Privacy Policy

Controller’s name and contact data

This Privacy Policy applies to data processing by:

Controller: Zwiesel Fortessa AG
Business owner: Prof. Dr. Andreas Buske
Address: Dr. Schottstr. 35, D-94227 Zwiesel, Germany
E-mail: [email protected]
Telephone: +49 (0) 992298-210

Collection and storage of personal data as well as nature and purpose of their use when you visit our website:

When you visit our website, the browser installed on your device will automatically transmit information to our website server. This information is temporarily saved in a so-called log file. The following information will be collected without any of your involvement and stored until it is automatically deleted:

- IP address of requesting computer
- date and time of access
- name and URL of accessed file
- website from which our site is accessed (referrer URL)
- utilised browser and, if applicable, your computer’s operating system and the name of your access provider.

We will process the above-listed data for the following purposes:

- to ensure smooth connection to the website
- to ensure easy use of our website
- to evaluate system security and stability as well as
- additional administrative matters.

The legal basis for processing personal data is Art. 6 (1), sentence 1, lit. f, GDPR. Our legitimate interest is derived from the above-listed purposes for data collection. Under no circumstances will we use the collected data for drawing conclusions about your person.

In addition, we are legally obliged under Art. 6 (1) (c) GDPR to compare your data with sanctions lists and embargo regulations to ensure that no economic resources, financial resources or goods flow to sanctioned persons or organisations.

In addition, we use cookies when you visit our website. Further explanations can be found in this Privacy Policy.

Collection and storage of personal data as well as nature and purpose of their use in the context of orders/concluding purchase contracts:

If you want to place an order in our web shop, the following personal data will be collected, processed and used for the purpose of concluding the contract:
- title
- first name, last name
- address
- telephone number
- e-mail address
- IBAN/credit card number and security code (only if required for payment processing)

The legal basis for data processing is Art. 6 (1), sentence 1, lit. b, GDPR; processing is required for contract fulfilment.

The personal data collected for processing your order will be saved until the expiration of the applicable statutory retention period and will then be deleted.

You have the option to create a customer account in our website, where your personal data will be stored until you revoke it. With a user account, you don’t have to re-enter your data when you visit our website again or want to place additional orders. The legal basis for data processing is Art. 6 (1), sentence 1, lit. a, GDPR; the purpose is the simplification of the order process. You can delete your customer account at any time by sending us a corresponding notice. This will result in the deletion of your uploaded data.

Collection and storage of personal data as well as nature and purpose of their use in the context of subscribing to our newsletter:

If you have given your express consent according to Art. 6 (1), sentence 1, lit. a, GDPR, we will use your e-mail address to regularly send you our newsletter. To receive our newsletter, it is sufficient to specify an e-mail address in the following steps: To subscribe to our newsletter, we will send you an e-mail with a link to the address you specified, which you must confirm. This will tell us that you are the owner of the e-mail address and that you have agreed to receiving the newsletter. No further data will be collected. This data will exclusively be used for sending out the newsletter and will not be shared with third parties. Together with your newsletter subscription, we will save your IP address and the date of subscription. This information exclusively serves to provide evidence in case a third party misuses an e-mail address and subscribes to a newsletter without the knowledge of the authorised party. Customers can unsubscribe or revoke their newsletter subscription at any time without charge. You can unsubscribe from the newsletter by using the link in the publication itself or via the contact options listed above.

Collection and storage of personal data as well as nature and purpose of their use in the context of using our contact form:

If you have questions of any kind, we offer you the option to contact us via a contact form provided on the website. To this end, you must indicate a valid e-mail address to let us know who sent the inquiry and to be able to respond. Further information may be shared voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1), sentence 1, lit. a, GDPR, on the basis of your voluntary consent. The personal data we collect as part of using the contact form will be automatically deleted once we have responded to your inquiry.

Data disclosure

Your personal data will not be disclosed to third parties except for the purposes listed below. We will only share your personal data with third parties if
- you have expressly given your consent pursuant to Art. 6 (1), sentence 1, lit. a, GDPR
- data disclosure is required pursuant to Art. 6 (1), sentence 1, lit. f, GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have compelling legitimate grounds to object to the disclosure of your data
- we have a legal obligation to disclose data pursuant to Art. 6 (1), sentence 1, lit. c, GDPR as well as - it is legally permissible and required for processing contractual relationships with you pursuant to Art. 6 (1), sentence 1, lit. b, GDPR.

Cookies

Our website uses cookies, small files that are automatically generated in your browser and saved in your device (laptop, tablet, smart phone etc.) when you visit our site. They do not cause any damage to your device and do not contain any viruses, Trojans or other malware. Cookies are used to store information related to a specific user device. However, this does not mean that we gain any direct knowledge of your identity. The use of cookies serves to make our website easier to use. So-called session cookies tell us that you have already visited individual pages of our website. These are automatically deleted once you leave our site. Furthermore, we use temporary cookies to optimise the usability of our site, which are saved on your device for a specified time period. When you return to our website to use our services, the site will automatically detect that you have visited the site before. It will recall the entries and settings you made so you don’t have to enter them again. We also use cookies to collect statistical data concerning the use of our website and to evaluate this information for the purpose of optimising our offer for you. These cookies allow us to automatically recognise that you have visited the site before. They are deleted automatically after a defined time interval. The data processed by cookies is required for the above-listed purposes to safeguard our legitimate interests and those of third parties pursuant to Art. 6 (1), sentence 1, lit. f, GDPR. Most browsers accept cookies automatically. However, you can configure your browser to refuse the storage of cookies in your computer or to generate a message before a new cookie is created. The complete deactivation of cookies may result in the fact that you cannot use all functions of our website.

Analytical tools (tracking tools)

The tracking measures we use are listed below. They are carried out on the basis of Art. 6 (1), sentence 1, lit. f, GDPR and are intended to ensure user-friendly design and continuous optimisation of our website. We also use tracking measures to collect statistical data concerning the use of our website and to evaluate this information for the purpose of optimising our offer for you. These interests are legitimate as defined by the regulation specified above. Please refer to the corresponding tracking tools for the respective data processing purposes and data categories.

Google Analytics

Our web pages use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies (see subsection on “Cookies”). The information generated by the cookie about the use of these web pages is generally transmitted to a Google server in the USA, where it is stored. In the event IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within the member states of the European Union or in other signatory states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services to website operators relating to website activity and Internet usage. Google will not combine the IP address transmitted by your browser as part of Google Analytics with any other data held by Google. Customers can prevent the storage of cookies by selecting the appropriate settings in their browser software; however, please be advised that not all functions of this website may be fully usable in this case. Customers can prevent Google from recording the data generated by the cookie and pertaining to their use of the website (including their IP address), or processing this data by downloading and installing the following browser plug-in available at this link: (http://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on or within browsers on mobile devices, future data collection by Google Analytics within this website can be prevented by clicking (https://tools.google.com/dlpage/gaoptout?hl=de). An opt-out cookie will be stored on your device. You will need to click this link again if you delete the cookies in your device.

Google Analytics Remarketing

We use the functions of Google Analytics Remarketing of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This is done for the purpose of presenting users with personalised and interest-related promotional content based on their surfing behaviour in our website when they visit web pages that are part of the Google promotional network. Google saves cookies in the user’s browser for this purpose. These allow for recognising users when they visit web pages that are part of the Google promotional network. Such cookies do not identify individuals, but exclusively recognise the web browser.

Google is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/list) to guarantee compliance with European data protection law. Further information about the Google privacy policy can be found at: https://www.google.com/policies/privacy/

You can deactivate Remarketing if you object to these functions:: https://www.google.com/settings/ads

Cookies remain active for no more than 18 months.

Google Adwords conversion tracking

We also use Google Conversion Tracking to statistically evaluate the use of our website and to optimise our website for you. Google Adwords uses cookies (see Section 4) in your browser if you reached our website through a Google ad. These cookies become invalid after 30 days and do not identify individuals. If a user opens certain websites of an Adwords customer and the cookie has not yet expired, Google and the customer can tell that the user clicked on an advertisement and was forwarded to this page. Every Adwords customer is given different cookie codes, which means that cookies cannot be tracked via the websites of Adwords customers. The information collected with the help of conversion cookies is used to compile conversion statistics for Adwords customers who are using conversion tracking. Adwords customers learn how many users have clicked on their advertisements to access a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you don’t want to participate in the tracking process, you can block the respective cookies – e.g. by choosing browser settings that generally deactivate automatic cookie placement. You can also deactivate cookies for conversion tracking by setting your browser to refuse cookies from the domain “www.googleadservices.com”. The Google privacy policy on conversion tracking can be found here: (https://services.google.com/sitestats/de.html).

Facebook Pixel, custom audiences and Facebook conversion

Our websites use Facebook Pixel by the social media network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if your residence is in the EU, by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Facebook Pixel is a JavaScript code, which is integrated into our website for statistical purposes and market research. It enables Facebook to identify visitors of our online offers as target groups for the display of advertisements (so-called “Facebook Ads”). Facebook Pixel is therefore used to display our Facebook Ads exclusively to Facebook users who have shown an interest in our online offer or who meet certain characteristics (such as interest in certain topics or products as determined by their website use), which we transmit to Facebook (so-called “Custom audiences”). Moreover, Facebook Pixel tells us whether users were brought to our website after clicking on a Facebook promotional ad to verify the effectiveness of Facebook promotional offers (so-called conversion). Facebook is certified under the Privacy Shield Agreement to guarantee compliance with European data protection law. (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active) Please refer to the Facebook privacy policy to learn more about the scope and purpose of data collection and the further processing and use of data by Facebook as well as your associated rights and setting options to protect your privacy: https://www.facebook.com/about/privacy/. Further details on the function of Facebook Pixel can be found in the Facebook help section under: https://www.facebook.com/business/help/651294705016616. You can opt out of data collection by Facebook Pixel and the use of your data for the display of Facebook ads. You can also set your promotional preferences to manage specific display types of promotional offers within Facebook: https://www.facebook.com/settings?tab=ads.

Social media plug-ins

Our website uses plug-ins of the social media networks listed below to promote our website in compliance with Art. 6 (1), sentence 1, lit. f, GDPR. The underlying advertising purpose is a legitimate interest in the definition of the GDPR. The responsibility for operation in compliance with data protection laws lies with the respective providers. The use of these plug-ins typically follows the so-called two-click method to ensure optimal protection of our website visitors.

Facebook

Facebook elements are integrated into our websites (so-called social media plug-ins) to further personalise the content for users. We use the “Like” or “Share” button for this purpose. Facebook is an enterprise of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Based on the integration of the plug-in, Facebook receives notice that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. Your browser directly transmits this information (including your IP address) to a Facebook server in the USA, where it is stored. If you are logged into Facebook, the visit may be directly linked your Facebook account. If you interact with the plug-ins, e.g. by clicking the “Like” or “Share” button, the corresponding information will also be transmitted to a Facebook server and stored. The information will also be published on Facebook and shown to your Facebook friends. Facebook may use this information for the purpose of promotion, market research and user-optimised design of Facebook pages. For this purpose, Facebook generates usage, interest and relationship profiles, e.g. to evaluate your use of our website in terms of advertisements shown to you by Facebook, to inform other Facebook users about your activities in our website, and to offer additional services associated with the use of Facebook. If you don’t want Facebook to link the data collected during your visit to our website to your Facebook account, you must log out of your Facebook account prior to visiting our website. Please note that we as website operators do not have any knowledge about the content of the transmitted data or its use by Facebook. The Facebook privacy policy includes further information about the purpose and scope of data collection as well as the further processing and use of data by Facebook and your corresponding rights and options for privacy settings (https://www.facebook.com/about/privacy/).

Instagram

Our web pages also use social plug-ins (“Plug-ins”) of Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The Instagram plug-in is recognisable by the “Instagram button,” e.g. in the form of an Instagram camera. When you access a page of our website that contains such a plug-in, your browser will establish a direct connection with the servers of Instagram. Instagram sends the content of the plug-in directly to your browser, which in turn integrates it into the website. Based on the integration of the plug-in, Instagram receives notice that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. Your browser directly transmits this information (including your IP address) to an Instagram server in the USA, where it is stored. If you are logged into Instagram, the visit may be directly linked to your Instagram account. If you interact with the plug-ins, e.g. by clicking the Instagram button, the corresponding information will also be directly transmitted to an Instagram server and stored. The information will also be published on your Instagram account and shown to your contacts. If you don’t want Instagram to link the data collected during your visit to our website to your Instagram account, you must log out of your Instagram account prior to visiting our website. Please note that we as website operators do not have any knowledge about the content of the transmitted data or their use by Instagram. Further information can be found in the Instagram privacy policy under https://help.instagram.com/155833707900388.

Online services/ online advertising

Our website uses online services and promotional instruments of the companies listed below on the basis of Art. 6 (1), sentence 1, lit. f, GDPR in the interest of optimally marketing our product offers. The underlying advertising purpose is a legitimate interest in the definition of the GDPR. The responsibility for operation in compliance with data protection laws lies with the respective providers.

PayPal

Transactions processed via the online payment service PayPal by the service provider PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg, are subject to the following privacy policy of PayPal, which you can view at the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE

Credit information

If you choose the payment type “Invoice,” we may access credit data of specialised financial service providers (credit agencies) – and specifically your personal address and credit information determined with mathematical-statistical procedures – for contractual agreements based on Art. 6 (1), sentence 1, lit. f, GDPR. This interest is legitimate as defined by the regulation specified above. We use the following credit agencies, all of which are controllers in the sense of Art. 4, no. 7, GDPR, to receive the necessary data: Deltavista GmbH, Dessauerstraße 9, 80992 Munich, Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss, infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, Bürgel Wirtschaftsinformationen GmbH & Co. KG, Gasstraße 18, 22761 Hamburg, SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Regis24 GmbH, Zehdenicker Str. 21, 10119 Berlin. The data saved by the corresponding credit bureau is processed for compelling legitimate grounds of credit and creditor protection, which generally override your interests, rights and freedoms or serve for the establishment, exercise or defence of legal claims. You may only object to the processing of your data saved by the corresponding service to the relevant credit agency for reasons arising special situations, which must be documented. If you can document such special reasons, the respective data will no longer be processed.

Geprüfter Webshop

Our website incorporates the “Geprüfter Webshop” seal. The seal and the associated promoted services are an offer of Tisko Consulting GmbH, Asbacher Straße 49, 53545 Linz am Rhein, Germany. When the seal is accessed, the Web server will automatically save a so-called server log file, which includes information such as your IP address, date and time of access, transferred data volume and requesting provider (access data) to document the access. This access data will not be evaluated and is automatically deleted after no more than 30 days following the end of your site visit. You also have the option of using the evaluation system of Geprüfter Webshop. You can evaluate the transaction and add comments after concluding the contract, i.e. after receiving your order. We will contact you to point out this option in the interest of a credible assessment of the purchasing transaction on the basis of Art. 6 (1), sentence 1, lit. f, GDPR. The personal data we collect for the use of the evaluation system will be deleted 3 months after the end of the evaluated product shipment.

Data subject rights

You have the following rights:

- to obtain information about our processing of your personal data pursuant to Art. 15, GDPR. In particular, you may obtain information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing or to object, the right to lodge a complaint, the source of your data, if they were not collected by us, as well as the existence of automated decision-making, including profiling, as well as meaningful information about the associated details; - to obtain the rectification of incorrect or incomplete personal data stored by us according to Art. 16, GDPR;

- to obtain, according to Art. 17, GDPR, the erasure of personal data, unless the processing is necessary for exercising the right of freedom of expression and information, full compliance with legal obligations, for reasons of public interest, or for the establishment, exercise or defence of legal claims;

- to obtain restriction of processing your personal data according to Art. 18, GDPR if you contest the accuracy of the data, if the processing is unlawful but you oppose the erasure of the data, and if we no longer need the personal data but you require them for the establishment, exercise or defence of legal claims, or if you exercised your right to object to processing according to Art. 21, GDPR;

- to receive your personal data, which you have provided to us in a structured, commonly used and machine-readable format or to demand the transmission to another controller according to Art. 20, GDPR; and

- to revoke your consent given to us at any time according to Art 7, para 3, GDPR. As a consequence, we may not continue the data processing that was based on this consent in the future, and

- to lodge a complaint with a supervisory authority pursuant to Art. 77, GDPR if you consider that the processing of your personal data is unlawful. As a general rule, you can contact the supervisory authority for your habitual residence, your place of work, or for our business seat.

Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1), sentence 1, lit. f, GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21, GDPR, on grounds relating to your particular situation or if data are used for direct marketing. In the latter case you have a general right of objection, which does not require specifying a particular situation. To exercise your rights to withdraw consent or to object, it is sufficient to send an e-mail to the contact listed in the Publisher Information.

Data security

We use the popular Secure Socket Layer (SSL) protocol in conjunction with the highest level of encryption supported by your browser when you visit our website. Usually this is 256-bit encryption.

If your browser does not support 256-bit encryption, we will instead rely on 128-bit v3 technology. The closed position of the key or padlock icon in the bottom status bar of your browser shows whether an individual page of our website is transmitted in encrypted format.

Otherwise, we use technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or access by unauthorised third parties. We continuously upgrade our security measures to keep up with technological developments.

Current validity and modifications of this Privacy Policy

This Privacy Policy is currently valid and was last amended in March 2020.

It may become necessary to modify this Privacy Policy based on the further development of our website and its offers or due to changes in legal or regulatory requirements. The current Privacy Policy can be accessed on this website and printed at any time.

Cancellation Policy for consumers

Cancellation Policy for product sales

Right to cancel

You have the right to cancel this contract within 14 days without the need to specify any reasons. The cancellation period is 14 days from the day when you or an authorised third party that is not the shipping company took possession of the merchandise. To exercise your cancellation rights, you must contact us (Zwiesel Fortessa AG, Dr. Schottstr. 35, D-94227 Zwiesel, Germany, telephone: 0992298-111, e-mail: [email protected]) with an explicit declaration (e.g. letter sent by postal service, fax or e-mail) about your decision to cancel this contract. You may use the attached sample cancellation form, but are not required to do so. To observe the cancellation period, it is sufficient to send a statement about exercising your cancellation right prior to the end of the cancellation period.

Consequences of cancellation

If you cancel a purchase, we are obligated to return all payments received from you, including shipping cost (with the exception of additional costs resulting from your choice of a different shipment type than our lowest-cost, standard shipment offer), immediately and within 14 days from the day on which we received the notice of your contract cancellation at the latest. Return credits will be made via the same financial instrument used for the original transaction, unless otherwise specifically agreed with you. We will not charge any fees for this return credit in any case. We may hold the return credit until the merchandise has been returned or until you have provided proof that the merchandise was returned, whichever is earlier. You must send back or return the merchandise to us without delay and within 14 days from the day when you notify us of your contract cancellation at the latest. This period will be deemed observed if you send out the merchandise prior to the end of the 14-day period. We will bear the cost of the return shipment.

You are only responsible for any loss of merchandise value if this loss of value is associated with any handling not required for checking the condition, properties and function of the merchandise.

Sample cancellation form

Please complete this form to cancel your contract and return it to us.

To:
Zwiesel Fortessa AG
Dr. Schottstr. 35 D-94227 Zwiesel, Germany
E-mail: [email protected]
Fax: +49 (0) 9922 / 98-300

I/we hereby cancel (*) the contract concluded with me/us (*) for the purchase of the following merchandise (*)/the provision of the following services (*):

Ordered on (*)/received on (*):

Consumer name:

Consumer address:

Consumer signature (in case of hardcopy communication only):

Date:

* delete as applicable

This Cancellation Information was generated with www.gepruefter-webshop.de and is regularly reviewed for compliance with the applicable laws. In the event of a warning, Geprüfter Webshop will assume full liability for these legal provisions.

Address Validation
On our website, we offer you the possibility to check certain entries in the address forms of our webshop in real time for input errors. This is intended to prevent problems with the delivery of the products you have ordered due to incorrect information. We also want to ensure that your contact details are valid for sending information regarding your order or for any necessary inquiries. To provide these functions, we use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker. The service provider processes the data exclusively according to our instructions. The legal basis for the transmission, processing and temporary storage of the data at the service provider is Art. 6 (1) (b) GDPR, as it is absolutely necessary for the performance of the contract or for the implementation of pre-contractual measures to verify the accuracy of some of the data you enter in the form. The following data is processed by the service provider: Address (country, city, postal code, street, and, if applicable, house number) The data is processed separately by the service provider and not merged. The requests are deleted by the service provider as soon as the status of the entered data has been determined and storage in the webshop has been completed, but no later than 30 days.

Cloudflare
We use the service “Cloudflare”. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”). Cloudflare provides a globally distributed Content Delivery Network with DNS. Technically, the transfer of information between your browser and our website is routed through Cloudflare’s network. This enables Cloudflare to analyze the data traffic between your browser and our website and to act as a filter between our servers and potentially malicious traffic from the internet. Cloudflare may also use cookies or other technologies to recognize internet users, which are used solely for the purpose described here. The use of Cloudflare is based on our legitimate interest in providing our online services in a stable and secure manner (Art. 6 (1) (f) GDPR). Data transfers to the USA are based on the Standard Contractual Clauses (SCCs) of the European Commission. Details and further information on security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/ Cloudflare is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF commits to adhering to these data protection standards. More information can be found here: https://www.dataprivacyframework.gov/participant/5666 Data Processing Agreement We have concluded a Data Processing Agreement (DPA) for the use of the aforementioned service. This legally required contract ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display advertisements in Google search or on third-party websites when users enter certain search terms (keyword targeting). In addition, targeted advertising can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can analyze these data statistically, for example by determining which search terms triggered our ads and how many ads resulted in clicks. The use of this service is based on your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time. Data transfers to the USA are based on the Standard Contractual Clauses of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/ Google is certified under the “EU-US Data Privacy Framework” (DPF). More information: https://www.dataprivacyframework.gov/participant/5780

Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior of website visitors. The operator receives various usage data, such as page views, time spent on the website, operating systems used, and origin of the user. These data are aggregated into a User-ID and assigned to the respective device of the visitor. Additionally, Google Analytics may record your mouse movements, scrolling behavior and clicks. Google Analytics also uses various modeling approaches to supplement collected data and employs machine learning technologies for data analysis. Google Analytics uses technologies that enable user recognition for analysis purposes (e.g., cookies or device fingerprinting). The information collected by Google about your use of this website is usually transferred to a Google server in the USA and stored there. The use of this service is based on your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time. Data transfers to the USA are based on the Standard Contractual Clauses of the European Commission. Details: https://business.safety.google/adscontrollerterms/sccs/ Google is certified under the “EU-US Data Privacy Framework”: https://www.dataprivacyframework.gov/participant/5780 IP Anonymization IP anonymization in Google Analytics is activated. This means that your IP address is shortened by Google within EU member states or other EEA countries before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The information collected is used by Google on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide further services related to website and internet usage. The IP address transmitted by your browser will not be merged with other Google data. Browser Plugin You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de More information can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de Google Signals We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, and YouTube history as well as demographic information (visitor data). These data may be used for personalized advertising. If you have a Google account, the collected visitor data is linked to your account and used for personalized advertising messages. The data also serve to create anonymized statistics on user behavior. Data Processing Agreement We have concluded a Data Processing Agreement with Google and fully comply with the strict requirements of German data protection authorities when using Google Analytics. Google Analytics E-Commerce Tracking This website uses the “E-Commerce Tracking” function of Google Analytics. This allows the website operator to analyze the purchasing behavior of visitors to improve online marketing campaigns. Information such as orders placed, average order values, shipping costs, and the time between viewing a product and purchasing it is collected. Google may aggregate this data under a transaction ID assigned to the user or device.

Google Fonts
Google Fonts (local hosting) This site uses Google Fonts provided by Google for uniform font display. The Google Fonts are installed locally. No connection to Google servers is established. More information: https://developers.google.com/fonts/faq https://policies.google.com/privacy?hl=de

Google Maps
This site uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to integrate map material on our website. To use Google Maps features, your IP address must be stored. This information is usually transferred to a Google server in the USA and stored there. We have no influence over this data transfer. When Google Maps is active, Google may use Google Fonts for uniform font display. When opening Google Maps, your browser loads the necessary web fonts into your browser cache. The use of Google Maps is based on our legitimate interest in an appealing presentation of our online offerings and easy discoverability of the locations listed on our website (Art. 6 (1) (f) GDPR). If consent is requested, processing is carried out exclusively in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as consent includes the storage of cookies or access to user device information (e.g. device fingerprinting). Consent can be revoked at any time. Data transfers to the USA are based on the Standard Contractual Clauses of the European Commission: https://privacy.google.com/businesses/gdprcontrollerterms/ https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ More details on data handling can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de Google is certified under the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/participant/5780

Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It only serves to manage and deploy the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States. The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on their website. If the corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TDDDG. Consent may be revoked at any time. The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the U.S. Each company certified under the DPF is committed to adhering to these data protection standards. More information is available at: https://www.dataprivacyframework.gov/participant/5780

Microsoft Advertising
The website operator uses Microsoft Advertising. Microsoft Advertising is an online advertising program from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Advertising allows us to display advertisements in the Bing search engine or on third-party websites when the user enters specific search terms on Bing (keyword targeting). Targeted advertisements can also be displayed based on user data available at Microsoft (e.g., location data and interests) (audience targeting). As the website operator, we can analyze this data quantitatively, for example by determining which search terms triggered the display of our ads and how many ads resulted in corresponding clicks. We use Universal Event Tracking (UET) from Microsoft Advertising on this site. Pseudonymized data is collected to track which actions you perform on our website after clicking on an advertisement from Microsoft Advertising. UET collects your (anonymized) IP address, device identifiers, information about device and browser settings, Microsoft Click ID (stored in a cookie), time spent on the website, which areas of the website were accessed, which advertisement brought you to the website, and the clicked keyword. The use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time. Data transfer to the United States is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses The company is certified under the “EU-US Data Privacy Framework” (DPF). More information: https://www.dataprivacyframework.gov/participant/6474 Data Processing Agreement We have entered into a Data Processing Agreement (DPA) for the use of the service mentioned above. This legally required agreement ensures that the processor handles the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Microsoft Clarity
This website uses Microsoft Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://learn.microsoft.com/en-us/clarity/faq (hereinafter “Microsoft Clarity”). Microsoft Clarity is a tool used to analyze user behavior on this website. Microsoft Clarity records, among other things, mouse movements and creates graphical representations showing which parts of the website users scroll through most frequently (heatmaps). Microsoft Clarity can also record sessions, allowing us to view website usage in video format. Additionally, we receive information about general user behavior on our website. Microsoft Clarity uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Your personal data is stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the United States. If consent has been obtained, the use of the service mentioned above is based exclusively on Art. 6(1)(a) GDPR and § 25 TDDDG. Consent can be withdrawn at any time. If no consent has been obtained, the use is based on Art. 6(1)(f) GDPR; the website operator has a legitimate interest in effective user behavior analysis. Further details on Microsoft Clarity’s data protection practices can be found here: https://docs.microsoft.com/en-us/clarity/faq The company is certified under the “EU-US Data Privacy Framework” (DPF). More information: https://www.dataprivacyframework.gov/participant/6474 Data Processing Agreement We have concluded a Data Processing Agreement (DPA) for the use of the service mentioned above. This legally required contract ensures that the personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.

Usercentrics
This website uses the consent management technology of Usercentrics to obtain your permission for storing certain cookies on your device or for using specific technologies, and to document such consent in a manner compliant with data protection laws. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Website: https://usercentrics.com/de/ (hereinafter “Usercentrics”). When you visit our website, the following personal data is transmitted to Usercentrics: Your consent(s) or the withdrawal of your consent(s) Your IP address Information about your browser Information about your device The time of your visit Geolocation Usercentrics also stores a cookie in your browser to associate given consents or withdrawals. The data collected is stored until you ask us to delete it, delete the Usercentrics cookie yourself, or the purpose of the data storage no longer applies. Statutory retention obligations remain unaffected. The use of Usercentrics takes place in order to obtain legally required consents for the use of certain technologies. The legal basis is Art. 6(1)(c) GDPR. Data Processing Agreement We have entered into a Data Processing Agreement (DPA) for the use of the service mentioned above. This legally required agreement ensures that the personal data of our website visitors is processed solely according to our instructions and in compliance with the GDPR.

Eye-Able Assist is a software from Web Inclusion GmbH that enables all people barrier-free access to information on the internet. The necessary files such as JavaScript, stylesheets, and images are loaded from an external server. When features are activated, Eye-Able Assist uses the browser's Local Storage to save settings. All settings are stored only locally and are not transferred further. To ward off attacks and provide our service in near real-time, Eye-Able Assist uses the Content Delivery Network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). This use serves the purpose of fulfilling the contract with our customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing our online offering securely, quickly, and efficiently through a professional provider (Art. 6 para. 1 lit. f GDPR). All transmitted data and servers remain within the EU at all times to enable GDPR-compliant processing. Web Inclusion GmbH never collects or analyzes personal user behaviour or other personal data. To ensure data protection-compliant processing, Web Inclusion GmbH has concluded data processing agreements with our host BunnyWay. Further information can be found in the privacy policies: Data protection page of Eye-Able

Validity and Amendments to this Privacy Policy
This privacy policy is currently valid. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version of the privacy policy can be accessed and printed by you at any time on this website.