Privacy policy

Privacy policy

 

 § 1 Information on the collection of personal data

(1) In the following we inform about the processing of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. With this privacy policy, we would like to inform you about our processing procedures and at the same time comply with the legal obligations, in particular from the EU General Data Protection Regulation (GDPR).

(2) The controller pursuant to Art. 4 (7) GDPR is

Triebswetter Felix & Kandler Felix Kulturveranstaltungen GbR

Äußeres Pfaffengäßchen 34, 86152 Augsburg,

E-mail: info@taverntours.de.

(3) When you contact by email or via a contact form, the data you provide (your email address, possibly your name and telephone number) will be stored and processed by us in order to answer your questions. We delete the data arising in this context, if the request is assigned to a contract , after the deadlines for the contract term, otherwise after the storage is no longer necessary, or restrict the processing, if there are legal storage obligations. The legal basis for processing is Art. 6 para. 1 lit. a) GDPR – i.e. your express consent. If you submit your request for the purpose of fulfilling a contract or for the implementation of pre-contractual measures, or if this refers to this, the processing is carried out in accordance with Art. 6 para. 1 lit. b) GDPR. In other respects, the legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in processing and responding to your request sent to us at .

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes at below. In doing so, we also specify the defined criteria for the storage period and the respective legal basis.

 

§ 2 External hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The external hosting is carried out in our legitimate interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested , the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time at .

Our host(s) will only process your data to the extent that this is necessary to fulfill its performance obligations and follow our instructions with regard to this data.

We use the following hoster :

IONOS SE

Elgendorfer Str. 57

56410 Montabaur

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service . This is a contract prescribed by data protection law , which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with of the GDPR.

 

 § 3 Your rights

(1) You have the following rights vis-à-vis a controller with regard to your personal data:

 -Right to information:

In particular, you have the right to information about your personal data processed by us, which Processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data is disclosed disclosed or will be disclosed, the planned storage period or the criteria for the determination of the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if these were not collected by us from you, the existence of automated decision-making including profiling and, if applicable, the existence of a right to data portability. meaningful information about the logic involved and the purposes for which you the scope and the intended effects of such a change. processing, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR when transferring your data to third countries; 

 -Right to rectification or erasure:

You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us; you have the right to demand the deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

 -Right to restriction of processing:

You have the right to demand the restriction of the processing of your personal data, as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to unauthorized data processing and instead demand the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation as long as it is not yet clear whether our legitimate reasons prevail;

 -Right to revoke consents granted:

If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.

 -Right to data portability:

You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller, where technically feasible ;

(2) You also have the right to complain to the competent data protection supervisory authority about the processing of your personal data by us.

 

 § 4 Processing of personal data when visiting our website

When using for information purposes, i.e. simply viewing the website without registering and without providing with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR:

 -IP address

 -Date and time of the request

 Time zone difference to Greenwich Mean Time (GMT)

 -Content of the request (page visited)

 -Access status/HTTP status code

 -Volume of data transferred in each case

 -previously visited page

 -Browser

 -Operating system

 -Language and version of the browser software.

The data is generally deleted as soon as the necessity for processing no longer applies. IP addresses in the logs are anonymized .

§ 5 Further functions and offers on our website

(1) In addition to the purely informational use of our website, we offer various services, which you can use if you are interested, which are presented in more detail below. To do this, you must generally provide further personal data or we process such further data that we use to provide the respective services. For all data processing purposes described here, the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These are carefully selected by us , are bound by our instructions and are regularly checked .

(3) Your personal data will not be passed on to third parties – via the service providers used and named by us.

Where applicable, we may also process your personal data in order to assert and enforce rights or claims to which we are entitled or to defend ourselves against legal claims asserted against us . The same applies if the disclosure is necessary for the defense or prosecution of criminal offenses and is required by law.

The legal basis for this processing is Art. 17 para. 3 lit. e GDPR and Art. 6 para. 1 sentence 1 lit. f) GDPR. Our overriding legitimate interest is the enforcement of rights and legal defense.

(4) Below we list the categories of recipients of your data, insofar as these can be passed on in accordance with the aforementioned requirements. These are in particular

– IT service providers who support us in the provision of our services and in the administration and maintenance of our IT systems

– Payment service providers/banks

– Debt collection agencies and legal advisors in the event of the assertion or defense of claims

– Public bodies and institutions, insofar as we are legally obliged to do so or you have commissioned us to do so.

(5) If personal data is sent to external servers in a third country, we have concluded data processing agreements with the processor, which provide guarantees that the provisions of data protection law are complied with.

Your data will then only be processed in a third country if the requirements of Art. 44 et seq. of the GDPR are met. In the event of express consent to the transfer of personal data to third countries, data processing takes place on the basis of Art. 49 para. 1 lit. a GDPR. Alternatively, your data may be processed on the basis of special guarantees or an EU adequacy decision, such as the Data Privacy Framework (DPF) or, if an adequacy decision for the third country does not exist , by agreeing EU standard data protection clauses, possibly in conjunction with additional guarantees to ensure compliance with the level of data protection in the European Union.

§ 6 Use of our booking option

(1) If you would like to book a tour or purchase a voucher directly on our website, it is necessary for the contract to be concluded that you provide your personal data, which requires for the purpose of processing your order. Mandatory information required for the processing of contracts is marked separately, further information is voluntary. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b) GDPR.

(2) We store the data provided by you as part of the reservation for a maximum of 10 years. The legal basis for the storage are commercial and tax law retention obligations.

(3) To prevent unauthorized access to your personal data by third parties, the order process is encrypted using SSL/TLS technology.

 

 § 7 Objection to the processing of your data

(1) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you , which is described by us in each case in the following description of the functions . When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the manner carried out by us. In the event of your objection, we will examine the situation and will either discontinue the data processing or adapt or point out to you our compelling reasons worthy of protection, on the basis of which we will continue the processing.

(2) Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. The best way to exercise your objection to advertising is to contact us at using the contact details provided above.

 

§ 8 Profiling/Automated decision making

We do not create a profile of you. No procedure for purely automated decision-making within the meaning of Art. 22 GDPR takes place as part of our processing.

 § 9 Processing of data from your end devices (“Cookie–Policy“)

(1) In addition to the data mentioned above , we use technical tools for various functions when you use our website, in particular cookies, which may be stored on your end device. When you visit our website and , you can choose at any time later whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes to in your browser settings. In the following, we first describe cookies from a technical perspective (2), before going on to describe the technically necessary cookies (3) used by .

(2) Cookies are text files or information in a database that are stored on your hard disk and assigned to the browser you use so that certain information can flow to the site that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer, but are primarily used by to make the website faster and more user-friendly. This website uses the following types of cookies, whose functionality and legal basis we will explain below:

 Transient cookies: Such cookies, in particular session cookies, are automatically deleted when the browser is closed or when you log out of . They contain a so-called session ID. This allows to assign various requests from your browser to the shared session and your computer can be recognized when you return to our website.

 Persistent cookies: These are automatically deleted after a specified period, which varies depending on the cookie . You can view the cookies set and the duration at any time in the settings of your browser and delete the cookies manually. We do not currently use such cookies.

(3) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (completely correctly) or support functions could not be enabled. These are basically transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie(borlabs-cookie) to save your cookie consent.

Borlabs Cookie does not process any personal data.

In the cookie borlabs-cookie stores the consent you gave when you entered the website. If you wish to withdraw your consent, simply delete the cookie in your browser . When you re-enter/reload the website , you will be asked for your cookie consent again

 

§ 10 Google Tag Manager

(1) We use the Google Tag Manager service of the provider Google. “Google” is a group of companies and consists of the companies Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. The Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. The Google Tag Manager ensures the loading of other components, which in turn may collect data. The Google Tag Manager does not access this data. Further information on Google Tag Manager can be found in Google’s privacy policy at https://www.google.com/intl/de/policies/privacy/.

(2) The purpose of the processing is to trigger, control and manage other services on our website. The legal basis for processing is our overriding legitimate interest, i.e. Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the uniform and proper integration of cookies and similar technologies and in legally compliant consent management. In the context of use, it cannot be ruled out that data may be transferred to a country outside the European Union (specifically the USA). The transfer of data to USA is based on Art. 45 GDPR in conjunction with the adequacy decision C(2023) 4745 of the European Commission, as the data recipient has undertaken to comply with the principles of data processing of the Data Privacy Framework (DPF) and is also certified in accordance with the DPF. We have concluded a data processing agreement with the provider.

 

§ 11 Google Analytics

(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of using this tool is to enable your user interactions on websites and in apps to be analyzed and to improve our offering and make it more interesting and appealing to you as a user through the statistics and reports obtained in this way.

(2) The interactions between you as a user of the website and our website are recorded by us using cookies, data on the device/browser, IP addresses and website or app activities. Furthermore, Google Analytics also records your anonymized IP addresses to ensure the security of the service and to provide information about the region of the respective user (so-called “IP location determination”). With the anonymization function (“IP masking”), Google shortens the IP addresses within the EU/the EEA by the last octet. This further protects your personal data.

(3) Google acts as a processor in connection with our use of the service. We have therefore concluded a corresponding contract with Google for order processing in accordance with Art. 28 GDPR. The information obtained by about your use of this website and the anonymized IP addresses are usually transferred to a Google server in the USA and processed there. For these cases, Google has submitted to the EU-U. S. Data – Privacy Framework. The provider is certified within the framework of the DPF.

(4) The legal basis for the processing of the information (which takes place for a maximum of 14 months) is your express consent, therefore Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The easiest way to revoke your consent is via our Consent Manager at or by installing the browser add-on from Google, which can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=de/.

(5) For more information on the scope of services provided by Google Analytics, please visit https://marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at under the following link: https://support.google.com/analytics/answer/6004245?hl=de/. General information on data processing, which according to Google should also apply to Google Analytics , can be found in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/.

 

 

 

§ 12 Google Ads

(1) We also use the Google Ads service of the provider Google to draw attention to our offers with the help of advertisements . If you access our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. a GDPR, meaning that the integration only takes place with your express consent.

(2) The advertising material is delivered by Google via so-called “Ad servers”. For this purpose, we and other websites use so-called Ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. We can obtain information about the success of our advertising campaigns via the Google Ads cookies stored on our website . These cookies are not intended to identify you personally. For this cookie , the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values.

(3) The cookies set by Google enable Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page . A different cookie is assigned to each Ads customer so that the cookies cannot be tracked via the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the aforementioned advertising measures, but only provide Google with the option of collecting the data. We only receive statistical evaluations from Google, which allow us to recognize which ads were clicked on how often and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.

(5) You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal . The easiest way to withdraw your consent is via our Consent Manager or via the following functions: a) by means of a corresponding setting of your browser software, in particular the suppression of third-party cookies so that you do not receive ads from third-party providers; b) by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked, https://www.google.de/settings/ads, whereby this setting deleted when you delete your cookies; c) by deactivating the interest-based ads from providers that are part of the self-regulatory campaign “About Ads” via the link https://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your browsers Firefox, Internet Explorer or Google Chrome under the link https://www.google.com/settings/ads/plugin.

(6) Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.

 

 § 13 Google Conversion Tracking

(1) We use Google Ads with the additional function “Google Conversion Tracking”. This is a procedure with which we can check and measure the success of our advertising campaigns. For this purpose, the advertisements are provided with a technical provision, e.g. an ID, with which we can determine how a user interacts after clicking on the advertisements and whether one of our services is actually used . This provides us with statistical information about the total number of readers of our ads, which ads are particularly popular and, if applicable, further information about the consequences of the ad.

(2) The legal basis for the processing of your data is also in this respect Art. 6 para. 1 sentence 1 lit. a GDPR, the integration only takes place with your express consent. You can prevent or stop using the conversion tracking function in the same way as previously described for Google Ads at .

 

§ Section 14 Google Remarketing

(1) We use Google Ads with the additional application “Google Remarketing”. With this process, we can create advertisements based on existing information about you and address you again when you continue to use Internet. This is done by means of cookies set when you visit our offers, through which your usage behavior when visiting various websites is recorded by Google and evaluated pseudonymously . According to Google, the data collected as part of remarketing is not merged with your personal data that may be stored by Google .

(2) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR; the integration only takes place after your express consent. You can prevent or stop using the remarketing function in the same way as described above for Google Ads .

 

§ 15 LinkedIn Insight Tag

(1) Furthermore, the website uses the so-called LinkedIn Insight tag (or LinkedIn Pixel) of LinkedIn Ireland Unlimited Company (“LinkedIn”). By integrating this JavaScript tag, you as a user of our website can be shown interest-based and relevant advertisements (“ads”) when visiting of the social network LinkedIn or other websites that also use the process, and we receive statistics about website visitors and demographics. Furthermore, we can evaluate your use of our LinkedIn ads and interest in our offers using a conversion tracking function and also show you LinkedIn ads on other websites via retargeting. We do this in order to improve the effectiveness of LinkedIn ads and to make our website more interesting for you .

(2) By integrating the LinkedIn Insight tag, your browser automatically establishes a direct connection with the server of LinkedIn, both when visiting the LinkedIn website and from websites that have integrated the LinkedIn Insight tag. LinkedIn and we are jointly responsible for the collection of your usage data when you visit our website and the transmission to the provider , but LinkedIn is solely responsible for the relevant processing for the purposes described after transmission of the data. We have no influence on the scope and type of use of the data by LinkedIn, we therefore inform you according to our level of knowledge: By integrating the LinkedIn Insight tag, LinkedIn receives the information that you have accessed the corresponding website of our Internet presence or have clicked on an advertisement from us . If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, there is a possibility that the provider will find out your IP address, time window and other identification features and link them to the actions assigned to you.

(3) The deactivation of the LinkedIn Insight tag and other advertising objections are possible in the settings for advertisements at https://www.linkedin.com/help/linkedin/answer/62931?trk=microsites-frontend_legal_privacy-policy&lang=de-DE and additionally at https://www.linkedin.com/psettings/guest-controls/retargetingopt-out. Further setting options and information can be found in the LinkedIn Privacy Center: https://privacy.linkedin.com/de-de?lr=1/.

(4) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. You can revoke your consent at any time, the easiest way is via our cookie manager. LinkedIn also processes your personal data in the USA and has submitted to the EU-U. S.  Privacy Framework.

(5) Further information on data processing by LinkedIn can be obtained from the provider, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland; information on the LinkedIn Insight tag: https://business.linkedin.com/de-de/marketing-solutions/insight-tag?lr=1/; data protection information: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy/.

 

 § 16 Advertising with meta (pixel and conversion tracking)

(1) Furthermore, the website uses advertising measures of Meta Inc. (“Meta”). By integrating the so-called “Meta Pixel” on our website, we can display our advertising measures (“Meta advertisements”) to users of our website and the social networks of the provider Meta and measure and evaluate their success (“conversion tracking”). This connection between Meta and our website is technically implemented via the “Meta Pixel”. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place after your consent.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection with Meta’s server when you visit our website. We have no influence on the scope and further use of the data collected by Meta through the use of this tool and therefore present you with the processes known to us: By integrating the Meta Pixel, Meta receives the information that you have accessed the corresponding website of our Internet presence, or have clicked on an advertisement from us. If you are registered with a service of Meta, Meta can assign the visit to your account. Even if you are not registered with Meta or have not logged in, there is a possibility that the provider will find out your IP address and other identifiers and use them to create a profile.

(3) The information collected by is stored on Meta’s servers, including in the USA. For these cases, has submitted to the EU-U. S.   Privacy Framework and has agreed to comply with applicable data protection laws when transferring datainternationally.

(4) You may withdraw your consent at any time, without this affecting the lawfulness of processing up to the point of withdrawal. The easiest way to withdraw your consent is via our Consent Manager at or by clicking [here] . In addition, logged-in users can object via the provider’s function in the respective social network.

 (5) Further information on data processing by Meta can be found at Meta Inc, 1601 S California Ave, Palo Alto, California 94304, USA; Privacy Policy: https://www.facebook.com/privacy/policy/?entry_point=about_fb.

(6) We also use the remarketing function “Custom Audiences”, which also uses the meta pixel and to display interest-based advertisements when you visit our website or other websites that have also integrated the meta pixel. This enables to show you advertisements that are of interest to you in order to make our website more interesting for you and to market our offer.

 

 

§ 17 Microsoft Advertising

We use the service “Microsoft Advertising” on our website, provided by Microsoft Corporation, One Microsoft Way, Redmond, WA98052-6399, USA (hereinafter referred to as “Microsoft” ).

The legal basis for the use of this service is Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TDDDG, i.e. your express consent.

The Microsoft Advertising service collects and stores data and uses it to create pseudonymous user profiles for . With the help of the BingAds service – a service that is part of Microsoft Advertising – it is possible for us to track whether a user has visited our website by clicking on a BingAds ad. If you reach via such an ad on our website, a cookie is set on your device. If you have reached our website by clicking on a BingAds ad, a corresponding cookie will be set on your device.

The so-called Microsoft Advertising UET tag is also implemented on our website . The Microsoft Advertising UET tag is a code integrated on our website, which, in conjunction with the cookie that is set when our site is accessed via a BingAds ad, stores further non-personal data about the use of our website . This makes it possible, among other things, to measure the time spent on our website and the areas accessed.  This also enables us to recognize via which BingAd ad the users have reached our website. The collection of your IP address is encrypted. The cookie also collects a so-called Global UID (Globally Unique Identifier), which is assigned to your browser . Alternatively or additionally, the cookie collects a user ID, which can be assigned to your Microsoft account if you use one.

 

The aforementioned information collected is transferred to Microsoft servers, which may also be located in the USA . They are stored there for a maximum of 180 days . By prohibiting the setting of cookies via the corresponding settings of your web browser, you can prevent the setting and data collection by the cookie. If you generally deactivate the setting of cookies in your web browser, you may not be able to use the full functionality of our website.

It is also possible for Microsoft to track your usage behavior across multiple devices used by via cross-device tracking. This enables Microsoft to show you personalized advertising on or in Microsoft websites and or apps . You can deactivate cross-device tracking for Microsoft at http://choice.microsoft.com/de-de/opt-out .

You can revoke your consent for at any time in the future via our consent tool.

You can find more information on data processing by Microsoft and the privacy policy of the provider at: https://www.microsoft.com/de-de/privacy/privacystatement

 

§ 18 Payment options

18.1 PayPal

We offer you the option of paying for your order via the payment service provider PayPal. If you choose this payment method, the amount to be paid by you will be transmitted to PayPal (specifically to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) together with your first and last name, delivery address, e-mail address, telephone number and IP address, so that you can authorize the payment to to PayPal. A PayPal account is required for this. PayPal also offers the option of processing payments via credit cards or using the SEPA procedure if a user does not have a PayPal account. For this purpose, further data may have to be provided to PayPal . Further information can be found in the privacy policy of PayPal at https://www.paypal.com/de/legalhub/paypal/privacy-full .

The legal basis for the data processing associated with this is Art. 6 para. 1 lit. b) GDPR, i.e. the fulfillment of a contract. The provision and processing of your data is necessary for the execution of the payment of your purchase via PayPal.

The data transmitted to PayPal may be transmitted by PayPal to credit agencies. This transmission is used for identity and credit checks. Further information on data protection at PayPal can be found on the PayPal website at https://www.paypal.com/de/legalhub/paypal/privacy-full. Payment with PayPal is voluntary.

The legal basis for the data processing associated with this is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to offer you an effective and secure payment option and to prevent fraud.

 

18.2 Bank transfer

You also have the option of paying for your order by direct bank transfer to us.

 

§ 19 Social media presences

(1) We operate websites on various social media platforms. We operate these presences with the following providers, whose data protection notices can be found in the corresponding link:

Instagram: https://privacycenter.instagram.com/policy/

Facebook: https://www.facebook.com/privacy/policy/

 (2) We use the technical platform and services of the providers for the social media sites . We would like to point out to that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions of the respective platform (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect, among other things, your IP address and other information that is stored on your device in the form of cookies . This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us .

With regard to our presence on and the aforementioned social media, we are jointly responsible with the operator of the social media platform for data processing , in particular in the context of statistics, analyses and similar provided to us by the operator. Corresponding agreements on joint responsibility exist in each case, if and insofar as joint responsibility exists.

(3) The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection . The transfer of data to the USA and the guarantees of the adequate level of data protection are ensured by the certification of all providers used by us within the framework of the EU-US Data Privacy Framework (DPF) . We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. The data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user of , a cookie on your device can be used to track how you have moved around the web. Via buttons integrated into websites, the platforms are able to record your visits to these websites pages and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you wish to avoid this, you should log out or deactivate the “stay logged in ” function, delete the cookies on your device and restart your browser at .

 (4) As the operator of the website on the platform, we also only process the data from your use of our service that you provide to us and that require interaction . For example, if you ask a question that we can only answer by email , we will store your information in accordance with the general data processing principles that we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR and, in the case of previously requested consent, Art. 6 para. 1 lit. a) GDPR.

(5) To exercise your data subject rights, you can contact us or the provider of the social media platform. Insofar as one party is not responsible for answering or must receive the information from the other party, we or the provider will then forward your request to the respective partner . Please contact the operator of the social media platform directly if you have any questions about the profiling, processing of your data when using the website. Only the respective provider has access to users’ data and can directly take appropriate measures and provide with information.

If you have any questions about the processing of your interaction with us on our site, please write to the contact details provided by us above .

(6) What information the social media platform receives and how it is used is described by the providers in their privacy policies (see link in the table above). There you will also find information about contact options and the setting options for advertisements.

 

§ 20 Changes to this privacy policy

We always keep this privacy policy up to date , which is why it may be necessary for us to adapt it from time to time to the current legal situation.

 

Status: 11.07.2025 – V2.0