DATA PROTECTION
1) Information about the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Phametra - Pharma und Medica-Trading GmbH, Industriestr. 40, 44628 Herne, Germany, Tel.: +49 2323 1786-0, Fax: +49 2323 1786-40, Email: service@phametra.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 The controller has appointed a data protection officer who can be contacted as follows: "Thomas Hirsch, Industriestr. 40, 44628 Herne, 02323 1786 56, t.hirsch@phametra.de"
1.4 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.
2) Data collection when visiting our website
If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.
3) Hosting & Content Delivery Network
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services provided by Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event that data is transmitted to Shopify Inc. in Canada, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify will only take place within the framework communicated below.
4) Cookies
To make visiting our website more attractive and enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after closing your browser (so-called "session cookies"); others remain on your device for a longer period and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can find out how long cookies are stored in the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to execute the contract, in accordance with Art. 6 (1) (a) GDPR in the event of consent being given, or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
When you contact us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.
6) Data processing when opening a customer account
In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the controller at the above-mentioned address. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary, and we have no legitimate interest in continuing to store it.
7) Use of customer data for direct marketing
7.1 Registration for our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you only receive the newsletter after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. We will save your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter will be used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.
7.2 Newsletter dispatch via Klaviyo
Newsletter registration: If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR. The newsletter is sent via the service provider Klaviyo Inc. (125 Summer St, Boston, MA 02110, USA). As part of our collaboration with this service provider, certain data may be transferred to a third country.
Direct advertising: If we receive your email address in connection with the sale of a product or service and you have not objected, we reserve the right, based on Section 7 (3) of the German Unfair Competition Act (UWG), to regularly send you offers for products similar to those you have already purchased from our range by email. This serves to protect our legitimate interests in advertising to our customers, which prevail within the framework of a balancing of interests. The newsletter is also sent via the service provider Klaviyo Inc.
Revocation and objection: You can unsubscribe from the newsletter and object to the use of your e-mail address at any time and can do so either by sending a message to the contact option described in point 5 or via a link provided for this purpose in the newsletter.
Data deletion: After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.
Further information: Klaviyo Inc.'s data processing terms, which comply with the standard contractual clauses, can be found at:
https://www.klaviyo.com/legal/data-processing-agreement
For more information about how Klaviyo Inc. processes data, please visit: https://www.klaviyo.com/legal/privacy/privacy-notice?tid=331711113090
8) Data processing for order processing
8.1 To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact information you provided when placing your order (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period via a suitable communication channel (e.g., by post or email) within the scope of our statutory information obligations pursuant to Art. 6 (1) (c) GDPR. Your contact information will be used strictly for the purpose of notifying you about updates owed by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
8.2 Use of payment service providers (payment services)
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, payment processing will be carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process, along with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data will be passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com/legal/privacy .
Data protection information about Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
9) Online Marketing
9.1 Facebook Pixel for creating custom audiences (with Cookie Consent Tool)
Our online offering uses the so-called “Facebook Pixel” of the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).
If a user clicks on an ad placed by us that is displayed on Facebook, a Facebook pixel is added to the URL of our linked page. If our page allows data sharing with Facebook via pixel, this URL parameter is written into the user's browser via a cookie, which our linked page itself sets. This cookie is then read by Facebook pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is able to define visitors to our online offering as a target group for displaying advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads we place only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The data collected is anonymous to us, meaning it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy ( https://www.facebook.com/about/privacy/ ). The data can enable Facebook and its partners to place advertisements on and outside of Facebook.
The data processing associated with the use of the Facebook Pixel takes place exclusively with your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
9.2 - Microsoft Advertising
This website uses the conversion tracking technology “Microsoft Advertising” from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft will place a cookie on your computer if you have accessed our website via a Microsoft advertising ad. Cookies are small text files that are stored on your device. These cookies expire after 180 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognize that the user clicked on the ad and was redirected to this page (conversion page).
The information collected using the conversion cookie is used to compile conversion statistics, i.e., to record how many users reach a conversion page after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
- Google Ads conversion tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). Based on the data from the advertising campaigns, we can determine the success of individual advertising measures. Our goal is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transferred to Google LLC servers in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
- Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Cookie IDs also allow GMP to record conversions related to ad requests. This is the case, for example, when a user sees a GMP ad and later visits the advertiser's website using the same browser and makes a purchase through that website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected through the use of this tool by Google and therefore inform you according to our current state of knowledge as follows: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC in the USA.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
The privacy policy of GMP by Google can be found here: https://www.google.de/policies/privacy/
10) Web analysis services
10.1 Google (Universal) Analytics with Google Signals
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies," which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) is typically transferred to a Google server and stored there. This may also include transmission to Google LLC servers in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()," which ensures anonymization of the IP address by shortening it and prevents it from being directly linked to a person. This extension shortens your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also uses a special feature called "demographic features" to compile statistics about the age, gender, and interests of site visitors based on an analysis of interest-based advertising and third-party information. This allows the definition and differentiation of website user groups for the purpose of targeting marketing measures. However, data collected using "demographic features" cannot be assigned to a specific individual.
Details on the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to share it with third parties. For the transfer of data from the EU to the USA, Google relies on the European Commission's standard data protection clauses, which are intended to ensure compliance with European data protection standards in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
This website uses the Google Signals service as an extension of Google Analytics. With Google Signals, we can have Google create cross-device reports (so-called "cross-device tracking"). If you have activated "personalized ads" in your Google Account settings and you have linked your internet-enabled devices to your Google Account, Google can analyze user behavior across devices and create database models based on this, provided you have given your consent to the use of Google Analytics in accordance with Art. 6 (1) (a) GDPR (see above). This takes into account the logins and device types of all site visitors who were logged into a Google Account and who have completed a conversion. The data shows, among other things, the device on which you first clicked on an ad and the device on which the corresponding conversion took place. We do not receive any personal data from Google, only statistics created based on Google Signals. You have the option of deactivating the "personalized ads" function in the settings of your Google Account and thus turning off cross-device analysis. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information can be found here: https://support.google.com/analytics/answer/7532985?hl=de
10.2 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of website usage.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, truncated by the last digits; see below) is usually transmitted to a Google server, where it is stored and processed. This may also involve transmitting information to the servers of Google LLC, located in the USA, for further processing.
When using Google Analytics 4, the IP address transmitted by your device when you use the website is automatically collected and processed anonymously by default, so that the information collected cannot be directly linked to a specific person. This automatic anonymization occurs by Google abbreviating the last digits of the IP address transmitted by your device within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities and usage behavior, and to provide us with other services related to your website and internet usage. The shortened IP address transmitted by your device as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be retained for two months and then deleted.
Google Analytics 4 also uses a special feature called "demographic features" to compile statistics about the age, gender, and interests of website users based on an analysis of interest-based advertising and third-party information. This makes it possible to identify and differentiate website user groups for the purpose of targeting marketing measures. However, data collected via "demographic features" cannot be assigned to a specific person, including you personally. This data collected via the "demographic features" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the device you use to access the website, will only take place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without your consent, Google Analytics 4 will not be used while you use the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.
In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (so-called “cross-device tracking”). If you have activated “personalized ads” in your Google Account settings and have linked your internet-enabled devices to your Google Account, Google can analyze usage behavior across devices and create database models based on this if you give your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR. This takes into account the logins and device types of all website users who were logged into a Google Account and who have performed a conversion. The data shows, among other things, the device on which you first clicked on an ad and the device on which the corresponding conversion took place. We do not receive any personal data from Google, but only statistics created on the basis of Google Signals. You have the option to deactivate the "personalized ads" function in your Google Account settings and thus prevent cross-device analysis in connection with Google Signals. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with European data protection standards, including any transfer of data from the EU or EEA to the USA and any further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information about Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites
11) Retargeting/ Remarketing/ Recommendation Advertising
Dynamic Yield
This website uses the retargeting technology “Dynamic Yield” from Dynamic Yield Ltd., Highlands House, Basingstoke Road, Spencers Wood, Reading, Berkshire, England RG7 1NT (“Dynamic Yield”). This technology enables us to specifically target visitors to our website who have already shown an interest in our shop and our products with personalized, interest-based advertising. The advertising is displayed based on a cookie-based analysis of previous usage behavior, but no personal data is stored. When retargeting technology is used, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your interests and thus tailor the advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will therefore be shown advertising that is highly likely to correspond to your product and information interests.
All processing described above, in particular the setting of Dynamic Yield cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement ("Data Processing Addendum", available at https://www.dynamicyield.com/dpa/ ) with Dynamic Yield, which obliges the provider to protect the data of our site visitors and not to pass it on to third parties.
Google Ads Remarketing
Our website uses Google Ads Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie on your device’s browser which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Further data processing only takes place if you have consented to Google linking your internet and app browsing history with your Google Account and using information from your Google Account to personalise ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data to create audiences. When using Google Ads Remarketing, personal data may also be transferred to Google LLC servers in the USA.
Details on the processing initiated by Google Ads Remarketing and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/onweb/
Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
12) Page functionalities
12.1 Facebook plugins with Shariff solution
Our website uses so-called social plugins ("plugins") from the social network Facebook, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when you visit our website, these buttons are not fully integrated as plug-ins, but rather simply via an HTML link. This type of integration ensures that when you visit a page on our website containing such buttons, no connection is established with the Facebook servers. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact with the plug-ins (possibly after entering your login data).
For information on the purpose and scope of data collection and further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php
12.2 Google reCAPTCHA
On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an entry has been made by a natural person or has been misused through machine and automated processing. The service includes sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.
Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
To the extent legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect. To exercise your consent, please follow the objection option described above.
13) Tools and Other
Cookie Consent Tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they visit the page in the form of an interactive user interface, where consent for specific cookies and/or cookie-based applications can be given by checking the appropriate boxes. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by checking the appropriate boxes. This ensures that such cookies are only placed on the user's device if consent has been given.
The tool uses technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for processing is Art. 6 (1) (c) GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
14) Rights of the data subject
14.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising these rights:
Right to information pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to revoke consent given in accordance with Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
If you exercise your right to object, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. You can exercise your right of objection as described above.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
15) Duration of storage of personal data
The duration of storage of personal data is determined by the respective legal basis, the purpose of the processing and – where applicable – also by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When personal data is processed on the basis of an express consent in accordance with Art. 6 (1) (a) GDPR, this data will be stored until the data subject revokes his or her consent.
If there are statutory retention periods for data that are processed within the framework of legal transactions or obligations similar to legal transactions on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after the retention periods have expired, provided that they are no longer required to fulfil or initiate a contract and/or we no longer have a legitimate interest in continuing to store them.
When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.