Privacy Policy

responsible for the processing of personal data as defined by the EU General Data Protection Regulation (GDPR)

TOOLPORT GmbH

Gutenbergring 1-5

22848 Norderstedt / Germany

Tel.: +49 (0) 40 / 60 87 27 17

Fax: +49 (0) 40 / 60 87 27 37

Email: service@houseoftents.co.uk

Data protection officer:

Mr Philipp Herold

Mein-Datenschutzbeauftragter.de

Hafenstraße 1A, 23568 Lübeck

privacy@houseoftents.co.uk

What is this all about?

This privacy policy fulfils the statutory requirements for transparency in the processing of personal data. Personal data are all information relating to an identified or identifiable natural person. This includes such information for example as your name, your age, your address, your telephone number, your date of birth, your email address, your IP address or user behaviour when visiting a website. Information in which we are unable to find any reference to you personally (or only by incurring disproportionate expense), e.g. which has been anonymised, is not personal data. The processing (e.g. the collection, retrieval, use, storage or transfer) of personal data always requires a basis in law and a defined purpose. Stored personal data are erased once the purpose of the processing has been achieved and there are no legitimate reasons for any further retention of the data. We inform you at each individual stage of the processing of the actual storage periods, respectively criteria for storage. Irrespective of this, we store your personal data in individual cases for the establishment, exercise or defence of legal claims and whenever we are subject to statutory obligations to keep records.

To whom are my data disclosed?

We only disclose your personal data as processed on our website to third parties if this is required to serve the purposes and if it is in that particular case covered by the legal basis (e.g. consent or the protection of legitimate interests). We disclose personal data to third parties moreover in individual cases if this serves the establishment, exercise or defence of legal claims. Possible recipients may in that case be e.g. directors of public prosecutions, lawyers, auditors, courts etc.

If in order to operate our website we call upon the services of service providers who, under an arrangement for the outsourcing of data processing, act as data processors processing personal data on our behalf pursuant to Art. 28 GDPR, such service providers may be recipients of your personal data. You can find further details about the deployment of outsourced data processors and about online services in the overview of the individual stages of the processing.

Do you use cookies?

Cookies are small text files that are sent by us, whenever you visit our websites, to the browser on your terminal device and stored there As an alternative to the use of cookies, information may also be stored in the local storage your browser. Some of the features of our website cannot be offered without the use of cookies and/or local storage (technically essential cookies). Other cookies on the other hand enable us to perform various different analyses, meaning that we are for example able to recognise the browser used by you if you visit our website again, and transmit various types of information to us (non-essential cookies). Cookies serve inter alia to allow us to make our online offering more user-friendly and effective for you by for example reconstructing your use of our website and establishing your preferences (e.g. country and language settings). Where third parties process information via cookies, the cookies collect this information directly from your browser. Cookies do not cause any harm to your terminal device. They cannot execute any programmes and do not contain any viruses.

We provide information on the respective services for which we use cookies in the [section setting out the] individual stages of the processing. You can find detailed information on the cookies used in the Consent Manager.

Adjust cookie preferences

What rights do I have?

Subject to the basic requirements of the statutory provisions of the General Data Protection Regulation (GDPR) and of the Federal Data Protection Act (BDSG), in your capacity as the data subject, you have the following rights:

• Information pursuant to Art. 15 GDPR, sec. 34 BDSG about any stored personal data concerning you, and this in the form of meaningful information on the details of the processing together with a copy of your data;
• Rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
• Erasure pursuant to Art. 17 GDPR of data stored by us, where the processing is not required for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• Restriction of processing pursuant to Art. 18 GDPR, where the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you have declined their erasure as you need the data for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
• Data portability pursuant to Art. 20 GDPR, where you have provided us with personal data within the scope of any consent pursuant to Art. 6 (1) a GDPR or based on a contract pursuant to Art. 6 (1) b GDPR, and such data were processed by us by automated means. You receive your data in a structured, commonly used and machine-readable format and/or we transmit the data directly to another controller, where technically feasible.
• Objection pursuant to Art. 21 GDPR to the processing of your personal data where this is done on the basis of Art. 6 (1) e, f GDPR and your objection is on grounds relating to your particular situation or addresses direct marketing. There is no right of objection if proof is provided of overriding, compelling legitimate grounds for the processing or if the processing is done for the establishment, exercise or defence of legal claims. Where there is no right of objection for individual stages of the processing, this is specified there.
• Withdrawal pursuant to Art. 7 (3) GDPR of the consent given by you, to take effect in the future.
• Lodging a complaint pursuant to Art. 77 GDPR with a supervisory authority, if you consider that the processing of your personal data infringes the GDPR. As a rule, you may apply to the supervisory authority at your habitual residence, your place of work or our place of business.

How are my data processed in detail?

We are pleased to inform you below of the individual stages of the processing, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. No automated individual decision-making, including profiling, takes place.

Nature and scope of the processing

Whenever you view and use our website, we collect personal data which your browser automatically sends to our server. The following information is temporarily stored in a so-called log file:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which the access takes place (referrer URL)
• Browser used and, where applicable, your computer’s operating system, together with the name of your access provider

Our website is not hosted by us, but by the service provider who processes the aforementioned data on our behalf pursuant to Art. 28 GDPR for the purposes of the provision of the website.

Purpose and legal basis

The processing is done for the protection of our overriding legitimate interest in displaying our website and guaranteeing security and stability on the basis of Art. 6 (1) f GDPR. The collection of the data and the storage of such data in log files is absolutely necessary for the operation of the website. There is no right of objection to the processing on account of the exception provided for under Art. 21 (1) GDPR. Where the continued storage of the log files is prescribed by law, the processing is done on the basis of Art. 6 (1) c GDPR. There is no statutory or contractual obligation to provide the data, however it is not technically possible to access our website without providing the data.

Storage period

The aforementioned data are stored for as long as the website is displayed and, for technical reasons, for a maximum of 14 days thereafter.

Nature and scope of the processing

On our website, we invite you to contact us via a form provided by us. The information that we collect from the required fields is necessary in order to deal with the request. You may moreover as an option provide additional information that is in your opinion necessary to deal with the contact request.

In using the contact form, your personal data are not disclosed to third parties.

Purpose and legal basis

The processing of your data through the use of our contact form is done for the purposes of the communication of your request and in order to deal with the same, based on your consent pursuant to Art. 6 (1) a GDPR. Where your request relates to an existing contract relationship with us, the processing is done for the purposes of the performance of the contract based on Art. 6 (1) b GDPR. There is no statutory or contractual obligation to provide your data, however it is not possible to deal with your request without the provision of the information in the required fields. Should do not wish to provide such data, please contact us by other means.

Storage period

Where your use of the contact form is based on your consent, we store the data collected for each request for a period of three years, starting from the date on which your request is successfully dealt with, or up until the withdrawal of your consent.

Should you use the contact form in the context of a contractual relationship, we store the data collected for each request for a period of three years as of the end of the contractual relationship.

Nature and scope of the processing

If you register on our website to receive our newsletter, we collect your email address and your name, and store this information together with the date of registration and your IP address. You subsequently receive an email requiring you to confirm your subscription for the newsletter (double-opt-in). If you do not confirm the subscription within 24 hours, this automatically ceases to apply and the data will not be processed for the purposes of the dispatch of the newsletter. For the dispatch of the newsletter, we call upon the services of a service provider who processes your personal data on our behalf pursuant to Art. 28 GDPR. Your data are not disclosed to third parties.

Purpose and legal basis

We process your data for the purposes of the dispatch of the newsletter based on your consent pursuant to Art. 6 (1) a GDPR. You may withdraw your consent at any time pursuant to Art. 7 (3) GDPR , to take effect in the future, by unsubscribing from the newsletter. There is no statutory or contractual obligation to provide your data, however it is not possible to dispatch the newsletter without the provision of your data.

Storage period

Following subscription to the newsletter, we store the data for a maximum of 24 hours up until confirmation of the subscription. Following successful confirmation, we store your data up until withdrawal of your consent (unsubscribing from the newsletter) and, for technical reasons, for a maximum of 14 days thereafter.

If you wish to place an order in our online shop, before the contract can be concluded, you need to provide your personal data as required by us for the purposes of processing your order. Required information necessary for the implementation of the contracts is marked separately, the provision of other information is optional. We process the information provided by you for the processing of your order. We may for such purposes disclose your payment details to our bank.

You may optionally set up a customer account, which we can use to store your data for subsequent additional purchases. If you set up an account under "My Account", the data provided by you will be stored on a revocable basis. If you decide in favour of a customer account, upon registration, the following personal data will be collected and processed.

• Surname, first name
• Delivery address/billing address, where different
• Credit card information, bank details
• Email address
• Password

You may rectify, or even erase, your data, including your user account, in the customer area. We may moreover process the data provided by you to inform you about other interesting products from our portfolio or to send you emails containing technical information.

Owing to requirements under commercial law and tax laws, we are obliged to store your address, payment and order data for a period of ten years. Nonetheless, after [two years] the processing is then restricted by us, i.e. your data are used to ensure compliance with statutory obligations only.

To prevent any unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted by means of TLS technology.

Where personal data are absolutely necessary for the delivery of goods or for the implementation of the contract, we disclose such data to service providers appointed by us. This concerns the following categories of service providers:

• KG Bursped Speditions-G.m.b.H. & Co.
• Deutsche Post AG
• General Logistics Systems Germany GmbH & Co. OHG
• United Parcel Service Deutschland S.á r. l. & Co. OHG

The processing of the aforementioned personal data for the purposes here specified is done on the legal basis provided for in Art. 6 (1) b GDPR.

Nature and scope of the processing

In the context of processing the order, we collect your personal data for the registration of a customer account. You can choose whether you wish to order as a guest or to register a permanent user account. The information collected during the registration process from the required fields is in both cases identical and is required in order to process the order in the online shop. When registering a permanent user account, we additionally collect a password as set by you personally. You may moreover as an option provide additional information that is in your opinion required for processing the order.

Your personal data are disclosed to third parties (e.g. shipping service providers/carriers) and data processors to whom we have outsourced the data processing pursuant to Art. 28 GDPR only if this is required for processing the order.

Purpose and legal basis

We process your personal data for the purpose of registering a customer account for the performance of a contract with you pursuant to Art. 6 (1) b GDPR. There is a contractual obligation for you to provide your data as far as the required fields are concerned, since this information is required for your personal identification and for the performance of the contract by us. There is no statutory obligation to provide the data. Without the provision of this information, it is not possible to order in our online shop and therefore to conclude any contract. There is no obligation to provide the information additionally provided as an option. Ordering in our online shop is possible even without divulging such optional information.

The additional processing of your password for the registration of the permanent user account is done for the purposes of providing a customer account and to display your previous purchases, including the storage of your purchase-related data (e.g. storage of the billing address, different delivery addresses) based on your consent pursuant to Art. 6 (1) a GDPR. You may withdraw your consent at any time pursuant to Art. 7 (3) GDPR , to take effect in the future, by deleting your customer account.

Storage period

Whenever you order as a guest, we store your personal data until such time as your order has been fully processed (expiry of the contract). In case of the registration of a permanent customer account, we store purchase-related data beyond the expiry of the contract, until such time as you withdraw your consent (deletion of the customer account). In both cases, your data are stored for longer only if there are statutory obligations to keep business records (e.g. under tax laws and commercial law).

8.1 Klarna

Nature and scope of the processing

We use Klarna CDN for the proper delivery of our website content. Klarna CDN is a service of Klarna Bank AB, which acts on our website as a content delivery network (CDN).

A CDN contributes towards the speedier delivery of the content of our online offering, in particular files, as well as graphics or scripts, with the help of servers distributed regionally or internationally. Whenever you access this content, you establish a connection with servers of Klarna Bank AB, Sveavägen 46 111 34 Stockholm, Sweden, in which your IP address and, where applicable, browser data such as your user agent are transmitted. Such data are processed solely for the above-mentioned purposes and to maintain the security and functionality of Klarna CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient delivery and in the optimisation of our online offering pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Klarna Bank AB who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in Klarna CDN’s privacy policy: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy.

8.2 RatePay

Nature and scope of the processing

On our website we offer, inter alia, the option of payment using the services of RatePay. The provider is RatePAY GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter, “RatePay”).

RatePay offers various payment options (e.g. hire purchase). Whenever you decide to use RatePay for the payment (RatePay checkout solution), RatePay will collect various different personal data from you. You can find details of this in RatePay’s privacy policy at the following link: https://www.ratepay.com/zusaetzliche-geschaeftsbedingungen-und-datenschutzhinweis-dach/#dse_de.

Purpose and legal basis

Your data are transferred to RatePay on the basis of Art. 6 (1) a GDPR (consent) and Art. 6 (1) b GDPR (processing for the performance of the contract). You have the option of withdrawing your consent to the data processing at any time. A withdrawal shall not affect the validity of data processing operations performed in the past.

Storage period

RatePay uses cookies to optimise the use of the RatePay checkout solution. The optimisation of the checkout solution represents a legitimate interest as defined by Art. 6 (1) f GDPR. Cookies are small text files that are stored on your terminal device and cause no harm. They remain on your terminal device until you delete them

8.3 PayPal

Nature and scope of the processing

We have integrated components of PayPal Express Checkout on our website. PayPal Express Checkout is a service of PayPal Pte. Ltd. and offers online payment solutions worldwide.

Whenever you choose PayPal Express Checkout as your payment method, your data that are required for the payment process are automatically transferred to PayPal Pte. Ltd., San Jose, California, US.

In this context, the following data are as a rule collected: name, address, where applicable company, e-mail address, landline and mobile phone number and IP address.

Purpose and legal basis

Your use of the service is based on the performance of a contract, i.e. for the implementation of payment processes pursuant to Art. 6 (1) b GDPR.

Storage period

It is PayPal Pte. Ltd. who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for PayPal Express Checkout: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.

8.4 Payment by Visa, Mastercard, American Express

Whenever you process your payment by means of a credit card, this is routed via the payment provider Concardis GmbH, Helfmann-Park 7, 65760 Eschborn/ Germany. The necessary data (card number, expiry date and card security code) are transmitted in encrypted form to the payment provider and cannot be viewed by the website operator. The procedure for electronic payment by credit card is PCI DSS certified and offers the customer the highest possible level of data security.

Data disclosure to shipping service providers

Nature and scope of the processing

For the delivery of goods, we call upon the services of such shipping service providers as e.g. DHL, DPD, UPS, who are given your name and address. To this extent, the personal data collected by us will for goods deliveries be disclosed in the context of the implementation of the contract to the respectively appointed shipping company. Should in the case of your goods order delivery by a carrier and/or timely delivery by a shipping service provider be necessary, then in addition to the aforementioned data, we shall also disclose your telephone number and email address to the carrier/shipping service provider to permit us to ensure due and proper shipment (e.g. through consultation on the delivery date, provision of information on the shipping status etc.).

Purpose and legal basis

Our use of the service is based on the performance of a contract pursuant to Art .6 (1) b GDPR as well as the consent you gave us pursuant to Art. 6 (1) a GDPR.

For the shipment of goods, we call upon the services of the service provider parcelLab GmbH, Kapellenweg 6, 81371, Munich, who take over responsibility for the shipping notifications addressed to our customers and who communicate to them the shipping status as well as the tracking number for your shipment. The personal data necessary for the shipping information (name, address, order number, etc.) are for such purposes communicated to parcelLab. More information can be found in the privacy policy of parcelLab: https://parcellab.com/datenschutz/

Storage period

Data communicated to parcelLab are automatically erased after 90 days

More information can be found in the privacy policy of parcelLab: https://parcellab.com/privacy-policy/

Nature and scope of the processing

We have integrated CookiePro on our website. CookiePro is a consent/compliance solution from OneTrust Technology Ltd, 82 St John Street, London, EC1M 4JN, United Kingdom, through which consent to the storage of cookies can be obtained and documented. CookiePro uses cookies or other online technologies to recognise users again and to store the consent given or withdrawn.

Purpose and legal basis

Our use of the service is based on the [? requirement] to obtain the consent prescribed by law to the use of cookies pursuant to Art. 6 (1) c GDPR.

Storage period

It is OneTrust Technology Ltd who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for CookiePro: https://www.onetrust.com/privacy/.

Nature and scope of the processing

We have integrated CookiePro on our website. CookiePro is a consent/compliance solution from OneTrust Technology Ltd, 82 St John Street, London, EC1M 4JN, United Kingdom, through which consent to the storage of cookies can be obtained and documented. CookiePro uses cookies or other online technologies to recognise users again and to store the consent given or withdrawn.

Purpose and legal basis

Our use of the service is based on the [? requirement] to obtain the consent prescribed by law to the use of cookies pursuant to Art. 6 (1) c GDPR.

Storage period

It is OneTrust Technology Ltd who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for CookiePro: https://www.onetrust.com/privacy/.

Nature and scope of the processing

We use Criteo CDN for the proper delivery of our website content. Criteo CDN is a service of Criteo S.A., which acts on our website as a content delivery network (CDN) to guarantee the functionality of other services from Criteo S.A. There is a separate section in this privacy policy for the said services. This section merely addresses the use of the CDN

A CDN contributes towards the speedier delivery of the content of our online offering, in particular files, as well as graphics or scripts, with the help of servers distributed regionally or internationally. Whenever you access this content, you establish a connection with servers of Criteo S.A., Paris, Ile-de-France, FR, in which your IP address and, where applicable, browser data such as your user agent are transmitted. Such data are processed solely for the above-mentioned purposes and to maintain the security and functionality of Criteo CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient delivery and in the optimisation of our online offering pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Criteo S.A. who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Criteo CDN: https://www.criteo.com/privacy/ .

Nature and scope of the processing

We have integrated DrawBridge on our website. DrawBridge is a service provided by Gimbal, Inc. that displays targeted advertising to users. DrawBridge uses cookies and other browser technologies to analyse user behaviour and to recognise users again. DrawBridge gathers information on the browsing behaviour of visitors to various different websites. This information is used to optimise the relevance of the advertising. DrawBridge delivers moreover targeted advertising based on behaviour profiles and geographical location. Your IP address and other identifying features such as your user agent are transmitted to the provider. Your data are in this case disclosed to the operator of DrawBridge, Gimbal, Inc., 8605 Santa Monica Blvd #62545 West Hollywood, California 90069-4109, United States.

Web tracking technologies are used to produce pseudonymised user profiles. These profiles cannot be traced back to you as a private individual and serve rather, for example, for the purposes of segmentation when displaying advertisements.

Purpose and legal basis

We process data with the help of DrawBridge for the purposes of the optimisation of our advertising campaigns and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is Gimbal, Inc. who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for DrawBridge: https://gimbal.com/gdpr/ .

General information about our presence on social networks

To permit us to present our company in the best possible light and communicate with you in your capacity as user, customer or prospective customer, and to permit us to inform you about the services we offer, we draw on a presence in social networks.

You can find us on the following platforms, respectively social networks

• Facebook
• Instagram
• LinkedIn
• YouTube

Whenever social networks are used, data are processed outside the European Union (EU) and the European Economic Area (EEA). A level of data protection equivalent to that provided in the EU cannot be guaranteed in all countries outside the EU.

You may in this connection, in your capacity as user, be exposed to risks since the data transferred to so-called third countries are processed with a level of data protection that might not be adequate.

This complicates the enforcement of known user rights. It may moreover be the case that your data are processed by the provider in the third country in a way that is not in your interest.

Where providers from the USA have obtained certification under the so-called Privacy Shield Agreement - a data protection agreement between the USA and the EU - such providers are obliged to meet the EU's data protection standards.

The purposes of the processing as pursued by the social networks are as a rule different to ours. So it happens that in most cases, the data collected from you on social networks are processed for the purposes of market research, advertising and the production of user profiles for tailored advertising (e.g. Facebook, Google, Instagram etc.).

To do this, cookies are used to record user behaviour and to facilitate the creation of the user's profile. In the case of Facebook, a user profile is also produced for people who have no registered account on Facebook.

You can find a specific listing of the purposes for which user data are processed in the data protection information provided by the respective provider. By making the corresponding adjustments to the settings in your user account, you can, at least to some extent, limit the creation of a profile in your regard. To find out how to proceed in detail, please read the corresponding data protection information provided by the respective provider.

14.1 Facebook Fanpage

When you visit our Facebook page, Facebook collects inter alia your IP address, together with other information which is available in the form of cookies on your PC. This information is used to provide us, in our capacity as operator of the Facebook pages, with statistical information on the use of the Facebook page. Facebook provides more detailed information on this at the following link: http://facebook.com/help/pages/insights .

It is not possible for us, using the statistical information transferred, to draw conclusions about individual users. We draw on this information merely to permit us to cater to the interests of our users and to continually improve our online presence and ensure the quality of the same.

We collect your data via our Fanpage merely in order to make all possible preparations for your communication and interaction with us. The data collected includes as a rule your name, the text of messages and comments, together with the profile information made "public" by you.

The processing of your personal data for our purposes as set out above is done on the basis of our legitimate interest, from an operational and communications-related perspective, in offering an information and communications channel pursuant to Art. 6 (1) f GDPR. Should you in your capacity as user have given the respective provider of the social network your consent to data processing, the legal basis for the processing is extended to include Art. 6 (1) a, Art. 7 GDPR

On account of the fact that the data are in fact processed by the provider of the social network, our possibilities for accessing your data are limited. Only the provider of the social network is authorised to access your data in full. Because of this, only the provider can act directly to take and implement corresponding measures for the fulfilment of your user rights (information enquiry, erasure request, objection, etc.). The most effective way of enforcing corresponding rights is therefore by doing so directly against the respective provider.

Should you nevertheless require assistance in such a situation, please do not hesitate to contact us.

Data subjects’ rights

The rights and obligations to be adhered to together with Facebook are shown in the Facebook “Page Controller Addendum”. You can find this at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

In case of any request for information, we shall pass this on to Facebook and would ask you kindly to complete the corresponding contact form at https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fhelp%2Fcontact%2F308592359910928.

Please find below details of the respective data processing by the providers and the options for objection offered by them (so-called opt-outs) via the corresponding links to the providers' websites:

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: https://www.facebook.com/about/privacy/ , Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
• Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: http://instagram.com/about/legal/privacy/ Opt-Out: http://www.youronlinechoices.com , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .
• Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy , Opt-Out: https://adssettings.google.com/authenticated , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
• LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy: https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

Nature and scope of the processing

We use Facebook Pixel from Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, to produce so-called custom audiences, i.e. to segment groups of people that visit our online offering, and to calculate and subsequently optimise conversion rates. This happens in particular whenever you interact with advertisements that we have placed together with Facebook, Inc.

Purpose and legal basis

We process your data with the help of Facebook Pixel for the purposes of the optimisation of our website and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is Facebook, Inc. who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation .

Nature and scope of the processing

We have integrated components of Facebook Plugin on our website. Facebook Plugin is a service provided by Facebook, Inc. and offers us the possibility of aggregating content from the social media platform and presenting it on our website.

Whenever you access this content, you establish a connection with servers of Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, in which your IP address and, where applicable, browser data such as your user agent are transmitted. Such data are processed solely for the above-mentioned purposes and to maintain the security and functionality of Facebook Plugin.

If a user is registered with Facebook, Inc., Facebook Plugin can allocate the content viewed to the profile.

Purpose and legal basis

Our use of the service is based on our legitimate interests, i.e. our interest in the platform-independent delivery of content pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Facebook, Inc. who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Facebook Plugin: https://www.facebook.com/policy.php .

Nature and scope of the processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google LLC to display targeted advertising to users. Google Ads uses cookies and other browser technologies to analyse user behaviour and to recognise users again.

Google Ads gathers information on the browsing behaviour of visitors to various different websites. This information is used to optimise the relevance of the advertising. Google Ads delivers moreover advertising in a targeted way based on behaviour profiles and geographical location. Your IP address and other identifying features such as your user agent are transmitted to the provider.

If you are registered with a Google LLC service, Google Ads can allocate your visit to your account. Even if you are not registered with Google LLC or have not logged in, it is possible for the provider to find out and store your IP address and other identifying features.

Your data are in this case disclosed to the operator of Google Ads, Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

We process your data with the help of Google Ads for the purposes of the optimisation of our website and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google Ads: https://policies.google.com/privacy .

Nature and scope of the processing

We use Google Analytics from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes for example the number of times our online offering was downloaded, subpages visited and how long visitors stay on the site

Google Analytics uses cookies and other browser technologies to analyse user behaviour and to recognise users again

This information is used inter alia to put together reports on the website activities.

Purpose and legal basis

We process data with the help of Google Analytics for the purposes of the optimisation of our website and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google Analytics: https://policies.google.com/privacy .

Nature and scope of the processing

We use Google CDN for the proper delivery of our website content. Google CDN is a service of Google LLC, which acts on our website as a content delivery network (CDN).

A CDN contributes towards the speedier delivery of the content of our online offering, in particular files, as well as graphics or scripts, with the help of servers distributed regionally or internationally. Whenever you access this content, you establish a connection with servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, in which your IP address and, where applicable, browser data such as your user agent are transmitted. Such data are processed solely for the above-mentioned purposes and to maintain the security and functionality of Google CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient delivery and in the optimisation of our online offering pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google CDN: https://policies.google.com/privacy .

Nature and scope of the processing

We have integrated components of DoubleClick by Google on our website. DoubleClick is a tradename of Google, under which predominantly specialist online marketing solutions are marketed to advertising agencies and publishers. With every page impression and whenever users click or perform other activities, DoubleClick by Google transfers data to the DoubleClick server.

Each of these data transfers triggers a cookie request in the data subject's browser. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID, which is required in order to implement the technical process. The cookie ID is for example needed to display an advertisement in a browser. DoubleClick can use the cookie ID to record which advertisements were already displayed in a browser to avoid double placements. The cookie ID enables DoubleClick moreover to record conversions. Conversions are for example recorded whenever a DoubleClick advertisement was previously displayed to a user and that user subsequently makes a purchase, using the same online browser, on the advertiser's website.

A cookie from DoubleClick does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you were already in contact on other websites. As part of this service, Google learns of data that also helps Google to produce statements setting out the commissions charged by it. Google can inter alia trace the fact that you have clicked certain links on our website. Your data are in this case disclosed to the operator of Double Click, Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Further information and the applicable data protection provisions for DoubleClick by Google can be downloaded at https://policies.google.com/privacy .

Purpose and legal basis

We process your data with the help of Double-Click Cookies for the purposes of the optimisation and display of advertising, based on your consent pursuant to Art. 6 (1) a GDPR. You provide your consent by adjusting the setting for the use of cookies (cookie banner/consent manager), which you may also use at any time to withdraw your consent for the future pursuant to Art. 7 (3) GDPR. The cookie is used inter alia to place and display user-relevant advertising and to produce reports on advertising campaigns or to improve such campaigns. The cookie is moreover used to prevent multiple displays of the same advertising. Whenever you download one of the individual pages of our website onto which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transfer data to Google for the purposes of online advertising and for the charging of commissions. There is no statutory or contractual obligation to provide your data. Should you not provide us with your consent, it is possible for you to visit our website without limitation, however not all features will be fully available to you.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google DoubleClick: https://policies.google.com/privacy .

Nature and scope of the processing

We use Google Fonts from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as a service for the supply of fonts for our online offering. To source these fonts, you establish a connection to Google LLC servers, in which your IP address is transferred.

Purpose and legal basis

Our use of Google Fonts is based on our legitimate interests, i.e. our interest in the uniform delivery and optimisation of our online offering pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google Fonts: https://policies.google.com/privacy .

Nature and scope of the processing

We use Google Services from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, to access other services and data from Google LLC. For this, there is no transfer of your IP address to Google LLC. Please note that there is an individual section in this privacy policy for every additional service from Google LLC that we call upon.

Purpose and legal basis

Our use of Google Services is based on our legitimate interests, i.e. our interest in the optimisation of our online offering pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google Services: https://policies.google.com/privacy .

Nature and scope of the processing

We use Google Tag Manager from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services onto our website.

This permits us to integrate additional services in a flexible way to evaluate users’ access to our website.

Purpose and legal basis

Our use of Google Tag Manager is based on our legitimate interests, i.e. our interest in the optimisation of our services pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google Tag Manager: https://policies.google.com/privacy .

Nature and scope of the processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service provided by Google LLC and enables us to differentiate between whether a contact request comes from a private individual or is done automatically with the aid of a programme. Whenever you access this content, you establish a connection with servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, in which your IP address and, where applicable, browser data such as your user agent are transmitted. Google reCAPTCHA tracks moreover the length of time users spend on the site and their mouse movements in order to differentiate between automated requests and requests from human beings. Such data are processed solely for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis

Our use of the service is based on our legitimate interests, i.e. to provide a level of protection for the transmission of forms pursuant to Art. 6 (1) f. GDPR.

Storage period

It is Google LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US .

Nature and scope of the processing

We use Kelkoo Pixel from Kelkoo Deutschland GmbH, Mattentwiete 1, 20457 Hamburg, Germany, to produce so-called custom audiences, i.e. to segment groups of people that visit our online offering, and to calculate and subsequently optimise conversion rates. This happens in particular whenever you interact with advertisements that we have placed together with Kelkoo Deutschland GmbH.

Purpose and legal basis

We process your data with the help of Kelkoo Pixel for the purposes of the optimisation of our website and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is Kelkoo Deutschland GmbH who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Kelkoo Pixel: https://www.kelkoo.co.uk/company-pages/privacy-policy/ .

Nature and scope of the processing

We use LinkedIn CDN for the proper delivery of our website content. LinkedIn CDN is a service of LinkedIn Corporation, which acts on our website as a content delivery network (CDN) to guarantee the functionality of other services from LinkedIn Corporation. There is a separate section in this privacy policy for the said services. This section merely addresses the use of the CDN.

A CDN contributes towards the speedier delivery of the content of our online offering, in particular files, as well as graphics or scripts, with the help of servers distributed regionally or internationally. Whenever you access this content, you establish a connection with servers of LinkedIn Corporation, Sunnyvale, California, US, in which your IP address and, where applicable, browser data such as your user agent are transmitted. Such data are processed solely for the above-mentioned purposes and to maintain the security and functionality of LinkedIn CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient delivery and in the optimisation of our online offering pursuant to Art. 6 (1) f. GDPR.

Storage period

It is LinkedIn Corporation who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for LinkedIn CDN: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy .

Nature and scope of the processing

We have integrated Bing Ads on our website. Bing Ads is a service provided by Microsoft Corporation to display targeted advertising to users. Bing Ads uses cookies and other browser technologies to analyse user behaviour and to recognise users again.

Bing Ads gathers information on the browsing behaviour of visitors to various different websites. This information is used to optimise the relevance of the advertising. Bing Ads delivers moreover advertising in a targeted way based on behaviour profiles and geographical location. Your IP address and other identifying features such as your user agent are transmitted to the provider.

Your data are in this case disclosed to the operator of Bing Ads, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

Purpose and legal basis

We process your data with the help of Bing Ads for the purposes of the optimisation of our website and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is Microsoft Corporation who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Bing Ads: https://privacy.microsoft.com/en-uk/privacystatement .

Nature and scope of the processing

We have integrated OneTrust Geolocation on our website. OneTrust Geolocation is a consent/compliance solution from OneTrust Technology Ltd, 82 St John Street, London, EC1M 4JN, United Kingdom, through which consent to the storage of cookies can be obtained and documented. OneTrust Geolocation uses cookies or other online technologies to recognise users again and to store the consent given or withdrawn.

Purpose and legal basis

Our use of the service is based on the [? requirement] to obtain the consent prescribed by law to the use of cookies pursuant to Art. 6 (1) c GDPR.

Storage period

It is OneTrust Technology Ltd who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for OneTrust Geolocation: https://www.onetrust.com/privacy/ .

Nature and scope of the processing

We have integrated components of Trusted Shops Widget on our website. Trusted Shops Widget is a review service that allows users to review our services. If you were to review our services, to check on authenticity, data on the service used would be transferred where necessary to Trusted Shops GmbH. Trusted Shops Widget allows us to draw content such as reviews directly from Trusted Shops GmbH and to show this on our website. For this, your current IP address is as a rule transferred to the service.

Trusted Shops Widget stores moreover information via cookies to find out which online offerings were visited. Your data are in this case disclosed to the operator of Trusted Shops Widget, Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Köln.

Purpose and legal basis

Our use of Trusted Shops Widget is based on Art. 6 (1) f GDPR and is done in order to inform users about the quality of the services provided by us. Where users consent to the processing of their data, the legal basis for the processing is Art. 6 (1) a GDPR

Storage period

It is Trusted Shops GmbH who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Trusted Shops Widget: https://business.trustedshops.co.uk/imprint .

Nature and scope of the processing

We have integrated components of Visual Website Optimizer on our website. Visual Website Optimizer is a service provided by Wingify Software Pvt. Ltd. and offers marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing, web analysis and the completion of A/B tests.

Visual Website Optimizer uses cookies and other browser technologies to analyse user behaviour and to recognise users again. This information is used inter alia to put together reports on the website activities. Visual Website Optimizer tracks clicks, mouse movements and levels to which users scroll down to produce so-called heatmaps.

Your data are in this case disclosed to the operator of Visual Website Optimizer, Wingify Software Pvt. Ltd., KLJ Tower, North, Netaji Subhash Place, Pitam Pura, Delhi, 110034, India.

Purpose and legal basis

We process your data with the help of Visual Website Optimizer for the purposes of the optimisation of our website and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is Wingify Software Pvt. Ltd. who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for Visual Website Optimizer: https://vwo.com/privacy-policy/ .

Nature and scope of the processing

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, onto which users upload content, which they can share online and on which they can receive detailed statistics.

YouTube Video enables us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to analyse user behaviour, to recognise users again and to produce user profiles. This information is used inter alia to analyse the activity of the content listened to and to produce reports. If a user is registered with YouTube, LLC, YouTube Video can allocate the videos played to their profile.

Whenever you access this content, you establish a connection with servers of YouTube LLC, in which your IP address and, where applicable, browser data such as your user agent are transmitted.

Purpose and legal basis

Our use of the service is based on our legitimate interests, i.e. our interest in the platform-independent delivery of content pursuant to Art. 6 (1) f. GDPR.

Storage period

It is YouTube, LLC who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for YouTube Video: https://policies.google.com/privacy .

Nature and scope of the processing

We use jQuery CDN for the proper delivery of our website content. jQuery CDN is a service of jQuery, which acts on our website as a content delivery network (CDN).

A CDN contributes towards the speedier delivery of the content of our online offering, in particular files, as well as graphics or scripts, with the help of servers distributed regionally or internationally. Whenever you access this content, you establish a connection with servers of jQuery, in which your IP address and, where applicable, browser data such as your user agent are transmitted. Such data are processed solely for the above-mentioned purposes and to maintain the security and functionality of jQuery CDN.

Purpose and legal basis

Our use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient delivery and in the optimisation of our online offering pursuant to Art. 6 (1) f. GDPR.

Storage period

It is jQuery who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for jQuery CDN: https://www.stackpath.com/legal/privacy-statement/ .

Nature and scope of the processing

We use for our online offering the service matelso Call Tracking from matelso GmbH, Heilbronner Straße 150, 70191 Stuttgart, Germany, to evaluate telephone calls. This means that we can display in our online offering telephone numbers that, whenever we take a call , collect metadata from the call. These data consist of the caller's telephone number, the telephone number called, the time, date and duration of the call. Where possible, we link the said metadata to the related address and pass these on to the servers of matelso GmbH.

Purpose and legal basis

We process your data with the help of matelso Call Tracking for the purposes of the optimisation of our website and for marketing purposes, based on your consent pursuant to Art. 6 (1) a GDPR.

Storage period

It is matelso GmbH who decide on the actual storage period of the processed data and this cannot be influenced by us. You can find further information on this in the privacy policy for matelso Call Tracking: https://www.matelso.com/en/privacy-statement .

Version: 05/2021