Privacy policy - Fightwood Fightwithstyle

––––––––––––––––––––

Data protection

––––––––––––––––––––

1) Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when using our website. Personal data means any data with which you can be personally identified.

1.2 The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nenad Markovic, Fightwood, Bundesallee 194a, 10717 Berlin, Germany, Tel: 017648133332, Email: info@fightwood.com. The data controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data Collection when Visiting our Website

2.1 For purely informational use of our website, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which are technically necessary for us to display the website to you:

• Our visited website

• Date and time of access

• Amount of data sent in bytes

• Source/reference from which you came to the page

• Used browser

• Used operating system

• Used IP address (if applicable: in anonymized form) Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data will not be passed on or used in any other way. However, we reserve the right to retrospectively check server log files if concrete indications of illegal use become known. 2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. Some of the cookies we use are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your end device and enable us to save certain settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of cookie settings in your web browser. If certain cookies used by us also process personal data, processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in case of granted consent, or in accordance with Art. 6(1)(f) GDPR for the purpose of safeguarding our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the visit to the website. You can configure your browser settings according to your preferences and, for example, refuse to accept cookies under certain circumstances or in general. Please note that disabling cookies may limit the functionality of our website.

4) Contact

4.1 Smartsupp This website uses a live chat system provided by the following provider: smartsupp.com, s.r.o., Milady Horakove 13, 60200 Brno, Czech Republic. The processing of personal data transmitted via chat is carried out either in accordance with Art. 6(1)(b) GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in effectively assisting our website visitors. The data you transmit in this way will be deleted unless conflicting legal retention periods apply and the matter in question has been conclusively clarified. Additionally, for the purpose of creating pseudonymous usage profiles, further information may be collected and evaluated using cookies, which, however, do not serve personal identification and are not merged with other data records. If this information does have a personal reference, processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in statistical analysis of user behavior for optimization purposes. The setting of cookies can be prevented by appropriate browser settings. However, this may restrict the functionality of our website. We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

4.2 In the context of contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR serves as an additional legal basis for processing. Your data will be deleted as soon as it can be inferred from the circumstances that the relevant matter has been conclusively clarified and there are no legal retention obligations.

5) Data Processing when Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed to the necessary extent when you provide this information to us when opening a customer account. The data required for account opening can be found in the input mask of the corresponding form on our website. You can delete your customer account at any time, which can be done by sending a message to the above-mentioned data controller's address. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded with you have been fully processed, there are no legal retention periods, and there is no legitimate interest on our part in retaining the data further.

6) Use of Customer Data for Direct Advertising

6.1 Subscribing to Our Email Newsletter When you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to personally address you. For sending the newsletter, we use the double opt-in procedure, ensuring that you will only receive the newsletter once you have expressly confirmed your consent to receive it by clicking on the verification link sent to the email address you provided. By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this context, we store the IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to trace any potential misuse of your email address at a later time. The data collected during the newsletter registration is used solely for the purpose of sending the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the data controller mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data for purposes that are legally permitted and about which we inform you in this statement.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers via email for similar goods or services, such as those you have already purchased, from our range. In this regard, we do not need to obtain separate consent from you according to § 7 para. 3 of the German Unfair Competition Act (UWG). The data processing is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f of the General Data Protection Regulation (GDPR). If you initially objected to the use of your email address for this purpose, we will not send any emails for this purpose.

You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible party mentioned at the beginning. For this, you will only incur transmission costs according to the basic tariffs. After receiving your objection, the use of your email address for advertising purposes will be discontinued immediately.

6.3 CleverReach

The dispatch of our email newsletters is carried out through this provider: CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany

Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided during newsletter registration in accordance with Art. 6 para. 1 lit. f GDPR with this provider to enable them to send newsletters on our behalf.

Subject to your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the content of the newsletter. In doing so, device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a contract with the provider for contract data processing that protects the data of our website visitors and prohibits the transfer to third parties.

6.4 Mailjet

The dispatch of our email newsletters is carried out through this provider: Mailjet GmbH, c/o Workrepublic, Berliner Allee 26, 40212 Düsseldorf, Germany

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a contract with the provider for contract data processing that protects the data of our website visitors and prohibits the transfer to third parties.

7. Data Processing for Order Processing

7.1 To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us will be transferred to the commissioned transport company and the commissioned bank in accordance with Art. 6 para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe updates for goods with digital elements or for digital products, we process the contact data you provided when ordering (name, address, email address) in order to inform you personally within the legally prescribed period via a suitable communication method (e.g. postal or email) in accordance with our legal obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of providing information about updates owed by us and will only be processed by us to the extent necessary for the respective information.

In order to process your order, we also cooperate with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name as well as your delivery address and, if necessary for delivery, your telephone number exclusively for the purpose of delivering goods in accordance with Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.

7.3 Disclosure of Personal Data to Shipping Service Providers

• Deutsche Post

As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will provide your email address and/or telephone number in accordance with Art. 6 para. 1 lit. a GDPR before delivering the goods for the purpose of coordinating a delivery date or for delivery notification to the provider, provided that you have given your explicit consent for this during the order process. Otherwise, for the purpose of delivery, we will only provide the recipient's name and delivery address to the provider in accordance with Art. 6 para. 1 lit. b GDPR. Disclosure is only made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned responsible party or vis-à-vis the provider.

• DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned responsible party or vis-à-vis the provider.

• DHL Express

As a transport service provider, we utilize the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany.

We share your email address and/or telephone number in accordance with Article 6(1)(a) GDPR prior to delivering the goods, for the purpose of coordinating a delivery schedule or providing delivery notifications to the provider, provided you have given your explicit consent for this during the ordering process. Otherwise, for the purpose of delivery, we share only the recipient's name and delivery address with the provider in accordance with Article 6(1)(b) GDPR. Such sharing occurs only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery schedule with the provider or delivery notifications is not possible.

Consent can be withdrawn at any time with future effect, either with the designated responsible party or with the provider.

• GLS

As a transport service provider, we use the following provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany.

Consent can be withdrawn at any time with future effect, either with the designated responsible party or with the provider.

• UPS

As a transport service provider, we use the following provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.

Consent can be withdrawn at any time with future effect, either with the designated responsible party or with the provider.

• Payment Service Providers (Payment Services)

• Klarna

On this website, one or more online payment methods from the following provider are available: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

When selecting a payment method from the provider that requires prepayment (such as credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number), as well as information about the content of your order, will be shared with the provider in accordance with Article 6(1)(b) GDPR. Such sharing is exclusively for the purpose of payment processing with the provider and only to the extent necessary.

When selecting a payment method where the provider provides prepayment (such as invoice or installment payment, or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data about an alternative payment method).

To maintain our legitimate interest in determining the solvency of our customers, we will forward this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) GDPR. The provider assesses, based on the personal data you provided and additional data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment option can be granted based on payment and/or default risk.

For the decision in the context of the application process, identity and creditworthiness information from the following credit agencies may also be included, in addition to provider-specific criteria in accordance with Article 6(1)(f) GDPR:

Credit Rating Agencies

The credit report may include probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, flow into the calculation of the score values.

You can object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

• Paypal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When selecting a payment method from this provider that requires you to make a payment in advance, your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) will be transmitted to them in accordance with Art. 6(1)(b) GDPR. In this case, your data will be shared solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

For payment methods that require us to make a payment in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, if applicable, data regarding an alternative payment method).

To protect our legitimate interest in determining your ability to pay, we will transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. Based on the personal data you provide, as well as additional data (such as shopping cart, invoice amount, order history, payment experiences), the provider will assess whether the selected payment method can be granted with regard to payment and/or default risks.

The credit check may include probability values (so-called score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematically-statistical procedure. Address data, among other things, are included in the calculation of score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.

• Paypal Checkout

This website uses PayPal Checkout, an online payment system provided by PayPal, which consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or, if offered, "Pay Later" via PayPal, we will transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transmission is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or, if offered, "Pay Later" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transferred to credit agencies by PayPal in accordance with Art. 6(1)(f) GDPR, based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the credit check result regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit check may include probability values (so-called score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematically-statistical procedure. Address data, among other things, are included in the calculation of score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

When selecting the PayPal payment method "Invoice Purchase," your payment data will be transmitted to PayPal first for payment preparation, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis is Art. 6(1)(b) GDPR. In this case, RatePay conducts an identity and credit check in its own name to determine your ability to pay, according to the aforementioned principle, and transmits your payment data to credit agencies based on the legitimate interest in determining your ability to pay in accordance with Art. 6(1)(f) GDPR. A list of the credit agencies that Ratepay can refer to can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data will be transmitted to PayPal first in accordance with Art. 6(1)(b) GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider for payment processing in accordance with Art. 6(1)(b) GDPR:

• Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)

• iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)

• giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)

• bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)

• blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)

• eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)

• MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)

• Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal's Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

• SOFORT

This website offers one or more online payment methods from the following provider: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.

When selecting a payment method from this provider that requires you to make a payment in advance (such as credit card payment), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) will be transmitted to them in accordance with Art. 6(1)(b) GDPR. The transmission of your data in this case is solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

• Stripe

On this website, one or more online payment methods are available from the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

When selecting a payment method from this provider that requires you to make a payment in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, banking and payment card information, currency, and transaction number) as well as information about the content of your order will be disclosed to this provider in accordance with Article 6(1)(b) of the GDPR. The disclosure of your data in this case is exclusively for the purpose of processing payments with the provider and only to the extent necessary for this purpose.

When selecting a payment method where the provider makes the payment in advance (such as invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, if applicable, data about an alternative payment method) during the ordering process.

To maintain our legitimate interest in determining the solvency of our customers, we will transmit this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) of the GDPR. Based on the personal data provided by you as well as additional data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the selected payment option can be granted with regard to payment and/or default risk.

The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Among other things, address data flows into the calculation of score values, but not exclusively.

You can object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data to the extent necessary for the contractual processing of payments.

• Online Marketing

8.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense uses "web beacons" (small invisible graphics) to collect information, through which simple actions such as website visitor traffic can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon about your use of this website is usually transferred to a Google server and stored there. This may also involve transmission to Google LLC servers in the USA.

Google uses the information obtained to evaluate your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on behalf of Google.

All the processing described above, especially the reading of information on the end device used via cookies and/or web beacons, is only carried out if you have given us your express consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, the use of Google AdSense will not take place during your visit to the website.

You can revoke your consent given at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider relies on the EU-US Privacy Shield framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

You can view Google's privacy policy here: https://www.google.de/policies/privacy/

8.2 Amazon

We participate in the affiliate program of the following provider: Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg.

In this context, we have placed links on our website that lead to offers on the provider's or third-party ("partner sites") websites.

To measure the success of an affiliate link, evaluate orders generated via such a link, and correspondingly settle commission payments, the provider uses cookies and/or similar technologies that are generally set on partner sites and for which we are not responsible in terms of data protection. The provider regularly processes the IP address and possibly other device information as well.

All the processing described above, especially the reading or storage of information on the end device you use, only takes place if you have given your express consent in accordance with Article 6(1)(a) of the GDPR. You can revoke your once given consent at any time with effect for the future by using the cookie consent management options on the partner sites.

8.3 AWIN Performance Advertising Network

We participate in the affiliate program of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany.

In this context, we have placed links on our website that lead to offers on the provider's or third-party ("partner sites") websites.

8.4 Check24

We participate in the affiliate program of the following provider: TARIF CHECK24 GmbH, Zollstraße 11b, 21465 Wentorf, Germany.

In this context, we have placed links on our website that lead to offers on the provider's or third-party ("partner sites") websites.

8.5 eBay

We participate in the affiliate program of the following provider: eBay Partner Network, Inc., 2145 Hamilton Ave., San Jose, CA 95125, USA.

In this context, we have placed links on our website that lead to offers on the provider's or third-party ("partner sites") websites.

To measure the success of an affiliate link, evaluate orders generated through such a link, and facilitate corresponding commission payments, the provider uses cookies and/or similar technologies, which are primarily set on the partner sites and for which we are not responsible in terms of data protection. In this process, the provider also regularly processes the IP address and possibly other device information.

All the processing described above, especially the reading or storing of information on the device you are using, only occurs if you have given your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by using the cookie consent management options on the partner sites.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are designed to ensure compliance with the European level of data protection.

9. Web Analytics Services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.

By default, Google Analytics 4 does not use cookies when visiting the website unless you expressly consent to cookies. Instead, information about your usage behavior is collected and processed through pings (small data packets sent to the host of an end device). This information includes your IP address, which is however truncated by Google to exclude direct personal identification.

The information is transmitted to Google's servers and processed there. Transmissions to Google LLC. in the USA are also possible.

Google uses the collected information on our behalf to analyze your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected as part of using Google Analytics 4 is stored for two months and then deleted.

All the processing described above, including data transmission via pings and the potential use of Google Analytics cookies, only occurs if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our site visitors' data and to prohibit unauthorized disclosure to third parties.

For more legal information about Google Analytics 4, please visit: Google Analytics Policies and Google Technologies Partner Sites

Demographic Features

Google Analytics 4 uses the special feature "demographic characteristics" and can create statistics that provide insights into the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target audiences to be identified for marketing activities. However, the collected data cannot be attributed to any specific individual and will be deleted after storage for a duration of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can analyze your cross-device usage behavior and create database models, including cross-device conversions, subject to your consent to use Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR. We do not receive personally identifiable data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized Advertising" function in your Google account settings. Follow the instructions on this page: Google Ads Support. More information about Google Signals can be found here: Google Analytics Support

UserIDs

As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have created an account on this website, and logged in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

9.2 PayPal Marketing Solutions

This website uses the web analytics service of the following provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information from the used end device such as the IP address and browser information, to evaluate them for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this allows for the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text inputs, scrolling, clicks, and mouse-overs). The pseudonymization generally prevents direct personal identification. Merging with clear data collected in other ways about your person does not take place.

All the processing described above, especially reading or storing information on the used end device, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of our site visitors' data and to prohibit unauthorized disclosure to third parties.

9.3 Google Tag Manager

This website uses "Google Tag Manager," a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

The Google Tag Manager provides a technical foundation to bundle various web applications, including tracking and analytics services, and to calibrate, control, and condition them through a unified user interface. The Google Tag Manager itself does not store information on user devices or read them. The service also does not perform independent data analysis. However, when a page is loaded, the Google Tag Manager transmits your IP address to Google and potentially stores it there. Transmission to servers of Google LLC in the USA is also possible.

This processing is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to the site. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please disable this service using the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European data protection level based on a decision of the European Commission.

10. Retargeting/Remarketing and Conversion Tracking

Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). With regard to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. The aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. As part of the use of Google Ads, there may also be a transfer of personal data to the servers of Google LLC. in the USA.

Details on the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

All the above-described processes, especially the setting of cookies for reading information on the device used, are only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.

You can also permanently oppose the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain features of this website may not or only be limitedly usable if you have deactivated the use of cookies.

Google's privacy policy can be viewed here: https://www.google.com/policies/privacy/

11. Page Functionalities

11.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data can also be transmitted to: Google LLC., USA.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started using the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be directly assigned to your account when you click on a video. If you do not wish for this assignment to your account, you must log out before clicking the playback button.

All the above-mentioned processing, especially the setting of cookies for reading information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.

11.2 idealo Logo

On our website, graphic elements of the following provider are integrated to display external customer reviews and/or an externally awarded quality label: idealo internet GmbH, Zimmerstraße 50, 10888 Berlin, Germany.

When you visit a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, it is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the optimal marketing of our offers and the appealing design of our website.

11.3 ShopVote Graphics

On our website, graphic elements of the following provider are integrated to display external customer reviews and/or an externally awarded quality label: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany.

11.4 Trustami Trust Seal

On our website, graphic elements from the following provider are integrated to display external customer reviews and/or an externally awarded quality seal: Trustami GmbH, Schröderstraße 5, 10115 Berlin, Germany.

When you visit a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements correctly. During this process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, it is done according to Article 6(1)(f) of the GDPR based on our legitimate interest in optimizing the marketing of our offers and designing our website attractively.

12) Tools and Miscellaneous

12.1 sevDesk

For handling our accounting, we use the service of the cloud-based accounting software provided by the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.

The provider processes incoming and outgoing invoices as well as potentially the bank transactions of our company to automatically capture invoices, match them to transactions, and create financial accounting through a partially automated process.

If personal data is processed in this context, the processing is carried out according to Article 6(1)(f) of the GDPR based on our legitimate interest in efficiently organizing and documenting our business operations.

12.2 Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain effective user consents for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is presented to users in the form of an interactive user interface upon page visit. Users can give their consent for specific cookies and/or cookie-based applications by checking boxes. Through the use of this tool, all consent-required cookies/services are loaded only if the respective user provides the corresponding consents by checking the boxes. This ensures that such cookies are only set on the user's device if consent is granted.

The tool sets technically necessary cookies to store your cookie preferences. Generally, no personal user data is processed in this context.

If, in specific cases, processing of personal data (such as IP address) is necessary for the purpose of storing, associating, or logging cookie settings, this is carried out according to Article 6(1)(f) of the GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly cookie consent management and, thus, a legally compliant design of our website.

Another legal basis for processing is Article 6(1)(c) of the GDPR. As data controllers, we are legally obligated to make the use of technically unnecessary cookies dependent on user consent.

If necessary, we have concluded a data processing agreement with the provider, ensuring the protection of data of our website visitors and prohibiting unauthorized disclosure to third parties.

Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you the following rights against the data controller regarding the processing of your personal data, with reference to the specified legal basis for each exercise condition:

• Right to information according to Article 15 of the GDPR;

• Right to rectification according to Article 16 of the GDPR;

• Right to erasure according to Article 17 of the GDPR;

• Right to restriction of processing according to Article 18 of the GDPR;

• Right to notification according to Article 19 of the GDPR;

• Right to data portability according to Article 20 of the GDPR;

• Right to withdraw consent according to Article 7(3) of the GDPR;

• Right to lodge a complaint according to Article 77 of the GDPR.

13.2 Right to Object

If we process your personal data based on our overriding legitimate interest within the scope of a balance of interests, you have the ongoing right to object to this processing for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data concerned. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. You can exercise this objection as described above.

If you exercise your right to object, we will cease processing the data concerned for the purpose of direct advertising.

14) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, purpose of processing, and, if applicable, additional statutory retention periods (e.g., commercial and tax retention periods).

In the case of processing personal data based on explicit consent according to Article 6(1)(a) of the GDPR, the data concerned will be stored until you revoke your consent.

If there are legal retention periods for data processed in the context of legal or legal-like obligations based on Article 6(1)(b) of the GDPR, these data will be routinely deleted after the retention periods expire, provided that they are no longer necessary for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.

In the case of processing personal data based on Article 6(1)(f) of the GDPR, these data will be stored until you exercise your right to object according to Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

In the case of processing personal data for the purpose of direct marketing based on Article 6(1)(f) of the GDPR, these data will be stored until you exercise your right to object according to Article 21(2) of the GDPR.

Unless otherwise indicated by the specific processing situations in this declaration, stored personal data will generally be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.