Unless otherwise stated below, providing your personal data is neither required by law or contract, nor necessary to enter into a contract. You are not obliged to provide the data. Not providing it has no consequences. This applies only where no other information is given for the processing operations described below.

"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any information about yourself.

Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (known as server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Contact

Controller

Please contact us if you wish. The controller responsible for data processing is: Hugo Winkler, youngle Ltd, Suite A Bank House, 81 St. Jude's Road, Egham, United Kingdom, TW20 0DF, +4915170566044, info@youngle.com

Customer-initiated contact by email

If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of handling and responding to your enquiry.

If the contact serves to carry out pre-contractual measures (for example advice where there is an interest in purchasing, or preparing a quotation) or relates to a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 (1) (b) GDPR.

If you contact us for other reasons, this data processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in handling and responding to your enquiry. In this case you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you that is based on Art. 6 (1) (f) GDPR.

We use your email address only to handle your enquiry. Your data is subsequently deleted, subject to statutory retention periods, unless you have consented to further processing and use.

Customer account and orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing takes place on the basis of Art. 6 (1) (a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data for orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. Providing the data is necessary for the conclusion of the contract. If you do not provide it, no contract can be concluded. Processing takes place on the basis of Art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you.

Your data is disclosed, for example, to the shipping companies and dropshipping providers you have selected, to payment service providers, to service providers for order processing and to IT service providers. In all cases we strictly observe the statutory requirements. The scope of the data transfer is kept to a minimum.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Reviews and advertising

Data collection when writing a comment or review

When you comment on or review a product or a post, we collect your personal data (name, email address, comment text) only to the extent you provide it. The processing serves the purpose of enabling comments/reviews and displaying them.

By submitting the comment/review you consent to the processing of the data transmitted. Processing takes place on the basis of Art. 6 (1) (a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal. Your personal data will then be deleted.

Use of your email address for direct marketing

We use the email address we received in connection with the sale of goods or services to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is necessary for the conclusion of the contract. If you do not provide it, no contract can be concluded. Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in direct marketing. You may object to this use of your email address at any time by notifying us. The contact details for exercising this objection can be found in our legal notice (Impressum). You may also use the link provided for this purpose in the marketing email. No costs arise other than transmission costs at base rates.

Use of Klaviyo

We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") for sending our newsletter, on the basis of a data processing agreement.

We pass on the information you provide when signing up for the newsletter (email address, first and last name where applicable) to Klaviyo. The data processing serves the purpose of sending the newsletter and evaluating it statistically.

In order to evaluate newsletter campaigns, the newsletters we send contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you opened the newsletter and whether you clicked any links it contained. In this context we collect your personal data such as IP address, browser type and device, and the time of access. Usage profiles may be created from this data under a pseudonym. The data collected is not used to identify you personally. It is used solely for statistical evaluation in order to improve newsletter campaigns.

Your data is generally transmitted to and stored on Klaviyo servers in the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.

Shipping service providers and merchandise management

Disclosure of your email address to shipping companies for delivery status updates

As part of processing the contract, we pass your email address on to the transport company, provided you expressly consented to this during the order process. The purpose of this disclosure is to inform you about the delivery status by email. Processing takes place on the basis of Art. 6 (1) (a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Use of an external merchandise management system

We use a merchandise management system to process contracts, on the basis of a data processing agreement. For this purpose, the personal data collected in connection with your order is transmitted to Billbee GmbH, Arolser Str. 10, 34477 Twistetal.

The processing of your personal data serves the purpose of performing the contract concluded with you and takes place on the basis of Art. 6 (1) (b) GDPR.

Payment service providers

Use of PayPal

We use the payment service PayPal, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"), on our website. The data processing serves the purpose of offering you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal so that the contract with you can be performed using the payment method selected. This processing takes place on the basis of Art. 6 (1) (b) GDPR.

All PayPal transactions are subject to the PayPal privacy policy, which you can find at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the payment service PayPal Plus, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"), on our website. The data processing serves the purpose of offering you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal or direct debit via PayPal, the data required for payment processing is transmitted to PayPal so that the contract with you can be performed using the payment method selected. This processing takes place on the basis of Art. 6 (1) (b) GDPR.

For individual payment methods such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit report where applicable, based on mathematical and statistical procedures and using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical procedures, the calculation of which includes address data among other factors. Your legitimate interests are taken into account in accordance with statutory provisions. The data processing serves the purpose of the credit check when initiating a contract. Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in protection against payment default where PayPal makes advance payment.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR, by notifying PayPal. Providing the data is necessary for concluding the contract with the payment method you have chosen. If you do not provide it, the contract cannot be concluded using the payment method you have selected.

Use of PayPal Express

We use the payment service PayPal Express, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"), on our website. The data processing serves the purpose of offering you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyse data when the website is accessed (for example IP address, device type, operating system, browser type, location of your device). Cookies may also be used for this purpose. Cookies allow your browser to be recognised.

Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in offering customers a choice of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal so that the contract with you can be performed using the payment method selected. This processing takes place on the basis of Art. 6 (1) (b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of PayPal Checkout

We use the payment service PayPal Checkout, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"), on our website. The data processing serves the purpose of offering you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal so that the contract with you can be performed using the payment method selected. This processing takes place on the basis of Art. 6 (1) (b) GDPR.

Cookies that allow your browser to be recognised may be stored in this context. The resulting data processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in offering customers a choice of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal and "Pay Later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report where applicable, based on mathematical and statistical procedures and using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical procedures, the calculation of which includes address data among other factors. Your legitimate interests are taken into account in accordance with statutory provisions. The data processing serves the purpose of the credit check when initiating a contract. Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in protection against payment default where PayPal makes advance payment.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR, by notifying PayPal. Providing the data is necessary for concluding the contract with the payment method you have chosen. If you do not provide it, the contract cannot be concluded using the payment method you have selected.

Third-party providers

If you pay using a third-party provider's payment method, the data required for payment processing is transmitted to PayPal. This processing takes place on the basis of Art. 6 (1) (b) GDPR. In order to carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing takes place on the basis of Art. 6 (1) (b) GDPR. Local third-party providers may include, for example:

• Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
• giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Purchase on invoice via PayPal

If you pay using the purchase-on-invoice payment method, the data required for payment processing is first transmitted to PayPal. In order to carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") so that the contract with you can be performed using the payment method selected. This processing takes place on the basis of Art. 6 (1) (b) GDPR. Where applicable, Ratepay carries out a credit report based on mathematical and statistical procedures (probability or score values) using credit agencies, following the process already described above. The data processing serves the purpose of the credit check when initiating a contract. Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in protection against payment default where Ratepay makes advance payment. Further information on data protection and on which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of the payment service provider Stripe

We use the payment service Stripe, provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, on our website. The data processing serves the purpose of offering you payment via this payment service. When you select and use Stripe, the data required for payment processing is transmitted to Stripe so that the contract with you can be performed using the payment method selected. This processing takes place on the basis of Art. 6 (1) (b) GDPR.

Stripe reserves the right to obtain a credit report where applicable, based on mathematical and statistical procedures and using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical procedures, the calculation of which includes address data among other factors. Your legitimate interests are taken into account in accordance with statutory provisions. The data processing serves the purpose of the credit check when initiating a contract. Processing takes place on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in protection against payment default where Stripe makes advance payment.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR, by notifying Stripe. Providing the data is necessary for concluding the contract with the payment method you have chosen. If you do not provide it, the contract cannot be concluded using the payment method you have selected.

All Stripe transactions are subject to the Stripe privacy policy, which you can find at https://stripe.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer, so you have full control over their use. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, and you can prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website to their full extent.

The links below explain how to manage (including disable) cookies in the most common browsers:

• Chrome: https://support.google.com/accounts/answer/61416
• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
• Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated below in this privacy policy, we only use these technically necessary cookies, for the purpose of making our services more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after you move to another page and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised after a page change.

Cookies or comparable technologies are used on the basis of § 25 (2) TDDDG. Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, in our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective presentation of our services.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of the Shopify consent tool (Shopify Privacy & Compliance)

We use the consent tool "Shopify Privacy & Compliance" from Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The tool allows you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining and documenting the necessary consents to data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.

The data processing takes place in order to comply with a legal obligation on the basis of Art. 6 (1) (c) GDPR.

Further information on data protection at Shopify can be found at https://www.shopify.com/legal/privacy, and information on the cookies used at https://www.shopify.com/legal/cookies.

Analytics and advertising tracking

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves the purpose of analysing this website and its visitors, as well as marketing and advertising purposes. For this, Google will use the information obtained on behalf of the operator of this website in order to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use.

The following information, among others, may be collected: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data, purchase activity. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google holds about you.

Your IP address is truncated by us beforehand on our own servers. Google therefore receives only pseudonymised data.

Google uses technologies such as cookies, browser web storage and tracking pixels that allow your use of the website to be analysed. Cookies or comparable technologies are used with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR.

Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

In this context we also use the Google Signals service. Google Signals enables cross-device tracking. Your data can therefore be analysed across devices if you have activated "personalised advertising" in your account settings and your devices are linked to your Google account. This makes it possible to identify the device on which you search for products and later return to complete a purchase on another device, such as a tablet.

The cross-device reports created in this context contain aggregated data only. We therefore receive only statistics generated on the basis of Google Signals. To prevent data being collected and stored across devices by Google Signals, you can deactivate the "personalised ads" function in your Google account settings. Further information on this can be found at https://support.google.com/ads/answer/2662922.

Further information on data processing and data protection in relation to Google Signals can be found at https://support.google.com/analytics/answer/7532985.

We use the advanced implementation of consent mode (Advanced Consent Mode). With this, user data is transmitted to Google in the form of "pings" even where consent has not been given. These pings may contain the following information, among others: IP address for deriving the country of the IP (the IP address itself is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (the website from which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to provide a comprehensive usage analysis despite consent being refused.

The information generated about your use of this website is generally transmitted to and stored on a Google server in the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy.

Use of the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are joint controllers for the collection of your data that takes place when the service is integrated, and for the transmission of this data to Meta. The basis for this is an agreement between us and Meta on the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://www.facebook.com/legal/terms/businesstools. Under it, we are responsible in particular for fulfilling the information obligations under Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling data subject rights under Art. 15 to 20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns Meta's obligations under the joint processing agreement.

The application serves the purpose of addressing visitors to the website with targeted, interest-based advertising on the Facebook and Instagram social networks. For this, Meta's remarketing tag has been implemented on the website. Via this tag, a direct connection to Meta's servers is established when the website is visited. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you then visit the Facebook or Instagram social networks, you will be shown personalised, interest-based ads.

The application also serves the purpose of creating conversion statistics. Here we learn the total number of users who clicked on one of our ads and were forwarded to a page tagged with a conversion tracking tag, as well as which actions are carried out after being forwarded to this website. However, we do not receive any information that allows users to be identified personally.

Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

You can deactivate the "Custom Audiences" remarketing function here. Further information on the collection and use of data by Meta, on your related rights and on options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/privacy/policy/.

Use of Google Ads conversion tracking

We use the online advertising programme "Google Ads" on our website and, within this, conversion tracking. Google conversion tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").

If you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were forwarded to this page. Each Google Ads customer receives a different cookie. There is therefore no way for cookies to be tracked across the websites of Ads customers.

The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. Here we learn the total number of users who clicked on one of our ads and were forwarded to a page tagged with a conversion tracking tag. However, we do not receive any information that allows users to be identified personally.

We use the advanced implementation of consent mode (Advanced Consent Mode). With this, user data is transmitted to Google in the form of "pings" even where consent has not been given. These pings may contain the following information, among others: IP address for deriving the country of the IP (the IP address itself is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (the website from which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to provide a comprehensive usage analysis despite consent being refused.

Your data may be transferred to the servers of Google LLC in the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Cookies or comparable technologies are used with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Further information and Google's privacy policy can be found at https://policies.google.com/privacy.

Use of Google AdSense

We use the AdSense function from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of renting out advertising space on the website and addressing visitors to the website with targeted, interest-based advertising in that space. By means of this function, visitors to the provider's website are shown personalised, interest-based advertisements from the Google Display Network. Google uses cookies for this, which allow your use of the website to be analysed. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles. Google may transfer this information to third parties where required by law or where third parties process this data on Google's behalf. Google will under no circumstances associate your IP address with other Google data.

Cookies or comparable technologies are used with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Further information and Google's privacy policy can be found at https://policies.google.com/technologies/ads and https://policies.google.com/privacy.

Plug-ins and other services

Use of Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This application manages JavaScript tags and HTML tags used in particular to implement tracking and analytics tools. The data processing serves the purpose of designing our website to meet requirements and optimising it.

Google Tag Manager itself neither stores cookies nor processes personal data. However, it does allow further tags to be triggered which may collect and process personal data.

Further information on terms of use and data protection can be found at https://www.google.com/intl/en/tagmanager/use-policy.html.

Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves the purpose of displaying fonts consistently on our website. In order to load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser you use is processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Cookies or comparable technologies are used with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Further information on data processing and data protection can be found at https://policies.google.com/ and at https://developers.google.com/fonts/faq.

Use of Adobe Fonts

We use Adobe Fonts from Adobe Systems Software Ireland Limited (4-6 Riverwalk Citywest Business Campus, Dublin 24, Ireland; "Adobe") on our website.

The data processing serves the purpose of displaying fonts consistently on our website. In order to load the fonts, a connection to Adobe servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser and operating system you use is processed and transmitted to Adobe.

Your data may be transferred to third countries such as the USA and India. No adequacy decision by the EU Commission exists for India. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Adobe is certified under the TADPF and has thereby undertaken to comply with European data protection principles.

Cookies or comparable technologies are used with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Further information on data processing and data protection can be found at https://www.adobe.com/privacy/policy.html and at https://www.adobe.com/privacy/policies/adobe-fonts.html.

Data subject rights and retention period

Retention period

Once the contract has been fully performed, the data is initially stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular those under tax and commercial law, and is then deleted once those periods have expired, unless you have consented to further processing and use.

Rights of the data subject

Where the statutory conditions are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing and to data portability.

In addition, under Art. 21 (1) GDPR you have a right to object to processing based on Art. 6 (1) (f) GDPR, as well as to processing for direct marketing purposes.

Right to lodge a complaint with the supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.

Among other options, you can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16 – 18 (5th floor)
10969 Berlin, Germany
Tel.: +49 30 138890
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

Right to object

Where the personal data processing described here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time, with effect for the future, on grounds relating to your particular situation.

Following an objection, processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.

Where personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Following an objection, we will cease processing the data concerned for direct marketing purposes.

Last updated: 7 November 2025