Privacy policy
1) Introduction and Contact Information of the Responsible Party
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is TBB Performance GmbH, Gerbermühlstraße 61, 60594 Frankfurt am Main, Germany, Tel.: +491722657763, Email: support@tib-bar.com. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When merely using our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect such data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively, should there be concrete indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3) Hosting & Content-Delivery-Network
3.1 Shopify
For hosting our website and displaying the page contents, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc.
All data collected on our website is processed on the provider's servers. We have concluded a data processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
3.2 Fastly
We use a Content Delivery Network of the following provider: Fastly Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website according to Art. 6 Para. 1 lit. f GDPR. We have concluded a data processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
4) Cookies
To make the visit to our website appealing and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period, allowing the storage of page settings (so-called "persistent cookies"). In the latter case, you can refer to your web browser's cookie settings for the storage duration.
If individual cookies we use also process personal data, the processing is carried out either according to Art. 6 Para. 1 lit. b GDPR for the execution of the contract, according to Art. 6 Para. 1 lit. a GDPR in case of granted consent, or according to Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser to inform you about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting
5.1 Judge.me
For review reminders, we use the services of the following provider: Judge.me LLC, PO Box 7403, Jackson, Wyoming 83002, USA
Based solely on your explicit consent according to Art. 6 Para. 1 lit. a GDPR, we transmit your email address and possibly further customer data to the provider so that they can contact you with a review reminder via email.
You can revoke your consent at any time with effect for the future to us or the provider.
We have concluded a data processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transmission to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
5.2 When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary.
The legal basis for processing this data is our legitimate interest in responding to your request according to Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been finally clarified, provided that there are no legal retention obligations to the contrary.
6) Comment Function
Within the scope of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the commentator name you have chosen will be saved and published on this website. Furthermore, your IP address is logged and saved. This storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you if a third party should object to your published content as unlawful.
The legal bases for storing your data are Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
You as a user can subscribe to follow-up comments. You will receive a confirmation email to ensure that you are the owner of the specified email address (double opt-in procedure). The legal basis for data processing in case of subscribing to comments is Art. 6 Para. 1 lit. a GDPR. You can cancel ongoing comment subscriptions at any time with effect for the future; for more information on the cancellation option, please refer to the confirmation email.
7) Use of Customer Data for Direct Advertising
7.1 Subscription to our Email Newsletter
When you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter after you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. Here, we store the IP address entered by your Internet Service Provider (ISP), as well as the date and time of registration, to be able to trace any possible misuse of your email address at a later time. The data collected during the newsletter registration is used strictly for this purpose.
You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by sending a corresponding message to the responsible person mentioned above. After successful cancellation, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
7.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services, like the ones already purchased from our range, via email. According to § 7 Para. 3 UWG, we do not need to obtain separate consent from you for this. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising according to Art. 6 Para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, no mail will be sent on our part.
You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person mentioned at the beginning. Only transmission costs according to the basic rates will be incurred for this. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
7.3 AdRoll
The dispatch of our email newsletters is carried out by the following provider: Nextroll Ltd, 5th Floor, Beaux Lane House, Mercer Street Lower, Dublin 2, Dublin, Ireland.
Based on our legitimate interest in effective and user-friendly newsletter marketing, in accordance with Art. 6 (1) (f) GDPR, we forward the data you provide during newsletter registration to this provider so that they can manage the newsletter dispatch on our behalf.
Subject to your express consent according to Art. 6 (1) (a) GDPR, the provider also conducts a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. This also includes the collection and evaluation of end device information (e.g., time of access, IP address, browser type, and operating system), but it is not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have entered into a data processing agreement with the provider that protects the data of our site visitors and prohibits the passing on of this data to third parties.
7.4 Klaviyo
The dispatch of our email newsletters is carried out by this provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided during the newsletter registration according to Art. 6 Para. 1 lit. f GDPR to this provider, so that they take over the newsletter dispatch on our behalf.
Subject to your explicit consent according to Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or counting pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. This also includes collecting and evaluating device information (e.g., time of access, IP address, browser type, and operating system), but not merging with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing contract with the provider, which protects the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection.
7.5 Shopify Email
The dispatch of our email newsletters is carried out by this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided during the newsletter registration according to Art. 6 Para. 1 lit. f GDPR to this provider, so that they take over the newsletter dispatch on our behalf.
Subject to your explicit consent according to Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or counting pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. This also includes collecting and evaluating device information (e.g., time of access, IP address, browser type, and operating system), but not merging with other data sets. Your consent to newsletter tracking can be revoked at any time with effect for the future.
We have concluded a data processing contract with the provider, which protects the data of our site visitors and prohibits unauthorized disclosure to third parties.
In the case of data transmission to Canada, an adequate level of data protection is ensured by a decision of adequacy by the European Commission.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
7.6 Shopping Cart Reminders via Email
In case of aborting your purchase with us before completing the order, you have the opportunity to be reminded via email about the contents of your virtual shopping cart.
The mandatory information for sending this reminder is solely your email address. Providing additional data is voluntary and may be used to address you personally. For mail dispatch, we use the so-called Double Opt-In procedure, ensuring that you only receive a notification when you have expressly confirmed your consent by activating a verification link sent to the provided email address.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 Abs. 1 lit. a DSGVO for sending a shopping cart reminder. Herein, we store your IP address registered by the Internet Service Provider (ISP), as well as the date and time of registration, to be able to trace a possible misuse of your email address at a later time. The data collected by us during registration for our email notification service is strictly used for the intended purpose.
You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the responsible person mentioned at the beginning. After successful unsubscription, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
8) Data Processing for Order Processing
8.1
As far as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact data you provided at the time of ordering (name, address, email address) in order to inform you personally about upcoming updates within the legally prescribed period via suitable communication channels (such as by mail or email), in accordance with our legal information obligations pursuant to Art. 6 (1) (c) GDPR. Your contact details will be used strictly for the purpose of notifications about updates we owe and will be processed by us only to the extent necessary for the respective information.
For the processing of your order, we also work with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data will be transmitted to these service providers according to the following information.
8.2 JTL
For order processing, we use the following provider: JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany.
Name, address, and possibly other personal data will be passed on to the provider exclusively for the purpose of processing the online order in accordance with Art. 6 (1) (b) GDPR. Your data will only be passed on to the extent that it is actually necessary for the processing of the order.
8.3 EasyReturns
For the registration and organization of returns, we use an application from the following provider: 247APPS UG (limited liability), In der Goldgrube 28, 56073 Koblenz, Germany.
Customers can use an input form to call up their order by entering their email address and order number, register eligible items for return, and immediately generate and download a return label by providing their name and address.
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the efficient organization of our business operations and in customer-friendly contract management.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its disclosure to third parties.
8.4 Transfer of Personal Data to Shipping Service Providers
As transport service providers, we use the following providers:
- Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
- DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
- DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany.
- DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, Leopoldsdorf 2333, Austria.
- Koninklijke post NL BV, Waldorpstraat 3, 2521CA Den Haag, Netherlands.
We will pass on your email address and/or telephone number to the provider before delivery of the goods for the purpose of arranging a delivery date or for delivery notification in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible.
The consent for the transfer of personal data for delivery arrangements can be revoked at any time with effect for the future from the responsible party mentioned above or from the respective provider.
8.5 Usage of Payment Service Providers (Payment Services)
- Apple Pay
Choosing "Apple Pay" by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, means payment processing via the "Apple Pay" function on your iOS, watchOS, or macOS-powered device by charging a payment card registered with "Apple Pay". Apple Pay employs security features built into the hardware and software of your device to safeguard your transactions. A code predetermined by you and verification through your device's "Face ID" or "Touch ID" is necessary for payment authorization.
For payment processing purposes, the information you provide during the ordering process, along with details about your order, are encrypted and sent to Apple. Apple then re-encrypts this data with a developer-specific key before sending it to the payment service provider of the payment card registered in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment data. Once the payment is completed, Apple sends a device account number and a transaction-specific, dynamic security code back to the originating website to confirm payment success.
The processing of personal data in these transmissions is solely for the purpose of payment processing under Art. 6 Para. 1 lit. b of the GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, date, and time, and whether the transaction was successfully completed, eliminating any personal reference. This anonymized data is used by Apple to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on an iPhone or Apple Watch to complete a purchase made through Safari on a Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can be used to identify you. You can disable the use of Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac."
For more information on privacy with Apple Pay, visit: https://support.apple.com/de-de/HT203027
- Google Pay
Opting for "Google Pay" by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing occurs through the "Google Pay" application on your mobile device powered by at least Android 4.4 ("KitKat") and equipped with NFC functionality, by charging a payment card or verified payment system (e.g., PayPal) stored in Google Pay. For payments over 25 EUR, unlocking your mobile device with the established verification measure (such as facial recognition, password, fingerprint, or pattern) is required.
For payment processing, your information shared during the ordering process, along with your order details, is passed on to Google. Google then sends your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the originating website to verify a successful payment. This transaction number does not contain any real payment details of the payment method stored in Google Pay but is created and transmitted as a one-time valid numerical token. In all transactions via Google Pay, Google acts only as an intermediary to facilitate the payment process. The transaction itself takes place between the user and the originating website by charging the payment method stored in Google Pay.
The processing of personal data in these transfers is solely for the purpose of payment processing under Art. 6 Para. 1 lit. b of the GDPR.
Google reserves the right to collect, store, and evaluate certain process-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of goods or services provided by the merchant, photos attached to the transaction, the seller's and buyer's names and email addresses, or the sender's and recipient's, the payment method used, your description for the purpose of the transaction, and any related offer.
According to Google, this processing is carried out exclusively under Art. 6 Para.1 lit. f of the GDPR based on the legitimate interest in proper invoicing, verification of transaction data, and optimization and maintenance of the Google Pay service.
Google also reserves the right to merge the processed transaction data with additional information collected and stored by Google when using other Google services.
The terms of use for Google Pay can be found here:
For more information on privacy with Google Pay, visit:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna
This website offers one or more online payment methods from the following provider: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.
When you choose a payment method offered by this provider that requires advance payment (such as credit card payment), your payment data shared during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be transmitted to them according to Article 6(1)(b) of the GDPR. The transfer of your data in this case is solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
When you select a payment method where the provider extends credit (such as invoice or installment purchase, or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and possibly data on an alternative payment method) during the order process.
To protect our legitimate interest in determining the creditworthiness of our customers, these data will be transmitted to the provider for a credit check in accordance with Article 6(1)(f) of the GDPR. Based on the personal data you provide, as well as additional data (such as shopping cart, invoice amount, order history, payment experiences), the provider will assess whether the selected payment option can be granted in view of payment and/or default risks.
For decision-making in the context of the application review, identity and creditworthiness information from the following credit agencies may also be included, according to Article 6(1)(f) of the GDPR:
[Credit Rating Agencies](https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies)
The credit report may contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things but not exclusively, address data.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data if necessary for contractual payment processing.
- PayPal
This website offers one or more online payment methods from the following provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you choose a payment method from this provider that requires advance payment, your payment data shared during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be transmitted to them in accordance with Article 6(1)(b) of the GDPR. The transfer of your data in this case is exclusively for the purpose of processing the payment with the provider and only as far as it is necessary for this purpose.
When selecting a payment method where we extend credit, you will also be requested during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and possibly data on an alternative payment method).
To protect our legitimate interest in determining your creditworthiness in such cases, these data will be transmitted to the provider for a credit check according to Article 6(1)(f) of the GDPR. The provider will check on the basis of the personal data you have provided, as well as additional data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment option can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). As far as score values are incorporated into the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to have the right to process your personal data if necessary for the contractual payment processing.
- Shopify Payments
On this website, one or more online payment methods are available from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
When you choose a payment method from the provider that requires you to pay upfront (such as credit card payment), your payment details shared during the ordering process (including name, address, bank, and payment card information, currency, and transaction number) as well as information about the contents of your order are transmitted to this provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- SOFORT
On this website, one or more online payment methods are available from the following provider: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.
When you choose a payment method from the provider that requires you to pay upfront (such as credit card payment), your payment details shared during the ordering process (including name, address, bank, and payment card information, currency, and transaction number) as well as information about the contents of your order are transmitted to this provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- Stripe
On this website, one or more online payment methods are available from the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
When you choose a payment method from the provider that requires you to pay upfront (such as credit card payment), your payment details shared during the ordering process (including name, address, bank, and payment card information, currency, and transaction number) as well as information about the contents of your order are transmitted to this provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
When you choose a payment method where the provider offers you credit (such as purchase on account or installment purchase, or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data on an alternative payment method) during the ordering process.
To safeguard our legitimate interest in determining the creditworthiness of our customers, these data are forwarded to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider assesses, based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted in view of the risk of payment default and/or bad debt.
The credit report may include probability values (so-called score values). As far as score values are incorporated into the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other factors, but not exclusively, address data.
You can object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data if this is necessary for contractual payment processing.
9) Online Marketing
9.1 Google AdSense
This website uses Google AdSense, an advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense utilizes so-called cookies, which are text files saved on your computer that enable an analysis of your use of the website. Furthermore, Google AdSense uses so-called "Web Beacons" (small invisible graphics) for collecting information, which can track simple actions such as the visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is typically transmitted to and stored by Google on servers. This may also result in the information being transmitted to Google LLC's servers in the USA.
Google uses the information obtained to evaluate your usage behavior regarding the AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not associated with any other data held by Google. The information collected by Google may be transferred to third parties if legally required and/or if third parties process the data on behalf of Google.
All the processing described above, especially the reading of information on the end device via cookies and/or web beacons, is only performed if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a DSGVO. Without this consent, Google AdSense will not be used during your site visit.
You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on a decision of adequacy by the European Commission.
Google's privacy policy can be viewed here: [Google Privacy Policy](https://www.google.de/policies/privacy/)
9.2 ADCELL Partner Program
We participate in the affiliate program of the following provider: Firstlead GmbH, Rosenfelder St. 15-16, 10315 Berlin, Germany.
In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").
For measuring the success of an affiliate link, the evaluation of orders generated via such a link, and the corresponding settlement of commission payments, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible in terms of data protection. In this process, the provider also regularly processes the IP address and possibly other end device information.
All the processing described above, in particular the reading or storing of information on the end device you are using, only occurs if you have given your explicit consent in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with future effect by using the cookie consent management options on the partner sites.
9.3 Goaffpro
We participate in the affiliate program of the following provider: Oxybit Enterprises Pvt Ltd, 16, Sector 20, Part 1, HUDA, Sirsa, Haryana -125055, India.
In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites").
For measuring the success of an affiliate link, the evaluation of orders generated via such a link, and the corresponding settlement of commission payments, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible in terms of data protection. In this process, the provider also regularly processes the IP address and possibly other end device information.
All the processing described above, in particular the reading or storing of information on the end device you are using, only occurs if you have given your explicit consent in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with future effect by using the cookie consent management options on the partner sites.
10) Web Analytics Services
10.1 ADTECH
This website uses the web analytics service of the following provider: ADTECH GmbH, Robert-Bosch-Str. 32, 63303 Dreieich, Germany.
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including device information such as IP address and browser information, for the purpose of statistical analysis of user behavior on our website and to create pseudonymized user profiles. Among other things, this makes it possible to evaluate movement patterns (so-called heatmaps) which show the duration of page visits as well as interactions with page contents (e.g., text input, scrolling, clicks, and mouse-overs). The pseudonymization fundamentally excludes direct personal reference. No merging with clear data about you collected in other ways takes place.
All of the above-described processing, especially the reading or storing of information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
10.2 Google Optimize
This website uses "Google Optimize," a service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Based on "Google Analytics," the service allows for the statistical evaluation of the use of new features and content on the website by playing out test variants to certain user groups. This can determine which variants are preferred by users in the interest of improving the attractiveness of our presence.
Google Optimize uses cookies, small text files that are stored on your device and enable an analysis of your use of a website. The information collected by cookies about your use of the website is usually transmitted to and stored and processed by a Google server. This may also lead to information being transmitted to the servers of the company Google LLC in the USA and there to further processing of the information.
All the above-described processing, especially the setting of cookies for storing and reading information on the device you use to access the website, will only take place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Optimize will not be used during your use of the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision of the European Commission.
10.3 Google Tag Manager
This website uses "Google Tag Manager," a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling, and conditioning them via a unified user interface. Google Tag Manager itself does not store any information on user devices or read it out. Nor does the service perform any independent data analysis. However, when a page is called up via the Google Tag Manager, your IP address is transmitted to Google and may be stored there. Transmission to servers of Google LLC in the USA is also possible.
This processing will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be deployed during your site visit. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision of the European Commission.
10.4 Hotjar
This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including device information such as IP address and browser information, for the purpose of statistical analysis of user behavior on our website and to create pseudonymized user profiles. This includes evaluating movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page contents (e.g., text inputs, scrolling, clicks, and mouse-overs). The pseudonymization fundamentally excludes direct personal reference. No merging with clear data about you collected in other ways takes place.
All of the above-described processing, especially the reading or storing of information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
10.5 Visual Website Optimizer
This website uses the web analytics service provided by: Wingify, 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India.
By using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as IP address and browser information, to use it for statistical analysis of user behavior on our website and to create pseudonymized usage profiles. Among other things, this makes it possible to analyze movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally excludes direct personal identification. No merging with personal data collected in other ways takes place.
All the above-described processing, especially the reading or storing of information on the device used, will only be carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
11) Retargeting/Remarketing and Conversion Tracking
11.1 Facebook Pixel for the Creation of Custom Audiences with Extended Data Matching (with Cookie Consent Tool)
Within our online services, we use the "Facebook Pixel" service in the mode of extended data matching provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
When a user clicks on an advertisement we have placed on Facebook, the "Facebook Pixel" extends the URL of our linked page by a parameter. This URL parameter is then entered into the user's browser via a cookie, which is set by our linked page itself. In addition, this cookie captures specific customer data, such as the email address that we collect on our webpage linked to the Facebook ad during transactions like purchases, account sign-ins, or registrations (extended data matching). The cookie is then read and enables the transmission of the data, including the specific customer data, to Facebook.
We use "Facebook Pixel" with extended data matching to make our Facebook advertisements (so-called Facebook Ads) more effective and to ensure that they correspond to the users' interests or have certain characteristics (e.g., interests in certain topics or products determined by visited websites), which we transmit to Facebook (so-called "Custom Audiences").
Furthermore, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard variant of "Facebook Pixel", the extended data matching feature helps us to measure the effectiveness of our advertising campaigns more accurately by capturing more associated conversions.
All data transmitted are stored and processed by Facebook, allowing an assignment to the respective user profile and Facebook to use the data for its advertising purposes according to Facebook's data use policy ([Facebook Data Policy](https://www.facebook.com/about/privacy/)). The data can enable Facebook and its partners to place ads on and off Facebook.
All the above-described processing, especially setting cookies for reading information on the device used, will only be carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Facebook is typically transferred to a Facebook server and stored there; this can also lead to a transfer to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
11.2 Adform
This website utilizes retargeting technology provided by the following provider: Adform Germany GmbH, Großer Burstah 50-52, 20457 Hamburg, Germany.
This technology allows us to target visitors to our Internet sites with personalized, interest-based advertising who have already shown an interest in our shop and our products. The advertising media are displayed based on a cookie-based analysis of previous and current user behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. This presents you with advertisements that are likely to correspond to your product and information interests.
All the above-described processing, especially the setting of cookies for reading information on the used end device, will only be carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of retargeting technology will be omitted during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
11.3 AdRoll
This website uses retargeting technology from the following provider: Nextroll Ltd, 5th Floor, Beaux Lane House, Mercer Street Lower, Dublin 2, Dublin, Ireland.
This enables us to target visitors to our websites with personalized, interest-based advertising who have already shown interest in our shop and our products. The display of advertising materials is based on a cookie-based analysis of previous and current user behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adjust the advertising individually based on the stored information. These cookies are small text files that are stored on your computer or mobile device. This ensures that you are shown advertising that is likely to correspond to your product and information interests.
All of the above-described processing, in particular the setting of cookies for reading information on the used end device, is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of retargeting technology during your site visit is not carried out.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
11.4 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. Further data processing only takes place if you have agreed with Google that your internet and app browsing history is linked to your Google account and that information from your Google account is used to personalize ads you view on the web. If you are logged in to Google during the page visit of our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target audiences. In the context of using Google Ads Remarketing, there may also be a transfer of personal data to the servers of Google LLC. in the USA.
All of the above-described processing, in particular the setting of cookies for reading information on the used end device, is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
11.5 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising resources (so-called Google Adwords). In relation to the data of advertising campaigns, we can determine how successful each advertising measure is. Our concern is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies are small text files that are stored on your end device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. As part of the use of Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.
Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: [Google Policies Partner Sites](https://policies.google.com/technologies/partner-sites)
All of the above-described processing, in particular the setting of cookies for reading information on the used end device, is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plugin available at the following link:
[Google Ads Settings Plugin](https://www.google.com/settings/ads/plugin?hl=de)
Please note that certain functions of this website may not be used or only to a limited extent if you have disabled the use of cookies.
Google's privacy policy can be viewed here: [Google Privacy Policies](https://www.google.de/policies/privacy/)
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
11.6 TikTok Pixel
This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
If you have reached our website via an advertisement on the domain of the provider, the success of the advertisement can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain end-device and browser information, including your IP address, is collected through tracking technology to capture and evaluate predefined user actions (e.g., completed transactions, leads, search queries on the website, views of product pages). This enables the creation of statistics about user behavior on our website following redirection from an advertisement, which serves to optimize our offerings.
All of the above-described processing, particularly the setting of cookies to read information from the used end device, is only carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
12) Page Functionalities
12.1 Instagram Plugins
Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.
This integration ensures that when you call up a page of our web presence containing such plugins, no connection is made with the provider's servers.
Only when you activate the plugins and thereby give your consent to data transmission according to Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, regardless of a login into an existing user profile, a certain amount of information about your used end device (including your IP address), your browser, and your browsing history is transmitted to the provider and possibly further processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins is also published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking it again. However, the revocation does not affect the data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
12.2 Google Maps API
To enable real-time error checking of certain inputs in the address form of the ordering process of our webshop, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transmitted to: Google LLC., USA.
The provider validates the entered address, verifies the spelling, and, if necessary, completes missing data. For ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data you entered is transmitted to the provider, stored there, and evaluated.
This processing is carried out according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the accurate collection of correct customer address data for the conscientious fulfillment of our contractual delivery obligations and the prevention of contract execution problems.
The provider processes the affected data separately and does not merge it with other data sets, and deletes it as soon as its status or correctness has been confirmed, but no later than 30 days.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
12.3 Google Customer Reviews (formerly Google Certified Dealer Program)
We collaborate with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in a Google email survey.
If you give your consent according to Art. 6 para. 1 lit. a GDPR, we will send your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the buying experience on our website. The review you provide will then be combined with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your review will also be used for Google Seller Ratings. The use of Google Customer Reviews may also result in the transmission of personal data to the servers of Google LLC. in the USA.
You can revoke your consent at any time by sending a message to the data controller responsible or to Google.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
13) Tools and Miscellaneous
13.1
- AccountOne
For our accounting tasks, we use the service of the following provider's cloud-based accounting software: AccountOne GmbH, Fördepromenade 4d, 24944 Flensburg, Germany.
The provider processes incoming and outgoing invoices as well as potentially the bank transactions of our company, to automatically capture invoices, match them to transactions and from this, create financial accounting in a semi-automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in an efficient organization and documentation of our business operations.
- sevDesk
For our accounting tasks, we use the service of the following provider's cloud-based accounting software: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.
The provider processes incoming and outgoing invoices as well as potentially the bank transactions of our company, to automatically capture invoices, match them to transactions and from this, create financial accounting in a semi-automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in an efficient organization and documentation of our business operations.
13.2 Cookie-Consent-Tool
This website uses a so-called "Cookie-Consent-Tool" to obtain effective user consents for consent-required cookies and cookie-based applications. The "Cookie-Consent-Tool" is displayed to users in the form of an interactive user interface upon page access, which allows for giving consent for certain cookies and/or cookie-based applications by ticking boxes. By using this tool, all consent-required cookies/services are only loaded if the respective user grants consent by ticking boxes. This ensures that such cookies are only placed on the user's end device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Generally, no personal user data is processed in this context.
Should the processing of personal data occur in individual cases for the purpose of storing, assigning, or logging cookie settings (such as the IP address), this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies, and thus in a legally compliant design of our online presence.
Another legal basis for the processing is also Art. 6 para. 1 lit. c GDPR. As responsible parties, we have a legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized transfer to third parties.
Further information on the operator and the settings options of the Cookie-Consent-Tool can be found directly in the corresponding user interface on our website.
13.3 Judge.me
For the verification and publication of customer reviews, we use the services of the following provider: Judge.me LLC, PO Box 7403, Jackson, Wyoming 83002, USA.
If you submit a review on our website, your first and last name, your email address, order date and number, as well as the name and international references (GTIN/ISDNF) are collected, transmitted to the provider and evaluated there to decide on the legitimacy of a customer review for a specific order. These processing activities are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in ensuring the authenticity of customer reviews by ensuring transaction relevance and preventing review misuse. After the review verification and approval are completed, the data is deleted by the provider.
For the transfer of data to the USA, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European level of data protection.
14) Rights of the Data Subject
14.1 Current data protection law grants you the following rights as a data subject with respect to the processing of your personal data by the data controller, referring to the respective legal basis for the conditions of exercise:
- Right of access according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent given according to Art. 7 Para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF YOUR PERSONAL DATA IS PROCESSED BASED ON A BALANCING OF INTERESTS BECAUSE OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRULE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US TO CARRY OUT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
15) Duration of Personal Data Storage
The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing, and, if applicable, additionally by the relevant statutory retention period (e.g., commercial and tax law retention requirements).
When processing personal data based on explicit consent according to Art. 6 Para. 1 lit. a GDPR, the affected data is stored until you withdraw your consent.
If statutory retention periods apply to data that is processed for the performance of contractual or quasi-contractual obligations based on Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer necessary for the fulfillment or initiation of a contract and/or there is no continuing legitimate interest in its storage.
When processing personal data based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
When processing personal data for the purposes of direct marketing based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 Para. 2 GDPR.
Unless otherwise derived from the other information in this statement about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.