1) Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Durmus Aslan, Buymax, Minister Stein Allee 8, 44339 Dortmund, Germany, Tel.: 023153048077, Fax: 023153048078, Email: info@buymax.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 The responsible party has appointed a data protection officer, who can be contacted as follows: "Durmus Aslan Minister Stein Allee 8 44339 Dortmund 0231 53048077"

1.4 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 Paragraph 1 Letter f of GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. You can find out how long each cookie is stored for in the overview of the cookie settings in your web browser.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either to execute the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent being granted, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

4.1 When you contact us (e.g. via contact form or email), personal data is collected. The data collected when you use a contact form can be seen in the respective contact form. This data is stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

4.2 WhatsApp Business

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “business version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example, an order you have placed), we will save and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 Paragraph 1 Letter b. GDPR to process and answer your request. On the basis of the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we will save and use the mobile phone number you use for WhatsApp and - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.

Your data will only be used to answer your request via WhatsApp. It will not be passed on to third parties.

Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact data of those users who have contacted us via WhatsApp are stored.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 (1) lit. a GDPR when using the app for the first time on their device by accepting the WhatsApp terms of use. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For the purpose and scope of data collection and the further processing and use of the data by WhatsApp as well as your rights and setting options to protect your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

5) Data processing when opening a customer account and for contract processing

In accordance with Art. 6 Paragraph 1 Letter b of GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above-mentioned address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data that is permitted by law.

6) Use of single sign-on procedures

6.1 Facebook Connect

On our website, you can create a customer account or register using the social plugin "Facebook Connect" of the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), using the so-called single sign-on technology if you have a Facebook profile. You can recognize the social plug-ins of "Facebook Connect" on our website by the blue button with the Facebook logo and the inscription "Log in with Facebook" or "Connect with Facebook" or "Log in with Facebook" or "Sign in with Facebook".

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook Inc. server in the USA and stored there. This data processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Facebook's legitimate interest in displaying personalized advertising based on your surfing behavior.

By using this "Facebook Connect" button on our website, you also have the option of logging in or registering on our website using your Facebook user data. Only if you give your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR prior to the registration process on the basis of a corresponding notice about the exchange of data with Facebook, we will receive the general and publicly accessible information stored in your profile when using the "Facebook Connect" button from Facebook, depending on your personal data protection settings on Facebook. This information includes the user ID, name, profile picture, age and gender.

We would like to point out that following changes to Facebook's data protection and terms of use, your profile pictures, your friends' user IDs and your friends list may also be transferred if you give your consent if they have been marked as "public" in your privacy settings on Facebook. The data transmitted by Facebook is stored and processed by us to create a user account with the necessary data (title, first name, last name, address details, country, email address, date of birth) if you have given your consent to do so on Facebook. Conversely, we may transfer data (e.g. information about your surfing or purchasing behavior) to your Facebook profile based on your consent.

The consent granted can be revoked at any time by sending a message to the person responsible named at the beginning of this data protection declaration.

For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and setting options to protect your privacy, please see Facebook's privacy policy: https://www.facebook.com/policy.php

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins using add-ons for your browser, e.g. with "Adblock Plus" (https://adblockplus.org/de/).

6.2 Google Sign-In

On our website, you can create a customer account or register using the “Google Sign-In” service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) using the so-called single sign-on technology if you have a Google profile. You can recognise the Google login function on our website by the button “Sign in with Google”, “Sign in with Google account” or “Sign in with Google”.

When you visit a page on our website that contains a Google login function, your browser establishes a direct connection to Google's servers. The content of the login button is transmitted directly from Google to your browser and integrated into the page. Through this integration, Google receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Google profile or are not currently logged in to Google. This information (including your IP address) is transmitted from your browser directly to a Google server and stored there; this may also involve transmission to the servers of Google LLC in the USA. These data processing operations are carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Google's legitimate interest in displaying personalized advertising based on surfing behavior.

By using the Google login button on our website, you also have the option of logging in or registering on our website using your Google user data. Only if you give your express consent in accordance with Art. 6 (1) lit. a GDPR prior to the registration process on the basis of a corresponding notice about the exchange of data with Google, we will receive the general and publicly accessible information stored in your profile when you use the Google button from Google, depending on your personal data protection settings with Google. This information includes the user ID, name, profile picture, age and gender.

We would like to point out that following changes to Google's privacy policy and terms of use, your profile pictures, your friends' user IDs and your friends list may also be transferred if you give your consent if these have been marked as "public" in your privacy settings on Google. The data transmitted by Google is stored and processed by us to create a user account with the necessary data (title, first name, last name, address details, country, email address, date of birth) if you have given Google permission to do so. Conversely, we can transfer data (e.g. information about your surfing or purchasing behavior) to your Google profile based on your consent.
The consent granted can be revoked at any time by sending a message to the person responsible named at the beginning of this data protection declaration.

For information on the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights and setting options to protect your privacy, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de

The terms of use for using “Google Sign-In” can be viewed here: https://policies.google.com/terms

If you do not want Google to assign the data collected via our website directly to your Google profile, you must log out of Google before visiting our website. You can also completely prevent the loading of Google plug-ins using add-ons for your browser, e.g. with "Adblock Plus" (https://adblockplus.org/de/).

7) Comment function

As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the commentator name you chose will be saved and published on this website. Your IP address will also be logged and saved. This IP address is saved for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment. We need your email address in order to contact you if a third party objects to your published content as being illegal. The legal basis for storing your data is Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if third parties object to them as being illegal.

You as a user can subscribe to the follow-up comments. You will receive a confirmation email to ensure that you are the owner of the specified email address (double opt-in procedure). The legal basis for data processing in the event of a subscription to comments is Art. 6 Paragraph 1 Letter a of GDPR. You can cancel ongoing comment subscriptions at any time with effect for the future. For more information on how to unsubscribe, please see the confirmation email.

8) Use of customer data for direct marketing

8.1 Registration for our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter if you have expressly confirmed to us that you agree to receive the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.

By activating the confirmation link you give us your consent to use your personal data in accordance with Art. 6 Paragraph 1 Letter a of GDPR. When you register for the newsletter, we save your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used exclusively for the purposes of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.

8.2 Newsletter dispatch via MailChimp
Our e-mail newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.
MailChimp uses this information to send and statistically evaluate the newsletter on our behalf. For the evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked. Mailchimp uses web beacons to automatically create general, non-personal statistics on the response behavior to newsletter campaigns. Based on our legitimate interest in the statistical evaluation of newsletter campaigns to optimize advertising communication and better focus on recipient interests, the web beacons also collect and use data from the respective newsletter recipient (email address, time of retrieval, IP address, browser type and operating system) in accordance with Art. 6 Para. 1 lit f GDPR. This data allows individual conclusions to be drawn about the newsletter recipient and is processed by Mailchimp to automatically create statistics that show whether a specific recipient has opened a newsletter message.
If you would like to deactivate data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
MailChimp can also use this data itself in accordance with Art. 6 (1) (f) GDPR based on its own legitimate interest in tailoring and optimizing the service to meet needs and for market research purposes, for example to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them directly or to pass it on to third parties.
To protect your data in the USA, we have concluded a data processing agreement with MailChimp based on the European Commission's standard contractual clauses to enable the transmission of your personal data to MailChimp. If you are interested, this data processing agreement can be viewed at the following internet address: https://mailchimp.com/legal/data-processing-addendum/
You can view MailChimp’s privacy policy here:
https://mailchimp.com/legal/privacy/

8.3 Advertising by post

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) (f) GDPR and to use it to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.

8.4 Product availability notification by email

If we offer the option of informing you by email about the time of availability for selected, temporarily unavailable items in our online shop, you can sign up for our email notification service for product availability. If you sign up for our email notification service for product availability, we will send you a one-time message by email about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure to send this notification. This means that we will only send you a corresponding notification once you have expressly confirmed to us that you consent to receiving such a message. We will then send you a confirmation email asking you to confirm that you wish to receive such a notification by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Paragraph 1 Letter a of GDPR. When you register for our email notification service for product availability, we save your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for our email notification service for product availability is used exclusively for the purpose of informing you about the availability of a specific item in our online shop. You can unsubscribe from the email notification service for product availability at any time by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.

9) Data processing for order processing

9.1 To process your order, we work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.

9.2 Use of special service providers for order processing and handling

- Amazon Fulfillment (FBA)
Order processing is carried out by the service provider "Amazon" (Amazon EU Sa rl, 38 avenue John F. Kennedy, L-1855 Luxembourg) as part of "Fulfillment by Amazon". Your personal data will be passed on to Amazon solely for the purpose of processing the online order. The data will be passed on in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for order processing. Details on Amazon's data protection and its data protection declaration can be viewed at the following link: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401
- DHL Fulfillment
Order processing is carried out by the service provider DHL Home Delivery GmbH, Sträßchensweg 10, 53113 Bonn as part of "Shipping by DHL Fulfillment". Your personal data will be passed on to DHL Fulfillment solely for the purpose of processing the online order in accordance with Art. 6 Para. 1 lit. b GDPR.
- DreamRobot
Order processing is carried out by the service provider "DreamRobot" (DreamRobot GmbH, Eckendorfer Str. 2-4, 33609 Bielefeld). Name, address and any other personal data will be passed on to Dream Robot in accordance with Art. 6 Paragraph 1 Letter b of GDPR solely for the purpose of processing the online order. Your data will only be passed on if this is actually necessary for processing the order. Details on DreamRobot's data protection and the data protection declaration of DreamRobot GmbH can be viewed on the DreamRobot website at "dreamrobot.de".
- Fiverr
Order processing takes place via the “Fiverr” service of Fiverr International Ltd., Eliezer Kaplan St. 8, Tel Aviv-Yafo, Israel (“Fiverr”). Name, address and, if applicable, other personal data (depending on the offer, in particular photographs of identifiable persons sent to us) will be passed on to Fiverr in accordance with Art. 6 Paragraph 1 Letter b of GDPR solely for the purpose of processing the online order. If necessary, Fiverr will commission freelancers to process the contract and pass on the above-mentioned data to them to the extent necessary. To protect the data and to ensure data security, Fiverr has concluded individual data processing contracts with all commissioned freelancers. For Israel, the European Commission has issued an adequacy decision that attests that Israel has a level of data protection comparable to that in the EU. Details on data protection and Fiverr’s privacy policy can be viewed at: https://de.fiverr.com/privacy-policy?source=footer

9.3 Transfer of personal data to shipping service providers

- German postal service
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your e-mail address to Deutsche Post in accordance with Art. 6 Para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to Deutsche Post.
- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DHL.
- DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will pass on your email address and telephone number to DPD before the goods are delivered in accordance with Art. 6 Paragraph 1 Letter a of GDPR for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery in accordance with Art. 6 Paragraph 1 Letter b of GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or delivery notification is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DPD.
- Austrian Post
If the goods are delivered by the transport service provider Austrian Post (Austrian Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria), we will pass on your e-mail address to Austrian Post prior to delivery of the goods in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Austrian Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Austrian Post or the transmission of status information on the delivery of the shipment is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider Österreichische Post.

9.4 Use of payment service providers (payment services)

- Amazon Pay
If you select the payment method "Amazon Pay", payment processing will be carried out via the payment service provider Amazon Payments Europe sca, 38 avenue JF Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we will pass on the information you provided during the ordering process, together with the information about your order, in accordance with Art. 6 Paragraph 1 Letter b of GDPR. Your data will be passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent that it is necessary for this purpose. You can find further information about Amazon Payments' data protection provisions at the following Internet address: https://pay.amazon.com/de/help/201751600
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The data is passed on in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for the payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Paragraph 1 Letter f of GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values ​​(so-called score values). Insofar as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, among other things, but not exclusively, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

10) Contacting us to remind you of your review

Own review reminder (not sent by a customer review system)
We use your email address as a one-time reminder to submit a review of your order for the rating system we use, provided that you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time by sending a message to the person responsible for data processing.

11) Use of rating and seal of approval graphics

ShopVote graphics

We have integrated ShopVote graphics on this website to display our ShopVote seal and any collected and/or aggregated ratings.

This serves to safeguard our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, which prevail within the framework of a balancing of interests. The ShopVote graphics and the services advertised with them are an offer from Blickreif GmbH, Alter Messeplatz 2, 80339 Munich.

When you access the ShopVote graphics, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of access, the amount of data transferred and the source of the access (access data) and documents the access. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site. No other personal data is recorded or saved by the ShopVote graphics.

12) Use of social media: social plugins

12.1 AddThis bookmarking plugins with Shariff solution

Our website uses so-called social plugins ("plugins") of the bookmarking service AddThis, which is operated by AddThis LLC, Inc. 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA ("AddThis") as part of Oracle Corporation.

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but rather simply using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is established with the AddThis servers. When you click on the button, a new browser window opens and calls up the AddThis page, where you can interact with the plugins there (if necessary after entering your login data).

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no effect on the data that has already been transferred to AddThis.

For the purpose and scope of data collection and the further processing and use of the data by AddThis as well as your rights and setting options to protect your privacy, please refer to AddThis's privacy policy: https://www.addthis.com/privacy/privacy-policy

12.2 Facebook plugins with Shariff solution

Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plug-ins, but rather simply using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is established with the Facebook servers. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact with the plug-ins there (if necessary after entering your login data).

For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and setting options to protect your privacy, please see Facebook's privacy policy: https://www.facebook.com/policy.php

12.3 Instagram plugin as Shariff solution

Our website uses so-called social plugins (“plugins”) of the online service Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”).

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but rather simply using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is established with the Instagram servers. When you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (if necessary after entering your login data).

For information on the purpose and scope of data collection and the further processing and use of data by Instagram as well as your rights and setting options to protect your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

12.4 Pinterest plugin as Shariff solution

The seller’s website uses so-called social plugins (“plugins”) of the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but rather simply using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is established with the Pinterest servers. When you click on the button, a new browser window opens and calls up the Pinterest page, where you can interact with the plugins there (if necessary after entering your login data).

For information on the purpose and scope of data collection and the further processing and use of data by Pinterest, as well as your rights and setting options to protect your privacy, please refer to Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy

12.5 Twitter plugin as Shariff solution

Our website uses so-called social plugins ("plugins") of the microblogging service Twitter, which is operated by Twitter International Company, One Cumberland Place, Fenian Street
Dublin 2, D02 AX07 Ireland ("Twitter").

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plug-ins, but only using an HTML link. This type of integration ensures that when you call up a page on our website that contains such buttons, no connection is established with the Twitter servers. When you click on the button, a new browser window opens and calls up the Twitter page where you can interact with the plug-ins there (after entering your login data if necessary). Please note that when you interact with the plug-in, information collected (including your IP address) is transmitted from your browser directly to a Twitter Inc. server in the USA and stored there.

For information on the purpose and scope of data collection and the further processing and use of data by Twitter, as well as your rights and setting options to protect your privacy, please refer to Twitter's privacy policy: https://twitter.com/privacy

13) Online Marketing

13.1billiger.de Sales Tracking

This website uses billiger.de Sales Tracking, a tracking technology from solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, to track and evaluate certain user actions that were carried out after being redirected from billiger.de to our website.

For this purpose, a so-called JavaScript-based tracking pixel is implemented in our order confirmation pages, which can track user actions as a single-pixel file through interaction with billiger.de.
The tracking pixel establishes a connection between a user clicking on an ad (touch point) on billiger.de and a completed order on our website. When an order is completed, your browser sends an HTTP request to the billiger.de server via the pixel, with which certain information is transmitted.

This information includes the IP address of the end device (this IP address is anonymized by billiger.de before it is saved), HTTP header (data packet automatically transmitted by your browser with various technical information) and the time of the request. In addition, the order number and the shopping cart value of your order are also transmitted and saved by billiger.de. This information is only recorded and transmitted to and saved by billiger.de if an order was actually placed after being redirected from billiger.de to our website.
If the transmission of this information to billiger.de includes personal user data, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical evaluation of the success of product advertisements on billiger.de and the purchasing behavior of users and thus serves to optimize our online offering.

If you do not wish the described information to be sent to billiger.de in the future, you can only prevent this by deactivating the execution of Java Script in your browser. Alternatively, you can prevent the execution of Java Script code by installing a Java Script blocker (e.g. https://noscript.net/ or https://www.ghostery.com). However, it is very likely that you will not be able to use all of the website's functions to their full extent.
To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for making an objection described above.

13.2 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses web beacons (small invisible graphics) to collect information that can be used to record, collect, and analyze simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of the website is typically transferred to a Google server and stored there. The information may also be transferred to Google LLC servers in the USA.

Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other data held by Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

The described processing of data is carried out in accordance with Art. 6 Paragraph 1 Letter f of GDPR for the purpose of targeted advertising to the user by advertising third parties whose advertisements are displayed on this website based on the evaluated user behavior. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalized third-party advertising content for a fee.

You can find further information about Google’s privacy policy at the following internet address: https://www.google.de/policies/privacy/

You can permanently disable cookies for advertising preferences by preventing them through a corresponding setting in your browser software or you can download and install the browser plug-in available under the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for making an objection described above.

13.3 Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers using advertising materials (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie in your Internet browser under the keyword "User Settings". You will then not be included in the conversion tracking statistics. We use Google Ads due to our legitimate interest in targeted advertising in accordance with Art. 6 Para. 1 lit. f GDPR. When using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA.

You can find further information about Google’s privacy policy at the following internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available under the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website or, alternatively, follow the option for objecting described above.

13.4 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) (f) GDPR.

In addition, GMP can use cookie IDs to track conversions related to ad requests. This is the case, for example, when a user sees a GMP ad and later visits the advertiser's website using the same browser and makes a purchase through that website. According to Google, GMP cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our current level of knowledge as follows: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC in the USA.

If you wish to object to participation in this tracking process, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (see https://www.google.de/settings/ads). This setting will be deleted if you deactivate your cookies. Alternatively, you can find out more about the use of cookies from the Digital Advertising Alliance at www.aboutads.info and make your desired settings. Finally, you can set your browser so that you are informed about the use of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

You can find further information about GMP by Google’s privacy policy at the following internet address: https://www.google.de/policies/privacy/

To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for making an objection described above.

13.5 Use of affiliate programs

- Amazon Partner Program (AmazonPartnerNet)
We participate in the "AmazonPartnerNet" partner program of Amazon EU Sarl, 38 avenue John F. Kennedy, L-1855 Luxembourg (hereinafter "Amazon"). In this context, we have placed advertisements on our website as links that lead to offers on various Amazon websites. Amazon uses cookies. These are small text files that are stored on your device in order to be able to trace the origin of orders generated via such links. Among other things, Amazon can recognize that you have clicked on the partner link on our website. This information is required for payment processing between us and Amazon. If the information also contains personal data, the processing described is based on our legitimate financial interest in processing commission payments with Amazon in accordance with Art. 6 Para. 1 lit. f GDPR.
For more information about Amazon's use of data, please see the Amazon.de privacy policy at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401
If you want to block the analysis of user behavior via cookies, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. You can also deactivate interest-based ads on Amazon via the link https://www.amazon.de/gp/dra/info.
To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for making an objection described above.

14) Web analysis services

14.1 etracker (etracker GmbH)

This website uses technologies from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (www.etracker.com) to collect and store data based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 Paragraph 1 Letter f of GDPR. Pseudonymized user profiles can be created and evaluated from this data for the same purpose. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. Among other things, cookies enable the Internet browser to be recognized. The data collected using etracker technologies will not be used to personally identify the visitor to this website without the separate consent of the person concerned, and they will not be merged with personal data about the bearer of the pseudonym. The collection and storage of data can be objected to at any time with effect for the future. To object to the collection and storage of your visitor data in the future, you can obtain an opt-out cookie from etracker using the following link. This will ensure that no visitor data from your browser will be collected and stored by etracker in the future:
https://www.etracker.de/privacy?et=V23Jbb

The opt-out cookie is called "cntcookie" and is set by "etracker". You can find further information about etracker's data protection regulations at the following internet address: https://www.etracker.com/de/datenschutz.html

To the extent legally required, we have obtained your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the instructions above. described possibility to make an objection.

14.2 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) is usually transferred to a Google server and stored there; this may also involve transmission to Google LLC servers in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures that the IP address is anonymized by shortening it and excludes direct personal reference. This extension means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, Google Analytics will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

15) Use of a live chat system

Smartsupp.com (smarsupp.com sro)
This website uses technologies from smartsupp.com, sro, Milady Horakove 13, 60200 Brno, Czech Republic, (www.smartsupp.com) to collect and store anonymized data for the purpose of web analysis and to operate the live chat system, which is used to answer live support requests. User profiles can be created from this anonymized data under a pseudonym. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. The cookies enable the Internet browser to be recognized. If the information collected in this way is personal, the processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.
The data collected using smartsupp.com technologies will not be used to personally identify the visitor to this website without the separate consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym. To avoid the storage of smartsupp.com cookies, you can set your Internet browser so that no more cookies can be stored on your computer in the future or cookies that have already been stored are deleted. However, deactivating all cookies may mean that some functions on our website can no longer be carried out. You can object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future by sending us your objection informally by e-mail to the e-mail address stated in the imprint.

16) Tools and Others

16.1 Borlabs
This website uses the Borlabs cookie consent tool provided by Mr. Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg ("Borlabs"), which sets two technically necessary cookies ("borlabsCookie" and "borlabsCookieUnblockContent") to save your cookie preference. The aforementioned processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in providing cookie preference management for website visitors.
The "Borlabs Cookie" does not process any personal data. The cookie "borlabsCookie" stores your chosen preference that you selected when entering the website. The cookie "borlabsCookieUnblockContent" stores which (external) media/content you always want to have automatically unblocked. If you want to revoke these settings, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked again about your cookie preference.

16.2 Google reCAPTCHA

On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an input has been made by a natural person or has been misused by machine and automated processing. The service includes sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Paragraph 1 Letter f of GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding misuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for making an objection described above.

16.3 Google Customer Reviews (formerly Google Certified Retailer Program)

We work with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to take part in an email survey from Google. If you give your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the purchasing experience on our website. The rating you submit will then be summarized with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. Using Google Customer Reviews may also result in personal data being transferred to Google LLC servers in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

Further information on Google's data protection in connection with the Google Customer Reviews program can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de

For more information about Google Seller Ratings privacy, please visit this link: https://support.google.com/google-ads/answer/2375474

16.4 Applications for job advertisements by email

We advertise currently vacant positions in a separate section on our website, for which interested parties can apply by sending an email to the contact address provided.

Inclusion in the application process requires that applicants provide us with all personal data required for a well-founded and informed assessment and selection along with the application by email.
The information required includes general personal information (name, address, telephone or electronic contact details) and performance-specific evidence of the qualifications required for a position. In addition, health-related information may be required, which must be taken into account in the interests of social protection in the applicant's person under special labor and social law.

Which components an application must contain in order to be considered and in what form these components must be sent by email can be found in the respective job advertisement.

After receiving the application sent using the specified email contact address, we will save the applicant data and evaluate it solely for the purpose of processing the application. For queries that arise during the processing of the application, we will use either the email address provided by the applicant with their application or a specified telephone number, at our discretion.

The legal basis for this processing, including contacting us for further enquiries, is generally Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), within the meaning of which completing the application process is considered to be the initiation of an employment contract.

If, as part of the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severe disability) are requested from applicants, the processing will be carried out in accordance with Art. 9 (2) (b) GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 (1) (h) GDPR if it is carried out for the purposes of healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, for the provision of care or treatment in the health or social sector or for the administration of systems and services in the health or social sector.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his or her application prematurely, the data sent by email and all electronic correspondence, including the original application email, will be deleted after a corresponding notification, at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Para. 1 BDSG) for the purposes of carrying out the employment relationship.

16.5 Online applications via a form

On our website, we offer prospective job applicants the opportunity to apply online using a corresponding form. In order to be included in the application process, applicants must provide us with all the personal data required for a well-founded and informed assessment and selection via the form.

The information required includes general personal information (name, address, telephone or electronic contact details) and performance-specific evidence of the qualifications required for a position. In addition, health-related information may be required, which must be given special consideration under labor and social law in the interests of social protection for the applicant.

When you submit the form, the applicant data will be transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated solely for the purpose of processing the application.
The legal basis for this processing is generally Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), within the meaning of which completing the application process counts as initiating an employment contract.

If, as part of the application process, special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g. health data such as information on severe disability) are requested from applicants, the data will be processed in accordance with Art. 9 Para. 2 lit. b. GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 (1) (h) GDPR if it is carried out for the purposes of healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, for the provision of care or treatment in the health or social sector or for the administration of systems and services in the health or social sector.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his or her application prematurely, the data submitted in the form will be deleted after a corresponding notification, at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligation to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Para. 1 BDSG) for the purposes of carrying out the employment relationship.

17) Rights of the data subject

17.1 The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:

• Right to information in accordance with Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when your data is forwarded to third countries;
• Right to rectification in accordance with Art. 16 GDPR: You have the right to have inaccurate data concerning you rectified without delay and/or to have incomplete data stored by us completed;
• Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved, or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh yours;
• Right to information in accordance with Art. 19 GDPR: If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the responsible party, this party is obliged to inform all recipients to whom the personal data concerning you was disclosed of said rectification, erasure or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure. You have the right to be informed of these recipients.
• Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller, where technically feasible;
• Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation;
• Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

17.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

18) Duration of storage of personal data

The duration for which personal data is stored is determined based on the respective legal basis, the purpose of processing and – if applicable – also on the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of an explicit consent in accordance with Art. 6 (1) (a) GDPR, these data will be stored until the data subject revokes his or her consent.

If there are statutory retention periods for data that are processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after expiry of the retention periods, provided that they are no longer required to fulfill or initiate a contract and/or we no longer have a legitimate interest in continuing to store them.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.