1.1 We are pleased that you are visiting our website and thank you for your interest. The following provides information on how we handle your personal data when using our website. Personal data are all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is HT Venture GmbH, Im Gewerbegebiet 8, 36289 Friedewald, Germany, Tel.: +49 (0) 66 74 / 22 000-0, Fax: +49 (0) 66 74 / 22 000-99, E-Mail: service@helmtrophy.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2.1 When you use our website for purely informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no disclosure or other use of the data. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.
3.1 For hosting our website and displaying page content, we use a provider that delivers its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a contract for commissioned processing with the provider, which ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.
3.2 Bunny
We use a Content Delivery Network from the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
This service enables us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a contract for commissioned processing with the provider, which ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.
3.3 Cloudflare
We use a Content Delivery Network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a contract for order processing with the provider, which ensures the protection of our page visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
In order to make the visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your terminal device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your terminal device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.
If personal data are also processed by individual cookies used by us, the processing is carried out pursuant to Art. 6(1)(b) GDPR either for the performance of the contract, pursuant to Art. 6(1)(a) GDPR in the case of consent given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be restricted.
5.1 Own Live-Chat System
This website uses a live-chat system that serves to answer live inquiries.
The processing of personal data transmitted via the chat is carried out either pursuant to Art. 6(1)(b) GDPR because it is necessary for the initiation or performance of a contract, or pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in the effective support of our page visitors. Your data transmitted in this manner will be deleted, subject to conflicting statutory retention periods, once the relevant matter has been conclusively clarified.
In addition, for the purpose of creating pseudonymized usage profiles, further information may be collected and evaluated with the help of cookies; however, this does not serve your personal identification and is not combined with other data sets. If this information has a reference to a person, the processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.
The setting of cookies can be prevented by appropriate browser settings. If necessary, the functionality of our website will be restricted in this case. You may object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.
5.2 Contact for Review Reminder
To verify our service and product quality, we reserve the right to use your email address, which we obtained from you in connection with the sale of goods or services, for a review request, which we may send to you by email following an order you placed in our online shop. You may object to the use of your email address for the aforementioned purpose at any time, without incurring any costs other than the transmission costs according to basic rates.
5.3 WhatsApp Business
We offer you the opportunity to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction (for example, an order placed), we will store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Article 6(1)(b) GDPR for processing and responding to your request. On the basis of the same legal ground, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) in order to assign your inquiry to a specific process.
If you use our WhatsApp contact for general inquiries (e.g., regarding our range of services, availability, or our online presence), we will store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Article 6(1)(f) GDPR based on our legitimate interest in the efficient and timely provision of the requested information.
Your data will only ever be used to respond to your inquiry via WhatsApp. No transfer to third parties will take place.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of users who have contacted us via WhatsApp are stored.
This ensures that every person whose WhatsApp contact details are stored in our address book has already, upon first use of the app on their device, consented by accepting the WhatsApp Terms of Use to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Article 6(1)(a) GDPR. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.
Please refer to WhatsApp's privacy policy for the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and settings options regarding the protection of your privacy: https://www.whatsapp.com
In the context of the aforementioned processing, data transfers to servers of Meta Platforms Inc. in the USA may occur.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
5.4 In the context of contacting us (e.g., via contact form or email), personal data will be processed – exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that no statutory retention obligations oppose this.
In the context of the comment function on this website, in addition to your comment, information regarding the time of creation of the comment and the commentator name chosen by you will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is carried out for security reasons and in the event that the person concerned violates the rights of third parties through a submitted comment or posts illegal content. We require your email address to contact you if a third party should object to your published content as illegal.
The legal bases for the storage of your data are Article 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as illegal.
Pursuant to Article 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide us with this data upon opening a customer account. Which data is required for account opening can be found in the input mask of the corresponding form on our website.
Deletion of your customer account is possible at any time and can be effected by a message to the aforementioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded therein have been fully processed, no statutory retention periods oppose this, and no legitimate interest on our part in further storage continues to exist.
8.1 Registration for our Email Newsletter
If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. The provision of further data is voluntary and is used to enable us to address you personally. For the dispatch of the newsletter, we use the so-called Double Opt-in procedure, which ensures that you receive newsletters only after you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the specified email address.
By activating the confirmation link, you grant us your consent for the use of your personal data pursuant to Article 6(1)(a) GDPR. In this context, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration to enable us to trace any potential misuse of your email address at a later date. The data collected by us during registration for the newsletter is used strictly for the specified purpose.
You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use your data beyond this scope to the extent permitted by law, which we inform you of in this declaration.
8.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our assortment via email, similar to those already purchased. For this purpose, we do not need to obtain separate consent from you pursuant to § 7 Paragraph 3 of the German Act Against Unfair Competition (UWG). The processing of data is based solely on our legitimate interest in personalized direct advertising pursuant to Article 6 Paragraph 1 lit. f of the GDPR. If you initially objected to the use of your email address for this purpose, no email will be sent by us.
You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible party mentioned at the beginning. For this purpose, you will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately discontinued.
8.3 Advertising by Post
Based on our legitimate interest in personalized direct advertising, we reserve the right to store and use your first and last name, your postal address, and - to the extent we have received these additional details from you within the framework of the contractual relationship - your title, academic degree, year of birth, and your professional, industry, or business designation pursuant to Article 6 Paragraph 1 lit. f of the GDPR, for the purpose of sending interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time vis-à-vis us.
9.1 Transmission of Image Files for Order Fulfillment via Email
On our website, we offer you the opportunity to commission the personalization of products by transmitting image files via email. The submitted image motif is then used as a template for the personalization of the selected product.
Using the email address provided on the website, you can transmit one or more image files from the storage of the device used to us. We then record, store, and use the transmitted files exclusively for the production of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to specific service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further transmission will take place. If the transmitted files or the digital motifs contain personal data (in particular depictions of identifiable persons), all the aforementioned processing operations are carried out exclusively for the purpose of processing your online order pursuant to Article 6 Paragraph 1 lit. b of the GDPR.
After final completion of the order, the transmitted image files will be automatically and completely deleted.
9.2 Submission of Image Files for Order Processing via Message Function
If you have the option to commission the personalization of products by submitting image files through the message function, the submitted image motif will be used as a template for the personalization of the selected product.
Through the available message function, you can transmit one or more image files from the storage of the end device used to us. We then record, store, and use the transmitted files exclusively for the production of the personalized product in accordance with the respective description of our services.
If the transmitted image files are forwarded to specific service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure will take place. If the transmitted files or the digital motifs contain personal data (in particular depictions of identifiable persons), all of the aforementioned processing operations shall be carried out exclusively for the purpose of processing your online order in accordance with Article 6(1)(b) GDPR.
After final processing of the order, the transmitted image files will be automatically and completely deleted.
9.3 Submission of Image Files for Order Processing via Upload Function
On our website, we offer you the option to commission the personalization of products by submitting image files via an upload function. In this case, the submitted image motif will be used as a template for the personalization of the selected product.
Through the upload form on the website, you can transmit one or more image files from the storage of your used end device to us directly via automated, encrypted data transmission. We then record, store, and use the transmitted files exclusively for the production of the personalized product in accordance with the respective service description on our website. If the transmitted image files are forwarded to specific service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure will take place. If the transmitted files or the digital motifs contain personal data (in particular depictions of identifiable persons), all of the aforementioned processing operations shall be carried out exclusively for the purpose of processing your online order in accordance with Article 6(1)(b) GDPR.
After final processing of the order, the transmitted image files will be automatically and completely deleted.
9.4 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data collected by us in accordance with Article 6(1)(b) GDPR will be forwarded to the commissioned transport company and the commissioned credit institution.
If we are obligated to provide you with updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact details (name, address, email address) you provided when placing the order in order to inform you personally, within the legally prescribed period and via a suitable communication channel (e.g., by post or email), about upcoming updates in accordance with our legal information obligations under Article 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of communicating updates owed by us and will be processed by us only to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
9.5 Use of payment service providers (payment services)
- Mollie
This website offers one or more online payment methods from the following provider: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands
If you select a payment method from the provider that requires advance payment (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be transmitted to this provider in accordance with Article 6(1)(b) GDPR. The transmission of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
9.6 Credit check
If we provide advance performance (e.g., delivery on invoice), we reserve the right to conduct a credit check based on mathematical-statistical procedures to safeguard our legitimate interest in determining the payment ability of our customers. The personal data necessary for a credit check will be transmitted to the following service provider in accordance with Article 6(1)(f) GDPR:
Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Tel.: +49 (0)2131-109501, Fax: -557
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values. We use the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the establishment, execution, or termination of a contractual relationship. You may object to this processing of your data at any time by sending a message to the controller responsible for data processing or to the aforementioned credit agency. However, we may remain entitled to process your personal data if this is necessary for contract-compliant payment processing.
9.7 We reserve the right to transmit your data to the debt collection service provider SEPA Collect GmbH, Mehlbeerenstraße 2, 82024 Taufkirchen, +49 (0)89-904030010, if our payment claim has not been settled despite prior reminders. In this case, the claim will be collected directly by the debt collection service provider.
The transmission of your data serves contract performance in accordance with Article 6(1)(1)(b) GDPR as well as the protection of our overriding legitimate interests within the framework of a balancing of interests for the effective assertion or enforcement of our payment claim in accordance with Article 6(1)(1)(f) GDPR.
10.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are stored as small text files on your device and collect certain information. The scope of this information also includes your IP address, which is, however, truncated by Google by the last digits to exclude direct identifiability of individuals.
The information is transmitted to Google servers and processed there. Transmissions to Google LLC, headquartered in the USA, are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted by your browser within the framework of Google Analytics and shortened is not merged with other data from Google. The data collected within the framework of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the end device used, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the site. You may revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
We have concluded a contract for order processing with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://policies.google.com
Demographic characteristics
Google Analytics 4 uses the special feature "demographic characteristics" and can generate statistics based on it that make statements about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after storage for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent for the use of Google Analytics in accordance with Article 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized Ads" feature in the settings of your Google account. Follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) GDPR, created an account on this website, and log in with this account on various devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10.2 Cloudflare Web Analytics
This website uses the web analytics service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end-device and browser information), the service collects and stores pseudonymized visitor data, including information about the end device used, such as the IP address and browser information, to evaluate them for statistical analysis of user behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally excludes direct identifiability of individuals. No merging with other collected clear data about you will take place.
All processing activities described above, in particular the reading or storage of information on the end device used, are only carried out if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10.3 Google Tag Manager
This website uses the "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and conditioning them via a unified user interface. The Google Tag Manager itself does not store or read information on user end devices. Nor does the service perform independent data analyses. However, upon page load, your IP address is transmitted to Google via the Google Tag Manager and may be stored there. Transmission to servers of Google LLC in the USA is also possible.
This processing is only carried out if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without such consent, the use of Google Tag Manager will not occur during your visit to the site. You may revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
Further legal information regarding Google Tag Manager can be found at https://policies.google.com
10.4 Matomo
This website uses a web analytics service provided by the following provider: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”).
To protect site visitors, Matomo uses a so-called "config_id" to enable various analyses of page usage within a short time window of up to 24 hours. The "config_id" of the page is a randomly generated, time-limited hash of a limited set of settings and attributes of the visitor. The config_id or config hash is a string calculated for a visitor based on their operating system, browser, browser plugins, IP address, and browser language. Matomo does not use device fingerprinting and uses an anonymized IP address of the page visitor for the creation of the "config_id".
If the processed information includes personal user data, the processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. To object to the processing of your visitor data for the future, we provide you with a separate objection option on our website.
Data is transferred to the provider only if the service is not hosted on our own servers. In the case of self-hosting, no transfer of data collected via the service to the provider takes place.
If the service is not hosted on our own servers, we have concluded an order processing agreement with the provider that ensures the protection of the data of our page visitors and prohibits unauthorized disclosure to third parties.
In this case, for data transfers to New Zealand, an adequacy decision by the EU Commission applies, which attests to compliance with European data protection standards in international data transfers.
11.1 Meta Pixel with Enhanced Data Matching
Within our online offering, we use the "Meta Pixel" service in the mode of enhanced data matching from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta").
If you click on one of our advertising ads displayed on Facebook or Instagram, the URL of our linked page is extended with a parameter using "Meta Pixel". This URL parameter is then entered into your browser via a cookie set by our linked page itself after the redirection. In addition, this cookie captures specific customer data, such as your email address, which we collect on our website linked to the Facebook or Instagram ad during processes such as purchases, account registrations, or sign-ups (enhanced data matching). The cookie is then read and enables the transmission of the data, including your specific customer data, to Meta.
We use "Meta Pixel" with enhanced data matching to make our advertising ads (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to your interests or have certain characteristics (e.g., interests in certain topics or products determined based on visited websites), which we transmit to Meta (so-called "Custom Audiences").
In addition, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Meta Pixel", the function of advanced data matching helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Meta, making it possible to assign the data to the respective user profile, and Meta may use the data for its own advertising purposes in accordance with Meta's Data Use Policy (https://www.facebook.com
All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
The information generated by Meta is generally transferred to a server of Meta and stored there; in this context, transfer to servers of Meta Platforms Inc. in the USA may also occur.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
11.2 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
To this end, Google places a cookie in your browser, which enables interest-based advertising automatically using a pseudonymous cookie ID and based on the pages you have visited. Further data processing only takes place if you have consented to Google that your internet and app browsing history is linked to your Google account by Google and that information from your Google account is used to personalize advertisements you view on the web. If you are logged in to Google during your visit to our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form audiences. In the context of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.
All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without this consent, the use of retargeting technology during your website visit will not take place.
You may revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Details on the processing initiated by Google and on Google's handling of website data can be found here: https://policies.google.com
Further information on Google's data protection policies can be found here: https://business.safety.google
11.3 Microsoft Advertising
This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
This enables targeted addressing of visitors to our internet pages with personalized, interest-based advertising who have already shown interest in our shop and our products. The display of advertising materials is based on a cookie-based analysis of previous and current usage behavior, whereby no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to capture pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files stored on your computer or mobile device. You are thus shown advertising that is highly likely to correspond to your product and information interests.
All processing described above, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of retargeting technology will not take place during your visit to the site.
You may revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
11.4 billiger.de Sales Tracking
This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany.
If you have reached our website from an advertisement on the provider's domain, the success of the advertisement can be traced with the help of cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
For this purpose, certain device and browser information, including possibly your IP address, is read out via the tracking technology in order to capture and evaluate predefined user actions (e.g., completed transactions, leads, search queries on the website, views of product pages) by us. This enables the creation of statistics on usage behavior on our website after redirection from an advertisement, which serve us to optimize our offer.
All the processing described above, in particular the setting of cookies for reading information on the end device used, is carried out only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of the data of our page visitors and prohibits unauthorized disclosure to third parties.
11.5 Google Ads Conversion-Tracking
This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when you click on an ad served by Google. Cookies are small text files that are stored on your end device. These cookies usually lose their validity after 30 days and are not used for personal identification. If you visit certain pages of this website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who have clicked on their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive any information that would allow users to be personally identified.
As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com
All the processing described above, in particular the setting of cookies for reading information on the end device used, is carried out only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
In addition, you can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link: https://www.google.com
To address users whose data we have received in the context of business or business-like relationships in a more interest-appropriate manner for advertising purposes, we use a customer matching function within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not gain access to clear-text data; instead, it automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign them to existing Google accounts established by the affected individuals. This enables the display of personalized advertising across all Google services linked to the respective Google account.
The transmission of customer data to Google occurs exclusively if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may revoke this consent to us at any time with effect for the future. Further information on Google's data protection measures regarding the customer matching function can be found here: https://support.google.com
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
11.6 Smarketer FAST Conversion Tracking
This website uses the FAST Conversion Tracking technology of Smarketer GmbH, Salzufer 8, 10587 Berlin ("Smarketer"). We use FAST to accurately attribute and settle the success of our advertisements. A unique key is generated, which does not allow any conclusions to be drawn regarding the identity of the user. No profiling of individuals takes place.
FAST establishes a connection between your click on an advertising medium (e.g., an ad) and a subsequent action (e.g., a purchase or a registration). No cookies or comparable technologies are stored on your end device. To create a so-called device fingerprint, FAST uses exclusively non-personal parameters such as browser settings, time zone, CPU class, color depth, and browser language.
In the context of tracking, the following data may be transmitted and stored for a maximum of 90 days:
Personal data such as name, telephone number, or address are explicitly not collected or stored.
The processing of the device fingerprint takes place directly on our servers. Conversion data (ClickID, Conversion Name, timestamp, order value, currency) are transferred to servers of Google Ads or Microsoft Ads in the USA for further processing and evaluation.
The legal basis for this data processing is our legitimate interest in accurate performance measurement and settlement of our advertising measures in accordance with Article 6(1)(f) GDPR.
The stored data will be automatically deleted no later than 90 days.
You can object to tracking by FAST at any time by using the following opt-out option:
11.7 Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
A tag is embedded on every page of our website for the use of Universal Event Tracking, which interacts with the conversion cookie set by Microsoft. This interaction makes your behavior on our website traceable and sends the information thus collected to Microsoft. The purpose of this is to enable certain predefined goals, such as purchases or leads, to be statistically recorded and evaluated in order to tailor the orientation and content of our offerings more closely to user interests. The tags are never used for the personal identification of users.
All processing described above, in particular the setting of cookies for reading information on the end device used, is only carried out if you have given us your express consent in accordance with Article 6(1)(a) GDPR. Without this consent, the use of retargeting technology during your visit to the site will not take place.
You may revoke your granted consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
12.1 Google Maps API
In order to enable real-time checking of certain inputs in the address form of the ordering process of our online shop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transmitted to: Google LLC., USA.
The provider validates the entered address, verifies the spelling, and supplements any missing data if necessary. In the case of ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data you entered is transmitted to the provider, stored there, and evaluated.
This processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the proper recording of the customer's correct address data for the diligent fulfillment of our contractual delivery obligations and to prevent problems in contract execution.
The provider processes the affected data separately, does not merge it with other data sets, and deletes it as soon as its status or correctness has been confirmed, but no later than after 30 days.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further information on Google's data protection provisions can be found here: https://business.safety.google
12.2 Applications for Job Advertisements by Email
On our website, we currently advertise vacant positions in a separate section, to which you can apply by email to the provided contact address.
Applicants must provide all personal data required for a comprehensive assessment, including general information such as name, address, and contact details, as well as performance-related evidence and, where applicable, health-related information. Further details regarding the application process can be found in the job posting.
Upon receipt of the application via email, the data will be stored and evaluated exclusively for the purpose of processing the application. In case of inquiries, we will use either the applicant's email address or telephone number. The processing is based on Article 6(1)(b) GDPR (or § 26(1) BDSG), whereby the application process is considered as the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Article 9(1) GDPR (e.g., health data such as information regarding severe disability status) are requested from applicants as part of the application process, processing shall be carried out in accordance with Article 9(2)(b) GDPR, enabling us to exercise rights and fulfill obligations arising from employment law, social security law, and social protection law.
Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for purposes of preventive medicine or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnosis, for the provision of health or social care or treatment, or for the management of health or social care systems and services.
If no selection of the applicant is made or if an applicant withdraws their application prematurely, the transmitted data as well as all electronic correspondence, including the application email, will be deleted no later than 6 months after appropriate notification. This period is determined by our legitimate interest in answering any follow-up questions regarding the application and, where necessary, fulfilling our evidentiary obligations under regulations concerning equal treatment of applicants.
In the event of a successful application, the provided data will be processed on the basis of Article 6(1)(b) GDPR (in Germany, in conjunction with § 26(1) BDSG) for the purpose of carrying out the employment relationship.
13.1 - DATEV
To handle your accounting, we use the service of the cloud-based accounting software provided by the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany.
The provider processes incoming and outgoing invoices and, where applicable, also our company's bank transactions to automatically record invoices, match them with transactions, and generate financial accounting in a semi-automated process.
If personal data are also processed in this context, the processing is based on our legitimate interest in the efficient organization and documentation of our business transactions.
13.2 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consents for cookies and cookie-based applications requiring consent. The "Cookie Consent Tool" is displayed to you upon visiting the site in the form of an interactive user interface, where you can grant consents for specific cookies and/or cookie-based applications by checking boxes. Through the use of the tool, all cookies/services requiring consent are loaded only if you grant the corresponding consents by checking boxes. This ensures that such cookies are set on your respective end device only in the event of granted consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
In individual cases, if the processing of personal data (such as the IP address) occurs for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies, and thus in a legally compliant design of our online presence.
Another legal basis for the processing is Article 6(1)(c) GDPR. As controllers, we are legally obligated to make the use of technically non-essential cookies dependent on the respective user consent.
To the extent required, we have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the configuration options of the cookie consent tool can be found directly in the corresponding user interface on our website.
13.3 Cloudflare
For security purposes, this website uses the service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA.
The provider protects the website and the associated IT infrastructure against unauthorized third-party access, cyberattacks, as well as viruses and malware. We collect users' IP addresses and, where applicable, further data regarding your behavior on our website (in particular accessed URLs and header information) in order to detect and prevent illegitimate page accesses and threats. In doing so, the collected IP address is compared with a list of known attackers. If the collected IP address is identified as a security risk, the provider may automatically block it for page access. The information collected in this manner is transferred to a server of the provider and stored there.
The described data processing activities are carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interests in protecting the website from harmful cyberattacks and in maintaining structural and data integrity and security.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
13.4 Fraud0
For security purposes, this website uses the service of the following provider: Fraud0 GmbH, Sendlinger Straße 7, 80331 Munich, Germany
The provider protects the website and the associated IT infrastructure against unauthorized third-party access, cyberattacks, as well as viruses and malware. The provider collects users' IP addresses and, where applicable, further data regarding your behavior on our website (in particular accessed URLs and header information) in order to detect and prevent illegitimate page accesses and threats. In doing so, the collected IP address is compared with a list of known attackers. If the collected IP address is identified as a security risk, the provider may automatically block it for page access. The information collected in this manner is transferred to a server of the provider and stored there.
The described data processing activities are carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interests in protecting the website from harmful cyberattacks and in maintaining structural and data integrity and security.
We have concluded a contract for order processing with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
14.1 Applicable data protection law grants you, as the data subject, the following rights vis-à-vis us as the controller regarding the processing of your personal data (rights to information and intervention), with reference to the respective legal basis for the conditions of exercising these rights:
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS BASED ON OUR LEGITIMATE INTERESTS WHICH ARE OVERWHELMING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY CONTINUE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – additionally by the respective statutory retention periods (e.g., commercial and tax law retention periods).
In the case of processing of personal data based on an express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.
If statutory retention periods exist for data processed on the basis of contractual or contract-like obligations pursuant to Art. 6(1)(b) GDPR, such data will be routinely deleted after the expiration of the retention periods, provided that they are no longer necessary for the performance of the contract or the initiation of a contract and/or we no longer have a legitimate interest in further storage.
In the case of processing of personal data based on Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims.
In the processing of personal data for the purpose of direct marketing on the basis of Article 6(1)(f) GDPR, such data shall be stored until you exercise your right to object pursuant to Article 21(2) GDPR.
Unless otherwise provided in the other information in this declaration regarding specific processing situations, stored personal data shall otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.