DATA PROTECTION

General information

This privacy policy gives you an overview of how your personal data is processed when you visit our website or use our services. Personal data is any information relating to an identified or identifiable natural person. Detailed information on the subject of data protection can be found in the following sections.

Responsible body

The controller responsible for data processing on this website is:

LC Health & Lifestyle GmbH
Konkordiastrasse 70
40219 Düsseldorf
management@egoiste-studio.de
Managing Directors: Cécile Wolf & Lea Kannapin

Data collection on our website

How do we collect your data? On the one hand, your data is collected when you provide it to us, for example by entering it in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

We attach great importance to the protection of your personal data and would like to inform you transparently about how we collect and process it. Your data is collected in two ways: On the one hand through your active input, and on the other hand through automatic collection when you visit our website.

When you use our website and, for example, fill out forms or create a customer account, the data you enter will be stored by us. In addition, our IT systems automatically record various technical data each time you visit the website. This includes your anonymized IP address, the date and time of access, the names of the pages accessed, the website from which you are visiting us, the browser and operating system you are using and your internet access provider and device type.

What do we use your data for? Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

We use this data for various purposes. Part of the data collection is technically necessary to make our website secure and stable. This includes, for example, functions such as the login area. We also use it to optimize the display for your particular device. With your express consent, we also analyze user behavior in order to continuously improve our online offering and adapt it to the interests of our users. This also helps us to detect and prevent misuse.

How long do we store your data?

Different storage periods apply to the different types of data: Technical access data is deleted after just 7 days. We store data from contact forms for 6 months after processing your request. Contract-related data is subject to the statutory retention periods. We store newsletter registration data until you unsubscribe.

Legal basis for data processing:

The processing of your data is based on various legal bases of the GDPR: The collection of technical data is based on our legitimate interest (Art. 6 para. 1 lit. f), the processing of form data is carried out for the performance of a contract (Art. 6 para. 1 lit. b) or on the basis of your consent (Art. 6 para. 1 lit. a). We always obtain your express consent for the analysis of user behavior.

As a user of our website, you have extensive rights regarding your data. You can request information about your stored data at any time, have it corrected or deleted, restrict its processing or object to it. You also have the right to receive your data in a structured format. Our data protection officer is available to answer any questions you may have about data protection.

What rights do you have with regard to your data? You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the rectification, blocking or erasure of this data as well as the right to data portability and the right not to be subject to automated decision-making. You can contact us at any time at management@egoiste-studio.de if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority. You also have the right to request the restriction of the processing of your personal data under certain circumstances. For details, please refer to the privacy policy under "Right to restriction of processing".

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If the data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

If we use your data for direct advertising, you can object to this at any time. This also applies to personalized advertising. As soon as you object, we will no longer use your data for advertising purposes.

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Competent supervisory authority:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
Fax: 0211/38424-999
E-mail: poststelle@ldi.nrw.de

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Information, blocking, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. Please note that it may take up to one month to process your request. You can contact us at management@egoiste-studio at any time if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to check this. You have the right to request the restriction of the processing of your personal data for the duration of the review.
If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Data collection on our website

Cookies. Our website uses different cookies for different purposes: Technically necessary cookies (such as session and login cookies) ensure functionality and are based on Art. 6 para. 1 lit. f GDPR, while analysis cookies such as Google Analytics and Matomo evaluate user behavior and are only stored with consent. The storage period varies between the session duration and a maximum of 14 months. You can control cookies via your browser settings or our cookie consent banner, although deactivating them may restrict your use of the website. We value transparency: each type of cookie fulfills a specific purpose and is only stored for as long as is necessary for its function.

Server log files The website operator automatically records data in server log files each time a page is accessed. These include

- Browser type

- Browser version

- Operating system

- Referrer URL (the previous website from which users arrive at the current page)

- Host name of the accessing computer

- Time of the server request

- IP address; the IP address is anonymized immediately after collection by shortening the last octets.

This data is used exclusively for the technically error-free presentation and optimization of the website and is not merged with other data sources. The data is stored for a maximum of 7 days, after which it is automatically deleted. The legal basis is Art. 6 para. 1 lit. f GDPR, according to which data processing is carried out on the basis of a legitimate interest of the website operator.

Contact form When you use our contact form, we store the following data: Mandatory fields are your name, e-mail address and your request; you can voluntarily provide additional contact information such as telephone number or company. The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and serves exclusively to process your request. The storage period is a maximum of 3 months after completion of the request, unless legal retention periods require longer storage. You can revoke your consent at any time by e-mail, which does not affect the legality of the previous data processing.

Processing of data (customer and contract data) We collect and process personal data exclusively for contractual purposes in accordance with Art. 6 para. 1 lit. b GDPR. This data may be passed on to recipients such as payment service providers (PayPal, Stripe), shipping companies (DHL, UPS), tax consultants and auditors. Usage data is only processed for service provision and billing. The retention periods are 10 years for contract data and billing documents and 3 years for communication data. After termination of the contract, customer data is deleted, whereby statutory retention periods take precedence.

Data transmission upon conclusion of a contract for online stores, retailers and goods dispatch We only transmit personal data to third parties if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the credit institution commissioned with payment processing. Any further transmission of data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Data transmission upon conclusion of a contract for services and digital content We only transmit personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution commissioned with payment processing. Any further transmission of the data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Analysis tools and advertising

Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Google Analytics We only use Google Analytics with your express consent on the basis of Art. 6 para. 1 lit. a GDPR. Google Analytics is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have taken the following measures:

- Activation of IP anonymization

- Conclusion of an order processing contract

- Reduction of the storage period to [X] months

- Deactivation of the "Interest and demographic category reports" function

The information generated by cookies about your use of this website is usually transferred to Google servers in the EU. Data transfer to the USA cannot be ruled out. In this case, Google has implemented standardized data protection clauses. You can revoke your consent at any time via our cookie settings or prevent the collection by Google Analytics by installing the browser add-on to deactivate Google Analytics.

Further information on the handling of user data by Google Analytics can be found in Google's privacy policy: https://policies.google.com/privacy

IP anonymization We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin Users can deactivate cookies through browser settings. Please note that this may limit the functionality of the website. Specific opt-out mechanisms are available to prevent data collection by Google Analytics. Please use the following link : Browser Plugin.

Objection to data collection You can prevent the collection of your data by Google Analytics by clicking on the following link: Click here. You can find more information on how Google Analytics handles user data in Google's privacy policy: Click here.

Order processing A legally compliant order processing contract has been concluded with the service provider in accordance with Art. 28 GDPR. This guarantees:

Anonymization of personal data
Strict compliance with data protection regulations
No disclosure of user data to third parties
Deletion of usage data in accordance with legal provisions

Google AdWords and Google Conversion Tracking This website uses Google AdWords. AdWords is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). As part of Google Ads, we use what is known as conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your internet browser stores on your end device. These cookies are valid for 30 days and are not used for personal identification. If you visit certain pages of this website and the cookie is still active, Google and we can recognize that you clicked on the ad and were redirected to our website.

Each Google Ads customer receives an individual cookie. The information collected using the conversion cookie is used to create conversion statistics. This enables us to find out how many users clicked on an ad and were redirected to a page with a conversion tracking tag. No information is collected that would allow users to be personally identified.

Conversion cookies are only used with your express consent in accordance with Art. 6 para. 1 lit. f GDPR. You can revoke your consent at any time via the cookie settings on this website. Alternatively, you can generally prevent the setting of cookies by adjusting your browser settings accordingly. However, please note that this may limit the functionality of this website.

Further information on data processing by Google Ads can be found in Google's privacy policy(click here).

Facebook Pixel Our website uses the visitor action pixel from Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to measure conversions. This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized. The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the FACEBOOK DATA USE POLICY. This allows Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. You can find further information on protecting your privacy in Facebook's privacy policy: Click here. You can also deactivate the remarketing function "Custom Audiences" in the ad settings section here. You must be logged in to Facebook to do this. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance here.

Newsletter data If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can find more information on the handling of user data in Google's privacy policy: Click here.

Google reCaptcha

We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on our websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. Further information about Google reCAPTCHA and Google's privacy policy can be found in the following links: Click here and Click here.

Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offering. In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing contract).

Collection of access data and log files

We, or our hosting provider, collect data about every access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

Administration, financial accounting, office organization, contact management

We process data in the context of administrative tasks and the organization of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process as part of the provision of our contractual services. The processing bases are Art. 6 para. 1 lit. c GDPR, Art. 6 para. 1 lit. f GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information specified in these processing activities. We disclose or transmit data to the tax authorities, consultants, such as tax consultants or auditors, as well as other fee offices and payment service providers. We also store information on suppliers, event organizers and other business partners on the basis of our business interests, e.g. for the purpose of contacting them at a later date. We generally store this mainly company-related data permanently.

Business analyses and market research

In order to operate our business economically and to identify market trends, customer and user requirements, we analyze the data we have on business transactions, contracts, inquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f GDPR, whereby the data subjects include customers, interested parties, business partners, visitors and users of the online offer. The analyses are carried out for the purpose of business evaluations, marketing and market research. In doing so, we can take into account the profiles of registered users with information on their purchase transactions, for example. The analyses help us to increase user-friendliness, optimize our offer and improve business efficiency. The analyses are used solely by us and are not disclosed externally, unless they are anonymous analyses with summarized values. If these analyses or profiles are personal, they are deleted or anonymized when the user terminates the contract, otherwise after two years from the conclusion of the contract. Otherwise, the overall business analyses and general trend determinations are prepared anonymously wherever possible.

Data protection information in the application process

We process the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. Applicant data is processed to fulfill our (pre-)contractual obligations in the context of the application process within the meaning of Art. 6 para. 1 lit. b GDPR Art. 6 para. 1 lit. f GDPR if data processing becomes necessary for us, e.g. in the context of legal proceedings (in Germany, § 26 BDSG also applies). The application procedure requires applicants to provide us with the applicant data. If we offer an online form, the necessary applicant data is marked; otherwise it results from the job descriptions and generally includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. Applicants can also voluntarily provide us with additional information. By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this privacy policy. Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data if this is necessary for the exercise of the profession). If provided, applicants can send us their applications using an online form on our website. The data is transmitted to us in encrypted form in accordance with the state of the art. Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We therefore cannot assume any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or sending it by post. Instead of applying via the online form and e-mail, applicants still have the option of sending us their application by post. In the event of a successful application, we may process the data provided by applicants for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Subject to a justified revocation by the applicants, the deletion will take place after a period of six months so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

Registration function

Users can optionally create a user account. As part of the registration process, users are provided with the required mandatory information. The data entered during registration will be used for the purposes of using the service. Users can be informed by e-mail about information relevant to the offer or registration, such as changes to the scope of the offer or technical circumstances. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is necessary for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. It is the responsibility of users to back up their data before the end of the contract in the event of termination. We are entitled to irretrievably delete all user data stored during the term of the contract. As part of the use of our registration and login functions and the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the user in protection against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR. The IP addresses are anonymized or deleted after 7 days at the latest.

When contacting us (e.g. by contact form, email or via social media), the user's details are processed to process the contact request and its handling in accordance with Art. 6 para. 1 lit. b GDPR. The user's details may be stored in a customer relationship management system ("CRM system") or comparable inquiry organization. We delete the inquiries if they are no longer required. We review the necessity every two years; the statutory archiving obligations also apply.

Newsletter

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.

Content of the newsletter: We only send newsletters, emails and other electronic notifications with advertising information (hereinafter "newsletter") with the consent of the recipient or legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the user's consent. Otherwise, our newsletters contain information about our services and us.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored with the mailing service provider are also logged.

Registration data: To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name so that we can address you personally in the newsletter.

Germany: The newsletter and the associated performance measurement are sent on the basis of the consent of the recipients in accordance with Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 para. 2 no. 3 UWG or on the basis of the legal permission in accordance with Section 7 para. 3 UWG.

The registration process is logged on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and also allows us to provide proof of consent.

Cancellation/revocation: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. We may store registered e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed.

Newsletter - dispatch service provider: The newsletter is sent using the dispatch service provider "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here.

Due to the ruling of the European Court of Justice in the "Schrems II" case (C-311/18), the Privacy Shield agreement between the EU and the USA is no longer valid. The transfer of personal data to MailChimp is therefore based on the standard contractual clauses of the EU Commission, which have been accepted by MailChimp to ensure that the European level of data protection is maintained.

The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR.

MailChimp may use the data of the recipients in pseudonymous form, i.e. without assignment to a specific user, to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of the newsletter recipients to write to them itself or to pass the data on to third parties.

Newsletter - performance measurement: The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, is initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times.

This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to observe individual users. Rather, we use the evaluations to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR), we use Google Analytics, a web analysis service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.

However, Google no longer offers any guarantee that data transfers to the USA are lawful under the Privacy Shield agreement after the ECJ ruling in the "Schrems II" case declared this agreement invalid. We would therefore like to point out that the use of Google Analytics may result in data being transferred to a third country, in particular the USA. The data is processed on the basis of the EU Commission's standard contractual clauses, which oblige Google LLC to provide an adequate level of data protection.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles can be created from the processed data.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser-Plugin.

You can find more information on data use by Google, setting and objection options on Google's websites: Data use by Google when you use our partners' websites or apps, data use for advertising purposes, managing information that Google uses to show you advertising.

Google Re/Marketing Services

We use the marketing and remarketing services ("Google Marketing Services" for short) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR).

Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to present users only with advertisements that potentially match their interests. If, for example, a user is shown ads for products that they have shown an interest in on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google marketing services are active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, what content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer. The IP address of the user is also recorded, whereby we inform you in the context of Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases transmitted in full to a Google server in the USA and shortened there. The IP address is not merged with the user's data within other Google offers. Google may also combine the aforementioned information with such information from other sources. If the user subsequently visits other websites, they can be shown ads tailored to their interests.

User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user's name or email address, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the USA.

The Google marketing services we use include the online advertising program "Google AdWords". In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". Cookies can therefore not be tracked via the websites of AdWords customers. The information collected with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

We can integrate third-party advertisements on the basis of the Google marketing service "AdSense". AdSense uses cookies to enable Google and its partner websites to serve ads based on users' visits to this website or other websites on the Internet.

We may also use the "Google Tag Manager" to integrate and manage Google analysis and marketing services on our website.

Further information on the use of data for marketing purposes by Google can be found on the overview page: Use of data for marketing purposes by Google, Google's privacy policy is available at Google's privacy policy.

If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: Settings and opt-out options.

Online presence in social media

We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Unless otherwise stated in our privacy policy, we process users' data if they communicate with us within social networks and platforms, e.g. write posts on our online presences or send us messages.

Integration of third-party services and content

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR), we use content or service offers from third-party providers within our online offer in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visit time and other information about the use of our online offer, as well as being linked to such information from other sources.

YouTube We integrate the videos of the platform "YouTube" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: YouTube Privacy Policy, Opt-Out: YouTube Opt-Out.

Use of Facebook social plugins On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR), we use social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognizable by one of the Facebook logos (white "f" on a blue tile, the terms "Like", "Gefällt mir" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here.

Facebook no longer offers a guarantee that data transfers to the USA are lawful on the basis of the Privacy Shield agreement after the ECJ ruling in the "Schrems II" case declared this agreement invalid. Instead, data is transferred to the USA on the basis of the EU Commission's standard contractual clauses, which oblige Facebook to guarantee an adequate level of data protection.

When a user accesses a function of this online offering that contains such a plugin, their device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online offering. User profiles can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out their IP address and store it. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for protecting the privacy of users, can be found in Facebook's data protection information: Facebook privacy policy.

If a user is a Facebook member and does not want Facebook to collect data about them via this online offering and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online offering. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: Facebook profile settings or via the US page About Ads or the EU page Your Online Choices. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

Instagram Functions and content of the Instagram service, offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, may be integrated into our online offering. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, subscribe to the authors of the content or subscribe to our posts. If the users are members of the Instagram platform, Instagram can assign the access to the above-mentioned content and functions to the users' profiles there. Instagram privacy policy: Instagram privacy policy.

This privacy policy has been created to provide you with comprehensive information about the processing of your personal data and to protect your rights. If you have any questions or concerns regarding this privacy policy, you can contact us at any time.