Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data. Failure to provide such data has no consequences. This applies only to the extent that no other information is provided regarding the following processing operations.
“Personal data” refers to any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web host / IT service provider via your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.

Contact

Data Controller:

HALBE Rahmen GmbH

Data Protection Officer:

Hees GmbH, Friedrich-Wilhelm-Straße 148, 57074 Siegen, Germany, +49 (0) 271 - 31 46 30, datenschutz@halbe.de
You can contact our Data Protection Officer directly at: Email: datenschutz@halbe.de

Unsolicited contact from the customer via email

If you contact us on your own initiative via email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your contact request.
If the contact serves the purpose of carrying out pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.

Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of establishing contact.
If the contact serves the purpose of carrying out pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. If contact is made for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR. We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.

Collection and Processing When Using the Withdrawal Function

To exercise your statutory right of withdrawal, we provide an electronic withdrawal function on our website. If you use this function, we process the personal data you provide (e.g., name, contact information, order or contract details, and the content of your withdrawal notice) to receive and process your withdrawal and to comply with legal documentation requirements.
The processing is carried out to fulfill our legal obligations and to manage the contractual relationship in accordance with Art. 6(1)(c) and (b) of the GDPR.
The data collected in connection with the withdrawal will only be stored for as long as is necessary to process the withdrawal and to fulfill legal retention and documentation obligations.
After submitting your withdrawal, you will receive confirmation of receipt of your withdrawal notice.

Collection and Processing When Sending Images via Upload

Your data may be shared with service providers we use for data processing. Your data will not be shared with any other third parties.
We use the image you submit solely for the purpose of providing our services. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

WhatsApp Business

If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
Data processing is used to handle and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name (if provided), and other data to the extent you have provided it. We use a mobile device for this service, whose address book contains only data from users who have contacted us via WhatsApp. Personal data is therefore not disclosed to WhatsApp unless you have already given your consent to WhatsApp for this purpose.
Your data is transferred by WhatsApp to servers operated by Meta Platforms Inc. in the United States. An adequacy decision by the EU Commission exists for the U.S., namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has obtained TADPF certification and is thus committed to complying with European data protection principles. If the contact serves the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in providing a quick and easy way to contact us and in responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your personal data solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
For more information on terms of use and data protection when using WhatsApp, please visit www.whatsapp.com/legal/#terms-of-service and www.whatsapp.com/legal/#privacy-policy.

Customer Account Orders

Customer Account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data for Orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. Processing is based on Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to a minimum.

Reviews and Advertising

Data Collection When Posting a Comment or Review

When you comment on or review an item or a post, we collect your personal data (name, email address, comment text) only to the extent you provide it. The processing serves the purpose of enabling a comment or review and displaying comments or reviews.

For the purpose of verifying your review, we also collect the following data: order number.
By submitting the comment or review, you consent to the processing of the transmitted data. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your personal data will then be deleted.

When your comment is published, only the name you provided will be displayed.

Use of Your Personal Data for Sending Postal Advertising

We use your personal data (name, address) that we have received in connection with the sale of a product or service to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded.

Processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in direct marketing. You may object to this use of your address data at any time by notifying us. The contact details for exercising your right to object can be found in the legal notice.

Use of the Email Address for Sending Newsletters

We use your email address, independently of contract fulfillment, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. To do so, you may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Your data will be transferred to an email marketing service provider as part of data processing on our behalf. Your data will not be shared with any other third parties.

Use of the Email Address for Sending Direct Marketing

We use your email address, which we received in connection with the sale of a product or service, to send you electronic advertisements for our own products or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Article 6(1)(f) of the GDPR, based on our legitimate interest in direct marketing. You may object to this use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the legal notice. You may also use the link provided for this purpose in the promotional email. No costs other than the transmission costs according to the standard rates will be incurred for this.

Use of CleverReach

We use the services of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; “CleverReach”) for newsletter distribution within the scope of data processing on our behalf.
We share the information you provide during newsletter registration (email address, first and last name if applicable) with CleverReach. Data processing serves the purpose of sending the newsletter and its statistical analysis.
To evaluate newsletter campaigns, the newsletters we send contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any embedded links. Conversion tracking allows us to analyze whether, for example, a purchase was made after clicking a link in the newsletter or whether you registered on our website. In this context, we collect your personal data, such as your IP address, browser type, device, and the time of access. Usage profiles may be created from this data under a pseudonym. The collected data is not used to identify you personally. The collected data is used solely for statistical analysis to improve newsletter campaigns.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
Further information and Cleverreach’s privacy policy can be found at: www.cleverreach.com/de-de/datenschutz/ and www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.

Vendor and Product Reviews

For the purpose of provider and product reviews by our customers and for our own quality management, we have integrated the review software of the independent provider eKomi Ltd., Markgrafenstraße 11, 10969 Berlin (“eKomi”) on our websites. Using this review software, you can submit an anonymous review of your experience with us and our products after we have provided our service.

After concluding a contract, we will send you an email (possibly also via eKomi) asking you to submit a review and providing you with a link to the corresponding review form. For this purpose, personal data is provided to eKomi. You may object to this use of your data at any time. A link for this purpose is included in every email. You may also revoke your consent by sending a message to info@halbe.de.
A data processing agreement has been concluded with eKomi for this technical implementation. eKomi takes all organizational and technical measures to protect this data. This data is retained in accordance with statutory retention periods and subsequently deleted. You can find more detailed information on eKomi’s data protection practices at www.ekomi.de/de/datenschutz. The legal basis for data processing is Art. 6(1)(f) of the GDPR.
When submitting your review via eKomi, you may provide your email address so that we can contact you later regarding your review. This allows us, for example, to address your feedback individually, answer your questions, or provide other assistance. Please note that providing your email address is voluntary and subject to the privacy policy of our independent service provider, eKomi. eKomi is solely responsible for the handling of personal data that you provide directly to eKomi.

Shipping providers

Sharing your email address with shipping companies to provide shipping status updates

We share your email address with the shipping company as part of contract fulfillment. This sharing is intended to inform you via email about the shipping status. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us or the shipping company, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation.

Payment Service Providers

Use of PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of enabling us to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. For more information on data processing when using the PayPal Express payment service, please refer to the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Checkout

We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. Data processing is carried out for the purpose of enabling us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal

For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit check based on mathematical-statistical methods using credit bureaus, if necessary. To this end, PayPal transmits the personal data required for a credit check to a credit bureau and uses the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognized mathematical and statistical methods, which incorporate address data, among other factors. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protecting against payment default when PayPal makes an advance payment.

You have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will result in the contract not being able to be concluded using the payment method you have selected.

Third-Party Providers

When paying via a third-party payment provider, the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) of the GDPR. To process this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Article 6(1)(b) of the GDPR. Examples of local third-party providers include:

- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

For more information on data processing when using PayPal, please refer to the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that in such cases you may not be able to use all features of this website to their full extent.

The links below provide information on how to manage (including disabling) cookies in the most common browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise specified in the privacy policy below, we use only these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to another page and to provide you with services. Some features of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

The use of cookies or comparable technologies is based on Section 25(2) of the German Telemedia Act (TTDSG). The processing of your personal data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our website.
You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

Use of Consentmanager

We use the consent management tool Consentmanager from Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager") on our website.
The tool allows you to grant consent to data processing via the website, in particular the setting of cookies, as well as to exercise your right to withdraw consent for consents already granted.
The purpose of data processing is to obtain and document the necessary consents for data processing and thereby comply with legal obligations.
Cookies may be used for this purpose. In this context, the following information, among other things, may be collected and transmitted to Consentmanager: date and time of the page visit, information about the browser and device you are using, anonymized IP address, opt-in and opt-out data. This data is not shared with any other third parties.
Data processing is carried out to fulfill a legal obligation based on Art. 6(1)(c) of the GDPR.
For more information on data protection at Consentmanager, please visit: www.consentmanager.net/privacy.php

Advertising Tracking

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.
The following information, among others, may be collected: IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, purchase activities. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Google uses technologies such as cookies, browser storage, and web beacons that enable an analysis of your use of the website.
The information generated in this way regarding your use of this website is generally transmitted to a Google server in the United States and stored there. An adequacy decision by the European Commission exists for the United States, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained TADPF certification and is therefore committed to complying with European data protection principles. Both Google and U.S. government agencies have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and all other data that Google has about you.
When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in an anonymized form. The IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) Sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.

Use of the Facebook Pixel

We use the "Custom Audiences" remarketing feature from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook") on our website.
Meta Platforms Ireland and we are joint controllers for the collection of your data that occurs when the service is integrated and for the transmission of this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland regarding the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at www.facebook.com/legal/controller_addendum. Accordingly, we are specifically responsible for fulfilling the information obligations under Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 of the GDPR, to the extent that a breach of personal data protection affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling data subject rights in accordance with Articles 15–20 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the security of the service, and for fulfilling the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection affects Meta Platforms Ireland’s obligations under the joint processing agreement.
The application is used to target website visitors with interest-based advertising on the Facebook social network. To this end, Facebook’s remarketing tag has been implemented on the website. This tag establishes a direct connection to Facebook’s servers when you visit the website. This transmits information to Facebook’s servers regarding which of our pages you have visited. Facebook associates this information with your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalized, interest-based Facebook ads.
Your data may be transferred to the United States. An adequacy decision by the European Commission exists for the United States, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained TADPF certification and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information on the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy, please refer to Facebook’s privacy policy at www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking

We use the online advertising program "Google Ads" on our website and, within this framework, conversion tracking (visit action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).

When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain any personal data, and therefore do not serve to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility that cookies can be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to generate conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to Google LLC’s servers in the United States. An adequacy decision by the European Commission exists for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained TADPF certification and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) Sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information and Google’s privacy policy, please visit: www.google.de/policies/privacy/.

Use of the "Enhanced Conversions" feature of Google Ads

We use the “Enhanced Conversions” feature within Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

This feature helps us measure the effectiveness of our advertising campaigns more accurately, particularly when users interact with our ads but have not accepted third-party cookies or are using multiple devices. When you complete a conversion on our website (e.g., make a purchase), we collect certain customer data you provide (such as your email address). This data is pseudonymized (hashed) using a secure one-way hashing algorithm (SHA-256) before being transmitted to Google. Google compares this hashed data with the hashed data from Google accounts to determine whether you have previously interacted with one of our ads. Google uses this data exclusively to measure conversions on our behalf and to generate aggregated, anonymized reports on campaign performance. The hashed data is not used by Google to identify you personally and is deleted after the comparison. The use of Enhanced Conversions and the associated transmission of hashed data to Google is based solely on your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke this consent at any time via our cookie settings (Consent Manager) with future effect.
For more information on data protection at Google and how Enhanced Conversions work, please refer to Google’s Privacy Policy: https://policies.google.com/privacy and https://support.google.com/google-ads/answer/9888656.

Use of the remarketing or "Similar Audiences" feature of Google Inc.

We use the remarketing or "Similar Audiences" feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This feature is used to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. These cookies track website visits and collect anonymized data regarding website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously viewed product and information areas.
Your data may be transferred to servers of Google LLC in the United States. An adequacy decision by the EU Commission exists for the U.S., namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation.
For more information on Google Remarketing and the associated privacy policy, please visit: www.google.com/privacy/ads/.

Use of Microsoft Advertising

We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft") on our website.
Data processing serves marketing and advertising purposes, as well as the purpose of measuring the success of advertising campaigns (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, this does not allow for the personal identification of these users. Microsoft Advertising uses technologies such as cookies and web beacons that enable an analysis of your use of the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity period and is not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to that page. The following information, among others, may be collected: IP address, identifiers assigned by Microsoft, information about the browser you are using and the device you are using, referrer URL (the website from which you accessed our website), and the URL of our website.
Your data may be transferred to the United States. An adequacy decision by the European Commission exists for the United States, namely the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
You can find more information about data protection and the cookies used by Microsoft here.

Plug-ins and Other Items

Use of Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application manages JavaScript tags and HTML tags used to implement tracking and analytics tools in particular. Data processing serves the purpose of designing our website to meet user needs and optimizing it.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of additional tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.

Use of Google Maps

We use the function for embedding Google Maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, “Google”) on our website.
This feature enables the visual display of geographic information and interactive maps. When pages containing Google Maps are accessed, Google also collects, processes, and uses data from website visitors.
Your data may also be transferred to the United States in this process. An adequacy decision by the EU Commission exists for the U.S., namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation.
For more information on the collection and use of data by Google, please refer to Google’s privacy policy at www.google.com/privacypolicy.html. There, you also have the option to change your settings in the Privacy Center so that you can manage and protect the data processed by Google.

Use of YouTube

We use the feature for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
This feature displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is enabled. As a result, YouTube does not store any information about website visitors. Information is only transmitted to YouTube and stored there once you watch a video. Your data may be transferred to the United States. An adequacy decision by the European Commission exists for the United States, namely the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has obtained TADPF certification and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) Sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy, please refer to YouTube’s privacy policy at www.youtube.com/t/privacy.

Use of Microsoft Clarity

We use Microsoft Clarity on our website, a web analytics service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. With Microsoft Clarity, we analyze the use of our website in order to improve its usability and content. In particular, this involves processing information about interactions with the website, such as pages visited, clicks, mouse movements, scrolling behavior, technical information about the device and browser used, as well as a user or session identifier assigned by Clarity. For this purpose, Microsoft Clarity uses cookies and comparable technologies.
This processing takes place exclusively with your consent pursuant to Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG. You can withdraw or change your consent at any time with effect for the future via the cookie settings.
The recipient of the data is Microsoft. Processing may also take place in the USA. Microsoft uses appropriate safeguards under the GDPR for data transfers to third countries; further information on this as well as on data processing by Microsoft can be found in Microsoft's privacy policy.
According to Microsoft, session recordings are generally stored for up to 30 days. Click and heatmap data as well as sessions marked or saved as favorites are generally stored for up to nine months.

Note on the use of the chatbot

We work with Zipchat to offer you support on our website via an AI-powered chatbot and to efficiently process your inquiries. When you interact with the chatbot, the content of your messages as well as usage and interaction data are processed to improve the quality of our customer service and our products and services.
The use of the chatbot may involve the collection of technical information such as IP address, device type, browser information, and usage data. This data may be processed using cookies and similar technologies to ensure the functionality of the chatbot, evaluate interactions, and optimize the performance of the service.
We also use this information to improve our offerings, analyze customer inquiries, and for security and fraud prevention purposes. Zipchat processes data on our behalf and may collaborate with technical service providers (e.g., hosting or analytics providers) for this purpose.
For more information on how Zipchat processes data, please see Zipchat’s Privacy Policy: https://www.zipchat.ai/legal/privacy-policy.

Data Subject Rights and Retention Period

Retention Period

After the contract has been fully executed, the data is initially stored for the duration of the warranty period, then in accordance with statutory retention periods—particularly those under tax and commercial law—and finally deleted upon expiration of these periods, unless you have consented to further processing and use.

Rights of the data subject

You are entitled to the following rights under Articles 15 through 20 of the GDPR, provided the legal requirements are met: the right to access, rectification, erasure, restriction of processing, and data portability.
In addition, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You may file a complaint with, among others, the supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
P.O. Box 30 40
55020 Mainz
Tel.: +49 6131 89200
Fax: +49 6131 8920299
Email: poststelle@datenschutz.rlp.de

Right to Object

If the processing of personal data described here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future.
Once an objection has been lodged, the processing of the data in question will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. Once an objection has been lodged, we will cease processing the relevant data for direct marketing purposes.

Last updated: May 6, 2026