Privacy Policy

1) Information on the collection of personal data and contact details of the responsible party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data that can be used to identify you personally.

1.2 The responsible party for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is Shop Force GmbH, Reinstr. 8, 64720 Michelstadt, Germany, Email: support@alpensattel.de. The entity responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

2) Data collection when visiting our website

When using our website for informational purposes only, that is, if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you accessed the page
• Used browser
• Used operating system
• Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

3) Hosting

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services of Shopify, data may also be transmitted for further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. In the event of data transmission to Shopify Inc. in Canada, the appropriate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found at the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify only takes place within the framework communicated below.

4) Cookies

To make visiting our website attractive and to enable the use of certain features, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, that is, after you close your browser (so-called session cookies). Other cookies remain on your device and allow your browser to be recognized on your next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to a specific extent. Persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of the cookie settings of your web browser.

Partially, cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is processed by individual cookies we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can set your browser to be informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for specific cases or generally. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if cookies are not accepted, the functionality of our website may be limited.

Contact

In the context of contacting us (e.g., via contact form or email), personal data is collected. The data collected when using a contact form can be seen in the respective contact form. This data is stored and used solely for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

Data processing when opening a customer account and for contract processing

According to Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed when you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the responsible party. We store and use the data you provided for contract processing. After the complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods expire, unless you have explicitly consented to further use of your data or a legally permitted further use of data has been reserved by us.

7) Comment function

As part of the comment function on this website, in addition to your comment, information about the time of the comment's creation and the commentator name you chose will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is done for security reasons and in case the affected person violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you in case a third party should contest your published content as illegal. The legal basis for storing your data is Articles 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are contested as illegal by third parties.

8) Use of customer data for direct marketing

8.1 Subscription to our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have explicitly confirmed that you agree to receive the newsletter. We will then send you a confirmation email, asking you to confirm by clicking a corresponding link that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later time. The data we collect during newsletter registration will be used exclusively for the purposes of advertising communication via the newsletter. You can unsubscribe from the newsletter at any time via the designated link in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve a further data use that is legally permitted and of which we inform you in this statement.

8.2 Dispatch of the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, like those already purchased, from our range via email. For this, we do not need to obtain separate consent from you in accordance with § 7 para. 3 UWG. The data processing is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, no email will be sent from us. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible party mentioned at the beginning. For this, you will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately discontinued.

8.3 Newsletter dispatch via Klaviyo

The dispatch of our email newsletters is carried out by the technical service provider "Klaviyo," 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass your data provided during newsletter registration. This transfer is carried out in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is usually transferred to a server of Klaviyo in the USA and stored there.

Klaviyo uses this information to send newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.
To protect your data in the USA, we have a data processing agreement ("Data-Processing-Agreement") with Klaviyo, in which Klaviyo commits to protect our users' data, process it on our behalf in accordance with its privacy policy, and in particular not to pass it on to third parties.

You can view Klaviyo's privacy policy here: https://www.klaviyo.com/privacy

8.4 Product Availability Notification via Email

If we offer the option in our online shop to notify you by email about the availability of selected temporarily unavailable items, you can sign up for our email notification service for product availability. When you sign up for our email notification service for product availability, we will send you a one-time email notification about the availability of the specific item you selected. The only mandatory information for sending this notification is your email address. Providing additional data is voluntary and may be used to address you personally. For sending this notification, we use the so-called double opt-in procedure. This means that we will only send you a corresponding notification once you have explicitly confirmed that you consent to receive such a message. We will then send you a confirmation email asking you to confirm by clicking a corresponding link that you wish to receive such a notification.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When signing up for our email notification service for product availability, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration to trace any potential misuse of your email address at a later time. The data we collect when you sign up for our email notification service for product availability will be used solely for the purpose of informing you about the availability of a specific item in our online shop. You can unsubscribe from the email notification service for product availability at any time by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our designated distribution list, unless you have explicitly consented to further use of your data or we reserve a further data use that is legally permitted and about which we inform you in this statement.

8.5
We use the email address collected in the course of selling a product or service to inform you via email about our own similar goods or services. You can object to this use of your email address at any time, without incurring any costs other than the transmission costs according to the basic rates. The objection can be made by clicking on the unsubscribe link in the email or by sending a message to support@alpenbestsattel.com.

9) Data processing for order processing

9.1 To process your order, we work with the service providers listed below, who assist us in whole or in part with the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, as far as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of the payment processing, provided this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

9.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We will only provide your name, delivery address, and, if necessary for delivery, your phone number, exclusively for the purpose of delivering the goods in accordance with Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.

9.3 Transfer of personal data to shipping service providers

- DHL
If the delivery of the goods is carried out by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will forward your email address to DHL in accordance with Art. 6 para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we will only provide the recipient's name and delivery address to DHL for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer will only take place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent can be revoked at any time with effect for the future to the above-mentioned responsible party or to the transport service provider DHL.
- DPD
If the delivery of the goods is carried out by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will share your email address and phone number with DPD prior to the delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we will only share the recipient's name and delivery address with DPD for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The sharing will only occur to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or delivery notification is not possible.
Consent can be revoked at any time with effect for the future to the above-mentioned responsible party or to the transport service provider DPD.

9.4 Use of payment service providers (payment services)

- Amazon Pay
When selecting the payment method "Amazon Pay," the payment processing is carried out by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we will share the information you provided during the ordering process along with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. The sharing of your data is solely for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find more information about Amazon Payments' privacy policy at the following internet address: https://pay.amazon.com/de/help/201751600
- Klarna
When selecting a Klarna payment service, the payment processing is carried out by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). To enable the processing of the payment, your personal data (first and last name, street, house number, postal code, city, gender, email address, phone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) will be shared with Klarna for the purpose of identity and credit checks, provided you have explicitly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process. You can find out which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The information obtained about the statistical probability of payment default is used by Klarna for a balanced decision regarding the establishment, execution, or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the data processing controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal information will be processed in accordance with applicable data protection regulations and as stated in Klarna's privacy policy for individuals based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for individuals based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
is processed.
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we share your payment data with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be shared with credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. The result of the credit check regarding the statistical probability of payment default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but is not limited to, address data. Further data protection information, including details on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Stripe
If you choose a payment method from the payment service provider Stripe, the payment processing is carried out by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. For more information on Stripe's data protection, please visit the URL https://stripe.com/de/privacy#translation.
Stripe reserves the right to conduct a credit check based on mathematical-statistical procedures to maintain the legitimate interest in determining the user's creditworthiness. The personal data necessary for a credit check and received in the context of payment processing may be transmitted by Stripe to selected credit agencies, which Stripe discloses to users upon request. The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, but is not limited to, address data. The result of the credit check regarding the statistical probability of payment default is used by Stripe for the purpose of deciding on the eligibility for the chosen payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the appointed credit agencies.
However, Stripe may still be entitled to process your personal data if this is necessary for contractual payment processing.

10) Online Marketing

10.1 Facebook Pixel for creating Custom Audiences (with Cookie Consent Tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an advertisement we have placed that is displayed on Facebook, an additional parameter is added to the URL of our linked page by the Facebook Pixel. If our page allows data sharing with Facebook via the Pixel, this URL parameter is written into the user's browser via a cookie set by our linked page. This cookie is then read by the Facebook Pixel and enables the forwarding of data to Facebook.
With the help of the Facebook Pixel, Facebook can determine the visitors of our online offering as a target group for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to show the Facebook Ads we run only to those Facebook users who have also shown interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products determined by the visited websites), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and do not appear intrusive. This way, we can further evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement (so-called "Conversion").
The data collected is anonymous to us, meaning it does not provide any conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile, and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements on and off Facebook.
The data processing associated with the use of the Facebook Pixel occurs solely with your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the checkmark set in the "Cookie Consent Tool" embedded on the website next to the setting for the "Facebook Pixel."

10.2 Use of Google Ads conversion tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you ads that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad displayed by Google. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Google Ads customers. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive information that can personally identify users. If you do not wish to participate in tracking, you can block this use by disabling the Google conversion tracking cookie through your internet browser under the keyword "User Settings." You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising according to Art. 6 para. 1 lit. f GDPR. As part of the use of Google Ads, there may also be a transfer of personal data to the servers of Google LLC in the USA.

At the following internet address, you will find more information about Google's privacy policy: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the "Cookie Consent Tool" provided on the website or alternatively follow the above-mentioned option for making an objection.

11) Web analytics services

11.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies," which are text files stored on your device that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to a server of Google and stored there; this may also involve transmission to the servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures the anonymization of the IP address by truncation and excludes direct personal reference. Through the extension, your IP address is truncated by Google within member states of the European Union or in other contracting states of the agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google LLC in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide further services related to website usage and internet usage. The IP address transmitted by your browser within the framework of Google (Universal) Analytics will not be merged with other data from Google.
Google Analytics allows, through a special feature, the so-called "demographic characteristics," in addition to the creation of statistics with statements about the age, gender, and interests of website visitors based on an evaluation of interest-based advertising and the inclusion of third-party information. This allows for the definition and differentiation of user groups of the website for the purpose of targeted marketing measures. However, data sets collected through the "demographic characteristics" cannot be assigned to a specific person.
All the processing described above, especially the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Analytics will not take place during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

12.2 Hotjar (hotjar Ltd.)

This website uses the web analytics service Hotjar from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).
With this tool, movements on the websites where Hotjar is used can be tracked (so-called heatmaps). For example, it is recognizable how far users scroll and which buttons users click on how often. Furthermore, it is also possible to obtain feedback directly from the users of the website using the tool. In this way, we gain valuable information to make our websites faster and more user-friendly. The above analysis is based on our legitimate interests in optimization and marketing purposes and the interest-appropriate design of our website in accordance with Art. 6 para. 1 lit. f GDPR. We pay special attention to the protection of your personal data when using this tool. Thus, we can only track which buttons you click and how far you scroll. Areas of the websites where personal data of you or third parties are displayed are automatically hidden by Hotjar and are therefore not traceable at any time.

Hotjar offers every user the option to prevent the use of the Hotjar tool by using a "Do Not Track Header," so that no data about the visit to the respective website is recorded. This is a setting that is supported by all common browsers in their current version. To do this, your browser sends a request to Hotjar, indicating to disable tracking for the respective user. If you use our website with different browsers/computers, you must set up the "Do Not Track Header" separately for each of these browsers/computers.
A detailed guide with information about your browser can be found at: https://www.hotjar.com/opt-out
More information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com
You can find the privacy policy of Hotjar Ltd. at: https://www.hotjar.com/privacy

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option for making an objection.

12) Tools and Others

Google reCAPTCHA

On this website, we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function primarily serves to distinguish whether an input is made by a natural person or abusively through machine and automated processing. The service includes the transmission of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in determining individual accountability on the internet and preventing abuse and spam. In the context of using Google reCAPTCHA, there may also be a transfer of personal data to the servers of Google LLC in the USA.

Further information on Google reCAPTCHA and Google's privacy policy can be viewed at: https://www.google.com/intl/de/policies/privacy/

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option for making an objection.

Retargeting technology from releva GmbH

This website uses retargeting technology from releva GmbH, Feilnerstr. 10, 10969 Berlin (www.releva.nz). This allows us to specifically address visitors to our websites with personalized, interest-based advertising. The display of advertising materials is based on a cookie-based analysis of previous usage behavior, but no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests within a pseudonymized user profile and to tailor the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. This way, you will see advertisements that are likely to match your product and information interests. If the collected information has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR based on your consent to the display of personalized advertising and participation in market research.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor of this website and is not combined with personal data about the holder of the pseudonym. To generally object to the use of cookies on your computer, you can configure your internet browser to prevent cookies from being stored on your computer in the future or to delete cookies that have already been stored. You can also permanently object to the setting of cookies or the creation of a pseudonymized user profile by using the available opt-out function at the following link:

https://releva.nz/datenschutz

Further information and the privacy policy regarding advertising and releva GmbH can be found at https://releva.nz/datenschutz view.

Rights of the data subject

13.1 The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) regarding the processing of your personal data by the controller, which we inform you about below:

• Right to information according to Art. 15 GDPR: You have the right to information about your personal data processed by us, the purposes of processing, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned duration of storage or the criteria for determining the duration of storage, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the significance and intended consequences of such processing for you, as well as your right to be informed about what guarantees exist according to Art. 46 GDPR when your data is transferred to third countries;
• Right to rectification according to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored with us;
• Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 GDPR are met. However, this right does not exist particularly if the processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
• Right to restriction of processing according to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise, or defense of legal claims, after we no longer need this data for the purpose of processing, or if you have lodged an objection for reasons related to your particular situation, as long as it is not yet clear whether our legitimate reasons outweigh;
• Right to information under Art. 19 GDPR: If you have asserted your right to rectification, deletion, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom your personal data have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability under Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller, where technically feasible;
• Right to withdraw consent given under Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the affected data immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing based on consent until the withdrawal;
• Right to lodge a complaint under Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your workplace, or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERWHELMING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING PROTECTABLE REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent according to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws their consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that they are no longer necessary for contract fulfillment or contract initiation and/or we have no legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object according to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information of this declaration regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.