Data protection

1) Introduction and contact details of the person responsible

1.1We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Vently UG (limited liability), Urbanstraße 71, 10967 Berlin, Germany, Email: info@nayaasports.deThe controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1When you simply browse our website for informational purposes, i.e., without registering or otherwise providing us with information, we only collect data that your browser transmits to the website server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if necessary: in anonymous form)

The processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3) Hosting & Content-Delivery-Network

Shopify

We use the system of the following provider to host our website and display the page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data will also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), some of these cookies remain on your end device for a longer period of time and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings in your web browser.

If personal data is also processed by individual cookies used by us, the processing takes place in accordance with Article 6 (1) (b) GDPR either for the execution of the contract, in accordance with Article 6 (1) (a) GDPR in the event that consent has been given or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contact

5.1 Loox

For review reminders, we use the services of the following provider: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel

We will only transmit your email address and, if applicable, other customer data to the provider on the basis of your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, so that they can contact you with a review reminder via email.

You can revoke your consent at any time with effect for the future vis-à-vis us or the provider.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

When data is transmitted to the provider location, an appropriate level of data protection is guaranteed by an adequacy decision by the European Commission.

5.2When you contact us (e.g. via contact form or email), personal data is processed – exclusively for the purpose of processing and responding to your request and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is for the purpose of entering into a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively resolved and provided there are no statutory retention periods to the contrary.

6) Data processing when opening a customer account

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the controller's address listed above. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods that conflict with this, and we have no legitimate interest in continuing to store it.

7) Use of Customer Data for Direct Marketing

7.1Subscribe to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional information is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you only receive the newsletter after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR. We store your IP address entered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the person responsible mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this statement.

7.2Klaviyo

Our email newsletters and other promotional email communications are sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

Based on our legitimate interest in effective and user-friendly email marketing, we forward your data provided during registration to this provider in accordance with Art. 6 para. 1 lit. f GDPR, so that they can handle the email distribution on our behalf.

Subject to your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also conducts statistical performance analysis of email campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but not combined with other data sets.

You can revoke your consent to email tracking at any time with effect for the future.

We have concluded an order processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

For the optical design of the captcha window, the provider uses “Google Fonts”, i.e. fonts loaded from the Internet by Google.

7.3Shopping cart reminders via email

If you cancel your purchase from us before completing the order, you have the option of being reminded of the contents of your virtual shopping cart once by e-mail.

The only mandatory information for sending this reminder is your e-mail address. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR to send you a shopping cart reminder. We store your IP address entered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for our email notification service is used strictly for the intended purpose.

You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our mailing list unless you have expressly consented to further use of your data or we reserve the right to use your data in any other way that is permitted by law and about which we will inform you in this statement.

8) Data processing for order processing

8.1Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided when placing your order in order to inform you personally in accordance with our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of notifying you about updates we owe you and will only be processed by us to the extent necessary for the respective information.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2To fulfill our contractual obligations to our customers, we work with external shipping partners. We will only share your name, delivery address, and, if necessary for delivery, your telephone number with a shipping partner selected by us for the purpose of delivering the goods (Art. 6 para. 1 lit. b GDPR).

8.3 DSers

We use the following provider for order processing: Bowers Enterprises, LLC, 109 Cloister Drive, Peachtree City, GA 30269, USA

Your name, address, and any other personal data will be forwarded to the provider in accordance with Article 6 Paragraph 1 Letter b of the GDPR for the purpose of processing your online order. Your data will only be shared to the extent that this is actually necessary for processing the order. The provider is also used for accounting purposes. Specifically, the provider processes incoming and outgoing invoices, as well as, where applicable, our company's bank transactions, in order to automatically record invoices, match them to transactions, and generate the financial accounting records in a semi-automated process.

If personal data is also processed here, the processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

For the transfer of data to the USA, the provider refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

8.4Transfer of personal data to shipping service providers

- DHL

We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We will forward your email address and/or telephone number to the supplier before delivery of the goods in accordance with Article 6 Paragraph 1 Letter a of the GDPR for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b of the GDPR, we will only forward the recipient's name and delivery address to the supplier. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or delivery notification is not possible.

Consent can be withdrawn at any time with effect for the future by contacting the controller named above or the provider.
- Hermes

We use the following provider as a transport service provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany

We will forward your email address and/or telephone number to the supplier before delivery of the goods in accordance with Article 6 Paragraph 1 Letter a of the GDPR for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b of the GDPR, we will only forward the recipient's name and delivery address to the supplier. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned person responsible or vis-à-vis the provider.

8.5Use of payment service providers (payment services)

- Paypal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “Pay Later” via PayPal, we will transmit your payment data to PayPal (Europe) as part of the payment processing. S.arl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer is carried out in accordance with Article 6(1)(b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "Pay later" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transferred to credit agencies in accordance with Article 6 Paragraph 1 Letter f GDPR, based on PayPal's legitimate interest in assessing your creditworthiness. PayPal uses the result of the credit check, specifically the statistical probability of payment default, to decide whether to offer the respective payment method. The credit check may include probability values (so-called score values). If score values are included in the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the data used to calculate the score values, but is not the only factor.You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

If the PayPal payment method "purchase on account" is available and selected, your payment data will first be transmitted to PayPal to prepare the payment. PayPal will then forward this data to Ratepay GmbH, Franklinstrasse 28-29, 10587 Berlin ("Ratepay") for processing the payment. The legal basis for this is Article 6(1)(b) GDPR. In this case, Ratepay conducts an identity and credit check on its own behalf to determine your creditworthiness in accordance with the principle already mentioned above and, based on its legitimate interest in determining creditworthiness pursuant to Article 6(1)(f) GDPR, forwards your payment data to credit agencies. A list of the credit agencies that Ratepay may consult can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using the payment method of a local third-party provider, your payment data will first be passed on to PayPal in accordance with Article 6 (1) (b) GDPR in order to prepare the payment. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the relevant provider to carry out the payment in accordance with Article 6 (1) (b) GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z oo, ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information regarding data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de /legalhub /paypal /privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

When you select a payment method from the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be transmitted to the provider in accordance with Article 6 Paragraph 1 Letter b GDPR. In this case, your data will be transmitted exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

8.6Electronic cancellation function for distance contracts

Consumers who conclude contracts on this website where a statutory right of withdrawal exists have the option of declaring the withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal regulations.

When using the revocation function, in addition to information to identify the contract to be revoked, further personal information such as the consumer's first and last name and email address must also be provided or confirmed.

The collection of this information and its transmission to us is carried out in accordance with Article 6(1)(b) GDPR and only to the extent necessary for the proper processing of the withdrawal. The personal data provided is also used, on the basis of Article 6(1)(b) GDPR, to confirm receipt of the withdrawal notice by email. A further legal basis for the processing is Article 6(1)(c) GDPR. We are legally obligated to provide an electronic withdrawal function for paid distance selling contracts for consumers.

9) Retargeting/ Remarketing und Conversion-Tracking

9.1Meta Pixel with extended data matching

Within our online service, we use the "Meta Pixel" service from the following provider in extended data matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

When a user clicks on one of our ads on Facebook or Instagram, the URL of our linked page is extended with a parameter using "Meta Pixel." This URL parameter is then entered into the user's browser after redirection via a cookie set by our linked page itself. Furthermore, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram ad during processes like purchases, account logins, or registrations (extended matching). The cookie is then read and enables the transmission of the data, including the specific customer data, to Meta.

We use "Meta Pixel" with advanced matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they match the interests of users or have certain characteristics (e.g. interests in certain topics or products, which are determined based on the websites visited) that we transmit to Meta (so-called "Custom Audiences").

Furthermore, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard "Meta Pixel" feature, the enhanced matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Meta, so that it can be assigned to the respective user profile and Meta can use the data for its own advertising purposes in accordance with Meta's data usage guidelines (https://www.facebook.com/about /privacy /) can use the data. This data can enable Meta and its partners to display ads on and off Facebook.

All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

The information generated by Meta is generally transferred to a Meta server and stored there; in this context, it may also be transferred to Meta Platforms Inc. servers in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

9.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Further data processing only takes place if you have agreed to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data to create target groups.As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. come in the US.

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, retargeting technology will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Details about the processing initiated by Google and how Google handles website data can be found here: https://policies.google.com/technologies /partner-sites

Further information about Google's privacy policy can be found here: https://business.safety.google/intl /de /privacy / and https://www.google.de/policies /privacy /

9.3 Google Ads Conversion-Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads to advertise our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from these advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to ensure a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any personally identifiable information.

As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. come in the US.

Details about the processing triggered by Google Ads Conversion Tracking and how Google handles website data can be found here: https://policies.google.com/technologies /partner-sites

All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com/My-Ad-Center-Help /answer /12155656 ?hl=de

In order to address users whose data we have received in the context of business or business-like relationships in an even more interest-based advertising manner, we use a customer comparison function as part of Google Ads. To do this, we electronically transmit one or more files with aggregated customer data (mainly email addresses and telephone numbers) to Google. Google does not have access to clear data here, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subject has set up. This enables personalized advertising to be played out via all Google services linked to the respective Google account.

Customer data is only transferred to Google if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures regarding the customer matching function can be found here: https://support.google.com/google-ads /answer /6334160 ?hl=de &ref_topic=10550182
Google's privacy policy can be viewed here: https://business.safety.google/intl /de /privacy / and https://www.google.de/policies /privacy /

For the optical design of the captcha window, the provider uses “Google Fonts”, i.e. fonts loaded from the Internet by Google.

9.4 TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you have accessed our website from an advertisement on the provider's domain, the success of the advertisement can be tracked with the help of cookies and/or similar technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain device and browser information, including your IP address if applicable, is read using tracking technology in order to record and evaluate user actions predefined by us (e.g., completed transactions, leads, search queries on the website, visits to product pages). This enables us to compile statistics on user behavior on our website after redirection from an advertisement, which we use to optimize our offering.

All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

10) Site Functionalities

10.1 Loox Widget

Our website uses graphic elements from the following provider to display external customer reviews: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel

When you access a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the attractive design of our website.

When data is transmitted to the provider location, an appropriate level of data protection is guaranteed by an adequacy decision by the European Commission.

10.2 Google Web Fonts

This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data during the connection process with the font provider will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For the optical design of the captcha window, the provider uses “Google Fonts”, i.e. fonts loaded from the Internet by Google.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl /de /privacy /

11) Tools and Miscellaneous

Cookie-Consent-Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they visit the page in the form of an interactive user interface, where consent for specific cookies and/or cookie-based applications can be given by checking the boxes. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by checking the corresponding boxes. This ensures that such cookies are only placed on the user's device if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed here.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and therefore a legally compliant design of our website.

Another legal basis for processing is Art. 6 (1) (c) GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the cookie content tool can be found directly in the corresponding user interface on our website.

12) Rights of the data subject

12.1The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercising these rights:

• Right to information according to Art. 15 GDPR;
• Right to rectification according to Art. 16 GDPR;
• Right to erasure according to Art. 17 GDPR;
• Right to restriction of processing in accordance with Art. 18 GDPR;
• Right to information according to Art. 19 GDPR;
• Right to data portability according to Art. 20 GDPR;
• Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR;
• Right to complain according to Art. 77 GDPR.

12.2RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS IN OUR PREVIOUS LEGITIMATE INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS FOR THE CERTIFICATION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - also based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed as part of legal or similar obligations on the basis of Article 6 (1) (b) GDPR, this data will be routinely deleted after the retention period has expired, provided that it is no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.

When processing personal data on the basis of Article 6 Paragraph 1 Letter f GDPR, this data will be stored until you exercise your right of objection in accordance with Article 21 Paragraph 1 GDPR, unless we can provide compelling reasons worthy of protection prove the processing that outweighs your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6 (1) (f) GDPR, this data will be stored until you exercise your right of objection under Article 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.