Privacy policy

1) Information on the Collection of Personal Data and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any data that can be used to personally identify you.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is BERGMENSCH GmbH, Im Michelreis 20, 72124 Pliezhausen, Germany, Tel.: upon request, Email: support@bergmensch.store. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the padlock icon in your browser’s address bar.

2) Data Collection When Visiting Our Website

When you use our website solely for informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The page you visited

Date and time of access

Amount of data transmitted in bytes

Source/referrer from which you accessed the page

Browser used

Operating system used

IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

3) Hosting

Hosting by Shopify

We use the online store platform provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the purpose of hosting and displaying the online store on a “processor” basis. All data collected on our website is processed on Shopify’s servers. As part of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada; Shopify Data Processing (USA) Inc.; Shopify Payments (USA) Inc.; or Shopify (USA) Inc. for further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, an adequacy decision by the European Commission ensures an adequate level of data protection. For more information on Shopify’s data protection practices, please visit the following website: https://www.shopify.de/legal/datenschutz

Further processing on servers other than those mentioned above operated by Shopify takes place only within the scope described below.

4) Cookies

To make your visit to our website more enjoyable and to enable the use of certain features, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session—that is, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (so-called persistent cookies). When cookies are set, they collect and process certain user information—such as browser and location data, as well as IP addresses—to the extent applicable to each individual case. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the storage duration of each cookie in the overview of your web browser’s cookie settings.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g., saving the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies we use, such processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract, in accordance with Article 6(1)(a) of the GDPR if consent has been given, or in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective experience for visitors.

Please note that you can configure your browser to notify you when cookies are set and decide on a case-by-case basis whether to accept them, or to block the acceptance of cookies in specific cases or generally. Each browser manages cookie settings differently. This is described in each browser’s Help menu, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

5.1 When you contact us (e.g., via the contact form or email), personal data is collected. The specific data collected when using the contact form is indicated on the form itself. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this.

5.2 WhatsApp Business

We offer visitors to our website the option to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific business matter (such as a completed order), we will store and use the mobile phone number you use with WhatsApp, as well as your first and last name (if provided), in accordance with Article 6(1)(b) of the GDPR to process and respond to your inquiry. Based on the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) so that we can assign your inquiry to a specific transaction.

If you use our WhatsApp contact for general inquiries (such as regarding our range of services, availability, or our website), we will store and use the mobile phone number you use on WhatsApp as well as—if provided — your first and last name in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in providing the requested information efficiently and in a timely manner.

Your data will always be used solely to respond to your inquiry via WhatsApp. It will not be shared with third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server operated by our parent company, Facebook Inc., in the United States. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact information of users who have actually contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact information is stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts, in accordance with Article 6(1)(a) of the GDPR, by accepting the WhatsApp Terms of Service when they first used the app on their device. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For information on the purpose and scope of data collection, as well as the further processing and use of the data by WhatsApp, and your related rights and privacy settings, please refer to WhatsApp’s Privacy Policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

5.3 Typeform

To ensure customer satisfaction, we use the services of the provider www.typeform.com (“Typeform”).

Typeform is a service provided by TYPEFORM S.L., Carrer Bac de Roda 163, 08018 Barcelona, Spain.

Typeform collects and stores your information when you fill out the forms (e.g., when registering a return). We are responsible for the Typeform forms we publish ourselves and manage the data collected through them.

For more information about data processing in connection with Typeform, please refer to Typeform’s privacy policy: https://admin.typeform.com/to/dwk6gt

6) Data Processing When Opening a Customer Account and for Contract Fulfilment

In accordance with Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of fulfilling a contract or when opening a customer account. The specific data collected is indicated in the respective input forms. You may delete your customer account at any time by sending a message to the controller’s address listed above. We store and use the data you provide for the purpose of contract fulfillment. After the contract has been fully fulfilled or your customer account has been deleted, your data will be blocked in accordance with retention periods under tax and commercial law and deleted upon the expiration of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law.

7) Comment Feature

When you use the comment feature on this website, in addition to your comment, information regarding the time the comment was posted and the username you selected will be stored and published on this website. Furthermore, your IP address is also logged and stored. This IP address is stored for security reasons and in the event that the data subject infringes the rights of third parties through a submitted comment or posts unlawful content. We need your email address to contact you in the event that a third party complains that your published content is unlawful. The legal basis for storing your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are reported as unlawful by third parties.

8) Use of Customer Data for Direct Marketing

8.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for receiving the newsletter is your email address. Providing additional information is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in the future.

By clicking the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to the newsletter, we store the IP address provided by your Internet Service Provider (ISP), as well as the date and time of your subscription, so that we can trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of sending you promotional communications via the newsletter. You can unsubscribe from the newsletter at any time by clicking the link provided in the newsletter or by sending a message to the data controller named at the beginning of this notice. Once you have unsubscribed, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

8.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to periodically send you offers via email for goods or services from our product range that are similar to those you have already purchased. For this purpose, we are not required to obtain separate consent from you pursuant to Section 7(3) of the German Unfair Competition Act (UWG). Data processing in this regard is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR). If you initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for the aforementioned promotional purpose at any time, with future effect, by notifying the data controller named at the beginning of this notice. You will only incur transmission costs in accordance with standard rates. Upon receipt of your objection, the use of your email address for promotional purposes will be discontinued immediately.

8.3 Newsletter Distribution via Klaviyo

Our email newsletters are distributed by the technical service provider “Klaviyo,” 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we disclose the data you provided when you subscribed to the newsletter. This transfer is carried out in accordance with Article 6(1)(f) of the GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the United States and stored there.

Klaviyo uses this information to send out newsletters on our behalf. Klaviyo does not use the data of our newsletter subscribers to contact them directly or to share it with third parties.

To protect your data in the U.S., we have entered into a Data Processing Agreement with Klaviyo, in which Klaviyo commits to protecting our users’ data, processing it on our behalf in accordance with its privacy policy, and, in particular, not disclosing it to third parties.

You can view Klaviyo’s privacy policy here: https://www.klaviyo.com/privacy

8.4 Privacy Notice Regarding the Use of WhatsApp

You can contact us via WhatsApp and start a conversation. We are the data controller within the meaning of Article 4(7) of the GDPR for subsequent data processing in connection with WhatsApp. To provide and use WhatsApp, we utilize the software solution provided by Charles GmbH, Gartensstr. 86-87, 10115 Berlin, under a data processing agreement. Charles stores all personal data within the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API, which means that, within the scope of our responsibility, neither other third parties nor WhatsApp have access to the content of your communications.

Your use of WhatsApp is governed solely by the agreements you have entered into with WhatsApp. In accordance with WhatsApp’s Terms of Service, we have your phone number and username on file because you contacted us. We use this and other information you have provided to recognize you and your preferences and to respond to your WhatsApp messages. The legal basis for this is your consent to be contacted in accordance with Article 6(1)(a) of the GDPR. In addition, we send you newsletters via WhatsApp, provided you have given us your consent to do so.

You may revoke any consent you have already given at any time with future effect. Under the GDPR, you also have the right to access, rectify, transfer, and erase your personal data, as well as the right to restrict or object to certain processing activities. You also have the option to file a complaint with the supervisory authority responsible for you.

For more information, please refer to our data processors:

Charles GmbH: https://www.hello-charles.com/c-com-blog/whatsapp-newsletters

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea

9) Data Processing for Order Fulfillment

9.1 To fulfill your order, we work with the following service providers, who assist us, in whole or in part, in carrying out the contracts we have entered into. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data we collect is shared with the shipping company responsible for delivery as part of the contract fulfillment process, to the extent necessary for the delivery of the goods. We share your payment data with the designated financial institution as part of the payment processing, to the extent necessary for processing the payment. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Article 6(1)(b) of the GDPR.

9.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We disclose your name, your shipping address, and—to the extent necessary for delivery—your phone number to a shipping partner of our choice, solely for the purpose of delivering the goods, in accordance with Article 6(1)(b) of the GDPR.

9.3 Use of Specialized Service Providers for Order Processing and Fulfillment

- Xentral ERP Software GmbH
Order processing is handled by the service provider “Xentral” (Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg). Your name, address, and, if applicable, other personal data will be transferred to Xentral in accordance with Article 6(1)(b) of the GDPR solely for the purpose of processing your online order. Your data is transferred only to the extent that it is actually necessary for processing the order. Details regarding Xentral’s data protection practices and its privacy policy can be found on Xentral’s website at “xentral.com.”

-Pathway Solutions
Our accounting is handled by the service provider “Pathway Solutions” (Pathway Solutions GmbH c/o BA Tax GmbH, Alstertwiete 3, 20099 Hamburg, Germany). Your name, address, and, if applicable, other personal data are transferred exclusively for accounting purposes in accordance with Article 6(1)(b) of the GDPR. Your data is only shared to the extent that it is actually necessary for processing the order. Details regarding Pathway’s data protection practices and its privacy policy can be viewed on Pathway’s website at “pathway-solutions.de.”

- Alt FineCom Finishing-eCommerce-Logistics GmbH
Weitergabe von Daten an Alt FineCom Finishing-eCommerce-Logistics GmbH, Otto-Brindl-Strasse 1, 94447 Plattling zwecks Fullfilment:
Zum Zweck der Vertragserfüllung, insbesondere zum Versand der Ware arbeiten wir mit der Alt Finecom Finishing-eCommerce-Logistics GmbH zusammen. Dort werden Daten zu Deiner Bestellung verarbeitet. Dies umfasst Daten zur Lieferung des Auftrag.

Die Alt Finecom Finishing-eCommerce-Logistics GmbH verarbeitet die Daten alleinig zur Vertragserfüllung. Rechtsgrundlage ist Art. 6 Asb. 1 b DSGVO

- exporto GmbH
Weitergabe von Informationen an exporto GmbH, Max-Stromeyer-Str. 172, DE-78467 Konstanz, zwecks Auftragsabwicklung: Im Rahmen der Vertragserfüllung, insbesondere für den Versand der Produkte in die Schweiz, kooperieren wir mit der exporto GmbH. Hierbei werden Informationen bezüglich deiner Bestellung von uns übermittelt. Dies umfasst notwendige Angaben für die Lieferabwicklung.

exporto GmbH uses this data exclusively for the purpose of fulfilling the contract. This processing is carried out in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR).

- Aftership

Our shipment tracking tool is provided by Aftership (headquartered in Tsuen Wan, New Territories, Hong Kong). To provide the shipment tracking service, names and email addresses are shared in accordance with Article 6(1)(b) of the GDPR. This data is used exclusively to provide the requested services. Your data is shared only to the extent actually necessary for processing shipment updates.

- 8returns

Our returns management tool is provided by 8returns UG (limited liability), headquartered at Lohmühlenstraße 65, 12435 Berlin, Germany. For the technical processing of returns management, personal data such as names and email addresses are transmitted in accordance with Article 6(1)(b) of the GDPR. This data is used exclusively for the purpose of processing returns. Your data is shared only to the extent actually necessary for the technical processing of returns.

9.4 Use of Payment Service Providers (Payment Services)

- Amazon Pay

If you select the “Amazon Pay” payment method, payment processing is handled by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: “Amazon Payments”), to whom we disclose the information you provided during the ordering process, along with information about your order, in accordance with Article 6(1)(b) of the GDPR. Your data is transferred exclusively for the purpose of processing the payment with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find more information about Amazon Payments’ privacy policy at the following web address: https://pay.amazon.com/de/help/201751600

- Apple Pay

If you choose the “Apple Pay” payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the “Apple Pay” feature on your iOS, watchOS, or macOS device by charging a payment card stored with “Apple Pay.” Apple Pay uses security features built into your device’s hardware and software to protect your transactions. To authorize a payment, you must enter a code you have previously set and verify your identity using your device’s “Face ID” or “Touch ID” feature – Requires your device to be functional.
For the purpose of processing your payment, the information you provided during the ordering process, along with the details of your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data using a developer-specific key before transmitting it to the payment service provider associated with the payment card stored in Apple Pay to complete the transaction. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment was successful.
If personal data is processed during the transmissions described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Article 6(1)(b) of the GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely precludes any personal identification. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, your Mac and the authorization device communicate via an encrypted channel through Apple's servers. Apple does not process or store any of this information in a format that could be used to identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone's Settings. Go to “Wallet & Apple Pay” and turn off “Allow Payments on Mac.”
For more information on privacy with Apple Pay, visit the following website: https://support.apple.com/de-de/HT203027
- Google Pay
If you choose the “Google Pay” payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment processing takes place via the “Google Pay” app on your mobile device—which must be running at least Android 4.4 (“KitKat”) and have NFC functionality—by charging a payment card stored in Google Pay or a payment method verified there (e.g., PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the verification method set up on your device (such as facial recognition, a password, a fingerprint, or a pattern).
For the purpose of processing payments, the information you provide during the ordering process, along with the details of your order, is shared with Google. Google then transmits your payment information stored in Google Pay—in the form of a one-time transaction number—to the originating website to verify that the payment has been made. This transaction number does not contain any information regarding the actual payment details of the payment method stored in Google Pay; rather, it is generated and transmitted as a numeric token valid for a single use. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored in Google Pay.
To the extent that personal data is processed in connection with the transmissions described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Article 6(1)(b) of the GDPR.
Google reserves the right to collect, store, and analyze certain transaction-specific information for every transaction made through Google Pay. This includes the date, time, and amount of the transaction; the merchant’s location and description; a description of the goods or services purchased provided by the merchant; photos you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Article 6(1)(f) of the GDPR on the basis of a legitimate interest in proper accounting, the verification of transaction data, and the optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with additional information that is collected and stored by Google when you use other Google services.

The Google Pay Terms of Service can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
For more information on data protection with Google Pay, please visit the following website:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- giropay
When paying via “giropay,” payment processing is handled by giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to whom we disclose the information you provided during the ordering process, along with the details of your order. The transfer of your data is carried out in accordance with Art. 6(1)(b) of the GDPR exclusively for the purpose of payment processing and only to the extent necessary for this purpose. You can find further information about giropay GmbH’s privacy policy at the following web address: https://www.giropay.de/rechtliches/datenschutzerklaerung

-Klarna
If you select a Klarna payment service, payment processing is handled by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). To enable payment processing, your personal data (first and last name, street, house number, ZIP code, city, gender, email address, phone number, and IP address), as well as data related to the order (e.g., invoice amount, items, shipping method), will be shared with Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this during the ordering process in accordance with Article 6(1)(a) of the GDPR. You can view which credit bureaus your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called “score values”). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things but not exclusively, address data. Klarna uses the information obtained regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship.
You may revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
Your personal data will be processed in accordance with applicable data protection regulations and as specified in Klarna’s Privacy Policy for data subjects residing in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or, for data subjects residing in Austria, https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy

-PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“Purchase on Account” or “Installment Payment” via PayPal, we will disclose your payment information to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). This transfer is made in accordance with Article 6(1)(b) of the GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the following payment methods: credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be shared with credit bureaus in accordance with Article 6(1)(f) of the GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check—which reflects the statistical probability of payment default—to determine whether to make the respective payment method available. The credit report may contain probability values (so-called “score values”). To the extent that score values are included in the credit report’s result, they are based on a scientifically recognized mathematical-statistical method. The calculation of these score values includes, among other things but not exclusively, address data. For further information regarding data protection, including details on the credit bureaus used, please refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- Shopify Payments
We use the payment service provider “Shopify Payments,” located at 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through the payment service provider Shopify Payments, payment processing is handled by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will disclose the information you provide during the ordering process, along with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency, and transaction number) in accordance with Article 6(1)(b) of the GDPR. Your data is transferred to Stripe Payments Europe Ltd. exclusively for the purpose of payment processing and only to the extent necessary for this purpose. For more information on Shopify Payments’ privacy policy, please visit the following website: https://www.shopify.com/legal/privacy.
Privacy policy information regarding Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

- SOFORT
If you select the “SOFORT” payment method, payment processing is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we will disclose the information you provided during the ordering process, along with the details of your order, in accordance with Article 6(1)(b) of the GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of processing payments with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find further information about SOFORT’s privacy policy at the following web address: https://www.klarna.com/sofort/datenschutz.

10) Use of Social Media: Social Plugins

10.1 Facebook Plugins with the Shariff Solution

Our website uses so-called social plugins (“plugins”) from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

To enhance the protection of your data when you visit our website, these buttons are not integrated as plugins without restriction, but are embedded in the page using only an HTML link. This method of integration ensures that no connection to Facebook’s servers is established when you visit a page on our website that contains such buttons. When you click on the button, a new browser window opens and loads the Facebook page, where you can interact with the plugins there (after entering your login credentials, if necessary).

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and your related rights and privacy settings, please refer to Facebook’s privacy policy: https://www.facebook.com/policy.php

10.2 Instagram Plugin as a Shariff Solution

Our website uses so-called social plugins (“plugins”) from the online service Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

To enhance the protection of your data when you visit our website, these buttons are not integrated as full-fledged plugins but are embedded in the page using only an HTML link. This method of integration ensures that no connection to Instagram’s servers is established when you visit a page on our website that contains such buttons. When you click the button, a new browser window opens and loads the Instagram page, where you can interact with the plugins there (after entering your login credentials, if necessary).

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Instagram, and your related rights and privacy settings, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/

10.3 Pinterest Plugin as a Sharing Solution

The seller’s website uses so-called social plugins (“plugins”) from the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).

To enhance the protection of your data when you visit our website, these buttons are not integrated as full-fledged plugins but are embedded in the page using only an HTML link. This method of integration ensures that no connection to Pinterest’s servers is established when you visit a page on our website that contains such buttons. When you click on the button, a new browser window opens and loads the Pinterest page, where you can interact with the plugins there (after entering your login credentials, if applicable).

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Pinterest, and your related rights and privacy settings, please refer to Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy

10.4 Twitter Plugin as a Shariff Solution

Our website uses so-called social plugins (“plugins”) from the microblogging service Twitter, which is operated by Twitter International Company, One Cumberland Place, Fenian Street

Dublin 2, D02 AX07 Ireland (“Twitter”).

To enhance the protection of your data when you visit our website, these buttons are not integrated as full-fledged plugins but are embedded in the page using only an HTML link. This method of integration ensures that no connection to Twitter’s servers is established when you access a page on our website that contains such buttons. When you click on the button, a new browser window opens and loads the Twitter page, where you can interact with the plugins there (after entering your login credentials, if necessary). Please note that information collected when interacting with the plugin (including your IP address) is transmitted directly from your browser to a Twitter Inc. server in the United States and stored there.

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Twitter, and your rights and settings options regarding the protection of your privacy, please refer to Twitter’s privacy policy: https://twitter.com/privacy

11) Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding feature to display and play videos from the provider “YouTube,” which is owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This uses the enhanced privacy mode, which, according to the provider, does not begin storing user information until the video(s) are played. When playback of embedded YouTube videos begins, the provider “YouTube” uses cookies to collect information about user behavior. According to “YouTube,” these cookies are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. Such analysis is carried out in particular pursuant to Article 6(1)(f) of the GDPR based on Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or tailoring its website to user needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. When using YouTube, personal data may also be transferred to the servers of Google LLC in the United States.

Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which may trigger further data processing operations beyond our control.

For more information on data protection at “YouTube,” please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy

To the extent required by law, we have obtained your consent for the processing of your data described above in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please disable this service using the “Cookie Consent Tool” provided on the website.

12) Online Marketing

12.1 Facebook Pixel for Creating Custom Audiences (without the Cookie Consent Tool)

Our website uses the so-called “Facebook Pixel” from the social network Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

If a user clicks on an advertisement we have placed that is displayed on Facebook, the Facebook Pixel adds a suffix to the URL of our linked page. If our site allows data sharing with Facebook via the Pixel, this URL parameter is stored in the user’s browser via a cookie set by our linked page itself. This cookie is then read by the Facebook Pixel, enabling the data to be forwarded to Facebook.
With the help of the Facebook Pixel, Facebook is able, on the one hand, to identify visitors to our website as a target audience for displaying ads (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to display the Facebook Ads we place only to those Facebook users who have shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites they have visited), which we transmit to Facebook (so-called “Custom Audiences”). We also use the Facebook Pixel to ensure that our Facebook ads align with users’ potential interests and do not come across as intrusive. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
The data collected is anonymous to us, meaning it does not allow us to identify individual users. However, Facebook stores and processes this data, which enables it to link the data to the respective user profile and use it for its own advertising purposes in accordance with Facebook’s Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements on and off Facebook.
The data processing associated with the use of the Facebook Pixel is based on our overriding legitimate interest in the evaluation, optimization, and economic operation of our online offering and our advertising measures, in accordance with Article 6(1)(f) of the GDPR.
The information generated by Facebook is generally transmitted to a Facebook server and stored there; this may also involve a transfer to the servers of Facebook Inc. in the United States. To object to data collection by the Facebook Pixel and the use of your data for displaying Facebook ads in general, you can click the link below to set an opt-out cookie that disables Facebook Pixel tracking:
Disable Facebook Pixel
This opt-out cookie works only in this browser and only for this domain. If you clear your cookies in this browser, you will need to click the link above again.
To the extent required by law, we have obtained your consent pursuant to Art. 6(1)(a) of the GDPR for the processing of your data as described above. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please follow the procedure for objecting described above.

12.2 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons” (small, invisible graphics) to collect information; these allow simple actions, such as visitor traffic on the website, to be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) regarding your use of this website is generally transmitted to a Google server and stored there. This may also involve a transfer to the servers of Google LLC in the United States.

Google uses the information obtained in this way to analyze your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other data held by Google. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google’s behalf.

The data processing described above is carried out in accordance with Article 6(1)(f) of the GDPR for the purpose of targeted advertising to the user by third-party advertisers, whose ads are displayed on this website based on the analyzed user behavior. This processing also serves our financial interest in maximizing the economic potential of our website through the paid display of personalized third-party advertising content.

You can find more information about Google's privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by adjusting your browser settings accordingly, or you can download and install the browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled cookies.

To the extent required by law, we have obtained your consent pursuant to Art. 6(1)(a) of the GDPR for the processing of your data as described above. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please follow the procedure for objecting described above.

12.3 Use of Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites through advertisements (known as Google AdWords). Based on the data from the advertising campaigns, we can determine how successful the individual advertising measures are. Our goal is to show you advertisements that are of interest to you, to make our website more interesting for you, and to ensure a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used to identify you personally. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag.
However, you will not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this functionality by disabling the Google Conversion Tracking cookie in your web browser under “User Settings.” You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising pursuant to Article 6(1)(f) of the GDPR. In connection with the use of Google Ads, personal data may also be transferred to the servers of Google LLC in the United States.

You can find more information about Google’s privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently opt out of Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled cookies.

To the extent required by law, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, disable this service using the “Cookie Consent Tool” provided on the website, or alternatively, follow the procedure described above to object to the processing.

12.4 Use of Linkster Influencer Conversion Tracking

We use tracking technology provided by Linkster GmbH, Colonnaden 5, 20354

Hamburg on this site to measure and visualize insights into partnerships and advertising channels. This

is a feature designed to measure the effectiveness of the relevant

advertising measures. Furthermore, this information enables us to attribute advertising success to

billing with the respective advertising partners. When you click on an ad,

cookies are set in your browser, which are read in the event of a transaction. At each

touchpoint, your browser sends an HTTP request to the Linkster server, which

transmits certain information. This information includes the URL of the website

on which the ad is placed (referrer URL), the browser identifier (user agent) of your device

(including information about the device type and operating system), the IP address of the

device (we anonymize and hash this IP address before storing it), HTTP

headers (data packets automatically transmitted by your browser containing various technical

information), the time of the request, and, if previously stored on the device,

the cookie and its contents.

A cookie is a small data packet that is exchanged between your browser and the server.

This data packet can be used to store and transmit information relevant to the web application,

such as the contents of a virtual shopping cart.

The tracking technology stores cookies on your device to document user actions. A

24-digit, anonymous ID is stored in the cookie. The data associated with this ID is

stored in encrypted form in our database on the server.

This includes information about the most recent touchpoints (i.e., when a

specific advertisement was displayed or clicked on from a device). The stored touchpoints can

be combined, if applicable, into a sequence (user journey).

When a promotional request is made, the order number and the shopping cart total for your
order are usually transmitted and stored by us. In addition, the following information may be transmitted and
stored: your customer number, new customer status, your age and gender, as well as the information
you provided in a customer survey.
The cookies stored by Linkster GmbH are deleted after 30 days at the latest. The
information transmitted to us and the cookies serve exclusively the purpose of correctly
attributing the success of an advertising medium and the corresponding billing, and are justified by our
legitimate interests pursuant to Art. 6(1)(f) of the GDPR.
If you do not wish to have cookies stored in your browser, you can prevent this by adjusting the
appropriate browser settings. In your browser, you can disable the storage
of cookies under Tools/Internet Options, restrict it to certain websites, or
set your browser to notify you as soon as a cookie is sent. Please
note, however, that in this case you should expect a limited display of the online offerings
and restricted user navigation. You can also delete cookies at any time.
In this case, the information stored in them will be removed from your device.

The collection and processing of tracking data can also be disabled by clicking on this tracking

opt-out link:

https://trck.linkster.co/privacy-optout.do

Accessing Your Data:

https://trck.linkster.co/privacy-mydata.do

You can see which specific cookies are used by our tracking technology in the

following overview:

TRS: Unique, 24-digit identifier (ID) for tracking partnerships. This

cookie is stored in the client browser and identifies database records

that contain touchpoint data.

TRSCJ: Fallback cookie containing basic touchpoint data for tracking

partnerships. This cookie contains all touchpoint data in encrypted form

in the client’s browser.

trs_db_optout: When you click the tracking opt-out link, a special cookie

is set, which disables tracking in the end device's current web browser

However, tracking is re-enabled as soon as you delete the tracking

opt-out cookie.

12.5**Klar Attribution**
We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes, and stores data on this website and its subpages for the purposes of reach measurement and statistical analysis on our behalf. This data collection is based on the following legal basis: If the user has given consent in accordance with Article 6(1), sentence 1(a) of the GDPR and Section 25(1), sentence 1 of the TTDSG, the data to be processed is collected on a user-specific basis. Different cookies are used for the various types of data collection mentioned above to ensure the respective type of collection. **Cookie** - **Objection** To object to the use of Klar in general, please use this [link](https://1688320310.bergmensch.de/donottrack/me). This will set a cookie named “do_not_track” from the domain “bergmensch.de.” Please do not delete this cookie, as otherwise we cannot guarantee that you will not be tracked by Klar. Information on data protection and data usage by Klar can be found on the following website: [https://www.getklar.com/data-protection](https://www.getklar.com/data-protection)#

13) Retargeting/Remarketing/Referral Advertising

Google Ads Remarketing

Our website uses Google Ads Remarketing features to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie in your device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) of the GDPR.

Any additional data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize the ads you see on the web. In this case, if you are signed in to Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form audiences. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the United States.
You can permanently opt out of the use of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:

https://www.google.com/settings/ads/onweb/
Weitergehende Informationen und die Datenschutzbestimmungen bezüglich Werbung und Google können Sie hier einsehen:
https://www.google.com/policies/technologies/ads/
Soweit rechtlich erforderlich, haben wir zur vorstehend dargestellten Verarbeitung Ihrer Daten Ihre Einwilligung gemäß Art. 6 Abs. 1 lit. a DSGVO eingeholt. Sie können Ihre erteilte Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen. Um Ihren Widerruf auszuüben, deaktivieren Sie diesen Dienst im auf der Webseite bereitgestellten "Cookie-Consent-Tool" oder befolgen Sie alternativ die vorstehend geschilderte Möglichkeit zur Vornahme eines Widerspruchs.

Pinterest Tag Conversion Tracking
This website uses the “Pinterest Tag” conversion tracking technology provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).
If you arrived at our website via a pin on Pinterest, we place a cookie on your device that interacts with a “tag”—in the form of JavaScript code from Pinterest—that is also implemented on our site. Cookies are small text files stored on your device. These cookies expire after 180 days and are not used for personal identification.
If a user is redirected from a pin on Pinterest to pages on this website and the cookie has not yet expired, the tag records certain user actions that we have predefined and can track them (e.g., completed transactions, leads, search queries on the website, visits to product pages). When such an action is performed, your browser sends an HTTP request via the Pinterest tag from the cookie to the Pinterest server, transmitting specific information about the action (including the type of action, time, and browser type of the device).
Through this transmission, Pinterest can compile statistics on user behavior on our website following a redirect from a Pinterest pin, which we use to optimize our offerings.
To the extent that personal user data is processed in this context, this is done in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in statistically evaluating the success of product ads on Pinterest and users’ purchasing behavior, thereby helping us optimize our online offerings.
However, we do not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can opt out by disabling the Pinterest Tag conversion tracking cookie in your web browser’s user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the opt-out page for EU consumers at http://www.youronlinechoices.com/de/praferenzmanagement/
to check whether Microsoft advertising cookies are set in your browser and disable them.
You can find more information about Pinterest’s privacy policy at the following web address: https://policy.pinterest.com/de/privacy-policy
To the extent required by law, we have obtained your consent to the processing of your data described above in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please follow the procedure for filing an objection described above.

TikTok Ads

We use the so-called “TikTok Pixel” from TikTok (for the EU: TikTok Information Technologies UK Limited, Aviation House, 125 Kingsway Holborn, London, WC2B 6NH) on this website. This is a piece of code that we have implemented on our site. With your express consent, this code establishes a connection to TikTok’s servers when you visit our website in order to track your behavior on our site. For example, if you purchase a product on our website, the TikTok pixel is triggered and stores your actions on our website in one or more cookies. You may revoke your consent at any time with future effect. There are no additional costs for this beyond the standard rates.

Personal data such as your IP address and other information—including device ID, device type, and operating system—may also be transmitted to TikTok. TikTok uses email addresses or other login or device information to identify users of our website and associate their actions with a TikTok user account.

TikTok uses this data to display targeted and personalized ads to its users and to create interest-based user profiles. The data collected is anonymous to us and cannot be viewed by us; we can only use it to measure the effectiveness of ad campaigns.

In general, your data is processed within the EU or the EEA. A corresponding data protection agreement has been concluded with TikTok for this purpose. If personal data is transferred to countries outside the EU or the EEA, this is done in accordance with the Commission’s model contracts for the transfer of personal data to third countries (i.e., standard contractual clauses).

You can find TikTok’s Privacy Policy here: https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE

14) Use of a Live Chat System

Zendesk (formerly Zopim)

This website uses technologies provided by Zendesk Inc., 1019 Market St, San Francisco, USA (www.zendesk.com) to collect and store pseudonymized data for the purposes of web analytics and to operate the live chat system, which is used to respond to live support inquiries. Usage profiles may be created from this pseudonymized data under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor’s internet browser. Among other things, cookies enable the recognition of the web browser. If the information collected in this manner is personally identifiable, processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.
The data collected using Zendesk technologies will not be used to personally identify visitors to this website without the data subject’s separate consent, nor will it be combined with personal data about the person behind the pseudonym. To prevent Zendesk cookies from being stored, you can configure your web browser so that no further cookies can be stored on your computer or so that cookies already stored are deleted. However, disabling all cookies may result in some functions on our website no longer working. You may deactivate the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with future effect by sending us your objection informally via email to the email address listed in the legal notice.

15) Tools and Miscellaneous

- DATEV

We use the cloud-based accounting software from DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg (“DATEV”), to handle our bookkeeping.

DATEV processes incoming and outgoing invoices, as well as our company’s bank transactions where applicable, to automatically record invoices, match them to transactions, and use this data to prepare financial accounting records through a semi-automated process.

To the extent that personal data is processed in this context, such processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in the efficient organization and documentation of our business processes.

For more information about DATEV, the automated processing of data, and the privacy policy, please visit https://www.datev.de/web/de/m/ueber-datev/datenschutz/

16) Rights of the Data Subject

16.1 Applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or the criteria for determining the retention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, the significance for you, and the intended effects of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries;
Right to rectification under Article 16 of the GDPR: You have the right to have inaccurate personal data concerning you rectified without delay and/or to have incomplete personal data stored by us completed;
Right to erasure under Article 17 of the GDPR: You have the right to request the erasure of your personal data if the conditions set forth in Article 17(1) of the GDPR are met. However, this right does not apply, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims;
Right to restriction of processing under Article 18 of the GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data—which you have contested—is being verified; if you object to the erasure of your data due to unlawful processing and instead request the restriction of processing; if you need your data to assert, exercise, or defend legal claims, after we no longer need this data once the purpose has been fulfilled, or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
Right to be informed pursuant to Article 19 of the GDPR: If you have exercised your right to rectification, erasure, or restriction of processing with the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.
Right to data portability pursuant to Article 20 of the GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller, provided this is technically feasible;
Right to withdraw consent pursuant to Article 7(3) of the GDPR: You have the right to withdraw your consent to the processing of data at any time with future effect. In the event of withdrawal, we will delete the relevant data without delay, unless further processing can be based on a legal basis that does not require consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal;
Right to lodge a complaint under Article 77 of the GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred.

16.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR SPECIFIC SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

17) Retention Period for Personal Data

The retention period for personal data is determined based on the respective legal basis, the purpose of processing, and—where applicable—the applicable statutory retention period (e.g., retention periods under commercial and tax law).

When personal data is processed on the basis of explicit consent pursuant to Article 6(1)(a) of the GDPR, such data is retained until the data subject revokes their consent.

If statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations based on Article 6(1)(b) of the GDPR, this data is routinely deleted upon expiration of the retention periods, provided that it is no longer necessary for the performance or initiation of a contract and/or we no longer have a legitimate interest in continuing to store it.

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data is stored until the data subject exercises their right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing pursuant to Article 6(1)(f) of the GDPR, such data is stored until the data subject exercises his or her right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.