Skip to content
  1. Home
  2. Data privacy

Kräuterhaus Sanct Bernhard KG Data Protection Declaration

We are delighted that you are visiting our web site and thank you for your interest. Below we inform you about how we handle your personal data when using our web site. Personal data are all data relating to an identified or identifiable individual.

A.      Information on responsibilities

Kräuterhaus Sanct Bernhard KG
Helfensteinstr. 47

73342 Bad Ditzenbach

Germany
info@kraeuterhaus.de

B.      Data protection officer contact data

Data protection officer of Kräuterhaus Sanct Bernhard KG

Kräuterhaus Sanct Bernhard KG

Helfensteinstr. 47

73342 Bad Ditzenbach

Germany

datenschutz@kraeuterhaus.de

C.      Processing personal data       

1.       Data collation when visiting our web site

If you only use our web site for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server when you visit our web site. This relates to the following data:

- Our visited web site

- Date and time at the time of access

- Volume of transmitted data in bytes

- Source/reference from which you reached the page

- Browser used

- Operating system used

- IP address used

This data is also saved in so-called logfiles in our system. This data is not saved together with other personal data of the visitor.

Nor does any transfer of this data to third parties take place. In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing.

Temporary storage of the IP address by the system is necessary to enable delivery of the web site. For this, the IP address must be stored for the duration of the session. Storage of data in logfiles takes place to ensure the functionality of the web site. In addition, the files are used to optimise the web site and to ensure the security of our information technology systems.

The legal basis for the temporary storage of the data as well as the storage in the context of the log files is Art. 6 para. 1 lit. f) GDPR. The legitimate interest in the data processing required for this purpose exists in the aforementioned processing purposes.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection or processing. In the case of the collection and storage of the data for the provision of the web site, this is the case when the respective session has ended. In the case of storage of the data in logfiles, this is the case seven days after collection at the latest.

According to Art. 21 GDPR, you have the right, at any time, to object to the processing of the data for reasons that arise from your particular situation. We will then no longer process the data unless it is possible to demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if its processing is for the purpose of enforcing, pursuing or defending legal claims.

To exercise a corresponding objection, the visitor may contact us in particular by email using the e-mail address datenschutz@kraeuterhaus.de. The data will be deleted in case of a legitimate objection.

2.       Contact form and e-mail contact

By using our contact form, the data entered in the input mask will be transmitted to us and saved. At the time of the sending the message, the following data will also be saved:

•           Date and time

Alternatively, contact via the provided e-mail address is possible. In this case, the visitor's personal data transmitted by e-mail will be stored.

The data will be used exclusively for processing the respective enquiry. Data is not passed onto third parties in association with this. In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing

Personal data from the input mask or your e-mail request is processed solely to process the contact. This also represents the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for processing the data, which is processed in connection with an enquiry is Art. 6 para. 1 lit. f) GDPR. If contact has the intention of concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. With regard to the personal data from the input mask of the contact form and data sent by e-mail, this is the case when the respective conversation or enquiry has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days from collection of the data.

You can object to the storage of your personal data at any time in accordance with Art. 21 GDPR. The conversation cannot be continued in this case.

To exercise a corresponding objection or revocation, you can contact us in particular by email using the email address datenschutz@kraeuterhaus.de. The data, which was saved during the contact, will be deleted in the above cases.

3.       Customer account

When opening a customer account, the data shown on the entry form is collected. This data is processed exclusively for the purpose of processing pre-contractual measures, for the performance of the contract and for the purpose of customer care (for example, in order to be able to offer certain overviews or easier order processing). At the time of the sending the customer account registration, the following data will also be saved:

•           Date and time

With the exception of the transfer of data in the context of goods orders (see below under point 4.) transfer of this data to third parties does not take place. In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing.

The legal basis for the processing of your data is Art. 6 para. 1 lit. b) GDPR.

You have the option of deleting your customer account at any time. For this, please get in touch with us using the contact data provided above under A. With the dissolution of the customer account, your data will be deleted or – if necessary – restricted for the duration of tax and commercial retention periods for these purposes and then deleted, unless you have expressly consented to a further use of your data, or if we have reserved further data use, which is permitted by law and about which we inform you in this statement.

4.       Order placement

In the context of the order of goods, the data, which is evident from the respective entry form, which we need to conclude the contract or process the contract and without which the user can not conclude the order, is collected.

The data will be used exclusively for the purpose of concluding and executing the contract as well as - with regard to name, address and email address - for the purposes of the described advertising purposes under points 5 and 6.

As part of the contract, your data will be forwarded to the transport company commissioned with the delivery, insofar as this is necessary for delivery of the goods. We will pass on your payment details as part of the contractually agreed payment processing to the commissioned credit institution as well as to the payment service providers involved if this is necessary for payment processing.

In case of the payment methods credit card via PayPal, direct debit via PayPal or - if offered - “purchase on account” via PayPal, we pass on your payment data within the scope of payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). For further information on the processing of data by PayPal, please refer to the PayPal privacy policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-ful

In case of the payment method via Payone we pass on your payment data within the scope of payment processing to PAYONE GmbH, Lyoner Straße 15, 60528 Frankfurt am Main. For further information on the processing of data by PayPal, please refer to the Payone privacy policy: Data protection information for cardholders | PAYONE

In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing.

Credit check and scoring: If we have advance outlays, for example in the case of a purchase on account, we obtain new creditworthiness information from the company SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, to safeguard our legitimate interests. For this purpose, we provide the personal data required for a credit check to the company SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden and use the information received on the statistical probability of default to make a balanced decision on the establishment, implementation or termination of the contract.

The credit information can contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical methods and whose calculation includes, among other things, address data. Your concerns will be considered in accordance with the statutory provisions.

The legal basis for the processing of your data within the scope of ordering goods is Art. 6 para. 1 lit. b) GDPR.

After full processing of the contract, your data will be deleted or – if necessary within the scope of tax and commercial retention periods – will continue to be saved and then deleted after expiry of the above deadlines, unless you have expressly consented to a further use of your data, or if we have reserved further data use, which is permitted by law and about which we inform you in this statement.

5.       E-mail newsletter

5.1    E-mail newsletter after subscription

If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory requirement for sending the newsletter is your e-mail address. The indication of further possible data is voluntary and will be used to address you personally. We use the double opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you agree to the newsletter being sent. We will then send you a confirmation e-mail asking you to confirm that you wish to receive newsletters in the future by clicking on a link.

In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework newsletter dispatch. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will be used exclusively for promotional purposes by means of the newsletter. You can deregister from the newsletter at any time via the link provided in the newsletter, or by sending us appropriate notification to the responsible person stated under A. After cancellation, your e-mail address will no longer be used for this advertising purpose and deleted immediately, unless you have expressly consented to a further use of your data or we reserve the right to further data usage, which is permitted by law and about which we inform you in this statement.

If you would like to receive the newsletter offered on the web site, we need an e-mail address from you as well as information that allows us to check that you are the owner of the e-mail address provided and that you agreed to receipt of the newsletter.

We use the so-called double opt-in procedure to ensure that the newsletter is sent by mutual agreement. As part of this, the potential recipient can be included in a distribution list. Afterwards, the user receives a confirmation e-mail to confirm their registration in a legally binding manner. The address will only be actively included in the distribution list if confirmation is received.

We use this data exclusively for despatch of the requested information and offers.

Brevo is used as newsletter software. Your data is hereby transmitted to Sendinblue GmbH. Sendinblue GmbH is prohibited from selling your data and to using it for purposes other than for sending newsletters. Sendinblue GmbH is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

Further information can be found here: https://www.brevo.com/gdpr/

You can withdraw your agreement to your data and e-mail address being saved, and to their use for despatch of the newsletter, at any time, such as by using the "unsubscribe" link in the newsletter.

The data protection measures are always subject to technical innovations. For this reason, we ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.

5.2    E-mail newsletter to customers without subscription

Furthermore, we will use your e-mail address that we receive in connection with the sale of goods or services solely in the form of our newsletter to directly advertise our own goods or services which are similar to the ones ordered by you – insofar as you have not objected to this utilisation.

In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework newsletter dispatch. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing

The legal basis for the processing of your data is Art. 6 para. 1 lit. f) GDPR. In this context, the legitimate interest required in this context is our interest in the possibility of direct mail advertising.

You can object to your e-mail address being utilised for the above advertising purpose at any time. Your objection (and deregistration from our newsletter as a result) can be exercised by sending an appropriate message to our e-mail address datenschutz@kraeuterhaus.de.

6.       Advertising by post

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and occupation, trade or business name in accordance with Art. 6 para. 1 lit. f GDPR and to use them to send interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible (see above A.).

7.      Dispatch of rating requests by e-mail

Provided that you have given us your express consent to do so during or after your order in accordance with Art. 6(1) sentence 1, letter a GDPR, we will use your e-mail address to request a rating of your order via the rating system we use. This consent can be revoked at any time by sending a message to the contact option indicated in this privacy policy or via a link provided for this purpose in the rating request.

If necessary, the rating requests are also sent by our service provider Trusted Shops within the scope of processing on our behalf. Trusted Shops also uses service providers from the USA. An appropriate level of data protection is guaranteed. Further information on data protection at Trusted Shops can be found here. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option indicated in this privacy policy.

8.       Integration of the Trusted Shops Trustbadge 

The Trusted Shops Trustbadge is integrated on this website to display the Trusted Shops services (e.g. Trustbadge and collected reviews) as well as to offer Trusted Shops products to buyers after an order.

This is necessary to safeguard our legitimate prevailing interests in an optimal marketing by ensuring the safety of your purchase according to Article 6 (1) f GDPR. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany with whom we are jointly responsible for data protection pursuant to Art. 26 GDPR. In the following, we inform you about the essential contractual contents pursuant to Art. 26 (2) DSGVO within the scope of this data protection notice. 

The Trustbadge is made available by a USA-based CDN provider (Content-Delivery-Network). An adequate level of data protection is ensured by standard data protection clauses and other contractual measures. You can find further information to the data security of Trusted Shops GmbH can be found in their privacy policy: https://www.trustedshops.co.uk/imprint/

When the Trustbadge is called up, the web server automatically saves a server log file which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to your person. The anonymized data is used in particular for statistical purposes and for error analysis.
After order completion, your email address, which is hashed by cryptological one-way function, is transmitted to Trusted Shops GmbH. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary for the fulfillment of our and Trusted Shops' overriding legitimate interests in the provision of the Buyer Protection linked to the specific order in each case and the transactional evaluation services pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO.

If this is the case, further processing will be carried out in accordance with the contractual agreement between you and Trusted Shops. If you have not yet registered for the services, you will be given the opportunity to do so for the first time. Further processing after registration also depends on the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data will be automatically deleted by Trusted Shops GmbH and a personal reference is then no longer possible.   

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 (1) lit. f GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and further contractual measures, and in the case of Israel by an adequacy decision.

Within the framework of the joint responsibility existing between us and Trusted Shops GmbH, if you have any data protection questions and wish to assert your rights, please prefer to contact Trusted Shops GmbH using the contact options provided in the data protection information linked above. Irrespective of this, however, you can always contact the responsible person of your choice. Your inquiry will then, if necessary, be forwarded to the other responsible party for a response. 

9.       Application process

If you apply to us for the purpose of establishing an employment relationship, we process your personal data, which you have submitted to us in the context of your application, solely for the purpose of carrying out the application process (procedure for deciding on the establishment of an employment relationship). The legal basis for the processing of data is § 26 para. 1 BDSG in conjunction with Art. 6 para. 1 lit. b) (initiation of employment) and Art. 88 GDPR. We process voluntary information as part of your application on the basis of § 26 para. 2 BDSG in conjunction with Art. 6 para. 1 lit. a) (consent) and Art. 88 GDPR.

After completing the application process, we will save the data for a maximum of 6 months from the end of the application process. This is done to defend any claims under the General Equal Treatment Act (AGG). The corresponding data is deleted once the above deadline has passed.

10.       Cookies

In order to make the visit to our web site attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files, which are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us, or our partner company (third-party cookies), to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process individual user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (for example, remembering the contents of a virtual shopping basket for a later visit to the web site). Insofar as personal cookies are also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR for safeguarding our legitimate interests to the best possible functionality of the web site as well as a customer-friendly and effective design of the page visit.

We may work with advertising partners to help us make our web site more interesting to you. For this purpose, in this case, when you visit our web site, cookies from partner companies are stored on your hard disk (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of cookies and the scope of the information collected in the following paragraphs.

Please note that you can set your browser so that you can be informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Every browser differs in the way it manages cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our web site may be limited.

11.   Use of social media

11.1     Use of Youtube videos

This website uses Youtube embedding feature to display and play videos of “Youtube” provided by Google Ireland Limited (“Google”), a company registered and operated under Irish law (registration number: 368047) at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The extended privacy mode is used, which, according to the provider, only stores user information when starting to play the video. When the playback of embedded Youtube videos starts, the provider “Youtube” uses cookies to collect information about user behaviour. According to information from “Youtube”, these are used, amongst others, to collect video statistics, improve user-friendliness and prevent abusive practices. If you're logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish your profile to be assigned on YouTube, you must log out before activating the button. Google stores your data (even for users not logged-in) as usage profiles and evaluates them. According to Art. 6 para. 1 lit. f GDPR, such an evaluation is based on the legitimate interests of Google in the display of personalised advertising, market research and/or tailor-made design of its web site. You have a right to object to the creation of these user profiles, but you must contact YouTube to exercise your right.

Regardless of any playback of the embedded video, every time you visit this web site, it will connect to the Google Network “DoubleClick”, which may trigger further data processing without our having any influence.

For more information on data protection at “YouTube”, please refer to the provider’s privacy policy at: https://www.google.com/intl/en/policies/privacy

12.    Online marketing

12.1 Use of Google Ads Conversion-Tracking

This website uses the “Google Ads” online advertising program and, as part of Google Ads, conversion tracking from Google Ireland Limited (“Google”), a company registered and operated under Irish law (Registry Number: 368047), located in Gordon House. Barrow Street, Dublin 4, Ireland (“Google”). We use the Google Ads service to draw attention to our attractive offers with the help of advertising materials (so-called Google Ads) on external web sites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our web site more interesting to you and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files, which are stored on your computer system. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this web site and the cookie has not expired yet, Google and we can recognise that the user clicked on the ad and was redirected to this page. Every Google Ads advertiser receives a different cookie. Cookies cannot be tracked through AdWords advertisers' web sites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can easily block use by disabling the Google Conversion Tracking cookie via your Internet browser under User Preferences. Then you will not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in a targeted advertising according to Art. 6 para. 1 lit. f GDPR.

For more information about Google’s privacy policy, visit the following Internet address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies by blocking them by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this web site may not be used or may only be able to be used with restrictions if you have deactivated the use of cookies.

12.2 Use of affiliate programs

            - Firstlead GmbH - ADCELL

We participate in the partner program “ADCELL” of Firstlead GmbH, Rosenfelder St. 15-16, 10315 Berlin (hereinafter “ADCELL”). As part of its services, ADCELL stores cookies on users’ end devices to track transactions (such as leads and sales) when a visitor clicks on an ad with the partner link. These cookies are used solely for the purpose of correctly establishing the success of an advertising medium and the corresponding billing within the network. ADCELL also uses so-called tracking pixels. These can be used to evaluate information such as visitor traffic on the pages.

The information generated by cookies and tracking pixels on the use of this web site (including the IP address) and delivery of advertising formats are transmitted to a server of ADCELL and stored there. Among other things, ADCELL can detect that the partner link was clicked on this web site. ADCELL may provide this (anonymised) information to contractors under certain circumstances, but data such as the IP address will not be compiled with other stored data.

Insofar as the information also contains personal data, the described processing takes place on the basis of our legitimate financial interest in the settlement of commission payments with ADCELL in accordance with Art. 6 para. 1 lit. f GDPR.

If you want to block analysis of the user behaviour via cookies, you can set your browser so that you are informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. If you do not agree to the processing of your data described above, you have the option of deactivating data processing at www.adcell.de/datenschutz.

            - AWIN AG

We take part in the Performance Advertising Network of AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter “AWIN”). As part of its tracking services, AWIN stores cookies on end devices of users who visit or use web sites or other online services of its customers (for example, register for a newsletter or place an order in an online store) for the documentation of transactions (such as leads and sales). These cookies are used solely for the purpose of correctly establishing the success of an advertising medium and the corresponding billing within its network.

In a cookie, only the information is placed about when a particular advertising material was clicked on via an end device. In the AWIN Tracking Cookies an individual number of digits, but not assignable to the individual user, is deposited, with which the affiliate program of an advertiser, the publisher, documents the time of the action of the user (click or view). In doing so, AWIN also collects information about the end device from which a transaction is being performed, e.g. the operating system and the calling browser. Insofar as the information also contains personal data, the described processing takes place on the basis of our legitimate financial interest in the settlement of commission payments with AWIN in accordance with Art. 6 para. 1 lit. f GDPR.

If you do not want to store cookies in your browser, you can do so by selecting the appropriate browser setting. You can deactivate the storage of cookies under Extras/Internet options in your browser, restrict them to certain web sites or set your browser to notify you when a cookie is sent. Please note, however, that in this case you will have to expect a limited representation of the online offers and limited user guidance. You can also delete cookies at any time. In this case, the information stored therein will be removed from your end device.

For more information about AWIN’s data usage, please read the company’s privacy policy: https://www.awin.com/de/rechtliches

            - belboon GmbH

The party responsible for processing has integrated Belboon components on this web site. Belboon is a German affiliate network, which offers affiliate marketing. Affiliate marketing is an Internet-based form of distribution that allows commercial operators of web sites, the so-called merchants or advertisers, to show advertising, which is usually remunerated via click or sale commissions, on third-party web sites, i.e. sales partners, who are also referred to as affiliates or publishers. Through the affiliate network, the merchant provides an advertising material, i.e. a banner or another suitable means of Internet advertising available, which subsequently incorporated by an affiliate on their own web sites or other channels, such as the keyword advertising or e-mail marketing.
The operator of belboon is belboon GmbH, Weinmeisterstr. 12-14, 10178 Berlin.
Belboon sets a cookie on the information technology system of the person concerned. Cookies have already been explained above. The Belboon tracking cookie does not save personal data. Only the identification number of the affiliate, i.e. the partner mediating the potential customer, as well as the ordinal number of the visitor to a web site and the clicked advertising medium are stored. The purpose of the storage of this data is the processing of commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Belboon.


The affected person can prevent the setting of cookies by our web site, as shown above, at any time by means of a corresponding setting in the Internet browser used and thus permanently contradict the placement of cookies. Such a setting of the Internet browser used would also prevent Belboon from setting a cookie on the information technology system of the person concerned. In addition, cookies already set by Belboon can be deleted at any time via an Internet browser or other software programs.
Belboon's applicable privacy policy is available at https://www.belboon.com/de/ueber-uns/datenschutz/.

12.3 Use of coupon marketing service providers

            - Sovendus Sales

In order to select a currently interesting voucher offer for you, we will transmit your pseudonymised hash value of your e-mail address and your IP-address in encrypted form to Sovendus GmbH, Hermann-Veit-Straße 6, D‑76135 Karlsruhe (Sovendus) (Art. 6 par. 1 f GDPR). The pseudonymised hash value of your e-mail address is used to consider a possibly existing objection to receive offers from Sovendus (Art. 21 par.3, Art. 6 par. 1 c GDPR). The IP-address will be exclusively used for data security purposes and as a rule the same will be anonymised after seven days (Art. 6 Abs.1 f GDPR). Furthermore, we will transmit order number, order value with currency, session ID, coupon code, and time stamp in pseudonymised form to Sovendus for billing purposes (Art. 6 Abs.1 f GDPR). If you are interested in a voucher offer of Sovendus, while there is no objection existing to receive such offers, and if you click on the voucher banner, we will transmit your salutation, your name, your postal code and country and your e‑mail address in encrypted form to Sovendus to prepare a voucher (Art. 6 par. 1 b, f GDPR).

You will find further information about the processing of your data by Sovendus in their Online Data Protection Notice at https://www.sovendus.co.uk/privacy_policy.

12.4 Use of evaluation services

            - Trustpilot A/S:

Customer ratings are particularly productive for transparency and optimisation, therefore we offer you the opportunity to make an evaluation regarding our service via the evaluation service www.trustpilot.de offered by Trustpilot. We use an interface to the independent rating portal Trustpilot, which is operated by Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark. We are unable to individually control or influence rating invitations. This is the only way to guarantee a complete, independent and unimpaired customer rating for our company and our services. The data transferred to the business app for this purpose (name, first name, e-mail address and reference number) are transferred to our business app by Trustpilot and are neither used by Trustpilot nor passed on to third parties. A review of our company can be found at https://de.trustpilot.com/review/. You, as a customer, are free to provide a review. The creation/opening of a user profile at Trustpilot is required for the submission of a rating or the collection of customer feedback. In addition to a rating for the inviting company, reviews for any company can also be entered on the Trustpilot rating portal. However, in the case of a rating without a prior invitation, a clear reference to a contractual relationship with the rated company is required. You can receive additional information from Trustpilot. If a review is made by clicking on the link contained in the invitation, after entering the personal data, usually your name and e-mail address for verification, a user profile is automatically created at Trustpilot. This is associated with consent to the privacy policy and the terms and conditions of Trustpilot. These can be viewed on the Trustpilot web site at: https://de.legal.trustpilot.com/end-user-privacy-terms. By participating in this feedback system, your rating will be published on our web site as well as on the web site of Trustpilot. You can find additional information in data protection regulations of Trustpilot and in its terms and conditions.

If you do not agree with this, please send us an e-mail.

13.    Web analysis services

13.1 Econda (econda GmbH)

This web site uses technologies from econda GmbH, Zimmerstr. 6, 76137 Karlsruhe (www.econda.de) based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 para. 1 lit. f GDPR to collect and store data. From this data, pseudonymised usage profiles can be created and evaluated for the same purpose. Cookies can be used for this. Cookies are small text files stored locally in the cache of the site visitor's Internet browser. Cookies allow recognition of the Internet browser amongst other. The data collected with econda technology will not be used to personally identify the visitor to this web site without the explicit consent of the person concerned and will not be combined with personal data about the bearer of the pseudonym. Users may object to data collection and storage at any time with effect for the future. In order to object to data collection and storage of your visitor data for the future, you can obtain an opt-out cookie from econda under the following link, which ensures that no visitor data from your browser will be collected and stored on econda in the future:

https://www.econda.de/econda/datenschutz/widerruf-datenspeicherung.html

The opt-out-cookie has the name “econdaNoTrack” and is set by “econda”. For more information about econda’s privacy policy, visit the following Internet address:

https://www.econda.de/econda/datenschutz/datenschutzerklaerung.html

13.2 Google Analytics 4

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the use of websites.When using Google Analytics 4, so-called "cookies" are used as standard. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, a company based in the USA, where the information is further processed.

When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed by default and automatically only in an anonymized manner, so that a direct personal reference of the collected information is excluded. This automatic anonymization is carried out by shortening the IP address transmitted by your terminal device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.

On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports (reports) on your website activities or your usage behavior and to provide us with other services related to your website usage and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be retained for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics with statements about age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish between groups of website users for the purpose of targeting marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic characteristics" function is retained for two months and then deleted.

All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent once given at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website. On this website, the "Google Signals" service can also be used as an extension of Google Analytics 4.

With Google Signals, cross-device reports can be created by Google (so-called "cross-device tracking"). If you have activated "personalised ads" in your Google account settings and you have linked your internet-enabled devices to your Google account, Google can analyse user behaviour across devices and create database models based on this, provided you have given your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 letter a GDPR (see above). The logins and device types of all page visitors who were logged into a Google account and performed a conversion are taken into account. The data shows, among other things, on which device you first clicked on an ad and on which device the associated conversion took place. Insofar as Google Signals is used, we do not receive any personal data from Google, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalised ads" function in the settings of your Google account and thus turning off the cross-device analysis. To do this, follow the instructions on this page: Eingeblendete Werbung direkt über Anzeigen verwalten - Mein Anzeigen-Center-Hilfe

Further information can be found here: Google-Signale aktivieren - Google Analytics-Hilfe

As an extension of Google Analytics 4, the "UserIDs" function can also be used on this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behaviour can also be analysed across devices if you have given your corresponding consent to the use of Google Analytics in accordance with Art. 6 Para. 1 letter a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the relevant conversion took place. We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties.To ensure compliance with the European level of data protection, even in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.

Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: Privacy Policy – Privacy & Terms – Google

Details on the processing triggered by Google Analytics 4 and Google's handling of data from websites can be found here: How Google uses information from sites or apps that use our services – Privacy & Terms – Google

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

 

13.3           Facebook Pixel

This website uses the visitor action pixel from Facebook to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

In this way, the behaviour of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This enables Facebook to show advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as site operator.

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f) GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding agreement has been requested (e.g. agreement to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. f) GDPR; the agreement can be revoked at any time.
You can find more information about protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.

You can also deactivate the "Custom Audiences" remarketing function in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can disable Facebook's usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

13.4           Pinterest Pixel

We have integrated Pinterest-Tag on this website. The provider is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

Pinterest-Tag is used to track certain actions you take on our website. The data may subsequently be used to display interest-based advertising to you on our website or on another page of the Pinterest-Tag advertising network. For this purpose, the Pinterest-Tag collects a tag ID, your location, and the referrer URL, among other things. Furthermore, campaign-specific data such as order value, order quantity, order number, category of purchased items and video views can be recorded.

Pinterest-Tag uses technologies that enable cross-page recognition of the user to analyse user behaviour (e.g. cookies or device fingerprinting). The use of Pinterest-Tag is based on Art. 6(1) f GDPR. The website operator has a legitimate interest in marketing measures that are as effective as possible. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1) a GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG.

This consent can be withdrawn at any time.
Pinterest is a global company, so data transfer to the USA may also take place. According to Pinterest, this data transfer is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://policy.pinterest.com/de/privacy-policy.

You can find additional information on Pinterest-Tag here:
https://help.pinterest.com/de/business/article/track-conversions-with-pinterest-tag.

14.    Retargeting/remarketing/recommendation advertising

14.1 Bing Ads (Microsoft Corporation)

This web site uses the conversion tracking technology “Bing Ads” from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads places a cookie on your computer if you have reached our web site via a Microsoft Bing Ad. Cookies are small text files, which are stored on your computer system. These cookies lose their validity after 180 days and are not used for personal identification. If the user visits certain pages of this web site and the cookie has not expired yet, Microsoft and we can recognise that the user clicked on the ad and was redirected to this page (conversion page). If personal data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in effective marketing.

The information gathered using the conversion cookie is used to generate conversion statistics i.e. to establish how many uses access a conversion page after clicking on an ad. We are told the total number of users who clicked on out ad and were redirected to a conversion tracking tag page. However, we do not receive information that personally identifies users.

If you do not want to participate in tracking, you can easily opt-out of this by disabling the Bing Ads Conversion Tracking cookie via your Internet browser under User Preferences. Then you will not be included in the conversion tracking statistics. Alternatively, using the EU opt-out site http://www.youronlinechoices.com/praferenzmanagement/, you can check if Microsoft advertising cookies are set in your browser and disable them.

For more information about Microsoft Bing Ad’s privacy policy, visit the following Internet address: https://privacy.microsoft.com/de-de/privacystatement

14.2 Criteo (Criteo SA)

On this web site, the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France (“Criteo”), uses “cookie” text files to provide information about the surfing habits of web site visitors are collected, stored and evaluated in pseudonymised form based on our legitimate interest in displaying personalised advertisements Art. 6 para. 1 lit. f GDPR. Using an algorithm, Criteo analyses the surfing behaviour and can then display targeted product recommendations as personalised advertising banners on other web sites (so-called publishers). This collated data can never be used to personally identify the visitor to this web site. Any other use or transfer to a third party does not take place.

To contradict the collection of data and creation of pseudonymised user profiles for the future, you can use the following so-called opt-out cookie:

Criteo opt-out (https://www.criteo.com/de/privacy/)

You can obtain further information on the Criteo technology in the Criteo data protection regulations:

https://www.criteo.com/de/privacy/

14.3 Google Ads Remarketing

Our web site uses the features of Google Ads Remarketing to advertise this web site on Google’s search results, as well as third party web sites. The provider is Google Ireland Limited (“Google”), a company registered and operated under Irish law (register number: 368047), located in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Processing is based on our legitimate interest in optimal marketing our web site in accordance with Art. 6 para. 1 lit. f GDPR.

Any further data processing will only take place if you have agreed with Google that your Internet and App browser history will be linked to your Google Account by Google and information from your Google Account will be used to personalise the ads you view on the web. In this case, if you are logged into Google when visiting our web site, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google will temporarily link your personal information with Google Analytics data to create audiences.

You can deactivate cookies by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to find out about setting cookies and how to make settings. Finally, you can set your browser so that you are informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. If you do not accept cookies, the functionality of our web site may be limited.

Further information and the data protection regulations regarding advertising and Google can be found here:

https://www.google.com/policies/technologies/ads/

15.    Doofinder search

In order to make visiting our website more attractive and to present you with better search results faster, we use the doofinder search function. It serves to protect our primarily legitimate interests in an optimised presentation of our offer in the context of a balancing of interests, in accordance with Section 6 (1) page 1 lit. f GDPR.

The operator of the pages is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain.

For this purpose, the browser you use must connect to the doofinderservers. In this manner, doofinder obtains the knowledge that our website has been accessed via your IP address. You can find more information about the doofinder search at https://www.doofinder.com/de/ and in the doofinder Data Protection Policy: https://www.doofinder.com/de/privacy-policy .

16.    Tools and others

- Google Maps

On our website, we use Google Maps (API) by Google Ireland Limited (“Google”), a company registered and operated under Irish law (register number: 368047), located in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. The use of this service will show you our location and make it easier for you to find us.

When you visit any of the sub pages where the Google Maps map is incorporated, information about your use of our web site (such as your IP address) is transmitted to Google's servers in the United States and stored there. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. If you're logged in to Google, your data will be assigned directly to your account. If you do not wish your profile to be assigned on Google, you must log out before activating the button. Google stores your data (even for users not logged-in) as usage profiles and evaluates them. Collection, storage and evaluation take place according to Art. 6 para. 1 lit. f GDPR, based on the legitimate interests of Google in the display of personalised advertising, market research and/or tailor-made design of Google web site. You have a right to object to the creation of these user profiles, but you must contact Google to exercise your right.

If you disagree with the future transmission of your data to Google when using Google Maps, you can also disable the Google Maps web service completely by turning off the JavaScript application in your browser. Google Maps and therefore the map display on this web site will then not be able to be used.

The Google terms of use can be viewed at https://www.google.de/intl/de/policies/terms/regional.html and the additional conditions of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

You will find detailed information on data protection associated with the use of Google Maps on the Google Internet site (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/

17.    Rights of the data subject

You generally have the following rights:

            Right to information (Art. 15 GDPR)

            Right tocorrection (Art. 16 GDPR)

            Right to deletion (Art. 17 GDPR)

            Right to restrict processing (Art. 18f. GDPR)

            Right to data portability (Art. 20 GDPR)

            Right to object to processing (Art. 21 GDPR)

Right of revocation

THE FOLLOWING APPLIES, IF YOU HAVE GIVEN US YOUR CONSENT TO PROCESS PERSONAL DATA:

YOU HAVE THE RIGHT TO REVOKE YOUR CONSENT AT ANY TIME FOR THE FUTURE. HOWEVER, SUCH A REVOCATION DOES NOT AFFECT THE LEGALITY OF THE PROCESSING DONE ON THE BASIS OF THE CONSENT.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, employment or the place of alleged infringement, in accordance with Article 77 GDPR, if you consider that the processing of your personal data breaches the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 of the GDPR.

18.    Data security

For security reasons and to protect the transmission of personal data and other confidential contents (for example, orders or inquiries to the person responsible), this web site uses an SSL or TLS encryption. You can recognise an encrypted connection by the string “https: //” and the lock icon in your browser bar.

19.    Actuality and changes to this data protection declaration

This data protection declaration is the current valid version and was updated in July 2023.

As a result of the further development of our web site and offers thereof or due to changes in legal or official requirements, it may be necessary to change this data protection declaration. The current data protection declaration can be accessed and printed on the web site at any time.