
Privacy Policy
1) Introduction and contact details of the responsible party
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.
1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is SuperCharged Europe Limited, Bessie-Coleman-Str. 13 , Suite 33 , 60549 Frankfurt am Main, Germany, email: hello@ivybears.de. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
2) Data collection when visiting our website
When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
1. The website we visited
2. Date and time of access
3. Amount of data sent in bytes
4. Source/referral from which you accessed this page
5. Browser used
6. Operating system used
7. IP address used (possibly in anonymized form)
The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.
3) Hosting & Content Delivery Network
Hosting by Shopify:
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection policy can be found on the following website: https://www.shopify.de/legal/datenschutz Any further processing on servers other than those mentioned above by Shopify will only take place within the scope described below.
4) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow us to save your website settings (so-called "persistent cookies"). In the latter case, you can find information about the storage duration in your web browser's cookie settings.
If any of the cookies we use process personal data, this processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, in accordance with Article 6(1)(a) GDPR if you have given your consent, or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests in ensuring the best possible website functionality and a user-friendly and effective website experience.
You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them individually, or to block cookies in certain cases or entirely.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Making contact
5.1 Review Reminder via Loox
If you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR during or after your order, we will transmit your email address and, if applicable, other previously collected customer data to the review tool Loox, a service of Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel ("Loox"), so that it can send you a review reminder by email. You can revoke your consent at any time by sending a message to the data controller or to the review platform.
The European Commission's adequacy decision ensures an adequate level of data protection for the transfer of data to Loox in Israel.
We have concluded a data processing agreement with Loox, obligating Loox to protect our customers' data and not to disclose it to third parties. This agreement can be viewed here: https://loox.io/legal/data_processing_addendum.pdf More information about Loox's data protection policy can be found at https://loox.io/legal/privacy_policy_merchants.pdf
5.2 When you contact us (e.g., via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.
6) Use of customer data for direct marketing
6.1 Registration for our email newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send you the newsletter is your email address. Providing any further information is voluntary and is used to personalize our communications with you. We use the double opt-in procedure for newsletter distribution, which ensures that you only receive newsletters after you have explicitly confirmed your consent to receive them by clicking a verification link sent to the email address you provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. We store your IP address, which is registered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller named above. After you unsubscribe, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this privacy policy.
6.2 Sending the email newsletter to existing customers
If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our product range via email. According to Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. The data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6 Paragraph 1 Letter f of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the data controller named at the beginning of this document. You will only incur transmission costs according to the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.
6.3 Newsletter Distribution via Klaviyo
Our email newsletters are distributed via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA ( http://www.klaviyo.com/ ), to whom we transfer the data you provided when subscribing to the newsletter. This transfer is based on Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to and stored on a Klaviyo server in the USA.
Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.
To protect your data in the USA, we have entered into a data processing agreement with Klaviyo, in which Klaviyo commits to protecting our users' data, processing it on our behalf in accordance with its privacy policy, and, in particular, not disclosing it to third parties.
You can view Klaviyo's privacy policy here: https://www.klaviyo.com/legal/privacy
6.4 If you abandon your purchase with us before completing your order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart.
The only mandatory information required to send this reminder is your email address. Providing any further information is voluntary and may be used to personalize the email. We use a double opt-in procedure for sending these emails, which ensures that you will only receive a notification after you have explicitly confirmed your consent by clicking a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR for sending you shopping cart reminders. We store your IP address, registered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you register for our email notification service is used strictly for this purpose. You can unsubscribe from shopping cart reminders at any time by sending a message to the data controller named above.
After you unsubscribe, your email address will be immediately deleted from our mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this statement.
7) Data processing for order processing
7.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the ordering process (name, address, email address) in order to personally inform you about upcoming updates within the legally prescribed period, in accordance with our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR, via a suitable communication channel (e.g., by post or email). Your contact details will be used strictly for the purpose of notifying you about updates we owe you and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who support us in whole or in part in fulfilling concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
7.2 Transfer of personal data to shipping service providers
-
DHL: If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will forward your email address to DHL before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, we will only forward the recipient's name and delivery address to DHL. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider DHL.
7.3 Use of payment service providers (payment services)
-
Klarna: When selecting a Klarna payment service, payment processing is handled by Klarna Bank AB (publ), https://www.klarna.com/de/ , Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number and IP address, possibly also your date of birth and bank details) as well as data related to the order (e.g. invoice amount, items, delivery method) will be forwarded to Klarna for the purpose of identity and credit checks, provided you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a GDPR during the ordering process. You can see which credit agencies your data may be forwarded to here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies . The credit report may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the data used to calculate the score values, but is not the only factor. Klarna uses the information obtained about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You can withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual processing of payments. Your personal data will be processed in accordance with applicable data protection regulations and as described in Klarna's Privacy Policy for data subjects residing in Germany (https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy ) and for data subjects residing in Austria (https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy ). - Mollie
If you choose a payment method offered by the payment service provider Mollie, payment processing will be handled by Mollie BV, Keizersgracht 313, 1016 EE Amsterdam, Netherlands, to whom we will transfer the information you provided during the ordering process, along with information about your order (name, address, IBAN, BIC, invoice amount, currency, and transaction number) in accordance with Article 6 Paragraph 1 Letter b GDPR. Your data will be transferred exclusively for the purpose of payment processing with the payment service provider Mollie and only to the extent necessary for this purpose.
-
PayPal: When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we will transfer your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. The transfer of data is carried out in accordance with Article 6 Paragraph 1 Letter b GDPR and only to the extent necessary for payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transferred to credit agencies in accordance with Article 6 Paragraph 1 Letter f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method. The credit check may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the data used to calculate the score values, but is not the only factor. For further information on data protection, including the credit reference agencies used, please see PayPal's Privacy Statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. You can object to this processing of your data at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.
8) Online Marketing
8.1 Facebook Pixel for Creating Custom Audiences with Advanced Matching (with Cookie Consent Tool)
Within our online services, we use the so-called "Facebook Pixel" of the social network Facebook in advanced matching mode. This pixel is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
Based on the user's explicit consent, when a user clicks on an advertisement placed by us and displayed on Facebook, the Facebook Pixel adds a parameter to the URL of our linked page. This URL parameter is then stored in the user's browser via a cookie, which is set by our linked page itself. This cookie also collects specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during processes like purchases, account logins, or registrations (advanced matching). The cookie is then read by the Facebook Pixel and enables the transfer of data, including specific customer data, to Facebook.
Using the Facebook Pixel with advanced matching, Facebook can precisely define visitors to our website as a target audience for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with advanced matching to display the Facebook Ads we place only to Facebook users who have shown an interest in our website or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites they have visited) that we transmit to Facebook (so-called "Custom Audiences"). We also use the Facebook Pixel with advanced matching to ensure that our Facebook Ads correspond to the potential interests of users and are not perceived as intrusive. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of the Facebook Pixel, the enhanced matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook, enabling a connection to the respective user profile and allowing Facebook to use the data for its own advertising purposes, in accordance with the Facebook Data Policy ( https://www.facebook.com/about/privacy/) .) can be used. The data may enable Facebook and its partners to display advertisements on and off Facebook.
This processing only takes place with your explicit consent in accordance with Article 6(1)(a) GDPR.
The information generated by Facebook is generally transferred to and stored on a Facebook server; this may also involve transfer to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
8.2 - Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users.
The use of Google Ads may also involve the transfer of personal data to the servers of Google LLC in the USA.
Details regarding the processing triggered by Google Ads Conversion Tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites. All processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. Furthermore, you can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
To target advertising more effectively to users whose data we have obtained through business or similar relationships, we use a customer matching feature within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not gain access to unencrypted data; instead, it automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then only use the encrypted information to associate it with existing Google accounts that the data subjects have created. This enables the display of personalized advertising across all Google services linked to the respective Google account.
Customer data is only transmitted to Google if you have given us your explicit consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures regarding the Customer Match feature can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182 Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
9) Web analytics services
Google (Universal) Analytics:
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by truncation and prevents direct identification of individuals. With this extension, your IP address is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Furthermore, Google Analytics allows the creation of statistics about the age, gender, and interests of website visitors through a special function called "demographics." This is based on an analysis of interest-based advertising and the use of third-party information. This allows for the definition and differentiation of website user groups for the purpose of targeted marketing. However, the data collected via "demographics" cannot be attributed to any specific individual.
Details regarding the processing initiated by Google Analytics and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites. All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
10) Retargeting/ Remarketing/ Referral Advertising
Pinterest Retargeting Pixel:
This website uses a pixel (Pinterest tag) from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”) is integrated. Using the pixel, information about the browsing behavior of website visitors can be collected, stored, and analyzed in pseudonymized form. This information can be associated with the user by using other information that Pinterest has stored about the user, for example, due to their account ownership on the social network “Pinterest”. Pinterest analyzes browsing behavior using an algorithm and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest can also combine the information collected via the pixel with other information that Pinterest has collected from other websites and/or in connection with the use of the social network “Pinterest”, thus creating pseudonymized user profiles. Under no circumstances, however, can the collected information be used to personally identify visitors to this website.
All processing described above, in particular the setting of cookies for reading information on the user's device, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a GDPR. You have given your explicit consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Pinterest Tag Conversion Tracking
This website uses the "Pinterest Tag" conversion tracking technology from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). If you have reached our website from a Pin on Pinterest, we place a cookie on your computer that interacts with a "tag" also implemented, in the form of JavaScript code from Pinterest. Cookies are small text files that are stored on your device. These cookies expire after 180 days and are not used for personal identification. If the user is redirected from a Pin on Pinterest to pages of this website and the cookie has not yet expired, the tag records and tracks certain user actions predefined by us (e.g., completed transactions, leads, search queries on the website, visits to product pages). When you perform such an action, your browser sends an HTTP request from the Pinterest cookie to Pinterest's server, transmitting certain information about the action (including the type of action, time, and browser type of the device).
This transmission allows Pinterest to compile statistics about user behavior on our website after being redirected from a Pinterest pin, which we use to optimize our offerings. However, we do not receive any information that can personally identify users.
All processing described above, in particular the setting of cookies to read information on the device being used, will only take place if you have given us your explicit consent in accordance with Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Snap Pixel (Snapchat)
This website uses the "Snapchat Pixel," a tracking technology from the social network Snapchat, operated by Snap Inc., 63 Market Street, Venice, CA 90291, USA ("Snapchat"). If you have reached our website via a Snapchat advertisement, we will place a cookie on your computer that interacts with a JavaScript code also implemented by Snapchat. Cookies are small text files that are stored on your device. If the user is redirected from a Snapchat ad to pages on this website, the pixel records and tracks certain user actions that we have predefined (e.g., completed transactions, leads, website search queries, product page views). When such an action is performed, your browser sends an HTTP request from the cookie to Snapchat's server via the Snapchat Pixel, transmitting certain information about the action (including the type of action, time, and browser type of the device).
This data transfer allows Snapchat to compile statistics on user behavior on our website after being redirected from an advertisement, which we use to optimize our offerings. However, we do not receive any personally identifiable information. All processing described above, in particular the setting of cookies to read information on the user's device, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Snapchat for the use of the Snapchat Pixel ("Data Processing Agreement," available at https://www.snap.com/es/terms/data-processing-agreement ), which obligates Snapchat to protect the data of our website visitors and not to disclose it to third parties. Snapchat generally transfers collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
TikTok Pixel
This website uses the "TikTok Pixel," a tracking technology of the social network "TikTok" operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). Using cookies (small text files stored on the user's device), information about browsing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored and analyzed there, in order to then enable the display of interest-based and personalized product recommendations on TikTok. The information collected and processed in this pseudonymized form generally includes the device ID, device type, timestamp, operating system used, and IP address. This information can be linked to the user's identity using other information that TikTok has stored about the user, for example, due to their ownership of an account on the social network "TikTok." TikTok can also combine the information collected via the pixel with other information that TikTok has collected from other websites and/or in connection with the use of the social network "TikTok" to create pseudonymized user profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok pixel also allows us to track the effectiveness of advertisements on TikTok. If a user is redirected from a TikTok ad to pages on this website and the cookies have not yet expired, the pixel records and tracks certain user actions that we have predefined (e.g., completed transactions, leads, website search queries, product page views). When such an action is performed, your browser sends an HTTP request from the cookie to TikTok's server via the TikTok pixel, transmitting certain information about the action. This transmission allows TikTok to compile statistics on user behavior on our website after redirection from a TikTok ad, which we use to optimize our offerings.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our website visitors and not to pass it on to third parties. TikTok generally transfers collected information outside the European Economic Area and relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
11) Page functionalities
11.1 Job Applications via Email
On our website, we list current job vacancies in a separate section. Interested candidates can apply for these positions by emailing the provided contact address. To be included in the application process, applicants must provide us with all personal data necessary for a thorough and informed assessment and selection, along with their application via email.
This includes general personal information (name, address, telephone or email contact details) as well as performance-related documentation demonstrating the qualifications required for the position. Health-related information may also be required, which, in the interest of the applicant's social protection, must be given special consideration under labor and social security law.
The specific components required for an application to be considered, and the format in which these components must be submitted via email, can be found in the respective job posting.
Upon receipt of the application sent using the provided email contact address, the applicant's data will be stored and evaluated solely for the purpose of processing the application. For any follow-up questions that may arise during the application process, we will use, at our discretion, either the email address or telephone number provided by the applicant with their application.
The legal basis for this processing, including contacting applicants for follow-up questions, is generally Article 6(1)(b) GDPR (in Germany, in conjunction with Section 26(1) BDSG), according to which the application process is considered the initiation of an employment contract.
If, during the application process, special categories of personal data within the meaning of Article 9(1) GDPR (e.g., health data such as information about severe disability) are requested from applicants, the processing is carried out in accordance with Article 9(2)(b) GDPR so that we can exercise our rights and fulfill our obligations arising from employment law and social security and social protection law.
Alternatively or cumulatively, the processing of special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for the purposes of preventive or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnosis, for the provision of health or social care or treatment or for the management of health or social care systems and services.
If the applicant is not selected during the evaluation process described above, or if an applicant withdraws their application prematurely, their data transmitted by email, as well as all electronic correspondence, including the original application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the provided data will be further processed for the purposes of carrying out the employment relationship, based on Article 6 Paragraph 1 Letter b GDPR (in conjunction with Section 26 Paragraph 1 BDSG for processing in Germany).
11.2 Google reCAPTCHA
This website uses the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function primarily serves to distinguish whether an entry is made by a natural person or is being misused through automated processing. The service involves sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google. This is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in establishing individual accountability on the internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA.
Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/ Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above. For the transfer of data from the EU to the USA, Google relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
12) Tools and other items
-
DATEV: For our accounting, we use the cloud-based accounting software from DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany ("DATEV"). DATEV processes incoming and outgoing invoices, as well as, where applicable, our company's bank transactions, in order to automatically record invoices, match them to transactions, and generate financial accounting records in a semi-automated process. If personal data is processed in this context, the processing is carried out in accordance with Article 6 Paragraph 1 Letter f GDPR based on our legitimate interest in the efficient organization and documentation of our business transactions. Further information about DATEV, the automated processing of data, and the data protection regulations can be found at https://www.datev.de/web/de/m/ueber-datev/datenschutz/
13) Rights of the data subject
13.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising these rights:
-
Right of access pursuant to Art. 15 GDPR;
-
Right to rectification pursuant to Article 16 GDPR;
-
Right to erasure pursuant to Article 17 GDPR;
-
Right to restriction of processing pursuant to Article 18 GDPR;
-
Right to information pursuant to Article 19 GDPR;
-
Right to data portability pursuant to Art. 20 GDPR;
-
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
-
Right to lodge a complaint pursuant to Article 77 GDPR.
13.2 Right of objection
If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future. If you exercise your right to object, we will cease processing the data in question. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above. If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
14) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his or her consent.
If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of a contract or for initiating a contract and/or we no longer have a legitimate interest in its continued storage.
When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

