Data Privacy Policy
General Information and Mandatory Disclosures
Name of the Responsible Body
The responsible body for data processing on this website is:
MinaDays GmbH
Schwerzistrasse 34
8807 Freienbach
The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.g., names, contact details, etc.).
Revocation of Your Consent to Data Processing
Some data processing operations are only possible with your express consent. You can revoke your already given consent at any time. An informal notification by e-mail is sufficient for revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Lodge a Complaint with the Competent Supervisory Authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a violation of data protection law. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is headquartered. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to yourself or to third parties. The provision is made in a machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.
Right to Information, Correction, Blocking, Deletion
You have the right at any time, within the framework of the applicable legal provisions, to free information about your stored personal data, its origin, its recipients and the purpose of data processing, and, if applicable, a right to correction, blocking or deletion of this data. For this and other questions on the subject of personal data, you can contact us at any time using the contact options listed in the imprint.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.
Server Log Files
The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. These are:
This data is technically necessary for us to display our website to you and to ensure stability and security. (The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR) This data is not merged with other data sources.
Data Transmission for Contract Conclusion for Goods Purchase and Shipping
If you wish to order from our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Personal data will only be transmitted to third parties if there is a necessity within the framework of contract processing. Third parties may include, for example, payment service providers or logistics companies. Further transmission of the data does not take place or only if you have expressly consented to it.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
Registration on this Website
To use certain functions, you can register on our website. The transmitted data is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
In the event of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address provided during registration.
The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal notification by e-mail is sufficient for revocation. The legality of the data processing already carried out remains unaffected by the revocation.
We store the data collected during registration for the period you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.
Contact Form
Data submitted via the contact form, including your contact details, will be stored to process your request or to be available for follow-up questions. This data will not be passed on without your consent.
Depending on the type of inquiry, the legal basis for this processing is Art. 6 para. 1 lit. b GDPR for inquiries that you make yourself as part of a pre-contractual measure or Art. 6 para. 1 sentence 1 lit. f GDPR if your inquiry is of another nature. If personal data is requested that we do not need for the fulfillment of a contract or to protect legitimate interests, the transmission to us takes place on the basis of consent given by you in accordance with Art. 6 para. 1 lit. a GDPR.
Data transmitted via the contact form will remain with us until you request its deletion, revoke your consent to storage, or the need for data storage no longer exists. Mandatory legal provisions - in particular retention periods - remain unaffected.
Storage Duration of Posts and Comments
Posts and comments, as well as associated data such as IP addresses, are stored. The content remains on our website until it has been completely deleted or had to be deleted for legal reasons.
The storage of posts and comments is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal notification by e-mail is sufficient for revocation. The legality of data processing operations already carried out remains unaffected by the revocation.
Subscribing to Comments
As a user of our website, you can subscribe to comments after logging in. With a confirmation e-mail, we check whether you are the owner of the e-mail address provided. You can unsubscribe from the comment subscription function at any time via a link in a subscription e-mail. Data entered for setting up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.
Newsletter Data
To send our newsletter, we need your email address. Verification of the provided email address is necessary, and you must consent to receive the newsletter. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.
The data provided when registering for the newsletter will be processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal notification by email is sufficient for revocation, or you can unsubscribe via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
Data entered for setting up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our offer more user-friendly, effective, and secure.
Some cookies are "session cookies." Such cookies are automatically deleted at the end of your browser session. Other cookies, however, remain on your device until you delete them yourself. Such cookies help us recognize you when you return to our website.
With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivating cookies may result in limited functionality of our website.
The setting of cookies that are necessary for carrying out electronic communication processes or providing certain functions desired by you (e.g., shopping cart) is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g., for analysis functions), these are treated separately in this data protection declaration.
YouTube Videos
Type and Scope of Processing
We have integrated YouTube Video on our website. YouTube Video is a component of the YouTube video platform, where users can upload content, share it over the internet, and receive detailed statistics. YouTube Video allows us to integrate platform content into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the listened-to content and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the played videos to the profile.
When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted.
Purpose and Legal Basis
The use of the service is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the data protection declaration for YouTube Video: https://policies.google.com/privacy.
Vimeo
Type and Scope of Processing
We have integrated Vimeo Video on our website. Vimeo Video is a component of the Vimeo, LLC video platform, where users can upload content, share it over the internet, and receive detailed statistics.
Vimeo Video allows us to integrate platform content into our website.
Vimeo Video uses cookies and other browser technologies to evaluate user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the listened-to content and to create reports.
When you access this content, you establish a connection to servers of Vimeo, LLC, 555 W 18th St, New York, New York 10011, whereby your IP address and possibly browser data such as your user agent are transmitted.
Purpose and Legal Basis
The use of Vimeo is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data cannot be influenced by us, but is determined by Vimeo, LLC. Further information can be found in the data protection declaration for Vimeo Video: https://vimeo.com/privacy.
Cloudflare CDN
Type and Scope of Processing
We use Cloudflare CDN for the proper provision of content on our website. Cloudflare CDN is a service from Cloudflare, Inc. that acts as a Content Delivery Network (CDN) on our website.
A CDN helps to deliver content from our online offering, particularly files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Cloudflare, Inc., whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Cloudflare CDN.
Purpose and Legal Basis
The use of the Content Delivery Network is based on our legitimate interests, i.e., an interest in the secure and efficient provision and optimization of our online offering in accordance with Art. 6 para. 1 lit. f. GDPR.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Cloudflare, Inc. Further information can be found in the privacy policy for Cloudflare CDN: https://www.cloudflare.com/privacypolicy/.
Google CDN
Type and Scope of Processing
We use Google CDN for the proper provision of the content on our website. Google CDN is a service of Google Ireland Limited, which acts as a Content Delivery Network (CDN) on our website.
A CDN helps to deliver content from our online offering, especially files such as graphics or scripts, faster using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google CDN.
Purpose and Legal Basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. an interest in the secure and efficient provision and optimization of our online offering in accordance with Art. 6 (1) lit. f. GDPR.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google CDN: https://policies.google.com/privacy.
jsDelivr CDN
Type and Scope of Processing
We use JSDelivr CDN for the proper provision of the content on our website. JSDelivr CDN is a service of Prospect One, which acts as a Content Delivery Network (CDN) on our website.
A CDN helps to deliver content from our online offering, especially files such as graphics or scripts, faster using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Prospect One, Krolewska 65a, Krakow, Malopolskie 30-081, Poland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of JSDelivr CDN.
Purpose and Legal Basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. an interest in the secure and efficient provision and optimization of our online offering in accordance with Art. 6 (1) lit. f. GDPR.
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Prospect One. Further information can be found in the privacy policy for JSDelivr CDN: https://www.jsdelivr.com/privacy-policy-jsdelivr-net.
Google Analytics
Type and Scope of Processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of views of our online offering, visited subpages, and the duration of visitors' stay.
Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.
This information is used, among other things, to compile reports on website activity.
Purpose and Legal Basis
The use of Google Analytics is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision by the European Commission exists (including US companies not certified under EU-U.S. DPF), we have agreed on other appropriate safeguards with the data recipients in accordance with Art. 44 et seq. GDPR. These are - unless otherwise specified - standard contractual clauses of the EU Commission according to Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, we obtain your consent in accordance with Art. 49 (1) sentence 1 lit. a. GDPR before such a third-country transfer, which you give via consent in the Consent Manager (or other forms, registrations, etc.). We point out that unknown risks may exist in third-country transfers (e.g. data processing by security authorities of the third country, whose exact scope and consequences for you we do not know, over which we have no influence, and of which you may not become aware).
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.
Google reCAPTCHA
Type and Scope of Processing
We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and allows us to distinguish whether a contact request originates from a natural person or is automated by a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the duration of stay and mouse movements of the user to distinguish automated requests from human ones. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.
Purpose and Legal Basis
The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.
Google Maps
Type and Scope of Processing
We use the Google Maps map service to create directions. Google Maps is a service of Google Ireland Limited, which displays a map on our website. When you access this content of our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google Maps.
Purpose and Legal Basis
The use of Google Maps is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.
Google DoubleClick
Type and Scope of Processing
We have integrated DoubleClick by Google components on our website. DoubleClick is a Google brand under which specialized online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with every impression, as well as with clicks or other activities.
Each of these data transmissions triggers a cookie request to the affected person's browser. If the browser accepts this request, DoubleClick places a cookie in your browser.
DoubleClick uses a cookie ID, which is necessary for handling the technical process. The cookie ID is needed, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser to avoid double serving. Furthermore, the cookie ID allows DoubleClick to record conversions. Conversions are recorded, for example, when a user has previously been shown a DoubleClick advertisement and subsequently makes a purchase on the advertiser's website using the same internet browser.
A DoubleClick cookie does not contain personal data but may contain additional campaign identifiers. A campaign identifier serves to identify campaigns with which you have already had contact on other websites. Within the scope of this service, Google receives data that Google also uses to create commission statements. Google can, among other things, track that you have clicked on certain links on our website. In this case, your data is forwarded to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection provisions of DoubleClick by Google can be accessed at https://policies.google.com/privacy.
Purpose and Legal Basis
We process your data with the help of the DoubleClick cookie for the purpose of optimizing and displaying advertising based on your consent pursuant to Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG. You give your consent by setting your cookie preferences (cookie banner / consent manager), through which you can also revoke your consent at any time with effect for the future in accordance with Art. 7 (3) GDPR. The cookie is used, among other things, to display user-relevant advertising and to create or improve reports on advertising campaigns. Furthermore, the cookie serves to avoid multiple displays of the same advertisement. Each time you visit one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and commission billing. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restriction, but not all functions may be fully available.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.
Google Tag Manager
Type and Scope of Processing
We use the Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the exact integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.
Purpose and Legal Basis
The use of Google Tag Manager is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Duration
The specific storage duration of the processed data is not within our control, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
Matomo
Type and Scope of Processing
We use the open-source software tool Matomo (formerly PIWIK) on our website. The software sets a cookie in your browser (see above for cookies). If individual pages of our website are accessed, the following data is stored:
The software runs exclusively on our website's servers. Your personal data is stored only there. Data is not passed on to third parties.
Purpose and legal basis
We process your data using the Matomo analysis software for the purpose of evaluating the use of individual components and content of our website based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You give your consent by setting the use of cookies (cookie banner / consent manager), with which you can also revoke your consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restriction, but not all functions may be fully available.
Storage period
The specific storage period for the cookies set is 13 months.
Etracker
Type and scope of processing
We use etracker from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our online offering, visited sub-pages, and the duration of stay of visitors. etracker uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity.
Purpose and legal basis
The use of etracker is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and § 25 Para. 1 TDDDG.
Storage period
The specific storage period of the processed data cannot be influenced by us but is determined by etracker GmbH. Further information can be found in the etracker privacy policy: https://www.etracker.com/datenschutz/.
Cookiebot
Type and scope of processing
We have integrated Cookiebot into our website. Cookiebot is a consent solution from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which can be used to obtain and document consent for the storage of cookies. Cookiebot uses cookies or other web technologies to recognize users and store the given or revoked consent.
Purpose and legal basis
The service is used to obtain the legally required consent for the use of cookies in accordance with Art. 6 para. 1 lit. c. GDPR.
Storage period
The specific storage period of the processed data cannot be influenced by us but is determined by Cybot A/S. Further information can be found in the Cookiebot privacy policy: https://www.cookiebot.com/de/privacy-policy/.
Usercentrics
Type and scope of processing
We have integrated Usercentrics into our website. Usercentrics is a consent solution from Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, with which consent for the storage of cookies can be obtained and documented. Usercentrics uses cookies or other web technologies to recognize users and store the given or revoked consent.
Purpose and legal basis
The service is used to obtain the legally required consent for the use of cookies in accordance with Art. 6 para. 1 lit. c. GDPR.
Storage period
The specific storage period of the processed data cannot be influenced by us but is determined by Usercentrics GmbH. Further information can be found in the Usercentrics privacy policy: https://usercentrics.com/privacy-policy/.
PayPal
Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you pay with PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of a contract). You can revoke your already given consent at any time. Past data processing operations remain effective when consent is revoked.
Klarna
Our website allows payment via Klarna. The payment service provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
When paying with Klarna (Klarna Checkout solution), Klarna collects various personal data from you. Details can be found in Klarna's privacy policy at: https://www.klarna.com/de/datenschutz/.
Klarna uses cookies to optimize the Klarna Checkout solution. This optimization represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Cookies are small text files that your web browser stores on your device. Klarna cookies remain on your device until you delete them. Details on the use of Klarna cookies can be found at: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.
The transmission of your data to Klarna is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of a contract). You can revoke your already given consent at any time. Past data processing operations remain effective when consent is revoked.
Sofortüberweisung
Our website enables payment via "Sofortüberweisung." The payment service provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich.
Using the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin fulfilling our obligations.
When paying by "Sofortüberweisung", your PIN and TAN are transmitted to Sofort GmbH. The payment provider logs into your online banking account, automatically checks your account balance, and carries out the transfer. An immediate transaction confirmation follows. Your transactions, the credit limit of your overdraft facility, and the existence of other accounts and their balances are also automatically checked after logging in.
In addition to your PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data. Your personal data includes your first and last name, address, telephone number(s), email address, IP address, and possibly other data necessary for payment processing. This data transmission is necessary to unequivocally establish your identity and to prevent fraud attempts.
The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of a contract). You can revoke your already given consent at any time. Past data processing operations remain effective when consent is revoked.
Details on payment with Sofortüberweisung can be found at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
XING Plugin
Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
When a page with integrated Xing functions is accessed, a connection to the Xing servers is established. To our knowledge, no personal data is stored in this process. IP addresses are not stored, and user behavior is not evaluated.
Details on data protection and the XING Share button can be found in XING's privacy policy at: https://www.xing.com/app/share?op=data_protection.
Twitter Plugin
Type and scope of processing
We have integrated components of the X Plugin into our website. X Plugin is a service from Twitter International Unlimited Company and allows us to aggregate and display content from the social media platform on our website.
When you access this content, you establish a connection to servers of Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of the X Plugin.
If a user is registered with Twitter International Unlimited Company, the X Plugin can assign the viewed content to the profile.
Purpose and legal basis
The use of the X Plugin is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.
Storage period
The specific storage period of the processed data cannot be influenced by us but is determined by Twitter International Unlimited Company. Further information can be found in the X Plugin privacy policy: X Privacy Policy.
Pinterest Plugin
Our website uses functions of the social network Pinterest. The provider is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA.
When you access a page with Pinterest functions, your browser establishes a direct connection to the Pinterest servers. Log data is transmitted to Pinterest's servers. The servers are located in the USA. The log data may potentially allow conclusions to be drawn about your IP address, visited websites, browser type and settings, date and time of the request, your use of Pinterest, and cookies.
The use of the Pinterest Plugin is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.
Further details can be found in Pinterest's data protection notices: https://about.pinterest.com/de/privacy-policy.
Google Ads
Type and scope of processing
We have integrated Google Ads into our website. Google Ads is a service from Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.
Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider.
If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or are not logged in, it is possible that the provider may discover and store your IP address and other identification features.
In this case, your data will be forwarded to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Purpose and legal basis
The use of Google Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place according to Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision of the European Commission exists (including US companies not certified under EU-U.S. DPF), we have agreed with the data recipients on other suitable safeguards within the meaning of Art. 44 et seq. GDPR. These are - unless otherwise stated - standard contractual clauses of the EU Commission according to Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, we obtain your consent pursuant to Art. 49 para. 1 sentence 1 lit. a. GDPR before such a third country transfer, which you give via consent in the Consent Manager (or other forms, registrations, etc.). We point out that unknown risks may exist in detail with third country transfers (e.g. data processing by security authorities of the third country, the exact scope of which and their consequences for you we do not know, over which we have no influence, and of which you may not become aware).
Storage period
The specific storage period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. Further information can be found in the Google Ads privacy policy: https://policies.google.com/privacy.
Bing Ads
Type and scope of processing
We have integrated Bing Ads into our website. Bing Ads is a service from Microsoft Corporation to display targeted advertising to users. Bing Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.
Bing Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Bing Ads delivers targeted advertising based on behavioral profiles and geographical location. Your IP address and other identification features, such as your user agent, are transmitted to the provider.
In this case, your data will be transferred to the operator of Bing Ads, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.
Purpose and Legal Basis
The use of Bing Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Period
The specific storage period of the processed data cannot be influenced by us, but is determined by Microsoft Corporation. Further information can be found in the privacy policy for Bing Ads: https://privacy.microsoft.com/de-de/privacystatement.
Facebook Pixel
Type and Scope of Processing
We use Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called custom audiences, i.e., to segment visitor groups of our online offering, determine conversion rates, and then optimize them. This happens especially when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.
Purpose and Legal Basis
The use of Facebook Pixel is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Period
The specific storage period of the processed data cannot be influenced by us, but is determined by Meta Platforms Ireland Limited. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation.
Amazon Affiliate Program
As the operator of this website, we participate in the Amazon EU Partner Program. Amazon advertisements and links to Amazon are embedded on our pages to earn money through advertising cost reimbursements. Amazon cookies are used, which allow Amazon to recognize that you have clicked an affiliate link on our website.
The storage of “Amazon cookies” takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Details on data usage by Amazon can be found in the Amazon privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
Google AdSense
Our website uses Google AdSense. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google AdSense is used for integrating advertisements and sets cookies. Cookies are small text files that your web browser stores on your device to analyze website usage. Google AdSense also uses web beacons. Web beacons are invisible graphics that allow an analysis of visitor traffic on our website.
The information generated by cookies and web beacons is transmitted to Google servers and stored there. The server location is the USA. Google may pass this information on to contractual partners. However, your IP address will not be merged by Google with other data stored by you.
The storage of AdSense cookies takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
With a modern web browser, you can monitor, restrict and prevent the setting of cookies. Disabling cookies may result in limited functionality of our website. By using our website, you agree to the processing of the data collected about you by Google in the manner described above and for the purpose mentioned above.
Google Web Fonts
Type and Scope of Processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service for providing fonts for our online offering. To obtain these fonts, you connect to Google Ireland Limited servers, whereby your IP address is transmitted.
Purpose and Legal Basis
The use of Google Fonts is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
Adobe Typekit
Type and Scope of Processing
We use Adobe Typekit from Adobe Inc., San Jose, California, US, as a service for providing fonts for our online offering. To obtain these fonts, you connect to Adobe Inc. servers, whereby your IP address is transmitted.
Purpose and Legal Basis
The use of Adobe Typekit is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and §25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Storage Period
The specific storage period of the processed data cannot be influenced by us, but is determined by Adobe Inc. Further information can be found in the privacy policy for Adobe Typekit: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.
Font Awesome
Type and Scope of Processing
We use Font Awesome from the provider Fonticons, Inc. for the proper provision of the content on our website.
Purpose and Legal Basis
The use of Font Awesome is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists, we have agreed with the recipients of the data other suitable safeguards within the meaning of Art. 44 et seq. GDPR. These are – unless otherwise stated – standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
Furthermore, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you grant via the consent in the Consent Manager (or other forms, registrations etc.). We would like to point out that in the case of transfers to third countries, unknown risks (e.g. data processing by security authorities of the third country, whose exact scope and consequences for you we do not know, over which we have no influence and of which you may not become aware) may exist.
Storage Period
The specific storage period of the processed data cannot be influenced by us, but is determined by Fonticons, Inc. Further information can be found in the privacy policy for Font Awesome CDN: https://cdn.fontawesome.com/privacy.
Gut-und-fair-beraten.de
Type and Scope of Processing
We have integrated the Gut-und-fair-beraten.de rating widget on our website. The widget is integrated into our site via a JavaScript snippet. Data and HTML code of the widget are stored on the servers of Gut-und-fair-beraten.de. As soon as you access our website, the snippet is loaded, data and HTML code are loaded from the servers of Gut-und-fair-beraten.de and displayed on our website. In order to technically enable the retrieval and to display the widget accordingly in your browser, your IP address in particular is transmitted to Gut-und-fair-beraten.de and stored in the server logs of Gut-und-fair-beraten.de. The widget contains a link that leads to the Gut-und-fair-beraten.de website for further information on the rating profile. The explanations regarding linking in this privacy policy apply in this respect. No user profiles are created or other tracking measures are carried out by the widget.
Purpose and Legal Basis
The integration is based on the legal basis of Art. 6 para. 1 lit. f. GDPR due to our legitimate interest in informing you about the data protection-compliant design of our website with an always up-to-date seal.
Storage Period
The specific storage period of the processed data cannot be influenced by us, but is determined by Herold Unternehmensberatung GmbH. Further information can be found in the privacy policy for Gut-und-fair-beraten.de Widget: https://www.gut-und-fair-beraten.de/datenschutz/.
Source: Data protection configurator by Herold Unternehmensberatung