Privacy statement

§ 1 General

Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases and storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This data protection declaration only applies to our website. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.

§ 2 Data processing to fulfill the contract

(1) Purpose of processing

Your personal data, which you provide to us during the ordering process, are required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without giving your address. For some payment methods, we need the necessary payment data in order to pass them on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore carried out for the purpose of fulfilling the contract.

If you send us an inquiry by e-mail, using a contact form, etc. before concluding the contract, we will process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our products.

(2) Legal basis

The legal basis for this processing is Art. 6 Para. 1 b) GDPR.

(3) recipient categories

Payment service providers, shipping service providers, hosting providers, if necessary merchandise management system, if necessary suppliers (dropshipping).

(4) Storage period

We store the data required to process the contract until the statutory warranty and, if applicable, contractual guarantee periods have expired.

We store the data required by commercial and tax law for the periods specified by law, usually ten years (cf. § 257 HGB, § 147 AO).

The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and there is clearly no contract conclusion.

§ 3 comments

(1) Purpose of processing

It is possible to write a comment. Your data (e.g. name / pseudonym, email address, website) will then only be processed for the purpose of publishing your comment.

(2) Legal basis

The legal basis for this processing is Art. 6 Para. 1 f) GDPR.

(3) Legitimate interest

Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, for transparency and opinion-forming. Your interest in data protection is preserved because you can publish your comment under a pseudonym.

(4) Storage period

A specific storage period is not intended. You can request the deletion of your comment at any time.

(5) RIGHT TO OBJECT

You have the right to object at any time to data processing that is based on Art. 6 Para. 1 f) GDPR and is not used for direct advertising for reasons that arise from your particular situation. strong>

In the case of direct mail, however, you can object to processing at any time without giving reasons.

§ 4 Further information

I. Analysis tools

a) Tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 Para. 1 S. 1 lit. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use tracking measures to statistically record the use of our website and to evaluate it for you in order to optimize our offer. These interests are to be regarded as legitimate within the meaning of the aforementioned regulation.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

- Google Analytics

For the purpose of the needs-based design and continuous optimization of our pages, we use Google Analytics, a web analysis service from Google Inc. ( https://www.google.de/intl/de/about/ ) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; im Hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as

browser type / version,
operating system used,
referrer URL (the previously visited page),
host name of the accessing computer (IP address),
Time of the server request,
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; we would like to point out, however, that in this case not all functions of this website can be used to their full extent.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on ( https://tools.google.com/dlpage/ gaoptout? hl = de ).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set which prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help ( https://support.google.com/analytics/answer/6004245?hl=de ).

II. Social media plug-ins

a) Facebook plugin

We use social plug-ins from the social network Facebook on our website on the basis of Art. 6 Paragraph 1 Sentence 1 Letter f GDPR in order to make our company better known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for the data protection-compliant operation is to be guaranteed by the respective provider. We integrate these plug-ins using the so-called two-click method in order to protect visitors to our website in the best possible way.

Social media plugins from Facebook are used on our website to make their use more personal. For this we use the "LIKE" or "SHARE" button. This is an offer from Facebook.

When you call up a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website.

By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example press the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook can use this information for the purpose of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. B. to evaluate your use of our website with regard to the advertisements shown to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in the data protection information ( https://www.facebook.com/about/privacy/ ) from Facebook.

b) YouTube plugin

We use the provider YouTube, among others, for the integration of videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. based at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

We use plugins from YouTube on some of our websites. If you call up the Internet pages of our website with such a plugin - for example our media library - a connection to the YouTube servers is established and the plugin is displayed. This will transmit to the YouTube server which of our websites you have visited. If you are logged in as a member of YouTube, YouTube will assign this information to your personal user account. When using the plug-in, e.g. clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. and deleting the corresponding cookies from the companies.

Further information on data processing and information on data protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/ .

III. Order data processing

We have concluded a contract data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

IV. Affected rights

You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, request the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;
Pursuant to Art to request personal data stored by us;
to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation g, is necessary for reasons of public interest or to assert, exercise or defend legal claims;
to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible;
according to Art. 7 Para. 3 DSGVO your once given consent to us at any time to revoke. As a result, we are no longer allowed to continue the data processing based on this consent in the future and
to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

§ 5 PayPal transactions

Please note that all PayPal transactions are subject to the PayPal privacy policy:

https: // www. paypal.com/de/webapps/mpp/ua/privacy-full

§ 6 credit check

Please note the following data protection provisions if you sign up for Consors Finanz, BNP Paribas S.A. Branch office Germany Payment services decide:

https://www.consorsfinanz.de/datenschutz/

§ 7 web analysis with Google Analytics

(1) Purpose of processing

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) Legal basis

The legal basis for this processing is Article 6 (1) f) GDPR.

(3) Legitimate interest

Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. To protect your interest in data protection, this website uses Google Analytics with the extension "anonymizeIP ()" so that the IP addresses are only further processed in abbreviated form in order to exclude direct personal reference.

(4) recipient categories

Google and its partner companies.

(5) Transmission to a third country

Google Ireland Limited is a company affiliated with Google LLC. Google LLC is based in the USA (1600 Amphitheater Parkway, Mountain View, CA 94043) and is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

(6) Storage period

14 months

(7) RIGHT TO OBJECT

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading the browser plug-in available under the following link and install: optout < / span>

You can also prevent the collection by setting an opt-out cookie. If you would like to prevent the future collection of your data when you visit this website, please click here: Deactivate Google Analytics

§ 8 web analysis with etracker

etracker

(1) Purpose of processing

The provider of this website uses the services of etracker GmbH from Hamburg, Germany ( www.etracker .com ) to analyze usage data. Cookies are used that enable a statistical analysis of the use of this website by its visitors as well as the display of usage-related content or advertising. Cookies are small text files that are stored on the user's device by the internet browser. etracker cookies do not contain any information that would enable a user to be identified.

The data generated with etracker are processed and stored by etracker exclusively in Germany on behalf of the provider of this website and are therefore subject to strict German and European data protection laws and standards. In this regard, etracker was independently tested, certified and awarded the data protection seal of approval ePrivacyseal excellent.

(2) Legal basis

The legal basis for this processing is Article 6 (1) f) GDPR.

(3) Legitimate interest

Our legitimate interest consists in optimizing our online offer and our website. Since the privacy of our visitors is particularly important to us, the IP address is anonymized at etracker as early as possible and login or device IDs are converted into a unique key that is not assigned to a person. Etracker will not use it for any other purpose, combine it with other data or pass it on to third parties.

(4) RIGHT TO OBJECT

You can object to the data processing described above at any time, provided it is personal. Your objection does not have any negative consequences for you.

I object to the processing of my personal data with etracker on this website: Deactivate eTracker tracking

Further information on data protection at etracker can be found here span> .

§ 9 Information about cookies

(1) Purpose of processing

Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable z. B. placing several products in a shopping cart.

(2) Legal basis

The legal basis for this processing is Article 6 (1) f) GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This safeguards your interest in data protection.

(4) Storage period

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have different lifespans from a few minutes to several years.

(5) RIGHT TO OBJECT

If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this can restrict the functionality of our website. You can also delete permanently stored cookies at any time via your browser.

§ 10 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights towards us as the person responsible:

1. Right to information

You can request information about your personal data processed by us within the framework of Art. 15 GDPR.

2. Right to rectification

If the information concerning you is (no longer) correct, you can request a correction according to Art. 16 GDPR. If your data is incomplete, you can request it to be completed.

3. Right to deletion

You can request the deletion of your personal data under the conditions of Art. 17 GDPR.

4. Right to restriction of processing

Within the framework of the provisions of Art. 18 GDPR, you have the right to request a restriction on the processing of the data relating to you.

5. Right to data portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

6. Right to revoke the data protection declaration of consent

According to Art. 7 Para. 3 GDPR, you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

7. Right to complain to a supervisory authority

If you are of the opinion that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the member state of your residence, your place of work or the place of the suspected violation).

Please also note your right of objection according to Art. 21 GDPR:

a) General: justified objection required

If your personal data is processed

- to safeguard our overriding legitimate interest (legal basis according to Art. 6 Para. 1 f) GDPR) or

- in the public interest (legal basis according to Art. 6 Para. 1 e) GDPR),

you have the right to object to the processing at any time for reasons that arise from your particular situation; This also applies to profiling based on the provisions of the GDPR.

In the event of an objection, we will no longer process the personal data relating to you, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, Exercise or defense of legal claims.

b) Special case of direct mail: a simple objection is sufficient

If the personal data concerning you are processed in order to operate direct mail, you have the right to object to this processing at any time and without giving reasons; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Responsible for data processing:
Kueche 24 GmbH & Co. KG
Mindener Straße 185
32049 Herford
Telephone: 05221 / 69999-01
[email protected]

Data protection declaration

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.


Server log files
You can use our websites without submitting personal data. 
Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.
 
Contact

Responsible person
Contact us at any time. The person responsible for data processing is: Kueche 24 GmbH & Co. KG, Mindener Straße 185, 32049  Herford Deutschland, +49 5221 69999-01, [email protected]


Proactive contact of the customer by e-mail
If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR.
If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR.
We will only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
 
Collection and processing when using the contact form 
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR.
If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR.
We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
 

WhatsApp Business
If you communicate with us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited for this (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you have your residence outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The purpose of the data processing is to handle and respond to your contact request. For this purpose we collect and process your mobile phone number registered with WhatsApp and, if provided, your name and additional data to the extent provided by you. We use a mobile device for the service, the address book of which stores exclusively the data of users who have contacted us via WhatsApp. Disclosure of personal data to WhatsApp shall not take place unless you have already consented to this with respect to WhatsApp.
Your data are transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. 
For the USA, no adequacy decision from the EU Commission is available. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: 
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR.
If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in providing quick and easy communication as well as responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR.
We will only use your personal data to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
For more information on terms of service and privacy when using WhatsApp, please visit https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
 

Customer account      Orders      

Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
 
Collection, processing, and transfer of personal data in orders
When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you. 
Your data is transferred here for example to the shipping companies and dropshipping providers, payment service providers, service providers for handling the order and IT service providers that you have selected. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
 

Evaluations      

Data collection when you post a comment 
When you comment on an article or a contribution, we collect your personal data (name, email address, comment text) only in the scope provided by you. The processing serves to allow you to comment and to display comments. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. You personal data will then be deleted.
 
On publication of your comment only the name you have entered will be published.

On submission of your comment your IP address will also be saved in order to prevent misuse of the comment function and to ensure the security of our IT systems. By submitting the comment you agree to the processing of the transmitted data. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your IP address will then be deleted.


Shipping companies      

Forwarding of your email address to shipping companies for information on shipping status
We forward your email address to the shipping company in the course of contractual processing, if you have explicitly agreed to this in the order process. The forwarding is for the purpose of informing you by email on the shipping status of your order. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us or the transport company without affecting the legality of the processing carried out with your consent up to the withdrawal.
 

Payment service providers       Credit check      

Use of Amazon Payments
We use Amazon Payments payment service on our website, from Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments").
The processing of data enables you to pay using the Amazon Payments payment service.
To integrate this payment service it is essential that Amazon Payments collects, stores, and analyses data when accessing the website (e.g. IP address, device type, operating system, browser type, device location). Cookies may be used for this purpose. Cookies allow your internet browser to be recognised.
The use of cookies or comparable technologies is based on § 15 para. 3 p. 1 TMG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in a customer-oriented offer of different payment methods. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.
By selecting and using "Amazon Payments", the data required for payment processing will be submitted to Amazon Payments to execute the agreement with you using the selected payment method. The data is processed on the basis of Article 6(1)(b) GDPR.
Further information on data processing when using the Amazon Payments payment service can be found in the associated data privacy policy at: https://pay.amazon.com/de/help/201212490


Use of Klarna payment options
On our website we use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna"). By selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna in order to be able to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

"Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (hire purchase)
For individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (hire purchase), Klarna reserves the right, if necessary, to obtain a credit report on the basis of mathematical-statistical procedures using credit reference agencies.
For this purpose, Klarna transmits the personal data required for a credit assessment, such as first and last name, address, gender, email address, IP address and data related to the order to a credit agency for the purpose of checking the identity and creditworthiness and uses the obtained information on the statistical probability of a payment default in order to reach a well-considered decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical methods and include, among other things, address data. Your legitimate interests will be taken into account in accordance with the legal requirements. The data processing serves the purpose of a credit asessment for  contract initiation. The processing is carried out on the basis of art. 6 Par. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default if Klarna pays in advance. For reasons that arise from your particular situation, you have the right to object to the processing of your personal data carried out on the basis of Art. 6 para. 1 lit. f GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract by means of the payment method of your choice. Failure to provide such data shall mean that the contract cannot be concluded with the payment method of your choice.

Further information, in particular to which credit agencies Klarna passes on your personal data, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies.
General information about Klarna can be found for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and as specified in Klarna's data protection policy for Germany at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.


Use of SOFORT
On our website we use the payment service provider SOFORT GmbH, (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data processing serves the purpose of allowing us to offer you various payment methods by processing payments via the payment service provider SOFORT. Once you have chosen the payment option, the data required to process the payment will be transmitted to SOFORT. This data processing is carried out on the basis of Article 6 para. 1 lit. b GDPR. For more information on data processing in connection with the use of the payment service provider SOFORT, please visit https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.



Cookies 

Our website uses cookies. Cookies are small text files which are saved in a user’s internet browser or by the user’s internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again.


Cookies will be stored on your computer. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can be notified before the setting of cookies and you can decide whether to accept this setting in each individual case as well as prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac


technically necessary cookies
Insofar as no other information is given in the data protection declaration below we use only these technically necessary cookies cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.

The use of cookies or comparable technologies is carried out on the basis of Art. 25 para. 2 TTDSG. Processing is carried out on the basis of art. 6 (1) lit. f GDPR due to our largely justified interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our range of services.

You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR, for reasons relating to your personal situation.

Use of Consentmanager
Our website uses the consent management tool Consentmanager from 
Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager").
The tool enables you to grant consents to data processing via the website, in particular the placing of cookies, and to make use of your right of revocation for consents already granted.
The processing of data serves the purpose of obtaining necessary consents for data processing and to document these, thereby complying with statutory obligations.
Cookies may be deployed for this purpose. In this process the following information, inter alia, can be collected and transmitted to Consentmanager: Date and time of the page retrieval, information on the browser and device you are using, anonymised IP address, opt-in and opt-out data. This data will not be forwarded to other third parties.
The data processing is carried out on the basis of Article 6(1)(c) GDPR to comply with a legal obligation.
More information on data protection at Consentmanager can be found at: https://www.consentmanager.net/privacy.php



Analysis       Communication      

Use of the Google Analytics
Our website uses the web analysis service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The processing of data serves to analyse this website and its visitors and for marketing and advertising purposes.
Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. In this process the following information, inter alia, can be collected: IP address, date and time of the website access, click path, information on the browser and the device you are using, the pages visited, referrer URL (website via which you accessed our website), location data, purchasing activities. The IP address transmitted from your browser within the scope of Google Analytics is not associated with any other data held by Google.
Google Analytics uses technology such as cookies, web storage in the browser and tracking pixels which enable an analysis of your use of the website. The information generated by these regarding your use of this website is usually transferred to a Google server in the USA and stored there. 
Google relies on standard contractual clauses as suitable guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/.Both Google and the US government authorities have access to your data. Google may combine your data with other data, such as your search history, personal accounts, usage data from other devices and any other information Google has about you. 
IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/de.html and/or at https://www.google.de/intl/de/policies/ and at https://policies.google.com/technologies/cookies?hl=de.

 
Use of the tawk.to live chat system
Our website uses the live chat system from tawk.to inc. (187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA, "tawk.to").
The processing of data serves to facilitate communication between you and us in our role as provider. Anonymised data is used to operate the system and for web analysis. Using this data, user profiles can be created under a pseudonym, which can contain cookies. Cookies facilitate recognition of your internet browser.
The collected data will not be used to personally identify visitors of this website without the explicit consent of the data subject.
Your data may be transmitted to the USA. 
The data processing, particularly the placing of cookies, is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in direct customer communication. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out in accordance with Article 6(1)(f) GDPR.
You can prevent the storage of cookies by choosing corresponding technical settings in your internet browser; we would, however, like to point out that this may prevent you from making full use of all the functions of this website.



Plug-ins

Use of Google reCAPTCHA
Our website uses the reCAPTCHA service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The request serves to distinguish whether the input was made by a human or automatic machine processing. For this purpose your input will be transmitted to Google and used by them further. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transferred to Google. This data will be processed by Google within the EU and potentially also in the USA. 
 
For the USA, no adequacy decision from the EU Commission is available. The data transfer will be based, inter alia, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at https://policies.google.com/privacy/frameworks.
The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para.1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
 
You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at: https://www.google.com/recaptcha/intro/android.html and 
Use of Cloudflare
On our website, we use the Content Delivery Network, Cloudflare CDN of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”). This is a supraregional network of servers in different data centres with which our web server connects and via which certain contents of our website are delivered.
The purpose of the data processing is to optimise the loading times of our website in order to make our offer more user-friendly.
This can involve the collection of, among other things, the following information: IP address, system configuration information, information about the traffic from and to customer websites (server log files).
Your data may be transmitted to the USA. 
Processing is carried out on the basis of Article 6(1)(f) GDPR for the purposes of our legitimate interest in needs-based and targeted design of the website. On grounds relating to your particular situation, you have the right to object at any time to this processing of your personal data and carried out on the basis of Article 6(1)(f) GDPR.
For more information about privacy when using Cloudflare, please visit https://www.cloudflare.com/de-de/privacypolicy/.
 
Embedding of the idealo logo
The logo of our partner, idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin), is embedded on our website. When you access our website, information will automatically be sent to idealo’s server via the browser used on your device. This information will be stored temporarily in a server log file for 7 days. The following information is recorded without any action by you and stored until it is automatically deleted:
  • IP address of the requesting computer,
  • date and time of the access,
  • name and URL of the file retrieved,
  • website from which the access occurred (referrer URL),
  • browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable provision of the website. The IP address must therefore be stored for the duration of the session. Storage in log files takes place in order to guarantee functionality of the website. The data are also used to optimise the website and guarantee security of the information technology systems. These data are not stored together with other personal data. The legal basis for the processing of data is Article 6(1)(1)(f) GDPR.
 

Rights of persons affected and storage duration

Duration of storage 
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
 
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
 
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
 
You can lodge a complaint with, among others, the supervisory authority responsible for us, which you may reach at the following contact details:Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: [email protected]

Right to object
If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)f) GDPR, you have the right for reasons arising from your particular situation to object at any time to the processing of your data with future effect.
If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.
 
last update: 29.11.2022