://www.facebook.com/policy.php

Google Analytics

We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsequently referred to as "Google".

Google Analytics service is used to analyze the usage of our website. Legal basis is Art. 6, 1 f GDPR. Our legitimate interests lie in the analysis, optimization and economic operation of our website.

Usage and user-related data, such as IP address, location, time or frequency of visits to our website, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google shortens the IP address within the EU or EEA.

Data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website including usage activities. This data may also be used to provide other services related to use of our website and internet use in general.

Google states that it will not associate your IP address with any other data. In addition, Google keeps a record of your IP address at
https://www.google.com/intl/de/policies/privacy/partners

Google provides you with further information on data protection law, including information on how to prevent the use of your data.

In addition, Google offers a website with further information at
https://tools.google.com/dlpage/gaoptout?hl=de

including a so-called deactivation add-on. This add-on can be installed on standard internet browsers and offers you further control over data collected by Google when visiting our website. This add-on signals to JavaScript (ga.js) of Google Analytics that data about the visit to our website may not be transmitted to Google Analytics. However, this does not prevent data from being transmitted to us or to other web analytics services. Information on which other web analytics services we use is included in this privacy policy.

Google-Maps

On our website, we use Google Maps to display our location and for giving directions. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsequently referred to as "Google".

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you access our website.

If you open the Google Maps component integrated into our website, Google stores a cookie on your device via your internet browser. In order to display our location and give directions, your user settings and data are processed. Here, we cannot exclude that Google uses servers in the USA.

Legal basis is Art. 6, 1f GDPR. Our legitimate interests lie in optimizing our website’s functionality.

This connection allows Google to determine from which website your request was sent and to which IP address directions are to be transmitted.

If you do not agree to this processing, you have the option of preventing cookie installation by means of the appropriate settings in your Internet browser. Details can be found above under the item "Cookies".

In addition, the use of Google Maps and information obtained via Google Maps is subject to Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.

In addition, Google offers a website with further information at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy

Google Fonts

We use Google Fonts on our website to display external fonts. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsequently referred to as "Google".

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established on accessing our website.

Legal basis is Art. 6, 1f GDPR. Our legitimate interests lie in optimization and economic operation of our website.

The connection established on accessing our website allows Google to determine from which website your request was sent and to which IP address font display is to be transmitted.

Google offers further information, in particular on options for preventing data use at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy

YouTube

We use YouTube on our website. This is a video portal of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, subsequently referred to as "YouTube".

YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsequently referred to as "Google".

We use YouTube with the "Enhanced Privacy Mode" function in order to be able to show you videos. Legal basis is Art. 6, 1f GDPR. Our legitimate interests lie in improving the quality of our website. According to YouTube, the "enhanced data protection mode" function means that the data described in detail below is only transmitted to YouTube’s server when you actually start a video.

Without this "Enhanced Privacy Mode", a connection to YouTube’s server in the USA is established as soon as you open one of our website with an embedded YouTube video.

This connection is necessary in order to be able to display the respective video on our website via your Internet browser. YouTube will at least record and process your IP address, the date and time, as well as the website you visited in course of this. In addition, a connection to Google's advertising network "DoubleClick" is established.

If you are logged in to YouTube, YouTube will assign the connection data to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For functionality purposes as well as for user behaviour analyses, YouTube permanently stores cookies on your device via your Internet browser. If you do not agree to this processing, you have the option of preventing cookie storage by according settings in your Internet browser. You can find more information above under "Cookies".

Google provides further information on data collection and use as well as your rights and protection options in their privacy policy available at
https://policies.google.com/privacy

Google Ads with conversion tracking

On our website, we use the advertising component Google Ads with so-called conversion tracking. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsequently referred to as "Google".

We use conversion tracking for targeted advertising of our offers. Legal basis is Art. 6, 1 f GDPR. Our legitimate interests lie in the analysis, optimization and economic operation of our website.

If you click on an ad placed by Google our conversion tracking stores a cookie on your device. These so-called conversion cookies become invalid after 30 days and do not identify you personally.

If the cookie is valid and you visit a specific page on our website, both we and Google can evaluate that you clicked on one of our Google ads that redirected you to our website.

Google uses thus obtained data to provide us with statistics about visits to our website. In addition, this provides us with data about the number of users who clicked on our ad(s) to subsequently access our website pages. However, neither we nor third parties also using Google AdWords are able to identify you in this way.

You can prevent or restrict cookie installation by using the according settings in your internet browser. You can also delete already stored cookies any time. Necessary steps and measures depend on your specific Internet browser. If you have any questions, please use the help function or your internet browser history or contact its manufacturer or support.

Furthermore, Google offers further information and in particular options for preventing data use in the following link:

https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/

Google Remarketing or "Similar Target Groups" Component from Google

We use the remarketing or "similar target groups" function on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsequently referred to as "Google".

We use this function to display interest-based, personalized advertising on third-party websites also participating in Google's advertising network.

Legal basis is Art. 6, 1f GDPR. Our legitimate interests lie in the analysis, optimization and economic operation of our website.

In order to enable this advertising service, Google stores a cookie with a number sequence on your device during your visit to our website via your internet browser. This cookie records both your visit and use of our website in anonymized form. No personal data is passed on in the process. If you subsequently visit a third party website also using the Google advertising network, advertisements may appear that relate to our website or our offers there.

To permanently deactivate this function, Google offers the following link for the most common internet browsers
https://www.google.com/settings/ads/plugin

Likewise, cookie use by certain providers can be disabled or deactivated by opting out, e.g. via
http://www.youronlinechoices.com/uk/your-ad-choices

or
http://www.networkadvertising.org/choices/

Through cross-device marketing, Google may be able to track your usage behaviour across multiple devices, so you may be shown interest-based, personalized advertising even if you switch devices. However, this requires you have consented to linking your browsing history to your existing Google account.
Google provides further information on Google Remarketing at
https://www.google.com/privacy/ads/

Google Tag Manager

We use the Google Tag Manager of provider Google Inc. to integrate and administer website tags and markers on our website. Assisted by this Tag Manager, we can activate services such as Google Analytics via code elements on our website to measure and analyze user behaviour.

Facebook Conversions

Facebook Conversion Pixels help us measure the success of our Facebook ads, e.g. whether a Facebook ad has led to sales on our website. This service is offered by Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA). Data provided by Facebook is exclusively statistical without precise personal references.

You can object to this data collection by Facebook any time by changing your advertising preferences at https://www.facebook.com/settings/?tab=ads.

Facebook Website Custom Audience

We use Facebook's "Website Custom Audience" retargeting pixel on our website to display relevant ads and offers on Facebook to members who have already visited our website, which we disseminate via the Facebook ad network.

You can object to this data collection by Facebook any time by changing your advertising preferences at https://www.facebook.com/settings/?tab=ads.

Pinterest Conversion Tracking

We use Pinterest’s conversion tracking pixel (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) on our website to display relevant ads and offers on Pinterest to members who have already visited our website.

Pixels record which offers you are interested in on visiting our website and pass this information on to Pinterest. Then you can be shown advertisements matching your interests.

You can object to this data collection by Pinterest any time by changing your account settings at https://www.pinterest.at/settings/privacy "Privacy and Data" - "Individual Settings" by deactivating all checkboxes or at https://help.pinterest.com/de/article/personalization-and-data#info-ad by deactivating the "Disable Individual Customization" checkbox.

Microsoft Bing Ads

On our website, we use Bing Ads for remarketing and conclusion tracking. This is a service by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 - 6399, USA, subsequently referred to only as "Microsoft", that uses the so-called Universal Event Tracking (UEN).

Legal basis is Art. 6, 1f GDPR. Our legitimate interests lie in the analysis, optimization and economic operation of our website.

If you click on one of our ads placed on internet search engine "Bing", Microsoft stores a cookie for tracking functionality on your device via your internet browser. This tracking cookie becomes invalid after 180 days and is not used for your personal identification. If you visit certain pages of our website when the cookie is still active, both Microsoft and we can recognize you clicked on an advertisement placed by us on Bing and have been redirected to our website.

Microsoft uses the data collected by tracking cookies to create visitor statistics for us. We thus receive data about the number of visits in reference to our advertisements on Bing as well as which of our website pages were accessed. However, we do not receive data allowing us to identify you personally.

In addition, Microsoft may be able to track your user behaviour across multiple devices via cross-device tracking. This enables Microsoft to show you personalized advertising across devices.

If you do not agree to this processing, you have the option of preventing cookie installation by making the appropriate settings in your internet browser. Details can be found above under the item "cookies".

If you have a Microsoft account, you can change the settings for personalized advertising under http://choice.microsoft.com/de-de/opt-out.
Microsoft offers further information on Bing Ads and data collection and use as well as on your rights and options for protecting your privacy at
https://help.bingads.microsoft.com/#apex/3/de/53056/2 and https://privacy.microsoft.com/de-de/privacystatement.

Shopware - Hosting

We use "Shopware" as our store system host and for presenting offers and to process contracts.

Legal basis is Art. 6, 1b GDPR (contract initiation/contract processing). "Shopware" is a service of Shopware AG, Ebbinghoff 10, D-48624 Schöppingen, Germany.

Shopware offers further data protection information under the following link:
https://www.shopware.com/de/datenschutz/

Payment

Payment processing via Unzer

If you choose payment by credit card, direct debit or instant transfer via Unzer as payment method, payments will be processed via Unzer E-Com GmbH, Vangerowstraße 18, D-69115 Heidelberg, Germany. Unzer E-Com GmbH is a financial institute and PCI DSS-certified payment service provider offering solutions around electronic payments for online stores, retail and online marketplaces. For more information, please visit https://docs.unzer.com/reference/pci-compliance/.

a) Payment by credit card

Your payment data collected during the ordering process for payments by credit card via Unzer will be forwarded to Unzer E-Com GmbH. This data will again be forwarded by Unzer E-Com GmbH, if necessary, for payment processing purposes to Unzer Luxembourg S.A. 1, Place du Marché, L-6755 Grevenmacher, Luxembourg that collects the corresponding payments from the card companies.

b) Payment with Instant Transfer

When paying with instant transfer by payment service provider Klarna GmbH, Theresienhöhe 12, D-80339 Munich, Germany (Klarna), your online banking data (PIN and TAN) entered into Klarna’s digital transfer form during the ordering process will be transmitted in encrypted form by Klarna GmbH to your bank to process the transfer. Your online banking data will neither be stored by us nor by Klarna GmbH. Klarna GmbH part of Klarna Group (Klarna Bank AB (publ), Sveavägen 46, S-111 34 Stockholm, Sweden. You can access their privacy policy via the following link: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

c) Prepayment

For prepayments via Unzer, your data collected during the ordering process will be transmitted to Unzer E-Com GmbH for the purpose of payment processing.

You can access Unzer's privacy policy via the following link: https://www.unzer.com/de/datenschutz/

Payment processing via PayPal

We offer the possibility of payment processing via payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This is in accordance with our legitimate interest in offering an efficient and secure payment method (Art. 6, 1f GDPR). In this context, we pass on the following data to PayPal, insofar as it is necessary for contract fulfilment (Art. 6, 1b GDPR):

First name, last name, address, email address, telephone number.

Data processing in this chapter is not required neither by law nor contract. Without the transmission of your personal data, we cannot process payments via PayPal. [You have the option of choosing another payment method].

PayPal carries out credit checks for various services such as direct debit to ensure your payment willingness and solvency. This corresponds to PayPal’s legitimate interest (according to Art. 6, 1f GDPR) and serves contract fulfilment (according to Art. 6, 1b GDPR). For this purpose, your data (name, address and date of birth, bank account details) will be passed on to credit agencies. This process is beyond our sphere of influence and we are only informed whether payments have been made or rejected or a check is pending.

You can find more information about objection and removal options vis-à-vis PayPal at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Your data will be stored until payment processing is completed. This includes the period necessary for processing refunds, claims management and fraud prevention.
Supported by the sample data protection declaration by law firm Anwaltskanzlei Weiß & Partner.