Subscribe now and get your Keychains!
Data Protection Declaration
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise. "Personal data" is any information relating to an identified or identifiable natural person.
Server log files
You can use our websites without submitting personal data. Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.
Contact
Controller
Contact us at any time. The controller for data processing is: Secret of Eden GmbH, Weinstraße 1C, 82140 Olching, Germany, Phone: +49 151 28955773, Email: tom@secretofeden.de
Proactive contact by e-mail
If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request. If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR. We will only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
Collection and processing when using the withdrawal button
If you have entered into a contract via our website, we provide you with a withdrawal function (withdrawal button) through which you can submit your notice of withdrawal immediately. When you use the withdrawal function, we collect your personal data (name, email address, details identifying the contract or part of the contract you wish to withdraw from, and the time (date and time) of sending the notice of withdrawal) only to the extent that you have provided them. The purpose of this data processing is to provide you with the legally prescribed option to withdraw from your contract and to ensure the proper processing of your withdrawal. If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) GDPR. Otherwise, data processing is carried out on the basis of Article 6(1)(c) GDPR, as we are legally obliged to provide you with a withdrawal function on our website. We use your email address solely for the purpose of processing your notice of withdrawal. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
The processing of your personal data serves the purpose of complying with the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Article 6(1)(c) GDPR. This data processing is also carried out on the basis of Article 6(1)(f) GDPR, based on our overriding legitimate interest in being able to provide you with a user-friendly withdrawal option. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
Use of address validation from Google Maps API
We use the address validation of the provider Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; "Google") on our website. The purpose of data processing is to check your entries in our address forms in real time for input and spelling errors and to complete any missing data. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, where it is stored and analysed. Among other things, the following information may be transmitted to Google and processed there: postal addresses (country, city, postcode, street, house number), e-mail address, telephone number. Your data may also be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. Your personal data is processed on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in a correct data basis for the fulfilment of our contractual obligations. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you. The data is processed separately by the provider and is not merged with other data. It is deleted by the provider as soon as the status of the data entered has been determined, but at the latest after 30 days. For more information on terms of use and data protection at Google, please visit: Google Maps Platform Terms of Service or Google Privacy Policy.
Customer account & orders
Customer account
When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
Collection, processing, and transfer of personal data in orders
When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1)(b) GDPR and is required for the fulfilment of a contract with you. Your data will be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
Reviews & advertising
Use of the Trusted Shops rating system (Trustbadge)
We use the rating system of Trusted Shops SE (Subbelrather Str. 15C, 50823 Cologne, Germany; "Trusted Shops") on our website. Trusted Shops and we are jointly responsible for the collection of your data when using the service and the transmission of this data to Trusted Shops. The basis for this is an agreement between us and Trusted Shops on the joint processing of personal data. Accordingly, we and Trusted Shops are equally responsible for the fulfilment of the obligations under the GDPR, in particular for the fulfilment of the information obligations pursuant to Articles 13, 14 GDPR and for the granting of the rights of data subjects pursuant to Articles 15 - 21 GDPR. You can find more information on this in the FAQ on Trusted Shops Data Protection. Trusted Shops enables us to obtain customer reviews and display them on our website via the "Trustbadge" in order to provide you with an insight into the quality of our services. After placing an order, you can receive an invitation to submit a review from us or Trusted Shops and then submit a review. The following data will be processed by us or Trusted Shops: e-mail address, order information (order total, order number, product purchased if applicable). This data may also be used for the purpose of verifying your rating. When you visit our website and the Trustbadge is displayed, the following data is also processed by us or Trusted Shops: your IP address, date and time of access, amount of data transferred and the requesting provider. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent, provided that you have expressly consented to the transfer of your data and the receipt of the evaluation request. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information on data protection at Trusted Shops can be found at: Trusted Shops Privacy.
Review reminder
Following your order, we would like to ask you to review your purchase with us. For this purpose, we use your personal data (name, e-mail address, order information) independently of the contract processing in order to send you a review reminder by e-mail after an order has been placed, provided you have expressly consented to this. Processing will be carried out on the basis of Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time using the corresponding link in the email or by sending us a message, without affecting the legality of the processing carried out with your consent up to the withdrawal.
Use of the e-mail address for sending newsletters
We use your e-mail address to send you information and offers by newsletter, provided you have expressly consented to this. The data processing serves the sole purpose of advertising. For this purpose, we process your e-mail address and any other data that you have voluntarily provided when registering for our newsletter. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by sending us a message. Your e-mail address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a blacklist to prevent you from receiving future newsletter emails from us. This storage takes place on the basis of Article 6(1)(f) GDPR out of our and your legitimate interest in preventing the reuse of your e-mail address for sending our newsletter. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.
Use of your email address for mailing of direct marketing
We use your email address, which we obtained in the course of selling a good or service, for the electronic transmission of marketing for our own goods or services which are similar to those you have already purchased from us, unless you have objected to this use. You must provide your email address in order to conclude a contract. Failure to provide it will prevent the conclusion of any contract. The processing will be carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in direct marketing. You can object to this use of your email address at any time by contacting us. You will find the contact details for exercising your right to object in our imprint. You can also use the link provided in the marketing email. This will not involve any costs other than transmission costs at basic tariffs.
Use of Brevo
We use the service of Brevo GmbH (Köpenicker Straße 126, 10179 Berlin; "Brevo") for newsletter dispatch under a data processing agreement. We pass on the information you provide when registering for the newsletter (e-mail address, first and last name, if applicable) to Brevo. The data processing serves the purpose of sending the newsletter. You can find more information and Brevo's privacy policy at: Brevo Privacy Policy.
Use of the e-mail address for availability notifications
We offer an availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your e-mail address on the item in question and being informed by e-mail when it becomes available, provided you have given your consent. You will receive a one-time e-mail notification about the availability of the respective item when the goods are available. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your e-mail address will then be removed from the mailing list.
Merchandise management
Use of an external merchandise management system
We use a merchandise management system for contract processing under a data processing agreement. For this purpose, your personal data collected in the course of the order will be transmitted to Pickware GmbH, Goebelstr. 21, 64293 Darmstadt. The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Article 6(1)(b) GDPR.
Credit check
Data collection and processing as part of a credit check
If we provide our services in advance, e.g. when payment is made by invoice or direct debit, we reserve the right to obtain a credit report on the basis of mathematical and statistical processes using Novalnet AG, Gutenbergstraße 7, 85748 Garching bei München. For this purpose we will transmit the personal data required for a credit assessment to the above company and use the information received on the statistical likelihood of a payment default for a balanced decision on the justification, execution or termination of the contractual relationship. The credit check can include probability values (score values) which are calculated on the basis of scientifically recognised mathematical and statistical procedures, taking address information among other things into account. Your interests worthy of protection will be taken into account in accordance with legal requirements. The data processing is for the purpose of credit checking for initiation of contract. Processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default if we provide our services in advance. You have the right to object to this processing of your personal data according to Article 6(1)(f) GDPR by contacting us, for reasons relating to your personal situation. The provision of data is required for conclusion of contract with your desired payment method. Failure to provide it will mean that the contract cannot be concluded with your desired payment method.
Cookies
Our website uses cookies. Cookies are small text files which are saved in a user's internet browser or by the user's internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user's operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again.
Cookies will be stored on your computer. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can be notified before the setting of cookies and you can decide whether to accept this setting in each individual case as well as prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.
Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
Technically necessary cookies
Insofar as no other information is given in the data protection declaration below we use only these technically necessary cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.
The use of cookies or comparable technologies is carried out on the basis of Section 25(2) TDDDG. Processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our range of services. You have the right to object to this processing of your personal data according to Article 6(1)(f) GDPR, for reasons relating to your personal situation.
Use of the Shopware Cookie Consent Manager
We use the Cookie Consent Manager of shopware AG (Ebbinghoff 10, D-48624 Schöppingen, Germany; "Shopware") on our website. The tool enables you to give your consent to data processing via the website, in particular to set cookies, as well as to make use of your right of revocation for consents already given. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus to comply with legal obligations. Cookies may be deployed for this purpose. User information, including your IP address, is collected and transmitted to Shopware. This data will not be passed on to any other third parties. The data processing is carried out on the basis of Article 6(1)(c) GDPR to comply with a legal obligation. For more information about Shopware's privacy policy, please visit: Shopware Privacy Policy.
Analysis & advertising tracking
Web analytics
We use self-hosted web analytics on our website to statistically evaluate the use of our offering and improve our services. No cookies are used and no data is transmitted to an external analytics service. In this context, usage information such as pages viewed, time and source of page views, as well as technical information about the browser and device used is processed. The IP address is processed but not stored. Processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in statistically evaluating and improving our online offering.
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google may have about you.
Your IP address will first be truncated by us on our own servers. Google thus only receives pseudonymised data.
Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR.
The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
We also use the Google Signals service in this context. Google Signals enables cross-device tracking. Hence, your data can be analysed across devices if you have enabled "personalised advertising" in your account settings and your end devices are linked to your Google account. This makes it possible to identify which device is searching for products and then return to complete purchases on another device, such as a tablet.
The cross-device reports created in this context contain only aggregated data. We therefore only receive statistics generated on the basis of Google Signals. To prevent Google Signals from collecting and storing data across devices, you can deactivate the "personalised advertising" function in your Google Account settings. For more information, please visit Control your ad experience. For more information on data processing and data protection for Google Signals, please visit Google Signals.
The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. Both Google and US government agencies have access to your data.
For more information on terms of use and data protection, please visit Google Partner Sites, Google Privacy Policy and Google Business Data Responsibility.
Use of shopware Analytics
We use the "shopware Analytics" analysis tool from shopware AG (Ebbinghoff 10, 48624 Schöppingen, Germany; "shopware") on our website. Shopware and we are jointly responsible for the collection of your data when using the service and the transmission of this data to shopware. The basis for this is an agreement between us and shopware on the joint processing of personal data, in which the respective responsibilities are defined. Accordingly, shopware is responsible for all obligations, with the exception of obtaining your consent for the use of cookies or comparable technologies and the fulfilment of these information obligations. This applies in particular to the granting of data subject rights in accordance with Articles 15 - 21 GDPR. You can also assert your data subject rights against us; we will then forward your enquiry to shopware accordingly. The purpose of data processing is to analyse this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and made available in reports, analyses and statistics. The following information may be collected and processed: the customer group, pages visited, click paths, date and time of the visit, information about the end device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and the time zone. Cookies or comparable technologies are used for this purpose. The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information on shopware Analytics can be found at shopware Analytics.
Use of Google Ads conversion tracking
Our website uses the online marketing program "Google Ads", including conversion tracking (evaluation of user actions). Google conversion tracking is a service operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a different cookie. It is therefore not possible to track cookies relating to the websites of Ads customers. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, we do not receive any information which could be used to personally identify users. Your data may be transmitted to Google LLC servers in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You will find more information as well as Google's data privacy policy at: Google Privacy and Google Business Data Responsibility.
Use of Google AdSense
Our website uses the AdSense function by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The data processing serves the purpose of renting out advertising space on the website and using these to address visitors to the website with targeted, interest-related advertising. This function displays personalised, interest-related adverts from the Google display network to visitors to the website. Google uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. Google may also transmit this data to third parties if this is required by law or the third party is processing the data on behalf of Google. On no account will Google associate your IP address with other Google data. The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You will find more information as well as Google's data privacy policy at: Technologies & ads, Google Privacy and Google Business Data Responsibility.
Plug-ins
Use of social plug-ins
Our website uses social network plug-ins. The integration of social plug-ins and the data processing associated with this serves the purpose of optimising the advertising for our products. The integration of social plug-ins involves a connection between your computer and the servers of the service provider of the social network which then instructs your web browser to display the plug-in on that web page, provided you have expressly consented to this. In this process, both your IP address as well as the information on which web pages you have visited will be transmitted to the provider's servers. This happens regardless of whether you are registered with or logged into the social network. The information is transferred even if users are not registered or logged in. Should you be connected simultaneously with one or more of your social network accounts, the collected information may also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the appropriate button), this information will also be assigned to your user account. You can therefore prevent this assignment by logging yourself out before visiting our website and before activating the button for your social media accounts. The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. The following social networks are integrated in our website through social plug-ins. You can find more detailed information on the scope and purpose of collection and use of the data and your associated rights and options for protecting your privacy in the provider's privacy policy via the link.
Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transfer of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at Controller Addendum. According to this agreement, we are responsible in particular for the fulfilment of the information obligations in accordance with Articles 13, 14 GDPR, for compliance with the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations in accordance with Articles 33, 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Meta Platforms Ireland is responsible for enabling the rights of the data subject in accordance with Articles 15 - 20 GDPR, for complying with the security requirements of Article 32 GDPR with regard to the security of the service, and for complying with the obligations of Articles 33, 34 GDPR, insofar as a breach of personal data protection concerns Meta Platforms Ireland's obligations under the joint processing agreement. Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. For more information on data protection please visit: Facebook Privacy Policy.
Instagram by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland)
Instagram Data Policy. Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.
Use of Google reCAPTCHA
We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website under a data processing agreement. The purpose of this check is to distinguish between input by a human and automated, machine-based processing. To this end, your input is transmitted to Google and processed there. In addition, the IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, where applicable, also transmitted to servers of Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles. The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Use of Google Maps
Our website uses the function for embedding Google Maps by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). This feature visually represents geographical information and interactive maps. Google also collects, processes and uses data on visitors to the website when they call up pages with embedded Google Maps. Your data may also be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. Further information on the data collected and used by Google, your rights and privacy can be found in Google's privacy policy at Google Privacy Policy. You also have the option of changing your settings in the data protection centre, allowing you to administer and protect the data processed by Google.
Use of YouTube
Our website uses the function for embedding YouTube videos by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This feature shows YouTube videos in an iFrame on the website. The option "advanced privacy mode" is enabled here. This prevents YouTube from storing information on visitors to the website. It is only if you watch a video that information is transmitted to and stored by YouTube. Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. Further information on the data collected and used by YouTube and Google and your associated rights and options for protecting your privacy can be found in YouTube's privacy policy: YouTube Privacy Policy.
Using Vimeo
Our website uses plug-ins from Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA; "Vimeo") to integrate videos into the "Vimeo" portal. If you access pages on our website that contain this kind of plug-in, this will generate a connection to the Vimeo server and indicate the plug-in on the site by means of a message in your browser. Information such as your IP address and which websites you have visited will be transmitted to the Vimeo server. If you are logged into Vimeo, Vimeo will assign this information to your personal user account. When using the plug-in functions (e.g. starting a video by pressing the appropriate button), this information will also be assigned to your Vimeo account. Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. Further information on the purpose and scope of enquiry and continued use and processing of the data by Vimeo and your associated rights and options for protecting your privacy can be found in the Vimeo data privacy policy: Vimeo Privacy Policy.
Use of Adobe Fonts
We use Adobe Fonts from Adobe Systems Software Ireland Limited (4-6 Riverwalk Citywest Business Campus, Dublin 24, Ireland; "Adobe") on our website. The data processing serves to facilitate the consistent display of fonts on our website. In order to load the fonts, a connection to Adobe servers is established when the page is accessed. Cookies may be used in this process. In the process, your IP address and information about the browser and operating system you are using are processed and transmitted to Adobe. Your data may be transmitted to third countries, such as the USA and India. For India, no adequacy decision from the EU Commission is available. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Adobe has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles. The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can find more detailed information on the data processing and data protection at Adobe Privacy and at Adobe Fonts Privacy.
Rights of data subjects & storage duration
Duration of storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
Rights of the data subject
Where the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing and data portability. You also have the right to object to processing based on Article 6(1)(f) GDPR and to processing for direct marketing purposes pursuant to Article 21(1) GDPR.
Right to complain to the supervisory authority
You have the right to complain to the supervisory authority according to Article 77 GDPR if you believe that your data is not being processed legally.
You can lodge a complaint with, among others, the supervisory authority responsible for us, which you may reach at the following contact details:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de
Right to object
If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your data with effect for the future. Following your objection, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Following your objection, we will cease processing the data concerned for direct marketing purposes.
Last update: 20.08.2026