Privacy Policy

We are pleased that you are visiting our website. The security and protection of your personal information whilst using our website is very important to us. We should therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes such data are used.

This privacy policy is applicable to the online offering of TOOLPORT GmbH.

1. Data controller

responsible for the processing of personal data as defined by the EU General Data Protection Regulation (GDPR)

TOOLPORT GmbH

Gutenbergring 1-5

22848 Norderstedt / Germany

Tel.: +49 (0) 40 / 60 87 27 17

Fax: +49 (0) 40 / 60 87 27 37

Email: service@houseoftents.co.uk

Data protection officer:

Mr Philipp Herold

Mein-Datenschutzbeauftragter.de

Hafenstraße 1A, 23568 Lübeck

privacy@houseoftents.co.uk

2. General information

What is this all about?

This privacy policy fulfils the statutory requirements for transparency in the processing of personal data. Personal data are all information relating to an identified or identifiable natural person. This includes such information for example as your name, your age, your address, your telephone number, your date of birth, your email address, your IP address or user behaviour when visiting a website. Information in which we are unable to find any reference to you personally (or only by incurring disproportionate expense), e.g. which has been anonymised, is not personal data. The processing (e.g. the collection, retrieval, use, storage or transfer) of personal data always requires a basis in law and a defined purpose. Stored personal data are erased once the purpose of the processing has been achieved and there are no legitimate reasons for any further retention of the data. We inform you at each individual stage of the processing of the actual storage periods, respectively criteria for storage. Irrespective of this, we store your personal data in individual cases for the establishment, exercise or defence of legal claims and whenever we are subject to statutory obligations to keep records.

To whom are my data disclosed?

We only disclose your personal data as processed on our website to third parties if this is required to serve the purposes and if it is in that particular case covered by the legal basis (e.g. consent or the protection of legitimate interests). We disclose personal data to third parties moreover in individual cases if this serves the establishment, exercise or defence of legal claims. Possible recipients may in that case be e.g. directors of public prosecutions, lawyers, auditors, courts etc.

If in order to operate our website we call upon the services of service providers who, under an arrangement for the outsourcing of data processing, act as data processors processing personal data on our behalf pursuant to Art. 28 GDPR, such service providers may be recipients of your personal data. You can find further details about the deployment of outsourced data processors and about online services in the overview of the individual stages of the processing.

Do you use cookies?

Cookies are small text files that are sent by us, whenever you visit our websites, to the browser on your terminal device and stored there As an alternative to the use of cookies, information may also be stored in the local storage your browser. Some of the features of our website cannot be offered without the use of cookies and/or local storage (technically essential cookies). Other cookies on the other hand enable us to perform various different analyses, meaning that we are for example able to recognise the browser used by you if you visit our website again, and transmit various types of information to us (non-essential cookies). Cookies serve inter alia to allow us to make our online offering more user-friendly and effective for you by for example reconstructing your use of our website and establishing your preferences (e.g. country and language settings). Where third parties process information via cookies, the cookies collect this information directly from your browser. Cookies do not cause any harm to your terminal device. They cannot execute any programmes and do not contain any viruses.

We provide information on the respective services for which we use cookies in the [section setting out the] individual stages of the processing. You can find detailed information on the cookies used in the Consent Manager.

Adjust cookie preferences

What rights do I have?

Subject to the basic requirements of the statutory provisions of the General Data Protection Regulation (GDPR) and of the Federal Data Protection Act (BDSG), in your capacity as the data subject, you have the following rights:

Information pursuant to Art. 15 GDPR, sec. 34 BDSG about any stored personal data concerning you, and this in the form of meaningful information on the details of the processing together with a copy of your data;
Rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
Erasure pursuant to Art. 17 GDPR of data stored by us, where the processing is not required for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
Restriction of processing pursuant to Art. 18 GDPR, where the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you have declined their erasure as you need the data for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
Data portability pursuant to Art. 20 GDPR, where you have provided us with personal data within the scope of any consent pursuant to Art. 6 (1) a GDPR or based on a contract pursuant to Art. 6 (1) b GDPR, and such data were processed by us by automated means. You receive your data in a structured, commonly used and machine-readable format and/or we transmit the data directly to another controller, where technically feasible.
Objection pursuant to Art. 21 GDPR to the processing of your personal data where this is done on the basis of Art. 6 (1) e, f GDPR and your objection is on grounds relating to your particular situation or addresses direct marketing. There is no right of objection if proof is provided of overriding, compelling legitimate grounds for the processing or if the processing is done for the establishment, exercise or defence of legal claims. Where there is no right of objection for individual stages of the processing, this is specified there.
Withdrawal pursuant to Art. 7 (3) GDPR of the consent given by you, to take effect in the future.
Lodging a complaint pursuant to Art. 77 GDPR with a supervisory authority, if you consider that the processing of your personal data infringes the GDPR. As a rule, you may apply to the supervisory authority at your habitual residence, your place of work or our place of business.

How are my data processed in detail?

We are pleased to inform you below of the individual stages of the processing, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. No automated individual decision-making, including profiling, takes place.

3. Provision of the website

Nature and scope of the processing

Whenever you view and use our website, we collect personal data which your browser automatically sends to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access takes place (referrer URL)
Browser used and, where applicable, your computer’s operating system, together with the name of your access provider

Our website is not hosted by us, but by the service provider who processes the aforementioned data on our behalf pursuant to Art. 28 GDPR for the purposes of the provision of the website.

Purpose and legal basis

The processing is done for the protection of our overriding legitimate interest in displaying our website and guaranteeing security and stability on the basis of Art. 6 (1) f GDPR. The collection of the data and the storage of such data in log files is absolutely necessary for the operation of the website. There is no right of objection to the processing on account of the exception provided for under Art. 21 (1) GDPR. Where the continued storage of the log files is prescribed by law, the processing is done on the basis of Art. 6 (1) c GDPR. There is no statutory or contractual obligation to provide the data, however it is not technically possible to access our website without providing the data.

Storage period

The aforementioned data are stored for as long as the website is displayed and, for technical reasons, for a maximum of 14 days thereafter.

4. Contact form

Type and scope of processing

On our website, we offer you the opportunity to contact us using a form provided. The information collected via mandatory fields is required to process the request. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the contact request.

We use the "Typeform" service for the contact form. You can find more information about "Typeform" at: https://www.typeform.com/. This service is provided by TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona ("Typeform"). An order processing agreement in accordance with Art. 28 GDPR has been concluded. Further information on data processing in connection with Typeform can be found in Typeform's privacy policy: https://admin.typeform.com/to/dwk6gt..

Purpose and legal basis

The processing of your data through the use of our contact form is carried out for the purpose of communication and processing your request on the basis of your consent in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. a GDPR. If your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b GDPR. If your request is of a different nature, Art. 6 para. 1 sentence 1 lit. f GDPR is the legal basis. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage duration

If you use the contact form on the basis of your consent, we will store the data collected for each inquiry for a period of three years, starting from the time your inquiry is dealt with or until you withdraw your consent.

If you use the contact form as part of a contractual relationship, we store the data collected for each inquiry for a period of three years from the end of the contractual relationship.

5. Direct e-mail advertising for similar goods and services

Type and scope of processing

The personal data collected via order forms when ordering goods or services will be used by TOOLPORT GmbH to manage your customer account and to fulfill and process your order and will only be passed on to third parties (e.g. to a transport company commissioned with shipping) for this purpose. In addition, this data is further used within the framework of the statutory provisions. TOOLPORT GmbH will then inform you by e-mail about interesting offers relating to the same or similar goods or services. If you do not wish to receive such e-mail information, you can informally object to this at any time with effect for the future by contacting TOOLPORT GmbH (datenschutz@toolport.de).

Purpose and legal basis

Processing is carried out in accordance with the provisions of Section 7 UWG. You can object to the processing at any time for the future. You will also receive this notice in any correspondence we send you on the basis of Section 7 UWG.

Storage duration

Upon revocation of the processing, we will delete your data for the purpose listed here or no longer process it.

6. Newsletter

Type and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address and your name and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your registration for the newsletter (double opt-in). If you do not confirm your registration within 24 hours, it will automatically expire and the data will not be processed for the newsletter mailing.

If you purchase goods or services on our website and enter your e-mail address, we may subsequently use it to send you a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.

To send the newsletter, we use a service provider who processes your personal data on our behalf in accordance with the GDPR. Art. 28 GDPR process. Your data will not be passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending newsletters on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Art. 6 para. 1 lit. a GDPR. By unsubscribing from the newsletter, you can revoke your consent at any time with effect for the future in accordance with. Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Storage duration

After registration for the newsletter, we store the data for a maximum of 24 hours until the registration is confirmed. After successful confirmation, we will store your data until you withdraw your consent (unsubscribe from the newsletter), and for technical reasons for a maximum of 14 days beyond that.

7. Customer feedback

Type and scope of processing

For the purpose of customer and product evaluations by our customers and for our own quality management, we use the personal data you provide during the purchase process, such as your e-mail address, to request an evaluation of your order via the evaluation system we use. After submitting your review, you can be redirected to a review platform where you can post your review publicly.

Purpose and legal basis

The use of the service is based on the performance of a contract in accordance with Art. 6 para. 1 lit. b. GDPR and your consent given to us in accordance with Art. 6 para. 1 a) GDPR. We work with zenloop GmbH, Erich-Weinert-Straße 145, 10409 Berlin. zenloop is a business-to-business software-as-a-service platform that enables us to collect and analyze feedback from our customers via various channels. This enables us to tailor and improve our offering to the needs of our customers. In addition, zenloop collects your survey responses. An order processing contract pursuant to Art. 28 (3) GDPR has been concluded with zenloop GmbH.

Storage duration

Data transmitted to zenloop will be stored in accordance with the applicable statutory retention periods. After this period has expired, the corresponding data is routinely deleted.

You can find more information in zenloop's privacy policy: https://www.zenloop.com/en/legal/privacy/

8. Online store

If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory information required for the processing of contracts is marked separately, further information is voluntary. We process the data you provide to process your order. We may pass on your payment details to our bank for this purpose.

You can voluntarily create a customer account, through which we can save your data for future purchases. When you create an account under "My account", the data you provide will be stored on a revocable basis. If you decide to open a customer account, the following personal data will be collected and processed during registration.

Surname, first name
Delivery address / different billing address if applicable
Credit card information, bank details
E-mail address
Password

You can correct or delete your data, including your user account, at any time in the customer area. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we will restrict processing after [two years], i.e. your data will only be used to comply with legal obligations.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

Personal data that is absolutely necessary for the delivery of goods or contract processing is passed on to service providers commissioned by us. These are the following categories of service providers:

· KG Bursped Speditions-G.m.b.H. & Co.

· Deutsche Post AG

· General Logistics Systems Germany GmbH & Co. OHG

· United Parcel Service Deutschland S.á r. l. & Co. OHG

The processing of the aforementioned personal data for the purposes stated here takes place on the legal basis of Art. 6 para. 1 lit. b GDPR.

9. Provision of a customer account

Type and scope of processing

As part of the order processing, we collect your personal data to register a customer account. You can choose whether you want to order as a guest or register a permanent user account. The information that is collected during registration via the mandatory fields is identical in both cases and is required for processing the order in the online store. When you register a permanent user account, we also collect a password that you define yourself. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the order.

A transfer of your personal data to third parties (e.g. shipping service providers / freight forwarders) and processors in accordance with. Art. 28 GDPR only takes place insofar as this is necessary for the processing of the order.

Purpose and legal basis

We process your personal data for the purpose of registering a customer account in order to fulfill a contract with you in accordance with. Art. 6 para. 1 lit. b GDPR. There is a contractual obligation to provide your data insofar as it relates to the mandatory fields, as this information is required to identify you personally and to fulfill the contract on our part. There is no legal obligation to provide the data. Without the provision of this information, it is not possible to place an order in our online store and thus conclude a contract. There is no obligation to provide the additional information provided voluntarily. It is also possible to place an order in our online store without providing voluntary information.

The additional processing of your password for the registration of the permanent user account is carried out for the purpose of providing a customer account and to display your previous purchases as well as to store your purchase-related data (e.g. storage of billing address, various delivery addresses) on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Art. 6 para. 1 lit. a GDPR. By deleting your customer account, you can revoke your consent at any time with effect for the future in accordance with Art. 6 para. 1 lit. a GDPR. Art. 7 para. 3 GDPR.

Storage duration

If you order as a guest, your personal data will be stored until your order has been fully processed (end of contract). If you register a permanent customer account, we store the purchase-related data beyond the end of the contract until you withdraw your consent (deletion of the customer account). In both cases, your data will only be stored further if there are statutory retention obligations (e.g. tax and commercial law).

10. Payment service provider

11.1 Klarna

Type and scope of processing

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer the following payment options. Payment is made to Klarna in each case:

Purchase on account: The payment period is 30 days from dispatch of the goods.
Instant bank transfer: Your account will be debited immediately after placing the order.
Installment purchase: With Klarna's financing service, you can pay for your purchase flexibly in monthly installments or under the conditions otherwise specified in the checkout.

The use of the payment methods invoice and direct debit requires a positive credit check. Further information and Klarna's terms of use can be foundat here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/user. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy .

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This enables Klarna to assess whether you can use the payment options offered via Klarna and to adapt the payment options to your needs. You can find general information about Klarnaat here: https://cdn.klarna.com/1.0/shared/content/legal/terms/EID/de_de/invoice?fee=0.

Purpose and legal basis

The use of the service is based on the execution of a contract, i.e. for the processing of payment transactions in accordance with Art. 6 para. 1 lit. b. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Klarna Bank AB. Further information can be found in Klarna's privacy policy: https://www.klarna.com/uk/privacy/.

11.2 RatePay

Type and scope of processing

On our website, we offer payment with the services of RatePay, among others. The provider is RatePAY GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter referred to as "RatePay").

RatePay offers various payment options (e.g. installment purchase). If you decide to pay with RatePay (RatePay checkout solution), RatePay will collect various personal data from you. Details can be found in RatePay's privacy policy at the following link: https://www.ratepay.com/en/data-privacy-policy/.

Purpose and legal basis

The transmission of your data to RatePay takes place on the basis of Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations that took place in the past.

Storage duration

RatePay uses cookies to optimize the use of the RatePay checkout solution. The optimization of the checkout solution constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR represent. Cookies are small text files that are stored on your end device and do not cause any damage. They remain on your device until you delete them.

11.3 PayPal

Type and scope of processing

We have integrated components of PayPal Express Checkout on our website. PayPal Express Checkout is a service of PayPal Pte. Ltd. and offers online payment solutions worldwide.

If you choose PayPal Express Checkout as your payment method, your data required for the payment process will be automatically transferred to PayPal Pte. Ltd, San Jose, California, US.

The following data is generally collected in this context: Name, address, company if applicable, e-mail address, telephone and cell phone number and IP address.

Purpose and legal basis

The use of the service is based on the execution of a contract, i.e. for the processing of payment transactions in accordance with Art. 6 para. 1 lit. b. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by PayPal Pte. Ltd. Further information can be found in the privacy policy for PayPal Express Checkout: https://www.paypal.com/us/legalhub/privacy-full.

11.4 Payment by Visa, Mastercard, American Express

If you process your payment by credit card, this is done via the payment provider Concardis GmbH, Helfmann-Park 7, 65760 Eschborn/Germany. The necessary data (card number, validity and verification number) are forwarded to the payment provider in encrypted form and cannot be viewed by the website operator. The electronic payment method by credit card is PCI-DSS-certified and offers customers the highest possible level of data security.

11. Parcellab

Data transfer to shipping service providers

Type and scope of processing

We use shipping service providers such as DHL, DPD, UPS, who receive your name and address to deliver the goods. In this respect, the personal data collected by us for deliveries of goods will be passed on to the respective transport company commissioned to process the contract. If it is necessary for your order to be delivered by a forwarding agent or on time by a shipping service provider, we will also pass on your telephone number and e-mail address to the forwarding agent/shipping service provider in addition to the data mentioned above in order to ensure proper shipping (e.g. by agreeing the delivery date, to notify you of the shipping status, etc.).

Purpose and legal basis

The use of the service is based on the performance of a contract in accordance with Art. 6 para. 1 lit. b. GDPR and your consent given to us in accordance with Art. 6 para. 1 a) GDPR.

When shipping goods, the service provider parcelLab GmbH, Kapellenweg 6, 81371 Munich, is used to handle the shipping notifications to our customers and to provide them with the shipping status and tracking number of their shipment. For this purpose, the personal data required for the shipment information (name, address, order number, etc.) is forwarded to parcelLab. You can find more information in parcelLab's privacy policy: https://parcellab.com/privacy-policy/

Storage duration

Data that has been forwarded to parcelLab is automatically deleted after 90 days.

You can find more information in parcelLab's privacy policy: https://parcellab.com/privacy-policy/

12. CCM19

Type and scope of processing

We have integrated CCM19 on our website. CCM19 is a consent solution from Papoo Software & Media GmbH, Auguststr.4, 53229 Bonn, Germany, with which consent to the storage of cookies can be obtained and documented. CCM19 uses cookies or other web technologies to recognize users and to store the consent given or revoked.

Purpose and legal basis

The use of the service is based on the legally required consent to the use of cookies in accordance with Art. 6 para. 1 lit. c. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Papoo Software & Media GmbH. Further information can be found in the privacy policy for CCM19: https://docs-en.ccm19.com/system-und-co/consent-speicherung/.

13. Adform

Type and scope of processing

We have integrated AdForm on our website. AdForm is a service from Adform A/S that displays targeted advertising to users. AdForm uses cookies and other browser technologies to evaluate user behavior and recognize users. AdForm collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, AdForm delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of AdForm, Adform A/S, Copenhagen, Hovedstaden, DK.

Web tracking technologies are used to create pseudonymized user profiles. These profiles cannot be merged with you as a natural person, but are used, for example, for segmentation when displaying advertisements.

Purpose and legal basis

The use of AdForm is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Adform A/S. Further information can be found in the privacy policy for AdForm: http://www.adform.com/privacy-center/.

14. 360 Polaris

Type and scope of processing

We have integrated 360 Polaris on our website. 360 Polaris is a service from Improve Digital BV that displays targeted advertising to users. 360 Polaris uses cookies and other browser technologies to evaluate user behavior and recognize users. 360 Polaris collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, 360 Polaris delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be forwarded to the operator of 360 Polaris, Improve Digital BV, Beechavenue 182, 1119 PX Schiphol-Rijk, Netherlands.

Purpose and legal basis

The use of 360 Polaris is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Improve Digital BV. Further information can be found in the privacy policy for 360 Polaris: https://www.improvedigital.com/privacy-policy/.

15. AdYouLike

Type and scope of processing

We have integrated AdYouLike on our website. AdYouLike is a service from Adyoulike SA that displays targeted advertising to users. AdYouLike uses cookies and other browser technologies to evaluate user behavior and recognize users. AdYouLike collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, AdYouLike delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be forwarded to the operator of AdYouLike, Adyoulike SA, New York, New York, US.

Purpose and legal basis

The use of AdYouLike is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

In cases where there is no adequacy decision by the European Commission (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN .

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Adyoulike SA. Further information can be found in the privacy policy for AdYouLike: https://www.adyoulike.com/privacy_policy.

16. Adobe Experience Cloud

Type and scope of processing

We use Adobe Experience Cloud to properly provide the content of our website. Adobe Experience Cloud is a service of Adobe Inc. which acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other Adobe Inc. services. You will find a separate section in this privacy policy for these services. This section only deals with the use of the CDN.

A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Adobe Inc, San Jose, California, US, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Adobe Experience Cloud.

Purpose and legal basis

The use of Adobe Experience Cloud is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Adobe Inc. Further information can be found in the privacy policy for Adobe Experience Cloud: https://www.adobe.com/privacy/policy.html.

17. AppNexus

Type and scope of processing

We have integrated AppNexus on our website. AppNexus is a service provided by AppNexus Inc. to display targeted advertising to users. AppNexus uses cookies and other browser technologies to evaluate user behavior and recognize users.

AppNexus collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, AppNexus delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.

In this case, your data will be passed on to the operator of AppNexus, AppNexus Inc,

Purpose and legal basis

The use of AppNexus is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by AppNexus Inc. Further information can be found in the privacy policy for AppNexus: https://www.appnexus.com/de/platform-privacy-policy.

18. BidSwitch

Type and scope of processing

We have integrated BidSwitch on our website. BidSwitch is a service provided by IPONWEB Holding Limited that displays targeted advertising to users. BidSwitch uses cookies and other browser technologies to evaluate user behavior and recognize users. BidSwitch collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, BidSwitch delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of BidSwitch, IPONWEB Holding Limited, 4th Floor, 16 Garrick Street, Covent Garden, London, WC2E 9BA, UK.

Purpose and legal basis

The use of BidSwitch is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by IPONWEB Holding Limited. Further information can be found in the privacy policy for BidSwitch: https://www.iponweb.com/privacy-policy

19. Casale Media

Type and scope of processing

We have integrated Casale Media on our website. Casale Media is a service of Casale Media, Inc. that displays targeted advertising to users. Casale Media uses cookies and other browser technologies to evaluate user behavior and recognize users. Casale Media collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Casale Media delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be forwarded to the operator of Casale Media, Casale Media, Inc, 74 Wingold Avenue Toronto, Ontario M6B1P5 Canada.

Purpose and legal basis

The use of Casale Media is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Casale Media, Inc. Further information can be found in the privacy policy for Casale Media: https://casalemedia.com/legal/.

20. Criteo Ads

Type and scope of processing

We have integrated Criteo Ads on our website. Criteo Ads is a service provided by Criteo S.A. that displays targeted advertising to users. Criteo Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Criteo Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Criteo Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Criteo Ads, Criteo S.A., Paris, Ile-de-France, FR.

Purpose and legal basis

The use of Criteo Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Criteo S.A.. Further information can be found in the privacy policy for Criteo Ads: https://www.criteo.com/privacy/.

21. Criteo Audience Match

Type and scope of processing

We use the Criteo Audience Match service from Criteo S.A., Paris, Ile-de-France, FR, to display specific and relevant advertisements to user groups using targeting technologies.

Web tracking technologies are used to create pseudonymized user profiles. As a rule, these profiles cannot be merged with you as a natural person, but are used, for example, for segmentation when displaying advertisements.

Purpose and legal basis

The use of Criteo Audience Match is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Criteo S.A.. Further information can be found in the privacy policy for Criteo Audience Match: https://www.criteo.com/privacy/.

22. Criteo Dynamic Retargeting

Type and scope of processing

We use the Criteo Dynamic Retargeting service from Criteo S.A., Paris, Ile-de-France, FR, to display specific and relevant advertisements to user groups using targeting technologies.

Purpose and legal basis

The use of Criteo Dynamic Retargeting is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Criteo S.A.. Further information can be found in the privacy policy for Criteo Dynamic Retargeting: https://www.criteo.com/privacy/.

23. EMX Digital Marketplace

Type and scope of processing

We use EMX Digital Marketplace from EMX Digital, LLC, New York, New York, US as a demand-side platform for our online offering.

A demand-side platform (DSP) is a technology that helps advertisers to buy impressions. Data about the interests and habits of the consumer as well as information about the consumer's end device can be collected. Collected data may consist of the anonymized IP address, information about the location of the IP address, browser information such as the user agent, the mobile identifier, the advertisement clicked on, and the URL you were on before you clicked on the advertisement.

Purpose and legal basis

The use of EMX Digital Marketplace is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by EMX Digital, LLC. Further information can be found in the privacy policy for EMX Digital Marketplace: https://emxdigital.com/privacy/.

24. Google Ads

Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google LLC to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.

Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.

If you are registered with a Google LLC service, Google Ads can assign the visit to your account. Even if you are not registered with Google LLC or have not logged in, it is possible that the provider will find out and store your IP address and other identification features.

In this case, your data will be passed on to the operator of Google Ads, Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

The use of Google Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data is transferred to the USA in accordance with Art. 45 (1) GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

25. Google Analytics

Type and scope of processing

We use Google Analytics from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of visits to our online offering, sub-pages visited and the time spent by visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

26. Google Fonts

Type and scope of processing

We use Google Fonts from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you establish a connection to the servers of Google LLC, whereby your IP address is transmitted.

Purpose and legal basis

The use of Google Fonts is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

27. Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website

This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

28. Google Maps

Type and scope of processing

We use the map service Google Maps to create directions. Google Maps is a service provided by Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.

Purpose and legal basis

The use of Google Maps is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

29. ID5

Type and scope of processing

We use the ID5 service of ID5 Technology, Ltd, 199 Bishopsgate, London EC2M 3TY, United Kingdom, to display specific and relevant advertisements to user groups using targeting technologies.

Purpose and legal basis

The use of ID5 is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by ID5 Technology, Ltd. Further information can be found in the privacy policy for ID5: https://trg.de/datenschutzerklarung/.

30. Improve Digital

Type and scope of processing

We have integrated Improve Digital components on our website. Improve Digital is a marketing platform that is used to access an advertising network. The service is therefore used to display advertising of any kind. In this case, your data will be forwarded to the operator of 360 Polaris, Improve Digital BV, Beechavenue 182, 1119 PX Schiphol-Rijk, Netherlands.

Purpose and legal basis
The use of Improve Digital is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Improve Digital BV. Further information can be found in the privacy policy: https://www.improvedigital.com/privacy-policy/

31. Index Exchange

Type and scope of processing

This website uses the Index Exchange Online Advertising Exchange ("Index Platform"), a service provided by Index Exchange, 74 Wingold Avenue, Toronto, Ontario M6B1P5, Canada.

Information about the surfing behavior of website visitors is collected in purely anonymous form for marketing purposes and cookies are set for this purpose. No personal data is collected or stored in the process. You can object to the collection, processing and recording of data generated by Index exchange at any time by opting out of cookies at https://optout.networkadvertising.org/?c=1 .

Purpose and legal basis
The use of Index Exchange is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Index Exchange. Further information on data protection at Index Exchange can be found at https://www.indexexchange.com/privacy/

32. IVIDENCE Targeting

Type and scope of processing

We use the IVIDENCE Targeting service of IVIDENCE S.A.R.L., 89 Rue du 11 Novembre, Saint-Just-La-Pendue 42540, France, to display specific and relevant advertisements to user groups using targeting technologies.

Purpose and legal basis

The use of IVIDENCE Targeting is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by IVIDENCE S.A.R.L.. Further information can be found in the privacy policy for IVIDENCE Targeting: https://www.ividence.com/english/privacy-policy

33. Kelkoo Pixel

Type and scope of processing

We use Kelkoo Pixel from Kelkoo Deutschland GmbH, Mattentwiete 1, 20457 Hamburg, Germany, to create so-called custom audiences, i.e. to segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with Kelkoo Deutschland GmbH.

Purpose and legal basis

The use of Kelkoo Pixel is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Kelkoo Deutschland GmbH. Further information can be found in the privacy policy for Kelkoo Pixel: https://www.kelkoogroup.com/privacy-policy/

34. Makaira

Type and scope of processing

On this website, we use analysis tools from Makaira GmbH, Seckenheimer Hauptstraße 113, 68239 Mannheim (hereinafter referred to as Makaira). Makaira makes it possible to analyze the use of the website by website visitors with the help of the open source software Matomo. This includes various usage data, such as page views, length of stay, device categories, operating system (e.g. PC with Windows operating system) and origin of the user (e.g. access to the page via paid advertising or unpaid search results) or content of the current shopping cart. This data is summarized by Makaira in a profile that is assigned to the respective user or their end device. Makaira uses the collected data to forecast the preferences of website visitors. Depending on the preferences determined, the products in the store are then presented to the customer in a specific order or suitable product suggestions are made.

Purpose and legal basis
The use of Makaira is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Makaira. Further information can be found in the privacy policy: https://www.makaira.io/de/datenschutz/.

35. Mediavine

Type and scope of processing

We use the services of the advertising network operated by Mediavine Inc. Mediavine transmits advertisements to your browser. Your IP address will be passed on to Mediavine. Mediavine may also use other functions (cookies, JavaScript, web beacons and similar) to measure the effectiveness of its advertising campaigns and/or to personalize the advertising content on our site. Mediavine partners may also use this data to link with other end-user information that the partner has independently collected to deliver targeted advertising. Mediavine partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and combine this data with data collected by Mediavine publishers to deliver interest-based advertising across your entire online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and ads and websites, geolocation data, traffic data and information about the referral source of a visitor to a particular website. Mediavine partners can also create unique IDs to create audience segments that are used to deliver targeted advertising.

Purpose and legal basis
The use of Mediavine is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Mediavine Inc. Further information can be found in the privacy policy: https://www.mediavine.com/privacy-policy/.

For specific information about Mediavine partners, the data they collect and their data collection and privacy policies, please visit: https://www.mediavine.com/ad-partners/.

36. Media.Net Contextual Ads

Type and scope of processing

We have on our website Media.Net Contextual Ads integrated. Media.Net Contextual Ads is a service from Media.Net Advertising FZ-LLC, which displays targeted advertising to users. Media.Net Contextual Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Media.Net Contextual Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Media.Net Contextual Ads targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Media.Net Contextual Ads, the Media.Net Advertising FZ-LLC, 2701 Aurora Tower, Dubai Media City, Dubai 215028, United Arab Emirates.

Purpose and legal basis

The use of Media.Net Contextual Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Media.Net Advertising FZ-LLC. Further information can be found in the privacy policy for Media.Net Contextual Ads: https://www.media.net/legal/privacy-policy.

37. Microsoft Corporation Bing Ads

Type and scope of processing

We have integrated Microsoft Advertising on our website. Microsoft Advertising is a service provided by Microsoft Corporation to display targeted advertising to users. Microsoft Advertising uses cookies and other browser technologies to evaluate user behavior and recognize users.

Microsoft Advertising collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Microsoft Advertising delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.

In this case, your data will be passed on to the operator of Microsoft Advertising, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

Purpose and legal basis

The use of Microsoft Advertising is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Microsoft Corporation. Further information can be found in the privacy policy for Microsoft Advertising: https://privacy.microsoft.com/de-de/privacystatement.

38. ProductsUp

Type and scope of processing

This website uses the analytics service ProductsUp. The provider is Products Up GmbH Alex-Wedding-Straße 5, 10178 Berlin, Germany. ProductsUp allows us to analyze the behavior of our website visitors. Among other things, Name records the pages you visit and your purchasing activity, which your browser transmits to our web server when you access the website. This allows us to measure website interactions, such as length of stay, conversions, scroll events, clicks and page views of the website visitor. These interactions are assigned to the website visitor for the duration of the current day so that they can be recognized on subsequent visits.

Purpose and legal basis

The processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and 25 para. 1 TDDDG.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Products Up GmbH. Further details can be found in ProductsUp's privacy policy at: https://www.productsup.com/privacy-policy/.

39. Nativo Ads

Type and scope of processing

We have integrated Nativo Ads on our website. Nativo Ads is a service provided by Nativo, Inc. that displays targeted advertising to users. Nativo Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Nativo Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Nativo Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Nativo Ads, Nativo, Inc, El Segundo, California, US.

Purpose and legal basis

The use of Nativo Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Nativo, Inc. Further information can be found in the privacy policy for Nativo Ads: https://www.nativo.com/interest-based-ads.

40. Outbrain

Type and scope of processing

We have integrated Outbrain on our website. Outbrain is a service provided by Outbrain Inc. to display targeted advertising to users. Outbrain uses cookies and other browser technologies to evaluate user behavior and recognize users.

Outbrain collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Outbrain delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.

In this case, your data will be passed on to the operator of Outbrain, Outbrain Inc, New York, New York, US.

Purpose and legal basis

The use of Outbrain is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Outbrain Inc. Further information can be found in the privacy policy for Outbrain: https://www.outbrain.com/legal/privacy#privacy-policy.

41. PubMatic CDN

Type and scope of processing

We use PubMatic CDN to properly provide the content of our website. PubMatic CDN is a service of PubMatic, Inc., which acts as a content delivery network (CDN) on our website to ensure the functionality of other PubMatic, Inc. services. You will find a separate section in this privacy policy for these services. This section only deals with the use of the CDN.

A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to PubMatic, Inc. servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of PubMatic CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by PubMatic, Inc. Further information can be found in the privacy policy for PubMatic CDN: https://pubmatic.com/legal/privacy/.

42. Rubicon Project Pixel

Type and scope of processing

We use Rubicon Project Pixel from Rubicon Project, Inc. to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with Rubicon Project, Inc.

Purpose and legal basis

The use of Rubicon Project Pixel is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Rubicon Project, Inc. Further information can be found in the privacy policy for Rubicon Project Pixel: https://rubiconproject.com/privacy-policy/.

43. SMART AdServer

Type and scope of processing

We use SMART AdServer from Horyzon Media as the ad server for our online offering.

An ad server is a server with software that is responsible for the delivery and processing of advertisements. The ad server stores data such as impressions, visibility and clicks on certain ads and uses it for reporting purposes.

Purpose and legal basis

The use of SMART AdServer is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Horyzon Media. Further information can be found in the privacy policy for SMART AdServer: https://smartadserver.com/end-user-privacy-policy/.

44. Salesforce DMP

Type and scope of processing

Salesforce DMP is a web hosting service of Salesforce, Inc. and offers web development technology, web design and layout tools, domain hosting and other applications for marketing and workflow management.

Salesforce DMP is used, among other things, for web hosting and the presentation of our website. In addition, Salesforce DMP collects statistical data about visits to our website.

The following data may be processed in this context: website accessed, date and time of access, amount of data transferred, notification of whether an access was successful, browser type and version, the user's operating system, the previously visited page (referrer URL) and the IP address.

This log data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality and to optimize the Salesforce DMP offering

Purpose and legal basis

The use of Salesforce DMP is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Salesforce, Inc. Further information can be found in the privacy policy for Salesforce DMP: https://www.salesforce.com/de/company/privacy/.

45. Sharethrough Ads

Type and scope of processing

We have integrated Sharethrough Ads on our website. Sharethrough Ads is a service provided by Sharethrough, Inc. that displays targeted advertising to users. Sharethrough Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Sharethrough Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Sharethrough Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Sharethrough Ads, Sharethrough, Inc, 170 Columbus Avenue, Suite 280, San Francisco, CA 94133, United States.

Purpose and legal basis

The use of Sharethrough Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Sharethrough, Inc. Further information can be found in the privacy policy for Sharethrough Ads: http://platform-cdn.sharethrough.com/privacy-policy.

46. Signal Platform

Type and scope of processing

We have integrated Signal Platform on our website as a tool for customer intelligence. Signal Platform is a service provided by Signal Digital, Inc. that identifies anonymous website visitors, enriches existing contact data if necessary, or provides complete contact data and offers insights into the visit history.

Signal Platform uses cookies and other browser technologies to evaluate user behavior and recognize users.

Among other things, Signal Platform shows us which companies have visited our website, determines the history of your visit to this website, including all the pages you have visited and viewed and the length of your stay on this website.

Signal Platform collects and processes data about companies such as company name, phone number, address, web address, industry, company profile, turnover and key people.

Purpose and legal basis

The use of Signal Platform is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Signal Digital, Inc. Further information can be found in the privacy policy for Signal Platform: https://www.signal.co/privacy-policy/.

47. Taboola Ads

Type and scope of processing

We have integrated Taboola Ads on our website. Taboola Ads is a service provided by Taboola, Inc. to display targeted advertising to users. Taboola Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.

Taboola Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Taboola Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.

In this case, your data will be passed on to the operator of Taboola Ads, Taboola, Inc, 16 Madison Square West, 7th fl., New York, NY, 10010, United States.

Purpose and legal basis

The use of Taboola Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Taboola, Inc. Further information can be found in the privacy policy for Taboola Ads: https://www.taboola.com/de/privacy-policy.

48. Teads Ads

Type and scope of processing

We have integrated Teads Ads on our website. Teads Ads is a service from Teads SA that displays targeted advertising to users. Teads Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Teads Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Teads Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be forwarded to the operator of Teads Ads, Teads SA, 5 Rue de la Boucherie1247, Luxembourg, Luxembourg.

Purpose and legal basis

The use of Teads Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Teads SA. Further information can be found in the privacy policy for Teads Ads: http://www.teads.com/teads-website-privacy-policy/.

49. Tremor Video Ads

Type and scope of processing

We have integrated Tremor Video Ads on our website. Tremor Video Ads is a service provided by Telaria, Inc. that displays targeted advertising to users. Tremor Video Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Tremor Video Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Tremor Video Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Tremor Video Ads, Telaria, Inc.

Purpose and legal basis

The use of Tremor Video Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Telaria, Inc. Further information can be found in the privacy policy for Tremor Video Ads: https://www.tremorvideo.com/privacy-policy/.

50. Triple Lift Ads

Type and scope of processing

We have integrated Triple Lift Ads on our website. Triple Lift Ads is a service provided by Triple Lift, Inc. that displays targeted advertising to users. Triple Lift Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Triple Lift Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Triple Lift Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Triple Lift Ads, Triple Lift, Inc, New York, New York, US.

Purpose and legal basis

The use of Triple Lift Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Triple Lift, Inc. Further information can be found in the privacy policy for Triple Lift Ads: https://triplelift.com/privacy/.

51. Facebook Pixel

Type and scope of processing

We use Facebook Pixel from Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with Facebook, Inc.

Purpose and legal basis

We process your data with the help of Facebook Pixel for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with. Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Facebook, Inc. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0..

52. Trusted Shops Widget

Type and scope of processing

We have integrated components of Trusted Shops Widget on our website. Trusted Shops Widget is a rating service that allows users to rate our services. If you rate our services, data about the service used may be transmitted to Trusted Shops GmbH to verify authenticity. Trusted Shops Widget enables us to obtain content such as reviews directly from Trusted Shops GmbH and display it on our website. As a rule, your current IP address is transmitted to the service for this purpose.

Furthermore, Trusted Shops Widget stores information using cookies to find out which online offers have been visited. In this case, your data will be forwarded to the operator of Trusted Shops Widget, Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne.

Purpose and legal basis

The use of Trusted Shops Widget is based on Art. 6 para. 1 lit. f. GDPR to inform users about the quality of our services. If the user consents to the processing of their data, the legal basis for the processing is Art. 6 para. 1 lit. a. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Trusted Shops GmbH. Further information can be found in the privacy policy for Trusted Shops Widget: https://business.trustedshops.co.uk/imprint.

53. Visual Website Optimizer

Type and scope of processing

We have integrated components of Visual Website Optimizer on our website. Visual Website Optimizer is a service of Wingify Software Pvt. Ltd. and provides marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing, web analytics and A/B testing.

Visual Website Optimizer uses cookies and other browser technologies to evaluate user behaviour and recognize users. This information is used, among other things, to compile reports on website activity. Visual Website Optimizer records clicks, mouse movements and scroll heights to create so-called heat maps.

In this case, your data will be passed on to the operator of Visual Website Optimizer, Wingify Software Pvt. Ltd, KLJ Tower, North, Netaji Subhash Place, Pitam Pura, Delhi, 110034, India.

Purpose and legal basis

We process your data with the help of Visual Website Optimizer for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with. Art. 6 para. 1 lit. a GDPR and Section 25 (1) TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Wingify Software Pvt. Ltd. Further information can be found in the privacy policy for Visual Website Optimizer: https://vwo.com/privacy-policy/.

54. Youtube

Type and scope of processing

We have integrated YouTube video on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the Internet and receive detailed statistics.

YouTube Video enables us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.

When you access this content, you establish a connection to the servers of YouTube, LLC, whereby your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

55. matelso Call Tracking

Type and scope of processing

We use the matelso Call Tracking service from matelso GmbH, Heilbronner Straße 150, 70191 Stuttgart, Germany, to evaluate telephone calls for our online offering. Our online service displays telephone numbers that collect call metadata when a call is received. This data consists of the caller's telephone number, the telephone number called, the time, date and duration of the call. If it is possible for us to do so, we link said metadata with the corresponding address and transfer it to matelso GmbH servers.

Purpose and legal basis

We process your data with the help of matelso Call Tracking for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with. Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by matelso GmbH. Further information can be found in the privacy policy for matelso Call Tracking: https://www.matelso.com/en/privacy-policy/.

56. Yieldlab Ads

Type and scope of processing

We have integrated Yieldlab Ads on our website. Yieldlab Ads is a service from Yieldlab AG that displays targeted advertising to users. Yieldlab Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Yieldlab Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Yieldlab Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Yieldlab Ads, Yieldlab AG, Colonnaden 41, 20354 Hamburg, Germany.

Purpose and legal basis

The use of Yieldlab Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Yieldlab AG. Further information can be found in the privacy policy for Yieldlab Ads: http://yieldlab.de/meta-navigation/datenschutzerklaerung/.

57. Yieldmo Ads

Type and scope of processing

We have integrated Yieldmo Ads on our website. Yieldmo Ads is a service provided by Yieldmo, Inc. that displays targeted advertising to users. Yieldmo Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Yieldmo Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Yieldmo Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Yieldmo Ads, Yieldmo, Inc, New York, New York, US.

Purpose and legal basis

The use of Yieldmo Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Yieldmo, Inc. Further information can be found in the privacy policy for Yieldmo Ads: https://www.yieldmo.com/privacy-policy/.

58. Presence in social media

General information on presence in social networks

In order to present our company in the best possible way and to communicate with you as a user, customer or interested party and to inform you about the services we offer, we make use of our presence in social networks. When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection as exists in the EU cannot be guaranteed in all countries outside the EU.

In this context, there may be risks for you as a user if the transmitted data is processed in so-called third countries with an inadequate level of data protection. This makes it more difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country.

The level of data protection in the USA is not comparable with the requirements of the GDPR. It is possible that government agencies may access personal data without us or you knowing about it. It will probably not be possible to enforce your rights in the USA.

The relevant platforms are:

Platform	Responsible body	Data protection information of the platform operators
Facebook	Meta Platforms Ireland Ltd 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland	https://en-gb.facebook.com/business/gdpr
Instagram	Meta Platforms Ireland Ltd 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland	https://privacycenter.instagram.com/policy/
YouTube	Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland	https://policies.google.com/privacy?hl=en
XING	New Work SE Am Strandkai 1, 20457 Hamburg, Germany	https://privacy.xing.com/en/privacy-policy
LinkedIN	LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland	https://www.linkedin.com/legal/privacy-policy
TikTok	TikTok Technology Limited 10 Earlsfort Terrace, Dublin, D02 T380, Ireland	https://www.tiktok.com/legal/page/eea/privacy-policy/en

Toolport GmbH operates profiles on the listed platforms in order to draw attention to products and services and to interact with customers, interested parties and other users of the platform.

In this context, the platform operators also use certain data that they have collected from users of the platform (e.g. whether a photo on a profile has been marked with "Like" or commented on) to create aggregated usage statistics and make them available to the respective operators of the profile (so-called "Insights" or "Analytics"). As the profile operator, we also receive such usage statistics. The information we receive as the profile operator does not allow us to draw any conclusions about individual users. The profile operator itself has no access to personal data that the platform operator processes for the creation of usage statistics. Only the respective platform operator determines which data is processed for these purposes and how. As the profile operator, Toolport GmbH cannot exert any legal or actual influence on the processing by the platform operators.

For processing in connection with the creation of usage statistics, Toolport GmbH and the respective platform operator are considered joint controllers within the meaning of Art. 26 GDPR.

Where possible, joint responsibility agreements are in place with the respective platform operators. In addition, data processing by Toolport GmbH as the profile operator only takes place to a very limited extent:

Processing of usernames and comments that are deleted due to a breach of netiquette. These will be retained within the limitation period for any necessary evidence in the event of legal disputes.
Processing of usernames and individual messages when you contact us via messenger services
Processing of usernames when participating in competitions. The relevant conditions of participation apply.
Processing of usernames and postings in the context of inquiries and, if necessary, obtaining consent for the re-posting of images
Recruiting potential applicants on career platforms

For these purposes, we generally only process your name, message content, comment content and the profile information you have provided "publicly".

60. Leasing

Type and scope of processing

As part of our range of services, we offer the option of concluding leasing contracts in cooperation with our financing partner CONFIDEX Indigo. CONFIDEX indigo GmbH, Marienstraße 4, 71679 Asperg, Germany, collects and processes your personal data and passes it on to the lessor HW Leasing GmbH, Spiegelberg 57, 23966 Wismar, Germany.

Purpose and legal basis

Your personal data is collected and processed as part of the leasing inquiry for the purposes of initiating, establishing, structuring and amending contractual relationships. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

Storage duration

The data collected will be deleted after completion of the order or termination of the business relationship and expiry of any existing statutory retention periods. Statutory retention periods remain unaffected.

Credit check

Type and scope of processing

Prior to the declaration of acceptance by the lessor HW Leasing GmbH, the lessor will carry out a credit check, the result of which will determine the acceptance of the application to conclude the leasing contract. For this purpose, the data you enter (e.g. name, address, age or bank details) will be transmitted to a credit agency. The probability of default is determined on the basis of this data. If the risk of non-payment is too high, your leasing application may be rejected.

Purpose and legal basis

The credit check is carried out on the basis of contract fulfillment (Art. 6 para. 1 lit. b GDPR) and to avoid payment defaults (legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR). If consent has been obtained, the credit check is carried out on the basis of this consent (Art. 6 para. 1 lit. GDPR), consent can be revoked at any time. Further information on data processing can be found in the data protection provisions of our cooperation partner CONFIDEX Indigo: https://www.confidexindigo.de/datenschutzerklaerung/.

Version: 05/2024