Privacy policy

Data Protection Information DS-113

Basic information
We provide this information in order to explain to you in a transparent manner how we handle your personal data (which, according to supreme court rulings, also includes the IP address) when you visit our website. According to Art. 4 No. 1 DSGVO, personal data is any information relating to an identified or identifiable natural person.

Privacy policy and information
We take the protection of your data and your privacy very seriously and comply with our obligations under data protection law. We collect and process your personal data in accordance with European and national legal requirements. We explicitly explain how and in what form we process your data in this data protection declaration.

When you visit our website, we are forced to collect various personal data - on the one hand, this serves to ensure the functionality of our website and, on the other hand, to increase the attractiveness of our website through the use of various tools.

In addition, we would still like to point out that data transmission on the Internet is not possible without accepting that there may be security gaps. Even we cannot guarantee complete protection of your data, but we make every effort to ensure that your data is comprehensively protected.

Why do we need your data?
Your data is collected so that we can display our website without errors. Other data could be used to analyse your user behaviour.

Furthermore, the data collection is based on a legal basis:
If you have consented to the data processing, we process your personal data on the basis of Art. 6 (1) UAbs. 1 lit. a DS-GVO or Art. 9 (2) lit. a DS-GVO if sensitive data are processed according to Art. 9 (1) DS-GVO. The processing of data according to Art. 9 DS-GVO is only permitted in certain cases.  

If you have consented to the storage of cookies or to the access to information on your terminal device, such as through device fingerprinting, the data processing is carried out on the basis of Section 25 (1) TTDSG.

Consent can be revoked at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

If we collect your data to fulfil a contract or to carry out pre-contractual measures, your data will be processed on the basis of Art. 6 para. 1 UAbs. 1 lit. b DS-GVO. If your data is required for the fulfilment of a legal obligation, we process your data on the basis of Art. 6 para. 1 UAbs. 1 lit. c DS-GVO.

Data processing may further be collected on the basis that we are exercising our legitimate interest in data processing. In this case, data processing is possible provided that your interests or the interests of third parties do not conflict with the data processing. Data processing then takes place in accordance with Art. 6 (1) UAbs. 1 lit. f DS-GVO.

We will state the relevant legal basis in each individual case in the relevant section.

Who is responsible?
As the website operator, we are responsible for data processing on our website under data protection law in accordance with Art. 4 No. 7 DSGVO. You can reach us at the following contact details:

All Organic Treasures GmbH
Am Mühlbach 38
87487 Wiggensbach
+49 8370 922800
info@aot.de

How to reach our data protection officer:

#KOMM#IT
Funke Solution GmbH & Co. KG
Salmas 52
87534 Oberstaufen
Tel: +49 8325 927050
dsb@komm-it.info

How long do we store your data?
We adhere to the respective statutory retention period for the maximum duration of the storage of your personal data. Your data will only be stored by us until we no longer need it for our data processing. We are bound by the purpose for which we collected your data with regard to the storage of your data. Unless a specific storage period is stated in this information, your personal data will remain with us until the purpose for processing the data no longer applies.

If you assert a justified request for deletion or revoke your consent to data processing, we must delete your data in the event that there are no other legally permissible reasons for the continued storage of your data, such as retention periods under commercial and tax law. We can only comply with your request for deletion when these reasons no longer apply.

Where do we get your data?
We collect your data because you provide us with the data via a contact form or by other means. There is additional data that is collected automatically or only after your consent when you visit our website. This is mainly technical data such as your operating system and the time of the page view.

Who do we make your data available to?
We use tools from third party companies based in and outside the EU and EEA. Your personal data may be transferred to these third party companies if you have activated these tools - unless they are necessary for the functionality of the website.

Furthermore, we also use tools from companies based in the USA or other third countries that are not secure under data protection law. Your personal data may also be transferred to these companies if you have activated the corresponding tools. In these countries, there is no level of data protection comparable to that in the EU.

Such data transfer requires an adequacy decision issued by the EU Commission that ensures a comparable level of protection for your personal data. In the event that there is no such adequacy decision, other appropriate safeguards pursuant to Art. 44 et seq. DS-GVO must be taken.

What rights do you have? - Your data subject rights
You can assert your rights under Art. 12 et seq. DS-GVO.

Revocation of consent to data processing
In part, we process your data with your express consent. You can revoke a consent you have already given at any time with effect for the future. You can do this by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.
Objection in special cases / against direct advertising, Art. 21 DS-GVO

If the data processing is carried out on the basis of Art. 6 para. 1 UAbs. 1 lit. f DS-GVO, then you may object to the processing of your personal data for reasons arising from your particular situation. This also applies to any profiling - the legal basis for such profiling can be found in this information. If you exercise your right to object, your personal data concerned will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims under Article 21(1) of the GDPR.

If we process your personal data for direct marketing, you have the right to object to the processing of personal data concerning you for the purpose of such marketing. This also applies to profiling insofar as it is related to direct advertising. If you object, your personal data will subsequently no longer be sent for the purpose of direct advertising in accordance with Art. 21 (2) DS-GVO.

Right to data portability
You have the right to have data that we process automatically handed over to you or to a third party in a common machine-readable format. If you request the transfer of the data to another controller, it will only be done if it is technically possible.

Right to information, deletion and correction
Within the scope of Art. 15 Para. 1 DS-GVO, you can assert the right to free information about your stored personal data, their origin, recipients and the purpose of the data processing. Furthermore, you could assert a right to correction or deletion of this data, if applicable. If you have any questions about your rights, you can contact us or our data protection officer at any time.

Right to restriction of processing
You may also request the restriction of the processing of your personal data. If you have any questions about this right, you can contact us or our data protection officer at any time. A right to restriction exists in the cases specified by law. If we dispute the accuracy of your data, we need time to verify this. For this period, you have the right to demand restriction of your data. In the event that the processing of your data is unlawful, you may request the restriction of processing instead of the deletion of the data. If we no longer need your personal data, but you wish to exercise, defend or assert legal claims, you have the right to request at least the restriction of data processing. If you have lodged an objection in accordance with Art. 21 (1) DS-GVO, we must weigh up your interests against ours, during which time you have the right to demand the restriction of the data.

If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Right to complain to a competent supervisory authority
As a data subject, you still have the right to lodge a complaint with a supervisory authority in the event of a breach of the GDPR. This must be the competent supervisory authority under data protection law in your federal state. You always have the right to lodge a complaint, regardless of what other measures you take.

Further information
We expressly object to the sending of unsolicited advertising and information material to our contact details. We expressly reserve the right to take legal action against the sending of unsolicited advertising, such as spam e-mails.

For security reasons and to protect the transmission of confidential content, we use an SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Server log files
The site provider collects and stores information in server log files that your browser automatically transmits to us. This includes the following data: Browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request and furthermore also your IP address.

Your data will not be merged with data from other data sources. The legal basis for data processing is Art. 6 para. 1 UAbs. 1 lit. f DS-GVO, as we as site operators have a legitimate interest in the technically error-free presentation and optimisation of our website. Server log files must be collected for this purpose.

Hosting of our website
We host our website with an external provider:

47GradNord
Holger Neuner
Hugo-Herrmann-Strasse 11
88213 Ravensburg
Tel: +49 751 977 00 905

All personal data collected on the website - such as your IP address, meta and communication data, contract data, contact data, names, accesses and other data generated via a website are stored on the hoster's servers.

The legal basis for the processing of your personal data is Art. 6 para. 1 UAbs. 1 lit. f DS-GVO. Our legitimate interest lies in the most reliable presentation of our website.

In the event that we have requested your consent, the processing of your data is based on Art. 6 para. 1 UAbs. 1 lit. a DS-GVO and §25 para. 1 TTDSG, if the data use is subject to the consent to store cookies or access information in the user's terminal device, such as device fingerprinting, as defined by the TTDSG. Consent can be revoked at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the lawfulness of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

We have concluded an agreement on commissioned processing as proof of data protection-compliant processing and to outline our respective obligations. This is a contract prescribed by data protection law in accordance with Art. 28 (3) DS-GVO, which ensures that our commissioned processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DS-GVO.

Setting cookies
We use cookies on our website. These are small text files and data packets that are placed on the end devices but do not cause any damage there. The cookies are stored either temporarily for a session as session cookies or permanently as permanent cookies on your end device. Session cookies are automatically deleted at the end of the session, whereas permanent cookies are stored on the end device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies could also be stored on your end devices; these are third-party cookies. They enable the use of services of this company, such as cookies for processing payment services.

Cookies fulfil different functions. In part, they are technically necessary for certain applications on the website to function at all, such as the shopping basket function. Other cookies are used to evaluate user behaviour on our site or to display advertising. Cookies that are technically absolutely necessary and are therefore to be regarded as necessary cookies are stored on the basis of §25 para. 2 TTDSG, unless another legal basis is explicitly stated. The storage of cookies is absolutely necessary in order to be able to create the technical prerequisites for an error-free and optimised website. For cookies that are not technically mandatory, consent is requested in accordance with §25 para. 1 TTDSG. In this case, the cookies are only stored on the basis of this consent. The consent can be revoked at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

You can set your browser so that you are informed about the setting of cookies and only allow them in individual cases. Furthermore, you can also generally exclude the storage of cookies and activate the automatic deletion of cookies when closing the browser. We would recommend this procedure. In the event that you generally deactivate cookies, the functionality of our website as well as the display may be restricted. When using cookies from third-party companies and for analysis purposes, we will inform you again separately. In this case, we will also request your consent.

Cookie banner on the homepage:
Our cookie banner on the homepage (request for consent) comes from a third-party provider.
The provider of the cookie banner is

47DegreesNorth
Holger Neuner
Hugo-Herrmann-Strasse 11
88213 Ravensburg.

With the help of the cookie banner, we obtain your consent that certain cookies, which are not required for the technical presentation of the website, may be stored on your end device. We need this consent in order to be able to demonstrate a legal basis for the storage.

When you enter our website, personal data is transmitted to our cookie banner provider. This involves the following data: Your reaction to our consent request in the context of the cookie banner, your IP address, information about your browser and your terminal device as well as the time of your visit to our website.

When you enter our website, a connection is established to the provider's servers so that your consent or other declarations regarding the setting of cookies can be obtained. After the declaration has been made, our provider stores a cookie in your Internet browser so that it can assign whether you have consented to the cookies being set or whether you have rejected them. Furthermore, it is used to allocate any revocation that may have taken place at a later date. This data is stored until you request us to delete the data, delete the cookie yourself or until the purpose for processing the data no longer applies. If legal retention periods conflict with the deletion, these remain unaffected.

The legal basis for obtaining consent is §25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future. If you wish to change your settings, please contact us or follow the instructions on our website. You can assert a possible revocation by means of an informal message sent to us by e-mail. You can also contact our data protection officer, who will inform us of your request. However, the lawfulness of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

We have concluded an agreement on commissioned processing as proof of data protection-compliant processing and to outline our respective obligations. This is a contract prescribed by data protection law in accordance with Art. 28 (3) DS-GVO, which ensures that our commissioned processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DS-GVO.

Contact options on our website
We offer various ways to contact us on our website.

Possibility to register on our website
You have the possibility to register on our website. You can use this registration to activate additional functions on our website. We will only use the data you enter in the registration mask for the purposes for which you have registered. We can only carry out the registration if all the details are provided that are absolutely necessary for the registration. Otherwise, we will unfortunately have to reject the registration. In the event of mandatory changes, we will use the e-mail address you have provided so that we can contact you.

We process your entered data on the basis of your consent according to Art. 6 para. 1 UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the lawfulness of the data processing carried out until the revocation remains unaffected by the revocation exercised by you. Your data will be stored by us for as long as you are registered on our website. Your data will then be deleted, whereby legal retention periods remain unaffected.

Enquiries via contact form
You can use our contact form at any time to send us enquiries. We process the data that you have provided in the contact form, as well as your e-mail address, in order to be able to process your enquiry and in the event that we still have follow-up questions for you. However, we do not pass on your data to third parties without your consent.

The legal basis for the processing of your data is Art. 6 (1) UAbs. 1 lit. b DS-GVO, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In other cases, the processing is based on our legitimate interest in the effective processing of your request pursuant to Art. 6 (1) (1) (f) DS-GVO or on your consent pursuant to Art. 6 (1) (1) (a) DS-GVO, if this has been requested by us. You can revoke your consent at any time with effect for the future. An informal communication by e-mail to us is sufficient for this purpose. However, this will not affect the legality of our data processing until you revoke your consent.

The data you provide will remain with us until you request us to delete it or revoke your consent to store it. Mandatory legal provisions such as statutory retention periods remain unaffected.

Enquiries by e-mail, telephone and fax
You can contact us at any time by e-mail, telephone and fax. In doing so, we process the data that you have provided to us in order to be able to process your enquiry. However, we do not pass on your data to third parties without your consent.

The legal basis for the processing of your data is Art. 6 (1) UAbs. 1 lit. b DS-GVO, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In other cases, the processing is based on our legitimate interest in the effective processing of your request pursuant to Art. 6 (1) (1) (f) DS-GVO or on your consent pursuant to Art. 6 (1) (1) (a) DS-GVO, if this has been requested by us. You can revoke your consent at any time with effect for the future. An informal communication by e-mail to us is sufficient for this purpose. However, this will not affect the legality of our data processing until you revoke your consent.

The data you provide will remain with us until you request us to delete it or revoke your consent to store it. Mandatory legal provisions such as statutory retention periods remain unaffected.

Use of chatbots
In order to communicate with you more easily, we use chatbots. Chatbots can answer questions and other inputs without requiring human assistance. Chatbots collect your personal data, which includes: Name, email address, contact details, customer number, other identification data, orders and chat history. Chatbots also collect metadata, your IP address, log files and location information. The collected data is stored on the chatbot's servers. User profiles are created using the collected data and used for advertising, provided that the legal requirements - in particular consent - are met. In order to be able to implement this, chatbots are linked to analysis and advertising tools. To improve the chatbot's responses, we use your data.

We use the chatbot from Userlike. The provider of the chatbot is Userlike UG, Probsteigasse 44-46, 50670 Cologne (hereinafter: "Userlike"). Userlike is used via our website and Wordpress.

The legal basis for processing your data is Art. 6 (1) UAbs. 1 lit. b DS-GVO if your request serves to initiate or fulfil a contract. In the event that we have requested consent, data processing is only carried out on the basis of Art. 6 para. 1 UAbs. 1 lit. a DS-GVO and §25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device as defined by the TTDSG. You can revoke your consent at any time with effect for the future. To do so, it is sufficient to send us an informal message by e-mail. However, the legality of our data processing is not affected by this until the revocation has taken place. In all other cases, the use of the chatbot is based on our legitimate interest in effective customer communication in accordance with Art. 6 (1) UAbs. 1 lit. f DS-GVO.

The data you provide will remain with us until you request us to delete it or revoke your consent to store it. Mandatory legal provisions such as statutory retention periods remain unaffected.

We have concluded an agreement on commissioned processing as proof of data protection-compliant processing and to outline our respective obligations. This is a contract required by Article 28 (3) of the DS-GVO under data protection law, which ensures that our commissioned processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DS-GVO.

Data processing through social networks
We use a publicly accessible profile on various social networks.

The social networks may already analyse your behaviour when you visit our website, as we have integrated plug-ins of the social networks or other links. Personal data is also collected if you are not logged in as a user or do not have an account with the respective provider. Your data is collected via cookies that are stored in your terminal device or also by recording your IP address.

The social networks create user profiles. In these profiles, they store your interests and preferences so that you are shown interest-based advertising. If you maintain a profile with the respective provider, the advertising is displayed on all devices on which you are or were logged in.

The data you provide will remain with us until you request us to delete it or revoke your consent to store it. Mandatory legal provisions such as statutory retention periods remain unaffected. Stored cookies, unless they are session cookies, remain on your device until you delete them.

We have concluded an agreement on commissioned processing with the respective provider as proof of data protection-compliant processing and to outline our respective obligations. This is a contract required by Article 28 (3) DS-GVO under data protection law, which ensures that our commissioned processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DS-GVO.

Meta Plug-In and Meta Profile
We maintain a profile with Meta (formerly Facebook). The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: "Meta"). In addition, we have integrated a plug-in from Meta on our website. You can recognise these by the Meta profile button or the "Like" button. You can find an overview of the Facebook/Meta plug-ins at: https://developers.facebook.com/docs/plugins/?locale=de_DE.

The mere integration of the plug-in does not lead to any direct data transmission to Meta. Personal data is only processed when information is called up that goes beyond the start page of a Meta profile; this processing is no longer attributable to us as the operator, as you have voluntarily placed yourself under Meta's data sovereignty with your consent through the "two-click solution".

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility in social media according to Art. 6 (1) UAbs. 1 lit. f DS-GVO. If a corresponding consent was requested, Meta's data processing is based on your consent according to Art. 6 para. 1 UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

The use of a meta profile does not result in joint responsibility for any data processing of personal data according to Art. 26 DS-GVO. By using the "two-click solution" provided by us, you voluntarily decide to place yourself under the data sovereignty of Meta. Contrary to the ECJ ruling of 05.06.2018, C-210/16, there is therefore no responsibility based on a joint decision on the purposes and means of data processing, as Meta only processes personal data at the time when you have already voluntarily placed yourself under Meta's data sovereignty. The processing of personal data that takes place after the transfer to Meta is not attributable to us. Furthermore, in the event of joint responsibility, the required agreement pursuant to Article 26 (3) of the GDPR can be found in the addendum provided by Meta: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are obliged to provide the data protection information in accordance with Art. 13 et seq. DS-GVO and to integrate the Meta-Tool on our website in a data protection compliant manner. You can assert your data protection rights directly with Meta. In the event that you assert your data protection rights with us in relation to the use of Meta, we are obliged to forward your request to Meta.

The data processed by Meta is also transferred to the USA and other third countries. The data transfer to the USA is currently based on standard contractual clauses of the EU Commission. An adequacy decision by the EU Commission is currently being examined and is expected before the end of the year. Details can be found at: https://facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://facebook.com/policy.php. Further information can be found in the Terms of Use and the Privacy Policy. These can be found at: https://de-de.facebook.com/about/privacy/ and https://de-de.facebook.com/legal/terms/.

Instagram plug-in and Instagram profile
We maintain a profile on Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: "Meta"). In addition, we have integrated a plug-in from Instagram on our website. You can recognise this by the Instagram profile button.

The integration of the plug-in alone does not lead to any direct data transmission to Meta. Personal data is only processed when information is called up that goes beyond the start page of an Instagram profile; this processing is no longer attributable to us as the operator, as you have voluntarily placed yourself under Meta's data sovereignty with your consent through the "two-click solution".

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility in social media in accordance with Art. 6 (1) UAbs. 1 lit. f DS-GVO. If a corresponding consent was requested, Meta's data processing is based on your consent according to Art. 6 para. 1 UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

The use of an Instagram profile does not result in joint responsibility for any data processing of personal data according to Art. 26 DS-GVO. By using the "two-click solution" provided by us, you voluntarily decide to place yourself under the data sovereignty of Meta. Contrary to the ECJ ruling of 05.06.2018, C-210/16, there is therefore no responsibility based on a joint decision on the purposes and means of data processing, as Meta only processes personal data at the time when you have already voluntarily placed yourself under Meta's data sovereignty. The processing of personal data that takes place after the transfer to Meta is not attributable to us. Furthermore, in the event of joint responsibility, the required agreement pursuant to Art. 26 (3) of the GDPR can be found in the addendum provided by Meta: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are obliged to provide the data protection information in accordance with Art. 13 et seq. DS-GVO and to integrate the Meta-Tool on our website in a data protection compliant manner. You can assert your data protection rights directly with Meta. In the event that you assert your data protection rights with us in relation to the use of Instagram, we are obliged to forward your request to Meta.

The data processed by Meta is also transferred to the USA and other third countries. The data transfer to the USA is currently based on standard contractual clauses of the EU Commission. An adequacy decision by the EU Commission is currently under review and expected later this year. Details can be found at: https://facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://facebook.com/policy.php. Further information can be found in the Terms of Use and the Privacy Policy. These can be found at: https://de-de.facebook.com/about/privacy/ and https://de-de.facebook.com/legal/terms/.

Twitter
We use the messaging service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter: "Twitter"). You can independently adjust your Twitter data protection settings in your user account. To do so, click on the following link and log in: https://twitter.com/personalization.

The integration of the plug-in alone does not lead to any direct data transmission to Twitter. Personal data is only processed when information is called up that goes beyond the start page of a Twitter profile; this processing is no longer attributable to us as the operator, as you have voluntarily placed yourself under the data sovereignty of Twitter with your consent through the "two-click solution".

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility in social media in accordance with Art. 6 (1) UAbs. 1 lit. f DS-GVO. If a corresponding consent was requested, Twitter's data processing is based on your consent according to Art. 6 (1) UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

The data processed by Twitter is also transmitted to the USA and other third countries. The data transfer to the USA is currently based on standard contractual clauses of the EU Commission. An adequacy decision by the EU Commission is currently being examined and is expected before the end of this year. Details can be found at: https://gdpr.twitter.com/en/controller-to-controller-transfers.html. Further details can be found in Twitter's privacy policy: https://twitter.com/de/privacy.

LinkedIn
We use LinkedIn. The provider is LinkedIn Ireland Limited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter: "LinkedIn").

If you access LinkedIn content on this website, a connection to LinkedIn servers is established. LinkedIn receives the information that you have visited our website. If you click on the LinkedIn button, the visit can be assigned to your profile.

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility in social media in accordance with Art. 6 (1) UAbs. 1 lit. f DS-GVO. If a corresponding consent has been requested, LinkedIn's data processing is based on your consent according to Art. 6 para. 1 UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

The data processed by LinkedIn is also transmitted to the USA and other third countries. The data transfer to the USA is currently based on standard contractual clauses of the EU Commission. An adequacy decision by the EU Commission is currently being examined and is expected before the end of the year. Details can be found at: https://www.linkedin.com/help/linkedin/answer/62538/datenuebertragung-aus-der-eu-den-ewr-und-der-schweiz?lang=de. Further information on this can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

XING
We use XING. The provider is New York SE, Dammtorstraße 30, 20354 Hamburg (hereinafter: "XING").

If you call up XING content on this website, a connection to XING servers is established. XING does not store any personal data, in particular the IP address of the user.

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility in social media in accordance with Art. 6 (1) UAbs. 1 lit. f DS-GVO. If a corresponding consent has been requested, XING's data processing is based on your consent pursuant to Art. 6 (1) UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

For further information on data protection and the XING Share button, please refer to XING's privacy policy at: https://www.xing.com/app/share?op=data_protection.

Integration of analysis tools and plug-ins
We use various analysis and advertising tools.

We have concluded an agreement on commissioned processing with the respective provider as proof of data protection-compliant processing and to outline our respective obligations. This is a contract required by Article 28 (3) DS-GVO under data protection law, which ensures that our order processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DS-GVO.

Integration of Google Tag Manager
We use the Google Tag Manager to integrate tracking or statistical tools on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google Tag Manager").

The technology does not create a user profile, does not store cookies and does not perform any analyses itself, it only stores your IP address. The Google Tag Manager manages the integrated tools.

The data processed by Google is also transmitted to the USA and other third countries. The data transfer to the USA is currently based on standard contractual clauses of the EU Commission. An adequacy decision by the EU Commission is currently being examined and is expected before the end of this year. Details can be found at: https://privacy.google.com/businesses/controllerterms/mccs/

Integration of Google Analytics
We use the web analytics services of Google Analytics to perform user analysis. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

Google collects personal data for the analysis of user behaviour, which is stored on our server, whereby the storage of the IP address is only anonymised. Google helps us to collect data on when our site was accessed and from which region, as well as whether and which purchases were made via the website. In order to carry out this analysis, Google stores log files such as the IP address, referrers, browsers used and operating systems. In addition, Google may also record your mouse and scrolling movements as well as your clicks.

The legal basis for the data processing is our legitimate interest in an anonymised analysis to improve our services according to Art. 6 (1) UAbs. 1 lit. f DS-GVO. If a corresponding consent was requested, the data processing by Google is based on your consent according to Art. 6 para. 1 UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

The data processed by Google will also be transferred to the USA and other third countries. The data transfer to the USA is currently based on standard contractual clauses of the EU Commission. An adequacy decision by the EU Commission is currently being examined and is expected before the end of this year. Details can be found at: Details can be found at: https://privacy.google.com/businesses/controllerterms/mccs/. Further information on the handling of personal data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de. To prevent Google's analysis, please click here: https://tools.google.com/dlpage/gaoptout?hl=de.

Google stores the data for two months, after which it is anonymised. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de.

Use of Google Signals: When using Google Signals, Google Analytics also collects your location, search history and YouTube history, if applicable, as well as demographic data such as visitor data. Google Signals uses this data to provide you with personalised advertising. If you have a Google account and are logged in to it, Google Signals will also pull your data from your Google account. Furthermore, Google also uses the data to create anonymised user profiles and to display user behaviour in statistics.

"E-commerce measurement": With the help of this measurement, we analyse the purchasing behaviour of our website visitors in order to improve our offer on our website. Google stores information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product. Google then summarises this information and assigns it to the respective user.

Integration of Google Maps
We use Google Maps to display our location. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

Google Maps stores your IP address, which is transmitted to Google's servers. We have no influence on the data processing by Google. Google may also integrate Google Web Fonts when using Google Maps.

The legal basis for the data processing is our legitimate interest in an appealing presentation of our online offer according to Art. 6 para. 1 UAbs. 1 lit. f DS-GVO. If a corresponding consent was requested, the data processing by Google is based on your consent according to Art. 6 para. 1 UAbs. 1 lit. a DS-GVO. You can revoke your consent at any time with effect for the future. You can revoke your consent by sending us an informal e-mail. You can also contact our data protection officer, who will inform us of your request. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation exercised by you.

The data processed by Google will also be transferred to the USA and other third countries. The data transfer to the USA is currently based on standard contractual clauses of the EU Commission. An adequacy decision by the EU Commission is currently being examined and is expected before the end of this year. Details can be found at: Details can be found at: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. More information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Our own services – dealing with applicants
You have the opportunity at any time to send us an unsolicited application or to apply for an advertised position. We accept applications by e-mail, by post and via our online application form. In the following we would like to inform you about data processing in the context of the application process.

We process your personal data such as contact and communication data, application documents and notes in the context of job interviews, insofar as they are necessary for establishing an employment relationship.

In the event that we introduce you to an employment relationship, your data will be processed for the implementation of your employment relationship.

If we cannot offer you a position, you reject our offer or withdraw your application, we reserve the right to keep your documents for up to six months after the end of the application process. After the deadline, your data will be deleted and destroyed. Mandatory statutory retention periods remain unaffected. If you have given us your consent to longer storage, your data may be stored for a longer period of time.

Cookie Settings