privacy

Data protection

1. Privacy at a glance

General information

The following notes provide a simple overview of what is done with your personal data happens when you visit this website. Personal data is all data with which you are personally can be identified. Detailed information on the subject of data protection can be found in our data protection declaration listed under this text.

Data collection on this website

Who is responsible for data collection on this site?

The data processing on this website is carried out by the website operator. You can use their contact details can be found in the section "Notice on the responsible body" in this data protection declaration.

How do we collect your data?

On the one hand, your data is collected when you communicate it to us. This can be z. B. um Trade data that you enter in a contact form. Other data is collected automatically or with your consent when you visit the website through our IT systems recorded. This is primarily technical data (e.g. Internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

For what do we use your data?

Part of the data is collected to ensure that the website is provided without errors. Other Data can be used to analyze your user behavior.

What rights do you have regarding Iyour data?

You have the right to receive information about the origin, recipient and purpose of your data free of charge at any time to obtain stored personal data. You also have the right to request rectification or erasure to request this data. If you have given your consent to data processing, you can do so Revoke consent at any time for the future. You also have the right, under certain circumstances to request the restriction of the processing of your personal data. Furthermore, you are responsible Right of appeal to the competent supervisory authority. You can contact us at any time if you have any further questions on the subject of data protection.

Analysis tools and third-party tools

When you visit this website, your surfing behavior can be statistically evaluated. This mainly happens with so-called analysis programs. Detailed information on these analysis programs can be found in the following data protection declaration.

2. Hosting and Content Delivery Networks (CDN)

We host the content of our website with the following providers:

all inclusive

The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter all-inclusive). Details can be found in the All-Incl data protection declaration: https://all-inkl.com/datenschutzinformationen/. The use of all-inclusive is based on Art. 6 Para. 1 lit. f GDPR. We have a valid one Interest in the most reliable possible presentation of our website. If an appropriate Consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit DSGVO and § 25 Abs. 1 TTDSG, insofar as the consent to the storage of cookies or access to Information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The Consent can be revoked at any time.

order processing

We have concluded an order processing contract (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that This only processes the personal data of our website visitors according to our instructions and in compliance with the DSGVO processed.

3. General information and mandatory information

privacy

The operators of these pages take the protection of your personal data very seriously. We treat yours personal data confidentially and in accordance with the statutory data protection regulations and these Data protection. If you use this website, various personal data will be collected. Personal data are Data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. She also explains how and to what purpose this is for. We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may have security vulnerabilities. A complete protection of the data against access by third parties not possible.

Note on the responsible body

The responsible body for data processing on this website is: Odepla UG (haftungsbeschränkt) Birkenweg 11 71159 Mötzingen Telephone: +49 176 55740816 Email: support@odepla.de Responsible body is the natural or legal person, alone or together with others about the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.) Ä.) decides.

storage duration

Unless a specific storage period has been specified in this data protection declaration, your personal data with us until the purpose for data processing no longer applies. if you a assert a legitimate request for deletion or revoke consent to data processing Your data will be deleted unless we have other legitimate grounds for storing it of your personal data (e.g. tax or commercial law retention periods); in the In the latter case, the data will be deleted once these reasons have ceased to exist.

General information on the legal basis for data processing on this website

If you have consented to data processing, we will process your personal data Based on Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit Art. 9 Para. 1 DSGVO are processed. In the case of express consent to the transfer personal data in third countries, the data processing is also based on Art. 49 Paragraph 1 lit. a GDPR. If you are interested in the storage of cookies or in the access to information in your end device (e.g. via device fingerprinting) have consented, the data processing also takes place on Basis of § 25 Abs. 1 TTDSG. The consent can be revoked at any time. Are your data for the fulfillment of the contract or to carry out pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, we process your data if they are used to fulfill a legal obligation are required on the basis of Article 6 (1) (c) GDPR. The data processing can also take place on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR. About the The legal bases relevant in each individual case are set out in the following paragraphs of this Privacy Policy informed.

Note on data transfer to the USA and other third countries

Among other things, we do not use tools from companies based in the USA or other data protection law safe third countries. If these tools are active, your personal data can be transferred to these third countries transferred and processed there. We would like to point out that in these countries there is no communication with the EU comparable level of data protection can be guaranteed. For example, US companies are required to to release personal data to security authorities without you, as the person concerned, objecting to this could take legal action. Therefore, it cannot be ruled out that US authorities (e.g. Secret services) process, evaluate and process your data on US servers for surveillance purposes save permanently. We have no influence on these processing activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent that has already been given at any time. The legality of until revoked The data processing that has taken place remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Article 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THIS AT ANY TIME RIGHT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, AGAINST THE PROCESSING OF YOUR OBJECT PERSONAL DATA; THIS ALSO APPLIES TO ANY SERVICE BASED ON THESE PROVISIONS PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS DATA PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS BECAUSE WE CAN PROVE COMPELLING PROTECTIVE REASONS FOR THE PROCESSING THAT YOUR INTERESTS, RIGHTS AND FREEDOMS PREVAIL OR THE PROCESSING IS FOR THE PURPOSE, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR). IF YOUR PERSONAL DATA WILL BE PROCESSED IN ORDER TO MAKE DIRECT ADVERTISING, YOU HAVE THE RIGHT, AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING TO INSERT; THIS ALSO APPLIES TO PROFILING TO THE EXTENT RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES USED (OBJECTION ACCORDING TO ART. 21 (2) GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a Supervisory authority, in particular in the Member State of your habitual residence, your place of work or the location of the alleged infringement. The right to lodge a complaint exists without prejudice to anything else administrative or judicial remedies.

Right to data portability

You have the right to data that we hold on the basis of your consent or in performance of a contract process it automatically, hand it over to itself or to a third party in a common, machine-readable format to permit. If you request the direct transfer of the data to another person responsible, this only to the extent that it is technically feasible.

Information, correction and deletion

You have the right to free information at any time within the framework of the applicable legal provisions about your stored personal data, its origin and recipient and the purpose of the Data processing and, if applicable, a right to correction or deletion of this data. For this and for others You can contact us at any time with questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. Can do this contact us at any time. The right to restriction of processing exists in the following cases:
  • If you dispute the accuracy of your personal data stored by us, we need in usually time to check this. For the duration of the exam, you have the right to Request restriction of processing of your personal data.
  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.
  • When we no longer need your personal information but you need it to exercise, Defense or assertion of legal claims, you have the right instead of deletion to request the restriction of the processing of your personal data.
  • If you have lodged an objection in accordance with Art. 21 Para. 1 GDPR, a balance must be struck between your and our interests. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may - Apart from their storage - only with your consent or for the assertion, exercise or Defend legal claims or protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State are processed.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as Example Orders or inquiries that you send to us as the site operator, an SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" changes to "https://" and the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us can cannot be read by third parties.

Encrypted payment transactions on this website

If, after concluding a fee-based contract, there is an obligation to give us your payment details (e.g. account number for direct debit authorization), this data is required for payment processing. Payment transactions are made using the usual means of payment (Visa/MasterCard, direct debit). exclusively via an encrypted SSL or TLS connection. An encrypted one You can recognize the connection by the fact that the address line of the browser changes from "http://" to "https://" changes and at the lock symbol in your browser line. In the case of encrypted communication, your payment data that you transmit to us cannot be be read by third parties.

4. Data collection on this website

cookies

Our website uses so-called "cookies". Cookies are small data packages and set no damage to your end device. They will either be temporary for the duration of one session (session cookies) or permanently (permanent cookies) stored on your end device. session cookies automatically deleted after the end of your visit. Permanent cookies remain stored on your end device, until you delete them yourself or until your web browser automatically deletes them. Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within Websites (e.g. cookies for processing payment services). Cookies have different functions. Numerous cookies are technically necessary because certain Website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes become. Cookies necessary to carry out the electronic communication process, to provide certain Functions you want (e.g. for the shopping cart function) or to optimize the website (e.g. Cookies for measuring the web audience) are required (necessary cookies), on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for technically error-free and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies was queried, the processing takes place exclusively on the basis of these Consent (Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG); consent is at any time revocable. You can set your browser so that you are informed about the setting of cookies and Allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. In the Disabling cookies may limit the functionality of this website. You can find out which cookies and services are used on this website in this data protection declaration remove.

contact form

If you send us inquiries via the contact form, your details from the inquiry form will be included the contact details you provided there for the purpose of processing the request and in the event of Follow-up questions stored with us. We do not pass on this data without your consent. The processing of this data takes place on the basis of Art. 6 Para. 1 lit. b DSGVO, if your request with the fulfillment of a contract or to carry out pre-contractual measures is required. In all other cases, the processing is based on our legitimate interest the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your Consent (Art. 6 Para. 1 lit. a GDPR) if this was requested; consent is at any time revocable. The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular Retention periods - remain unaffected.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request will include all of it resulting personal data (name, request) for the purpose of processing your request with us stored and processed. We do not pass on this data without your consent. The processing of this data takes place on the basis of Art. 6 Para. 1 lit. b DSGVO, if your request with the fulfillment of a contract or to carry out pre-contractual measures is required. In all other cases, the processing is based on our legitimate interest the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your Consent (Art. 6 Para. 1 lit. a GDPR) if this was requested; consent is at any time revocable. The data you sent to us via contact requests will remain with us until you tell us to delete them ask you to revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods - remain unaffected.

5. Analysis tools, tag management, affiliate marketing and advertising

The services contained in this section enable the Owner to monitor and analyze web traffic as well as keep track of User behavior.

Google Analytics 4 (Google LLC)

Google Analytics 4 is a web analytics service provided by Google LLC ("Google"). Google uses the Data collected to track and examine how this Application is used, to compile reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before storing the Data in a data center or on a server. Users can learn more by consulting the official Google documentation.

To understand Google’s use of data, please consult the partner guidelines and the business data page.

Personal Data processed: Number of users; Usage data; Session statistics; Trackers.

Place of processing: United States – Privacy Policy – opt-out.

Google Analytics 4 (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC.

To understand how Google uses data, see the Partner Policies and Business Data page.

Personal data processed: Usage data; Trackers.

Place of processing: United States – Data protection.

Matomo

This website uses the open source web analysis service Matomo.

With the help of Matomo, we are able to collect and analyze data on how our website is used by website visitors. This allows us to find out, among other things, when which page views were made and which region they come from. We also record various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

This analysis tool is used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

IP anonymization

When analyzing with Matomo, we use IP anonymization. Your IP address is shortened before the analysis so that it can no longer be clearly assigned to you.

Cookieless analysis

We have configured Matomo so that Matomo does not save any cookies in your browser.

hosting

We host Matomo exclusively on our own servers, so all analysis data remains with us and is not passed on.

Meta Pixel (formerly Facebook Pixel)

This website uses the visitor action pixel from Facebook/Meta to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy (https://de-de.facebook.com/about/privacy/). This enables Facebook to enable advertisements to be placed on Facebook pages and outside of Facebook. We as the website operator cannot influence this use of the data.

The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. The consent can be revoked at any time.

To the extent that personal data is collected on our website and forwarded to Facebook using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent upon us have been set out in an agreement on joint processing. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert the rights of those affected (e.g. requests for information) with regard to the data processed by Facebook directly with Facebook. If you assert the rights of those affected with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information on protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.

You can also deactivate the “Custom Audiences” remarketing function in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Microsoft Clarity

We use the web analysis software Microsoft Clarity for our website. The service is provided by the American company Microsoft Corporation, based at One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft also processes your data in the USA, among other places. Clarity and Microsoft are active participants in the EU-US data protection framework, which regulates the orderly and secure transfer of personal data of EU citizens to the USA. For more information, see https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Microsoft uses so-called standard contractual clauses in accordance with Article 46 paragraphs 2 and 3 of the GDPR. These clauses (Standard Contractual Clauses - SCC) are templates created by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Through the EU-US data protection framework and the standard contractual clauses, Microsoft undertakes to comply with the European level of data protection when processing your relevant data, even if it is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. The decision and the corresponding standard contractual clauses can be found here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

For more information about Microsoft's Standard Contractual Clauses, see https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses

Learn more about the data processed through the use of Microsoft in our privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

Awin

The controller has integrated components from Awin on this website. Awin is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based form of sales that enables commercial website operators, so-called merchants or advertisers, to display advertising, which is usually remunerated via click or sale commissions, on the websites of third parties, i.e. sales partners, who are also called affiliates or publishers. The merchant provides an advertising medium, i.e. an advertising banner or other suitable means of internet advertising, via the affiliate network, which is subsequently integrated by an affiliate on their own websites or advertised via other channels, such as keyword advertising or e-mail marketing.

The operating company of Awin is Awin AG, Eichhornstraße 3, 10785 Berlin, Germany.

Awin places a cookie on the information technology system of the person concerned. Cookies have already been explained above. Awin's tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. the partner who introduces the potential customer, as well as the serial number of the visitor to a website and the advertising material clicked on are stored. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Awin.

The data subject can prevent the setting of cookies through our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Awin from setting a cookie on the information technology system of the data subject. In addition, cookies already set by Awin can be deleted at any time via an Internet browser or other software programs.

Awin’s applicable data protection regulations can be accessed at https://www.awin.com/de/datenschutzerklarung.

6. Plugins and Tools

YouTube with enhanced privacy

This website includes videos from the YouTube website. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not Stores information about visitors to this website before they watch the video. The However, the extended data protection mode does not make it mandatory to pass on data to YouTube partners excluded. So, regardless of whether you're watching a video, YouTube provides a Connect to the Google DoubleClick network. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established manufactured. The YouTube server is informed which of our pages you have visited. If you in your If you are logged in to your YouTube account, you enable YouTube to track your surfing behavior directly to your personal assign profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can save various cookies on your end device after starting a video use comparable recognition technologies (e.g. device fingerprinting). This way can YouTube receive information about visitors to this website. This information is used i.a. used, to collect video statistics, improve usability and prevent fraud attempts. If necessary, further data processing operations can be triggered after the start of a YouTube video become over which we have no influence. YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR. Provided that a corresponding consent was queried, the processing is carried out exclusively on the basis of Article 6 (1) (a) GDPR and § 25 para. 1 TTDSG, insofar as the consent to the storage of cookies or access to information in the end device of the user (e.g. device fingerprinting) within the meaning of the TTDSG. Consent is revocable at any time. You can find more information about data protection on YouTube in their data protection declaration at: https://policies.google.com/privacy?hl=de.

Google Fonts (local hosting)

This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts to be provided. The Google Fonts are installed locally. There is a connection to Google servers not instead. You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de

7. Optimization and distribution of data traffic

This type of service allows this Application to distribute its contents through servers located in different countries and to optimize its performance. The Personal Data processed depends on the characteristics and manner of execution of the services, whose function is to filter the communications between this Application and the User's browser. Given the widespread use of this system, it is difficult to determine the places where content containing Users' Personal Data may be distributed.

Cloudflare (Cloudflare Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. Through the way in which Cloudflare's functionalities are integrated, the service filters all the traffic that passes through this Application, that is, the communications that take place between this Application and the User's browser, while allowing the collection of analytical data that this Application contains.

Personal Data processed: Trackers; various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Data protection.

8. Services to protect against SPAM and bots

This type of service analyzes the traffic of this Application, potentially containing Users' Personal Data, with the purpose of filtering unwanted traffic elements, messages and content recognized as SPAM or against malicious bots' activity.

Cloudflare Bot Management (Cloudflare Inc.)

Cloudflare Bot Management is a malicious bot prevention and management service provided by Cloudflare Inc.

Personal Data processed: Application executions; Number of sessions; App launches; Motion sensor recordings; Custom events; Operating systems; Mouse movements; Latitude (of the city); Browser information; Browsing history; County; Video views data; Device information; Device logs; Information about the application; Interaction events; IP address; Clicks; Country; Longitude (of the city); Metropolitan area; Usage data; Postal code; Region; Scroll-to-page interactions; Scroll position; Page views; Page events; Session duration; Session statistics; Language; State; City; Search history; Keystrokes; Touch events; Trackers; Administrative district.

Place of processing: United States – Data protection.