Privacy Policy

This privacy policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") in the context of providing our services and within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profile (hereinafter collectively referred to as "online offering"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Controller

Mavelos SARL
111, Grand Rue
L-9051 Ettelbruck
Luxembourg

Shop@cbd-lux.lu

Types of data processed

- Inventory data (e.g., personal master data, names, or addresses).
- Contact data (e.g., email, phone numbers).
- Content data (e.g., text input, photographs, videos).
- Usage data (e.g., visited websites, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).

Categories of data subjects

Visitors and users of the online offering (hereinafter we also collectively refer to the data subjects as "users").

Purpose of processing

- Provision of the online offering, its functions, and content.
- Responding to contact requests and communicating with users.
- Security measures.
- Reach measurement/marketing

Terms used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is broad and covers virtually every handling of data.

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

The "controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you about the legal bases of our data processing. For users within the scope of the General Data Protection Regulation (GDPR), i.e., the EU and the EEA, the following applies if the legal basis is not mentioned in the privacy policy:
The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR;
The legal basis for processing for the performance of our services and the implementation of contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b GDPR;
The legal basis for processing for the fulfillment of our legal obligations is Art. 6 para. 1 lit. c GDPR;
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
The legal basis for the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Art. 6 para. 1 lit. e GDPR.
The legal basis for processing for the protection of our legitimate interests is Art. 6 para. 1 lit. f GDPR.
The processing of data for purposes other than those for which they were collected is determined by the provisions of Art. 6 para. 4 GDPR.
The processing of special categories of data (in accordance with Art. 9 para. 1 GDPR) is determined by the provisions of Art. 9 para. 2 GDPR.

Security measures

In accordance with legal requirements and taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as access, input, disclosure, ensuring availability, and their separation. Furthermore, we have established procedures that ensure the exercise of data subjects' rights, the deletion of data, and a reaction to data endangerment. We also consider the protection of personal data already during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by privacy-friendly default settings.

Cooperation with processors, joint controllers, and third parties

If, in the course of our processing, we disclose data to other persons and companies (processors, joint controllers, or third parties), transmit them to them, or otherwise grant them access to the data, this is only done on the basis of a legal permission (e.g., if a transmission of the data to third parties, such as payment service providers, is necessary for the performance of the contract), users have consented, a legal obligation provides for this, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).

If we disclose, transmit, or otherwise grant access to data to other companies within our group of companies, this is done in particular for administrative purposes as a legitimate interest and, beyond that, on a basis that complies with legal requirements.

Transfers to third countries

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA), or the Swiss Confederation) or this occurs in the context of using third-party services or disclosing or transmitting data to other persons or companies, this will only happen if it is for the fulfillment of our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. Subject to express consent or contractually required transfer, we only process or have data processed in third countries with a recognized level of data protection, which includes US processors certified under the "Privacy Shield," or on the basis of special guarantees, such as contractual obligation through so-called standard protection clauses of the EU Commission, the presence of certifications, or binding internal data protection regulations (Art. 44 to 49 GDPR, EU Commission information page).

Rights of the data subjects

Right to information: You have the right to request confirmation as to whether data concerning you is being processed and to information about this data as well as further information and a copy of the data in accordance with legal requirements.

Right to rectification: You have the right, in accordance with legal requirements, to request the completion of data concerning you or the rectification of inaccurate data concerning you.

Right to erasure and restriction of processing: You have the right, in accordance with legal requirements, to demand that relevant data be deleted immediately, or, alternatively, in accordance with legal requirements, to request a restriction of the processing of the data.

Right to data portability: You have the right, in accordance with legal requirements, to receive data concerning you that you have provided to us in a structured, common, and machine-readable format or to request its transmission to another controller.

Right to lodge a complaint with a supervisory authority: You also have the right, in accordance with legal requirements, to lodge a complaint with the competent supervisory authority.

Right to withdraw consent

You have the right to revoke consents granted with effect for the future.

Right to object

Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. If personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

Cookies and right to object to direct marketing

Cookies are small files that are stored on users' computers. Various information can be stored within the cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit within an online offering. Temporary cookies, or "session cookies" or "transient cookies," are cookies that are deleted after a user leaves an online offering and closes their browser. Such a cookie can store, for example, the content of a shopping cart in an online shop or a login status. "Permanent" or "persistent" cookies are cookies that remain stored even after the browser is closed. For example, the login status can be saved if users visit them again after several days. Similarly, the interests of users, which are used for reach measurement or marketing purposes, can be stored in such a cookie. "Third-party cookies" are cookies that are offered by providers other than the controller operating the online offering (otherwise, if it is only their cookies, they are called "first-party cookies").

We may use temporary and permanent cookies and clarify this in our privacy policy.

If we ask users for consent to the use of cookies (e.g., within the framework of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the personal cookies of users are processed in accordance with the following explanations within this privacy policy on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR) or if the use of cookies is necessary for the provision of our contract-related services, in accordance with Art. 6 para. 1 lit. b GDPR, or if the use of cookies is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, in accordance with Art. 6 para. 1 lit. e GDPR.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. The exclusion of cookies can lead to functional restrictions of this online offering.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by deactivating them in the browser settings. Please note that in this case, not all functions of this online offering may be able to be used.

Erasure of data

The data processed by us will be deleted or their processing restricted in accordance with legal requirements. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and no legal retention obligations prevent their deletion.

If the data is not deleted because it is necessary for other legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

Changes and updates to the privacy policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We will adapt the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or any other individual notification.

 

Business-related processing

 

Additionally, we process
- Contract data (e.g., subject matter of contract, term, customer category).
- Payment data (e.g., bank details, payment history)
from our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

 

Order processing in the online shop and customer account

 

We process our customers' data within the scope of the ordering processes in our online shop to enable them to select and order the chosen products and services, as well as to facilitate payment and delivery or execution.

The processed data includes inventory data, communication data, contract data, payment data, and the data subjects include our customers, prospective customers, and other business partners. The processing is carried out for the purpose of providing contractual services within the operation of an online shop, billing, delivery, and customer services. In doing so, we use session cookies for storing shopping cart contents and permanent cookies for storing the login status.

Processing is carried out for the fulfillment of our services and the execution of contractual measures (e.g., carrying out ordering processes) and insofar as it is legally required (e.g., legally required archiving of business transactions for commercial and tax purposes). The information marked as required is necessary for the establishment and fulfillment of the contract. We disclose data to third parties only in the context of delivery, payment, or within the scope of legal permissions and obligations, as well as when this occurs on the basis of our legitimate interests, which we inform you about in this privacy policy (e.g., to legal and tax advisors, financial institutions, freight companies, and authorities).

Users can optionally create a user account where they can, in particular, view their orders. During registration, users are informed of the required mandatory information. User accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data related to the user account will be deleted, unless its retention is necessary for commercial or tax reasons. Information in the customer account remains until its deletion, with subsequent archiving in the event of a legal obligation or our legitimate interests (e.g., in the case of legal disputes). It is up to the users to secure their data upon termination before the end of the contract.

As part of registration and subsequent logins, as well as the use of our online services, we store the IP address and the time of each user action. The storage is based on our legitimate interests, as well as the users' interest in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless it is necessary to pursue our legal claims as a legitimate interest or there is a legal obligation to do so.

Deletion takes place after the expiry of statutory warranty and other contractual rights or obligations (e.g., payment claims or performance obligations arising from contracts with customers), whereby the necessity of retaining the data is reviewed every three years; in the event of retention due to statutory archiving obligations, deletion takes place after their expiry.

 

External Payment Service Providers

 

We use external payment service providers through whose platforms users and we can carry out payment transactions. These payment service providers may include, each with a link to their privacy policy:

Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full),

Klarna (https://www.klarna.com/de/datenschutz/),

Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/),

Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/),

Visa (https://www.visa.de/datenschutz),

Mastercard (https://www.mastercard.de/de-de/datenschutz.html),

American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html),

Stripe (https://stripe.com/de/privacy).

In fulfilling contracts, we use payment service providers on the basis of Art. 6 para. 1 lit. b. GDPR. Furthermore, we use external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR, to offer our users effective and secure payment options.

The data processed by the payment service providers includes inventory data, such as name and address, bank details, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, sum, and recipient-related information. The information is necessary to carry out the transactions. However, the entered data is processed and stored only by the payment service providers. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative notification of the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. This transmission serves the purpose of identity and credit checks. For this, we refer to the terms and conditions and data protection notices of the payment service providers.

The terms and conditions and data protection notices of the respective payment service providers, which are available on the respective websites or transaction applications, apply to payment transactions. We also refer to these for further information and for asserting revocation, information, and other data subject rights.

 

Participation in Affiliate Partner Programs

 

Within our online offering, we use industry-standard tracking measures based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering) pursuant to Art. 6 (1) lit. f GDPR, insofar as these are necessary for the operation of the affiliate system. Below, we explain the technical background to users.

The services offered by our contractual partners can also be advertised and linked on other websites (so-called affiliate links or after-buy systems, e.g., if links or third-party services are offered after a contract has been concluded). The operators of the respective websites receive a commission if users follow the affiliate links and subsequently make use of the offers.

In summary, it is necessary for our online offering that we can track whether users who are interested in affiliate links and/or the offers available from us subsequently make use of the offers at the instigation of the affiliate links or our online platform. For this purpose, the affiliate links and our offers are supplemented with certain values that can be part of the link or otherwise, e.g., set in a cookie. These values include, in particular, the referring website (referrer), time, an online identifier of the operators of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user, as well as tracking-specific values such as advertising material ID, partner ID, and categorizations.

The online identifiers of the users we use are pseudonymous values. This means that the online identifiers themselves do not contain any personal data such as names or email addresses. They only help us to determine whether the same user who clicked on an affiliate link or was interested in an offer via our online offering has accepted the offer, i.e., for example, concluded a contract with the provider. However, the online identifier is personal insofar as the partner company and we have the online identifier together with other user data. Only in this way can the partner company inform us whether that user has accepted the offer and we can, for example, pay out the bonus.

 

Privacy Policy for the Application Process

 

The application process requires applicants to provide us with the data necessary for their assessment and selection. What information is required can be found in the job description or, in the case of online forms, from the information provided there.
As a rule, the required information includes personal details such as name, address, contact details, and proof of the qualifications necessary for a position. Upon request, we will gladly inform you of what information is required.
If available, applicants can submit their applications to us via an online form. The data is transmitted to us encrypted according to the state of the art. Applicants can also send us their applications via email. However, please note that emails are generally not sent encrypted on the internet. As a rule, emails are encrypted during transmission but not on the servers from which they are sent and received. We therefore cannot assume responsibility for the transmission path of the application between the sender and receipt on our server. Applicants are welcome to contact us about the method of submitting the application or send us the application by post.
The data provided by the applicants can be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is unsuccessful, the applicants' data will be deleted. The applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Deletion will take place, subject to a legitimate revocation by the applicants, at the latest after a period of six months, so that we can answer any follow-up questions about the application and comply with our proof obligations arising from the regulations on equal treatment of applicants. Invoices for any travel expense reimbursement will be archived in accordance with tax regulations.
The data of applicants will be processed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR (application process as pre-contractual or contractual relationship). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g., health data, such as severe disability status or ethnic origin) are requested from applicants in the application process, so that the controller or the data subject can exercise his or her rights arising from employment law and the law of social security and social protection and fulfill his or her obligations in this regard, their processing takes place according to Art. 9 para. 2 lit. b. GDPR, in the case of the protection of vital interests of the applicants or other persons pursuant to Art. 9 para. 2 lit. c. GDPR or for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, for medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services pursuant to Art. 9 para. 2 lit. h. GDPR. In the case of a voluntary consent-based communication of special categories of data, their processing takes place on the basis of Art. 9 para. 2 lit. a. GDPR.
In the case of processing applicant data in Germany, §§ 22, 26 BDSG also apply specifically.

 

Registration Function

 

Users can create a user account. During registration, the required mandatory information is communicated to the users and processed on the basis of Art. 6 para. 1 lit. b GDPR for the purpose of providing the user account. The processed data includes, in particular, login information (name, password, and an email address). The data entered during registration will be used for the purposes of using the user account and its purpose.

Users can be informed by email about information relevant to their user account, such as technical changes. If users have terminated their user account, their data related to the user account will be deleted, subject to a statutory retention obligation. It is up to the users to secure their data upon termination before the end of the contract. We are entitled to irrevocably delete all user data stored during the contract term.

As part of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of each user action. The storage is based on our legitimate interests, as well as the users' interest in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c. GDPR. IP addresses are anonymized or deleted after 7 days at the latest.

 

Comments and Contributions

 

If users leave comments or other contributions, their IP addresses may be stored for 7 days based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. This is done for our security, in case someone leaves unlawful content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we ourselves could be held liable for the comment or contribution and are therefore interested in the identity of the author.

Furthermore, we reserve the right to process user information for spam detection based on our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR.

On the same legal basis, in the case of surveys, we reserve the right to store the IP addresses of users for their duration and to use cookies to prevent multiple votes.

The personal information provided in comments and contributions, any contact and website information, as well as the content information, will be permanently stored by us until the user objects.

 

Comment Subscriptions

 

Subsequent comments can be subscribed to by users with their consent according to Art. 6 para. 1 lit. a GDPR. Users receive a confirmation email to verify that they are the owner of the entered email address. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information about the revocation options. For the purpose of proving the users' consent, we store the registration time along with the users' IP address and delete this information when users unsubscribe from the subscription.

You can cancel the receipt of our subscription at any time, i.e., revoke your consent. We may store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, in order to be able to prove a previously given consent. The processing of this data will be limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is simultaneously confirmed.

 

Akismet Anti-Spam Check

 

Our online offering uses the "Akismet" service, provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR. With the help of this service, comments from real people are distinguished from spam comments. For this purpose, all comment details are sent to a server in the USA, where they are analyzed and stored for comparison purposes for four days. If a comment has been classified as spam, the data will be stored beyond this period. This information includes the entered name, email address, IP address, comment content, referrer, information about the browser used and the computer system, and the time of entry.

Further information on the collection and use of data by Akismet can be found in Automattic's privacy policy: https://automattic.com/privacy/.

Users are welcome to use pseudonyms or refrain from entering their name or email address. You can completely prevent the transmission of data by not using our comment system. That would be a shame, but unfortunately we don't see any other equally effective alternatives.

 

Retrieval of Profile Pictures from Gravatar

 

Within our online offering, and particularly in our blog, we use the Gravatar service from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.

Gravatar is a service where users can register and store profile pictures and their email addresses. If users leave posts or comments with the respective email address on other online presences (especially in blogs), their profile pictures can be displayed next to the posts or comments. For this purpose, the email address provided by the users is transmitted to Gravatar in an encrypted form to check if a profile is stored for it. This is the sole purpose of transmitting the email address, and it is not used for other purposes but is then deleted.

The use of Gravatar is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR, as we use Gravatar to offer authors of posts and comments the opportunity to personalize their contributions with a profile picture.

By displaying the images, Gravatar learns the IP address of the users, as this is necessary for communication between a browser and an online service. Further information on the collection and use of data by Gravatar can be found in Automattic's privacy policy: https://automattic.com/privacy/.

If users do not want a user picture linked to their email address on Gravatar to appear in the comments, they should use an email address not stored on Gravatar for commenting. We also point out that it is possible to use an anonymous or no email address if users do not wish their email address to be sent to Gravatar. Users can completely prevent the transmission of data by not using our comment system.

 

Retrieval of Emojis and Smileys

 

Within our WordPress blog, graphical emojis (or smileys), i.e., small graphical files that express feelings, are used and are obtained from external servers. The providers of these servers collect the IP addresses of the users. This is necessary so that the emoji files can be transmitted to the users' browsers. The emoji service is offered by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Automattic's privacy policy: https://automattic.com/privacy/. The server domains used are s.w.org and twemoji.maxcdn.com, which, to our knowledge, are so-called content delivery networks, i.e., servers that only serve to quickly and securely transmit the files, and the personal data of users are deleted after transmission.

The use of emojis is based on our legitimate interests, i.e., interest in an attractive design of our online offering in accordance with Art. 6 para. 1 lit. f. GDPR.

 

Contacting Us

 

When contacting us (e.g., via contact form, email, telephone, or social media), the user's details are processed to handle the contact request and its processing in accordance with Art. 6 para. 1 lit. b. (within the scope of contractual/pre-contractual relations), Art. 6 para. 1 lit. f. (other inquiries) GDPR. The user's details may be stored in a Customer Relationship Management system ("CRM system") or comparable inquiry organization.

We delete inquiries when they are no longer necessary. We review the necessity every two years; statutory archiving obligations also apply.

 

Communication via WhatsApp Messenger

 

We use WhatsApp Messenger for communication purposes and ask you to observe the following information regarding its functionality, encryption, risks of WhatsApp, use of metadata within the Facebook company group, and your objection options.

You do not have to use WhatsApp and can contact us through alternative means, e.g., via telephone or email. Please use the contact options provided to you or use the contact options listed on our website.
WhatsApp (WhatsApp Inc. WhatsApp Legal 1601 Willow Road Menlo Park, California 94025, USA) is a US-American service, which means that the data you transmit via WhatsApp may first be transferred to WhatsApp in the USA before being forwarded to us.

However, WhatsApp is certified under the Privacy Shield Agreement and therefore assures compliance with European and Swiss data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG&status=Active).
WhatsApp also assures that communication content (i.e., the content of your message and attached images) is end-to-end encrypted. This means that the content of messages is not viewable, not even by WhatsApp itself. You should always use an up-to-date version of WhatsApp to ensure the encryption of message content.

However, we inform our communication partners that while WhatsApp cannot see the content, it can find out that and when communication partners communicate with us, as well as process technical information about the device used by the communication partners and, depending on their device settings, also location information (so-called metadata). Except for the encrypted content, a transmission of communication partners' data within the Facebook company group is possible, especially for the purposes of optimizing the respective services and security. Communication partners should also assume, at least as long as they have not objected, that their data processed by WhatsApp may be used for marketing purposes or for displaying user-tailored advertising.

If we ask communication partners for consent before communicating with them via WhatsApp, the legal basis for our processing of their data is Art. 6 para. 1 lit. a. GDPR. In other cases, if we do not ask for consent and they, for example, contact us on their own initiative, we use WhatsApp in relation to our contractual partners and within the scope of contract initiation as a contractual measure in accordance with Art. 6 para. 1 lit. b. GDPR and in the case of other interested parties and communication partners based on our legitimate interests in fast and efficient communication and fulfilling the needs of our communication partners for communication via messengers in accordance with Art. 6 para. 1 lit. f. GDPR.

Further information on the purposes, types, and scope of data processing by WhatsApp, as well as the related rights and settings for protecting your privacy, can be found in WhatsApp's privacy policy: https://www.whatsapp.com/legal.

You can object to communicating with us via WhatsApp at any time. In the case of subscribing to messages (also known as "broadcasts") via WhatsApp, you can delete our respective phone number from your contacts and ask us to remove your contact from our directory. For ongoing individual inquiries or communications, you can also ask us not to continue the communication via WhatsApp and to delete the communication content.

In the case of communication via WhatsApp, we delete WhatsApp messages as soon as we can assume that we have answered any user inquiries, if no reference to a previous conversation is expected, and if there are no statutory retention obligations preventing deletion.

Furthermore, we point out that we do not transmit the contact data provided to us to WhatsApp without your consent (e.g., by initiating contact with you via WhatsApp).

Finally, we would like to point out that, for your safety, we reserve the right not to answer inquiries via WhatsApp. This is the case, for example, if contractual internal matters require special confidentiality or if an answer via messenger does not meet formal requirements. In such cases, we refer you to more appropriate communication channels.

 

Communication via Facebook Messenger

 

We use Facebook Messenger for communication purposes and ask you to observe the following information regarding its functionality, encryption, risks of Facebook Messenger, use of metadata within the Facebook company group, and your objection options.
You do not have to use Facebook Messenger and can contact us through alternative means, e.g., via telephone or email. Please use the contact options provided to you or use the contact options listed on our website.

Facebook Messenger is offered by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, whereby the data entered and otherwise collected during communication are processed in the USA by Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA.

However, Facebook is certified under the Privacy Shield Agreement and therefore assures compliance with European and Swiss data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Facebook also assures that communication content (i.e., the content of your message and attached images) is unreadable and offers end-to-end encryption of the content. This means that the content of messages is not viewable, not even by Facebook itself. However, end-to-end encryption requires activation, which you must enable in your Messenger settings under the menu item "Secret Conversations". You should always use an up-to-date version of Facebook Messenger to ensure the encryption of message content.

We inform our communication partners that even with activated encryption, Facebook can find out that and when communication partners communicate with us, as well as process technical information about the device used by the communication partners and, depending on their device settings, also location information (so-called metadata). Except for the encrypted content, a transmission of communication partners' data within the Facebook company group is possible, especially for the purposes of optimizing the respective services and security. Communication partners should also assume, at least as long as they have not objected, that their data processed by Facebook Messenger may be used for marketing purposes or for displaying user-tailored advertising.

If we ask communication partners for consent before communicating with them via Facebook Messenger, the legal basis for our processing of their data is Art. 6 para. 1 lit. a. GDPR. In other cases, if we do not ask for consent and they, for example, contact us on their own initiative, we use WhatsApp in relation to our contractual partners and within the scope of contract initiation as a contractual measure in accordance with Art. 6 para. 1 lit. b. GDPR and in the case of other interested parties and communication partners based on our legitimate interests in fast and efficient communication and fulfilling the needs of our communication partners for communication via messengers in accordance with Art. 6 para. 1 lit. f. GDPR.

Further information on the purposes, types, and scope of data processing by Facebook, as well as the related rights and settings for protecting your privacy, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy.

You can object to communicating with us via Facebook Messenger at any time and ask us not to continue the communication via Facebook Messenger and to delete the communication content. We delete Facebook messages as soon as we can assume that we have answered any user inquiries, if no reference to a previous conversation is expected, and if there are no statutory retention obligations preventing deletion.

Finally, we would like to point out that, for your safety, we reserve the right not to answer inquiries via Facebook Messenger. This is the case, for example, if contractual internal matters require special confidentiality or if an answer via messenger does not meet formal requirements. In such cases, we refer you to more appropriate communication channels.

 

Chatbot in Facebook Messenger

 

We offer a "chatbot" as a communication option. The chatbot is software that answers user questions or informs them via messages. Our chatbot is available via the "Facebook Messenger" platform.

When you interact with our chatbot, we may process your personal data. In this case, your Facebook ID is stored in our system, and we can identify which users interact with our chatbot and when. We also store the content of your conversation exchanged with the chatbot. Furthermore, we automatically receive access to your "public information" stored on Facebook. This includes your name, profile and cover picture, gender, networks (e.g., school or workplace), username (Facebook URL), and user ID (Facebook ID). We only use this information to operate our chatbot, e.g., so that it can address you personally.

If you activate regular messages with the chatbot, you have the option to unsubscribe from the information at any time in the future. The chatbot will inform you how and with which terms you can unsubscribe from messages. By unsubscribing from chatbot messages, your data will be deleted from the list of message recipients. Chat logs are anonymized by us, meaning usernames and user IDs are automatically deleted or anonymized.

We use the aforementioned information to operate our chatbot, e.g., to address you personally, to answer your inquiries to the chatbot, to transmit any requested content, and to improve our chatbot (e.g., to "teach" it answers to frequently asked questions or to identify unanswered inquiries).

We use the chatbot partly on the basis of Art. 6 para. 1 lit. a. GDPR, if we obtain the users' consent for its use (this applies to cases where users are asked for consent, e.g., for the chatbot to send them regular messages). If we use the chatbot to answer user inquiries about our services or our company, this is done in accordance with Art. 6 para. 1 lit. b. GDPR. Otherwise, we use the chatbot based on our legitimate interests in optimizing the chatbot, efficient and pleasant addressing of users for information, advertising, and marketing purposes, as well as increasing the positive user experience in accordance with Art. 6 para. 1 lit. f. GDPR.

The use of the chatbot requires registration on the Facebook platform and the use of the Facebook Messenger communication platform. Facebook Messenger is offered by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, whereby the data entered and otherwise collected during communication are processed in the USA by Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA.
However, Facebook is certified under the Privacy Shield Agreement and therefore assures compliance with European and Swiss data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

We would like to point out that Facebook can find out that and when users communicate with our chatbot, as well as process technical information about the device used by users and, depending on their device settings, also location information (so-called metadata). Furthermore, a transmission of user data within the Facebook company group is possible, especially for the purposes of optimizing the respective services and security. Users should also assume that their data processed by the chatbot may be used for marketing purposes or for displaying user-tailored advertising.

For more information on Facebook's data use, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy.

 

Trustpilot Reviews

 

We participate in the rating procedure of the provider Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.

Trustpilot offers users the opportunity to rate our services. Users who have used our services will be asked for their consent to receive a review request. If users have given their consent (for example, by clicking a checkbox or a link), they will receive a review request with a link to a review page. To ensure that users have actually used our services, we transmit the necessary data about the user and the service used to Trustpilot (this includes the name, email address, and a reference number). This data is used solely to verify the authenticity and contact the user.

The legal basis for the processing of user data within the scope of the review procedure is consent in accordance with Art. 6 (1) (a) GDPR.

To submit a review, it is necessary to open a customer account with Trustpilot. In this case, Trustpilot's terms and conditions and privacy policy apply. To maintain the neutrality and objectivity of the reviews, we have no direct influence on the reviews and cannot delete them ourselves. For this purpose, we ask users to contact Trustpilot.

Furthermore, we can integrate the Trustpilot widget into our website. A widget is a functional and content element integrated into our online offering that displays changeable information. The corresponding content is displayed within our online offering, but it is retrieved from Trustpilot's servers at that moment. This is the only way to always show the current content, especially the most recent review. For this purpose, a data connection must be established from the website called up within our online offering to Trustpilot, and Trustpilot receives certain technical data (access data, including the IP address) that are necessary for the content to be delivered. Trustpilot also receives information that users have visited our online offering. This information can be stored in a cookie and used by Trustpilot to recognize which online offerings participating in the Trustpilot review procedure have been visited by the user. The information can be stored in a user profile and used for advertising or market research purposes.

The legal basis for the processing of user data within the scope of the widget's integration is our legitimate interests in informing our users about the quality of our services in accordance with Art. 6 (1) (f) GDPR. If we ask users for their consent to the processing of their data through the use of cookies, the legal basis for the processing is Art. 6 (1) (a) GDPR.

Further information on the processing of your data by Trustpilot, as well as on your rights to object and other data subject rights, can be found in Trustpilot's privacy policy: https://de.legal.trustpilot.com/end-user-privacy-terms.

 

Newsletter

 

With the following information, we inform you about the content of our newsletter, the registration, dispatch and statistical evaluation procedures, as well as your rights to object. By subscribing to our newsletter, you agree to receive it and to the described procedures.

Content of the newsletter: We send newsletters, e-mails, and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. If the content of the newsletter is specifically described during registration, this is decisive for the users' consent. Otherwise, our newsletters contain information about our services and us.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored with the mailing service provider are also logged.

Registration data: To register for the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to provide a name for a personalized address in the newsletter.

The dispatch of the newsletter and the associated performance measurement are based on the recipients' consent pursuant to Art. 6 (1) (a), Art. 7 GDPR in conjunction with § 7 (2) No. 3 UWG or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6 (1) (f) GDPR in conjunction with § 7 (3) UWG.

The logging of the registration process is based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and furthermore allows us to prove consents.

Termination/Revocation - You can cancel your subscription to our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, in order to be able to prove a previously given consent. The processing of this data will be limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.

 

Newsletter

 

With the following information, we inform you about the content of our newsletter, the registration, dispatch and statistical evaluation procedures, as well as your rights to object. By subscribing to our newsletter, you agree to receive it and to the described procedures.

Content of the newsletter: We send newsletters, e-mails, and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. If the content of the newsletter is specifically described during registration, this is decisive for the users' consent. Otherwise, our newsletters contain information about our products and accompanying information (e.g. safety instructions), offers, promotions and our company.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored with the mailing service provider are also logged.

Registration data: To register for the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to provide a name for a personalized address in the newsletter.

The dispatch of the newsletter and the associated performance measurement are based on the recipients' consent pursuant to Art. 6 (1) (a), Art. 7 GDPR in conjunction with § 107 (2) TKG or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6 (1) (f) GDPR in conjunction with § 107 (2) and (3) TKG.

The logging of the registration process is based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and furthermore allows us to prove consents.

Termination/Revocation - You can cancel your subscription to our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, in order to be able to prove a previously given consent. The processing of this data will be limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.

 

Newsletter - Mailchimp

 

Newsletters are sent using the mailing service provider "MailChimp," a newsletter sending platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection provisions of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and a data processing agreement pursuant to Art. 28 (3) sentence 1 GDPR.

The mailing service provider may use the recipients' data in pseudonymized form, i.e., without allocation to a user, for the optimization or improvement of its own services, e.g., for the technical optimization of the sending and presentation of the newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

 

Newsletter - Newsletter2Go

 

Newsletters are sent using the mailing service provider Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. You can view the data protection provisions of the mailing service provider here: https://www.newsletter2go.de/datenschutz/. The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and a data processing agreement pursuant to Art. 28 (3) sentence 1 GDPR.

The mailing service provider may use the recipients' data in pseudonymized form, i.e., without allocation to a user, for the optimization or improvement of its own services, e.g., for the technical optimization of the sending and presentation of the newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

 

Newsletter - Rapidmail

 

Newsletters are sent using the mailing service provider rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. You can view the data protection provisions of the mailing service provider here: https://www.rapidmail.de/datenschutzbestimmungen. The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and a data processing agreement pursuant to Art. 28 (3) sentence 1 GDPR.

The mailing service provider may use the recipients' data in pseudonymized form, i.e., without allocation to a user, for the optimization or improvement of its own services, e.g., for the technical optimization of the sending and presentation of the newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

 

Newsletter - Performance Measurement

 

The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from our server, or from the server of our mailing service provider, when the newsletter is opened. During this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, are collected.

This information is used for the technical improvement of services based on technical data or target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or access times. Statistical surveys also include determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention, nor that of the mailing service provider, if used, to observe individual users. The evaluations serve to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

A separate revocation of the performance measurement is unfortunately not possible; in this case, the entire newsletter subscription must be cancelled.

 

Contests and Competitions

 

We process personal data of participants in contests and competitions only in compliance with the relevant data protection provisions and only for the provision, execution, and processing of the contests and competitions (Art. 6 (1) (b) GDPR).

The participants' data will only be transmitted to other entities if this is necessary for the execution of the contests and competitions (e.g., for the purpose of sending prizes) or if a participant has consented to the transmission.

If contributions from participants are published as part of the contests or competitions (e.g., as part of a vote or presentation of the contest or competition entries, or of the winners, or reporting on the contest or competition), we point out that the names of the participants may also be published in this context. Participants can object to this at any time.

If the contests and competitions take place within an online platform or within a social network (e.g., Facebook or Instagram, hereinafter referred to as "online platform"), the terms of use and data protection provisions of the respective platforms also apply. In these cases, we point out that we are responsible for the information provided by the participants in the context of the contests and competitions, and inquiries regarding the contests and competitions should be addressed to us.

The participants' data will be deleted as soon as the contest or competition has ended and the data is no longer required to inform the winners or because inquiries about the prize are expected. As a rule, the participants' data will be deleted no later than 6 months after the end of the contest. Winners' data may be retained longer, e.g., to answer questions about the prizes or to fulfill the prize benefits; in this case, the retention period depends on the type of prize and is, for example, up to three years for goods or services, e.g., to be able to process warranty claims. Furthermore, participants' data may be stored longer, e.g., in the form of reporting on the contest in online and offline media.

If data was also collected for other purposes within the framework of the contest, its processing and retention period are governed by the data protection notices for this use (e.g., in the case of a newsletter registration within the framework of a contest).

 

Hosting and Email Delivery

 

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering in accordance with Art. 6 (1) (f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

 

Collection of Access Data and Log Files

 

We, or our hosting provider, collect data on every access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests within the meaning of Art. 6 (1) (f) GDPR. Access data includes the name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Logfile information is stored for security reasons (e.g. to clarify acts of misuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is necessary for evidentiary purposes is excluded from deletion until the final clarification of the respective incident.

 

Google Tag Manager

 

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface (and thus, for example, integrate Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process any personal data of the users. With regard to the processing of users' personal data, please refer to the following information on Google services. Usage policies: https://www.google.com/intl/de/tagmanager/use-policy.html.

 

Google Analytics

 

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offering by users is usually transmitted to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on activities within this online offering and to provide us with other services related to the use of this online offering and internet usage. Pseudonymous user profiles can be created from the processed data.

We only use Google Analytics with IP anonymisation activated. This means that the IP address of users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offering by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

If we ask users for consent (e.g. as part of a cookie consent), the legal basis for this processing is Art. 6 (1) (a) GDPR. Otherwise, the personal data of users will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 (1) (f) GDPR).

Insofar as data is processed in the USA, we point out that Google is certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on data use by Google, settings and objection options can be found in Google's privacy policy (https://policies.google.com/privacy) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

The personal data of users will be deleted or anonymised after 14 months.

 

Google Universal Analytics

 

We use Google Analytics in the form of "Universal Analytics". "Universal Analytics" refers to a Google Analytics method in which user analysis is carried out on the basis of a pseudonymous user ID and thus a pseudonymous profile of the user is created with information from the use of various devices (so-called "cross-device tracking").

 

Audience Targeting with Google Analytics

 

We use Google Analytics to display ads placed within Google's advertising services and those of its partners only to those users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are determined based on the websites visited) that we transmit to Google (so-called "remarketing" or "Google Analytics Audiences"). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interests of users.

 

Google AdSense with personalised ads

 

We use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use the AdSense service, which helps us display advertisements on our website and for which we receive remuneration for their display or other use. For these purposes, usage data, such as clicks on an ad and the IP address of users, are processed, whereby the IP address is shortened by the last two digits. Therefore, the processing of user data is pseudonymised.

We use AdSense with personalised ads. Google infers users' interests based on the websites or apps visited by users and the user profiles created in this way. Advertisers use this information to tailor their campaigns to these interests, which benefits both users and advertisers. For Google, ads are personalised when collected or known data determine or influence the selection of ads. This includes, among other things, previous search queries, activities, website visits, app usage, demographic and location information. Specifically, this includes: demographic targeting, interest category targeting, remarketing and targeting of customer match lists and audience lists uploaded to DoubleClick Bid Manager or Campaign Manager.

If we ask users for consent (e.g. as part of a cookie consent), the legal basis for this processing is Art. 6 (1) (a) GDPR. Otherwise, the personal data of users will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 (1) (f) GDPR).

Insofar as data is processed in the USA, we point out that Google is certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on data use by Google, settings and objection options can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

 

Google AdSense with non-personalised ads

 

We use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use the AdSense service, which helps us display advertisements on our website and for which we receive remuneration for their display or other use. For these purposes, usage data, such as clicks on an ad and the IP address of users, are processed, whereby the IP address is shortened by the last two digits. Therefore, the processing of user data is pseudonymised.

We use AdSense with non-personalised ads. The ads are not displayed based on user profiles. Non-personalised ads are not based on previous user behavior. Targeting uses contextual information, including rough (e.g. city-level) geographic targeting based on current location, content on the current website or app, and current search terms. Google blocks any personalised targeting, including demographic targeting and targeting based on user lists.

If we ask users for consent (e.g. as part of a cookie consent), the legal basis for this processing is Art. 6 (1) (a) GDPR. Otherwise, the personal data of users will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 (1) (f) GDPR).

Insofar as data is processed in the USA, we point out that Google is certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on data use by Google, settings and objection options can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

 

Google AdWords and Conversion Measurement

 

We use the online marketing procedure Google "AdWords" to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.), so that they are displayed to users who have a presumed interest in the ads. This allows us to display ads for and within our online offering more targeted, to present users only ads that potentially match their interests. If a user, for example, is shown ads for products that they have been interested in on other online offerings, this is referred to as "remarketing". For these purposes, when our and other websites where the Google advertising network is active are accessed, a Google code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are embedded in the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which websites the user has visited, what content they have been interested in and what offers the user has clicked on, as well as technical information on the browser and operating system, referring websites, visit time and other information on the use of the online offering.

Furthermore, we receive an individual "conversion cookie". The information obtained with the help of the cookie serves Google to create conversion statistics for us. However, we only learn the anonymous total number of users who have clicked on our ad and have been redirected to a page with a conversion tracking tag. However, we do not receive any information that allows users to be personally identified.

User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process, for example, the name or email address of users, but processes the relevant data on a cookie-related basis within pseudonymous user profiles. This means that from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has explicitly permitted Google to process the data without this pseudonymisation. The information collected about users is transmitted to Google and stored on Google's servers in the USA.

If we ask users for consent (e.g. as part of a cookie consent), the legal basis for this processing is Art. 6 (1) (a) GDPR. Otherwise, the personal data of users will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 (1) (f) GDPR).

Insofar as data is processed in the USA, we point out that Google is certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on data use by Google, settings and objection options can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

 

Google DoubleClick

 

We use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use Google's "Doubleclick" online marketing method to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.). Doubleclick is characterized by displaying ads in real-time based on users' presumed interests. This allows us to display ads for and within our online offering more targeted, presenting users with only ads that potentially match their interests. For example, if a user is shown ads for products they have shown interest in on other online offerings, this is referred to as "remarketing." For these purposes, when our and other websites where the Google advertising network is active are accessed, a Google code is immediately executed by Google, and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are embedded in the website. With their help, an individual cookie, i.e., a small file, is stored on the user's device (instead of cookies, similar technologies can also be used). This file records which websites the user has visited, what content they have shown interest in, and which offers the user has clicked, as well as technical information about the browser and operating system, referring websites, visit time, and other details about the use of the online offering.

The users' IP address is also collected, whereby it is truncated within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, and only in exceptional cases is it transmitted in full to a Google server in the USA and truncated there. The aforementioned information can also be combined by Google with information from other sources. If the user subsequently visits other websites, ads tailored to their presumed interests based on their user profile may be displayed to them.

User data is pseudonymously processed within the Google advertising network. This means that Google does not store and process, for example, the user's name or email address, but processes the relevant data on a cookie-related basis within pseudonymous user profiles. This means that from Google's perspective, ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the USA.

If we ask users for consent (e.g., within the scope of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, users' personal data is processed on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Insofar as data is processed in the USA, we point out that Google is certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information on data use by Google, settings, and objection options can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

 

Google Firebase

 

We use the developer platform "Google Firebase" and its associated functions and services, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Firebase is a platform for developers of applications ( "apps" for short) for mobile devices and websites. Google Firebase offers a variety of functions, which are presented on the following overview page: https://firebase.google.com/products/.

The functions include, among other things, the storage of apps including personal data of the application users, such as content created by them or information regarding their interaction with the apps (so-called "Cloud Computing"). Google Firebase also offers interfaces that allow interaction between app users and other services, e.g., authentication via services such as Facebook, Twitter or via an email-password combination.

User interactions can be analyzed using the "Firebase Analytics" analysis service. Firebase Analytics aims to record how users interact with an app. Events (so-called "Events") are recorded, such as the first opening of the app, uninstallation, update, crash or frequency of use of the app. Further user interests, e.g. for certain functions of the applications or certain subject areas, can also be recorded with the events. This can also be used to create user profiles, which can be used, for example, as a basis for displaying advertising notices tailored to users.

Google Firebase and the personal data of users processed by Google Firebase can also be used together with other Google services, such as Google Analytics and Google marketing services and Google Analytics (in this case, device-related information, such as "Android Advertising ID" and "Advertising Identifier for iOS", is also processed to identify users' mobile devices).

If we ask users for consent (e.g., within the scope of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, users' personal data is processed on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Insofar as data is processed in the USA, we point out that Google is certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google's privacy policy is available at https://policies.google.com/privacy. Further information on data use for marketing purposes by Google can be found on the overview page: https://policies.google.com/technologies/ads?hl=de,

If users wish to object to interest-based advertising by Google marketing services, users can use the settings and opt-out options provided by Google: https://adssettings.google.com/

 

LinkedIn Marketing Services

 

We use the marketing services of the social network LinkedIn. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

With the help of LinkedIn's marketing services, we can display ads more targeted within the social network and LinkedIn's advertising partner offerings or only present ads to users that potentially match their interests. For example, if a user is shown ads for products they have shown interest in on other online offerings, this is referred to as "remarketing." Furthermore, we can track the success of our ads (so-called "conversion measurement"). However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page equipped with a conversion tracking tag. We do not receive any information that allows users to be personally identified.

For the aforementioned purposes, when our and other websites where LinkedIn's marketing services are active are accessed, a LinkedIn code is executed and so-called "Insights tags" (invisible graphics or code, also known as "web beacons") are embedded in the websites. With their help, an individual cookie, i.e., a small file, is stored on the user's device (instead of cookies, similar technologies can also be used). This file records which websites the user has visited, what content they have shown interest in, and which offers the user has clicked, as well as technical information about the browser and operating system, referring websites, visit time, and other details about the use of the online offering.

User data is processed pseudonymously within LinkedIn's marketing services. This means that LinkedIn does not store and process, for example, the user's name or email address, but processes the relevant data on a cookie-related basis within pseudonymous user profiles. This means that from LinkedIn's perspective, ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed LinkedIn to process the data without this pseudonymization. Even if you are registered with LinkedIn, LinkedIn can associate your interaction with our online offering with your user account.

If we ask users for consent (e.g., within the scope of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, users' personal data is processed on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

The information collected about users is transmitted to LinkedIn and stored on LinkedIn's servers in the USA, whereby LinkedIn is certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).

Further information on data use by LinkedIn can be found in the privacy policy (https://www.linkedin.com/legal/privacy-policy) and LinkedIn's cookie policy (https://www.linkedin.com/legal/cookie_policy). You can object to the aforementioned use of your data by LinkedIn here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

 

Hotjar Analysis and Optimization Service

 

We use Hotjar, an analysis software from Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta ("Hotjar"). With the help of the information obtained through Hotjar, we can analyze and improve the use of our online offering.

For this purpose alone, data of the users of our online offering is stored and evaluated. We use Hotjar to analyze our online offering and not individual users. User data is therefore pseudonymized and processed within the European Union and on the basis of the order processing agreement offered by Hotjar. User input, e.g. in forms or keystrokes, is not processed, i.e. neither stored by Hotjar nor transmitted to Hotjar (unless this input is clearly intended for evaluation purposes, such as in feedback forms).

For the aforementioned purposes, Hotjar stores cookies with a pseudonymous identification number on users' devices and evaluates them. The cookies used by Hotjar have different "lifespans"; some remain valid for up to 365 days, others only during the current visit.

The processed user data includes, in particular:
- Device and metadata: IP address of the end device (collected and stored in anonymized format), screen/display resolution of the end device screen, type of end device (individual end device identification features), operating system, and browser type, referring URL and domain;
- geographic location (country only);
- Usage data and log data: date and time when the online offering was accessed, preferred language, user interactions, such as mouse events (movements, position, and clicks), keyboard entries, visited websites and interactions with their content and functions.
- Content data: input within surveys and feedback forms.

If we ask users for consent (e.g., within the scope of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, users' personal data is processed on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Users can prevent the collection of data by Hotjar by using the Do-Not-Track settings of their browser or by clicking on the following link and following the instructions there: https://www.hotjar.com/legal/compliance/opt-out.

Hotjar's privacy policy: https://www.hotjar.com/legal/policies/privacy. Cookie Policy: https://www.hotjar.com/legal/policies/cookie-information.

 

Jetpack (WordPress Stats)

 

We use the Jetpack plugin (specifically the "Wordpress Stats" sub-function), which integrates a tool for statistical evaluation of visitor access and is provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website.

The information generated by the cookie about your use of this online offering is stored on a server in the USA. From the processed data, pseudonymous user profiles can be created, which are used only for analysis and not for advertising purposes. Further information can be found in Automattic's privacy policies: https://automattic.com/privacy/ and information on Jetpack cookies: https://jetpack.com/support/cookies/.

If we ask users for consent (e.g., within the scope of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, users' personal data is processed on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

 

Reach Measurement with Matomo

 

As part of Matomo's reach analysis, the following data is processed: the browser type and version you use, the operating system you use, your country of origin, the date and time of the server request, the number of visits, your time spent on the website, and the external links you clicked. Users' IP addresses are anonymized before they are stored.

Matomo uses cookies that are stored on users' computers and enable an analysis of users' use of our online offering. From the processed data, pseudonymous user profiles can be created. The cookies have a storage period of one week. The information generated by the cookie about your use of this website is stored only on our server and not passed on to third parties.

Users can object to the anonymized data collection by the Matomo program at any time with effect for the future by clicking on the link below. In this case, a so-called opt-out cookie is stored in their browser, which means that Matomo no longer collects any session data. However, if users delete their cookies, this means that the opt-out cookie will also be deleted and must therefore be reactivated by the users.

Logs with user data are deleted after a maximum of 6 months.

If we ask users for consent (e.g., within the scope of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, users' personal data is processed on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

[Please insert the Matomo IFRAME with the opt-out cookie here (and enable IP anonymization in the settings)].

 

Facebook Pixel, Custom Audiences and Facebook Conversion

 

Our online offering uses the "Facebook Pixel" from the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

The Facebook Pixel allows Facebook to identify visitors to our online offering as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to show our Facebook Ads only to Facebook users who have shown interest in our online offering or who have certain characteristics (e.g., interests in specific topics or products, determined by the websites they have visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interests of users and are not annoying. The Facebook Pixel also enables us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion").

Facebook processes the data in accordance with Facebook's Data Policy. General information on the display of Facebook Ads can be found in Facebook's Data Policy: https://www.facebook.com/policy. Specific information and details about the Facebook Pixel and its functionality can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the personal data of users is processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Facebook is certified under the Privacy Shield Agreement, thereby guaranteeing compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

You can object to the collection by the Facebook Pixel and the use of your data for displaying Facebook Ads. To set what types of ads are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions for settings regarding usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, meaning they apply to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

 

etracker

 

We use the analytics service "etracker" provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany.

The data collected is analyzed exclusively pseudonymously, stored only on servers in Germany, not combined with other data, or passed on to third parties.

When storing user data, in particular, the IP addresses, device and domain data of users are only stored in shortened or encrypted form, so that it is not possible to draw conclusions about the individual user. The IP address is shortened at the earliest possible time, automatically by default. Pseudonymous usage profiles of users are created from the data processed by etracker using cookies. However, identifiers for recognizing an app user, performing session and cross-device tracking, and providing behavioral data for remarketing are securely pseudonymized or encrypted. Furthermore, etracker contractually assures the protection of the processed user data by concluding a data processing agreement in accordance with Art. 28 para. 3 s. 1 GDPR.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the personal data of users is processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

You can object to data collection and storage at any time with effect for the future. To object to the collection and storage of your visitor data for the future, you can obtain an opt-out cookie from etracker via the following link, which will prevent the future collection and storage of your browser's visitor data by etracker: http://www.etracker.de/privacy?et=[PLEASE-INSERT-YOUR-Account-ID].

The opt-out sets an etracker opt-out cookie named "cntcookie." Please do not delete this cookie if you wish to maintain your objection.

Further information can be found in etracker's privacy policy: https://www.etracker.com/datenschutz.

 

econda Analytics

 

For the demand-oriented design and optimization of this online offering, data from users is collected and stored by the solutions and technologies of econda GmbH, Zimmerstr. 6, 76137 Karlsruhe, Germany, and usage profiles are created from this data using pseudonyms.

For this purpose, cookies may be used to enable the recognition of an internet browser. However, usage profiles are not merged with data about the bearer of the pseudonym without the express consent of the visitor. In particular, IP addresses are rendered unrecognizable immediately after receipt, which means that usage profiles cannot be assigned to IP addresses.

You can object to data collection and storage at any time with effect for the future. To object to the collection and storage of your visitor data for the future, you can obtain an opt-out cookie from econda via the following link, which will prevent the future collection and storage of your browser's visitor data by econda: https://www.econda.de/widerruf-zur-datenspeicherung/. The objection only applies to the device and web browser on which it was set; please repeat the process on all devices if necessary. If you delete the opt-out cookie, requests will again be transmitted to econda.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the personal data of users is processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Further information can be found in econda's privacy policy: https://www.econda.de/datenschutzhinweise/.

 

Webtrekk

 

For the demand-oriented design and optimization of this online offering, user data is collected and stored by solutions and technologies of Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany, and usage profiles are created from this data using pseudonyms.

For this purpose, cookies may be used to enable the recognition of an internet browser. However, usage profiles are not merged with data about the bearer of the pseudonym without the express consent of the visitor. In particular, IP addresses are rendered unrecognizable immediately after receipt, which means that usage profiles cannot be assigned to IP addresses. Geographic analyses function via a database that contains IP address information from various ISPs with the geographic location of the IP address down to the city level. The individual addresses of the users are not known. Cookies are stored for a maximum of 6 months.

You can object to the processing of your data at any time with future effect. To object to the collection and storage of your visitor data for the future, you can obtain an opt-out cookie from Webtrekk via the following link, which will prevent the future collection and storage of your browser's visitor data by Webtrekk: https://www.webtrekk.com/de/legal/opt-out-webtrekk/. The objection only applies to the device and web browser on which it was set; please repeat the process on all devices if necessary. If you delete the opt-out cookie, requests will again be transmitted to Webtrekk.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the personal data of users is processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Further information can be found in Webtrekk's privacy policy: https://www.webtrekk.com/de/legal/opt-out-webtrekk.

 

StatCounter

 

We use the web analytics service StatCounter, offered by StatCounter, Guinness Enterprise Centre, Taylor's Lane, Dublin 8, Ireland.

StatCounter is an online service that helps us understand our visitors; for example, how visitors find our website, how long they stay on our website, which web pages interest them most, etc. We use StatCounter because a better understanding of how visitors interact with our website helps us improve the content, design, and functionality of our website. This enables us to provide a better online experience for our visitors.

StatCounter uses cookies and other technologies to collect data about visitors and visitor activities on our website in a user profile. This data includes:

- Time and date of visit (this can help us identify and plan visits to our website);
- IP address (this is a numeric label assigned to a device by an Internet Service Provider to enable the device to access the internet);
- Browser and operating system (this can help us ensure that our website functions correctly in the browsers/operating systems used to access our website);
- Device information such as device type and screen size (this can help us ensure that our website functions correctly on the devices used to access our website);
- Referral data such as a search engine link (this can help us understand which search engines help visitors find our website);

When you visit our website, a Statcounter cookie (named "is_unique") may also be placed in your browser. This cookie is only used to determine whether you are a first-time or returning visitor and to estimate unique visits to the website.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the personal data of users is processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Further information on data processing by StatCounter can be found in the provider's privacy policy: https://statcounter.com/about/legal/#privacy

You can also object to collection by StatCounter (Opt-Out): http://statcounter.com/about/set-refusal-cookie/.

 

Microsoft Advertising

 

Within our online offering, we use the conversion and tracking services "Microsoft Advertising" from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft stores cookies on users' devices to enable an analysis of their use of our online offering, provided users have reached our online offering via a Microsoft ad (so-called "Conversion Measurement"). In this way, Microsoft and we can recognize that someone has clicked on an ad, been redirected to our online offering, and reached a predefined target page (so-called "Conversion Page"). We only learn the total number of users who have clicked on a Microsoft ad and then been redirected to the Conversion Page. No IP addresses are stored. No personal information about the identity of users is communicated.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the personal data of users is processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR).

Microsoft is certified under the Privacy Shield Agreement, thereby guaranteeing compliance with European and Swiss data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).

If users do not wish to participate in Microsoft Advertising's tracking procedure, they can deactivate the necessary setting of a cookie via browser settings or use Microsoft's opt-out page: http://choice.microsoft.com/de-DE/opt-out.

Further information on data protection and the cookies used by Microsoft Advertising can be found in Microsoft's privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

 

VG Wort / Scalable Central Measurement Method

 

We use the "Scalable Central Measurement Method" (SZM) from INFOnline GmbH (INFOnline GmbH, Brühler Str. 9, D-53119 Bonn) to determine statistical key figures for assessing the probability of text copying. Anonymous measurement values are collected. The access number measurement uses either a session cookie or a signature created from various automatically transmitted information from your browser to recognize computer systems. IP addresses are only processed in anonymized form. The procedure was developed with data protection in mind. The sole purpose of the procedure is to determine the probability of copying individual texts. Individual users are never identified. Your identity always remains protected. You will not receive any advertising through the system.

Many of our pages contain JavaScript calls, through which we report access data to the collecting society Verwertungsgesellschaft Wort (VG Wort). This enables our authors to participate in the distributions from VG Wort, which ensure the statutory remuneration for the use of copyrighted works in accordance with § 53 UrhG.

Usage data and metadata of users are processed, whereby IP addresses are truncated and the measurement procedures are pseudonymous. The truncated IP address is stored for a maximum of 60 days. The usage data in conjunction with a pseudonymous assignment value ("identifier") are stored for a maximum of 6 months.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 Para. 1 lit. a. GDPR. Otherwise, the personal data of users are processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering in the sense of Art. 6 Para. 1 lit. f. GDPR).

Users also have an opt-out option to object to the collection for the aforementioned purposes: https://optout.ioam.de. Further information can be found in INFOnline's privacy policy https://www.infonline.de/datenschutz/benutzer.

 

Criteo

 

We use the online marketing services of Criteo GmbH, Gewürzmühlstr. 11, 80538 Munich, Germany.

Criteo's services allow us to display advertisements for and on our website in a more targeted manner, presenting users only with ads that potentially match their interests. For example, if a user is shown ads for products they were interested in on other websites, this is referred to as "remarketing." For these purposes, when our and other websites where Criteo is active are accessed, Criteo directly executes Criteo code, and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e., a small file, is stored on the user's device (comparable technologies may also be used instead of cookies). This file records which websites the user has visited, what content they were interested in, and which offers they clicked on, as well as technical information about the browser and operating system, referring websites, visit time, and other details about the use of the online offering. The aforementioned information can also be combined by Criteo with information from other sources. If the user then visits other websites, ads tailored to their interests can be displayed.

User data is processed pseudonymously, meaning no clear data of users (such as names) are processed, and users' IP addresses are truncated. Processing occurs only based on an online identifier, a technical ID. Any IDs communicated to Criteo (e.g., from a customer support system) or email addresses are encrypted as so-called hash values and stored as a series of characters that do not allow identification.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 Para. 1 lit. a. GDPR. Otherwise, the personal data of users are processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering in the sense of Art. 6 Para. 1 lit. f. GDPR).

Further information as well as objection options (opt-out) for data collection by Criteo can be found in Criteo's privacy policy: https://www.criteo.com/de/privacy/.

 

Visual Website Optimizer

 

Within our online offering, we use the service Visual Website Optimizer (an offering of Wingify Software Private Limited, 404, Gopal Heights, Netaji Subhash Place, Pitam Pura, Delhi 110034, India).

Visual Website Optimizer allows us to understand how different website changes affect user behavior (e.g., changes to input fields, design, etc.) through "A/B testing", "click tracking", and "heatmaps". A/B tests aim to improve the usability and performance of online offerings. For example, users are presented with different versions of a website or its elements, such as input forms, where the placement of content or labels of navigation elements may vary. Based on user behavior, such as longer time spent on the website or more frequent interaction with elements, it can then be determined which of these websites or elements better meet user needs. "Click tracking" allows us to track user movements across an entire online offering. Since the results of these tests are more accurate if user interaction can be tracked over a certain period (e.g., to see if a user returns often), cookies are usually stored on users' computers for these test purposes. "Heatmaps" are aggregated mouse movements of users, which can help identify, for example, which website elements are preferred and which are less preferred by users.

Cookies are only stored on users' devices for these test purposes. Only pseudonymous user data is processed. For more information, please refer to Visual Website Optimizer's privacy policy: https://vwo.com/privacy-policy/.

If we ask users for consent (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6 Para. 1 lit. a. GDPR. Otherwise, the personal data of users are processed based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering in the sense of Art. 6 Para. 1 lit. f. GDPR).

If you do not want Visual Website Optimizer to record your usage behavior, you can object to data collection using this link: https://[PLEASE-INSERT-YOUR-DOMAIN]/?vwo_opt_out=1.

 

Crazy Egg

 

Based on our legitimate interests (i.e., our interest in the analysis, optimization, and operation of our websites in the sense of Art. 6 (1) f. GDPR), we use the analytics technology Crazy Egg from Crazy Egg, Inc. 16220 Ridgeview Lane, La Mirada, CA, 90638 USA.

Crazy Egg allows us to understand how different website changes affect user behavior (e.g., changes to input fields, design, etc.) through "A/B testing", "click tracking", and "heatmaps". A/B tests aim to improve the usability and performance of online offerings. For example, users are presented with different versions of a website or its elements, such as input forms, where the placement of content or labels of navigation elements may vary. Based on user behavior, such as longer time spent on the website or more frequent interaction with elements, it can then be determined which of these websites or elements better meet user needs. "Click tracking" allows us to track user movements across an entire online offering. Since the results of these tests are more accurate if user interaction can be tracked over a certain period (e.g., to see if a user returns often), cookies are usually stored on users' computers for these test purposes. "Heatmaps" are aggregated mouse movements of users, which can help identify, for example, which website elements are preferred and which are less preferred by users.

Furthermore, technical data such as selected language, system, screen resolution, and browser type are collected. This information is stored for technical reasons in a so-called session cookie. This means that this cookie is deleted after leaving the website and is not used to track users across multiple websites or to identify returning visitors.

The collected information does not include passwords, the IP address is anonymized, and the information is not shared with third parties.

The information is used exclusively to improve the usability of our services. For more information, please see Crazy Egg's privacy policy: https://www.crazyegg.com/privacy. Users can object to Crazy Egg's analysis in their browser: https://www.crazyegg.com/opt-out.

 

Online presences in social media

 

We maintain online presences within social networks and platforms to communicate with active customers, prospects, and users there and to inform them about our services.

We point out that user data may be processed outside the European Union. This may result in risks for users, as it could, for example, make it more difficult to enforce user rights. With regard to US providers certified under the Privacy Shield, we point out that they commit to complying with EU data protection standards.

Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from user behavior and the resulting interests. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the users' interests. For these purposes, cookies are usually stored on the users' computers, in which the users' usage behavior and interests are stored. Furthermore, data independent of the devices used by the users can also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them).

The processing of users' personal data is based on our legitimate interests in effective user information and communication with users pursuant to Art. 6 para. 1 lit. f. GDPR. If users are asked by the respective platform providers for their consent to the described data processing, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.

For a detailed description of the respective processing and objection options (opt-out), we refer to the providers' information linked below.

Even in the case of requests for information and the assertion of user rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to user data and can directly take appropriate measures and provide information. Should you still need assistance, you can contact us.

- Facebook, -Pages, -Groups, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) based on an agreement on joint processing of personal data - Privacy Policy: https://www.facebook.com/about/privacy/, specifically for Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data , Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

- Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy Policy/ Opt-Out: https://about.pinterest.com/de/privacy-policy.

- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - Privacy Policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

- Wakalet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) - Privacy Policy/ Opt-Out: https://wakelet.com/privacy.html.

- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) - Privacy Policy/ Opt-Out: https://soundcloud.com/pages/privacy.

 

Integration of Third-Party Services and Content

 

Within our online offering, based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering in the sense of Art. 6 para. 1 lit. f. GDPR), we use content or service offerings from third-party providers to embed their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always presupposes that the third-party providers of this content perceive the users' IP address, as they would not be able to send the content to their browser without the IP address. The IP address is therefore necessary for the display of this content. We strive to use only such content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. Through "pixel tags", information such as visitor traffic on the pages of this website can be evaluated. The pseudonymous information can also be stored in cookies on the users' device and, among other things, contain technical information about the browser and operating system, referring web pages, visit time, and other details about the use of our online offering, as well as be combined with such information from other sources.

 

Vimeo

 

We can embed videos from the platform "Vimeo" provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy Policy: https://vimeo.com/privacy. We point out that Vimeo may use Google Analytics and refer to their privacy policy (https://policies.google.com/privacy) as well as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or Google's settings for data usage for marketing purposes (https://adssettings.google.com/).

 

Youtube

 

We embed videos from the platform "YouTube" provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

 

Google Fonts

 

We embed the fonts ("Google Fonts") provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. According to Google, user data is used solely for the purpose of displaying the fonts in the user's browser. The embedding is based on our legitimate interests in a technically secure, maintenance-free, and efficient use of fonts, their uniform display, and consideration of possible licensing restrictions for their embedding. Privacy Policy: https://www.google.com/policies/privacy/.

 

Google reCAPTCHA

 

We embed the function for bot detection, e.g., for entries in online forms ("reCAPTCHA") from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

 

Google Maps

 

We embed the maps of the "Google Maps" service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data processed may include, in particular, users' IP addresses and location data, but these are not collected without their consent (usually given within the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

 

OpenStreetMap

 

We embed the maps of the "OpenStreetMap" service (https://www.openstreetmap.de), which are offered based on the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation (OSMF). Privacy Policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

To our knowledge, OpenStreetMap uses user data exclusively for the purpose of displaying map functions and caching selected settings. This data may include, in particular, users' IP addresses and location data, but these are not collected without their consent (usually given within the settings of their mobile devices).

The data may be processed in the USA. For more information, please refer to OpenStreetMap's privacy policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

 

Typekit Fonts from Adobe

 

Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR), we use external "Typekit" fonts from the provider Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe is certified under the Privacy Shield agreement and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

 

Use of Facebook Social Plugins

 

Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR), we use social plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
This may include content such as images, videos or texts, and buttons with which users can share content from this online offering within Facebook. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user accesses a function of this online offering that contains such a plugin, their device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online offering by the device. Usage profiles of the users can be created from the processed data. Therefore, we have no influence on the scope of the data that Facebook collects with the help of this plugin and inform users accordingly based on our knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offering. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example, by pressing the Like button or leaving a comment, the corresponding information is transmitted directly from their device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options for protecting users' privacy, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about them via this online offering and link it to their member data stored on Facebook, they must log out of Facebook and delete their cookies before using our online offering. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e., they are applied to all devices, such as desktop computers or mobile devices.

 

Twitter

 

Within our online offering, functions and content of the Twitter service, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offering within Twitter.
If users are members of the Twitter platform, Twitter can assign the access of the aforementioned content and functions to the users' profiles there. Twitter is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.

 

Instagram

 

Within our online offering, functions and content of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offering within Instagram. If users are members of the Instagram platform, Instagram can assign the access of the aforementioned content and functions to the users' profiles there. Instagram's privacy policy: http://instagram.com/about/legal/privacy/.

 

Pinterest

 

Within our online offering, functions and content of the Pinterest service, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offering within Pinterest. If users are members of the Pinterest platform, Pinterest can assign the access of the aforementioned content and functions to the users' profiles there. Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy.

 

Xing

 

Within our online offering, functions and content of the Xing service, offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offering within Xing. If users are members of the Xing platform, Xing can assign the access of the aforementioned content and functions to the users' profiles there. Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.

 

LinkedIn

 

Within our online offering, functions and content of the LinkedIn service, offered by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offering within LinkedIn. If users are members of the LinkedIn platform, LinkedIn can assign the access of the aforementioned content and functions to the users' profiles there. LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.. LinkedIn is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

 

Google+

 

Within our online offering, functions and content of the Google+ platform, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offering within Google. If users are members of the Google+ platform, Google can assign the access of the aforementioned content and functions to the users' profiles there.

Google is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Further information on data usage by Google, setting and objection options can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

 

Sharing functions of AddThis

 

Within our online offering, the "AddThis" service (1595 Spring Hill Rd Suite 300 Vienna, VA 22182, USA) is used for sharing content of this online offering within social networks (so-called sharing).

The use is based on our legitimate interests, i.e., interest in disseminating our online offering according to Art. 6 para. 1 lit. f. GDPR.

AddThis uses users' personal information for providing and executing the sharing functions. In addition, AddThis may use pseudonymized user information for marketing purposes. This data is stored on users' computers using so-called "cookie" text files. Privacy Policy: http://www.addthis.com/privacy, Opt-Out: http://www.addthis.com/privacy/opt-out.

 

Shariff Sharing Functions

 

We use the data-protection-compliant "Shariff" buttons. "Shariff" was developed to enable more privacy on the web and to replace the usual "share" buttons of social networks. In this case, it is not the user's browser, but the server on which this online offering is located, that establishes a connection with the server of the respective social media platforms and queries, for example, the number of likes, etc. The user remains anonymous in this process. More information about the Shariff project can be found from the developers of c't magazine: www.ct.de.

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke

 

Trustami

The Trustami trust seal is integrated into this website to display collected ratings and social media feedback. This serves to implement our legitimate interests in optimal marketing of our offer on our own website in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. When accessing the Trustami trust seal, the web server automatically stores data (access data) in the form of a server log file, which contains the name of the accessed website, the file, the date and time of access, your IP address in abbreviated form, the amount of data transferred, the message about successful access, the browser type, the user's operating system, the referrer URL (the previously visited page) and the inquiring provider. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit. The Trustami trust seal and the services promoted with it are an offer from Trustami GmbH, Schröderstraße 5, 10115 Berlin. The Trustami data protection declaration at www.trustami.com/datenschutz applies to the processing of data collected by Trustami.

 

European Online Dispute Resolution

https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=DE

Cookie Policy

Mavelos SARL
111, Grand Rue
L-9051 Ettelbruck

shop@cbd-lux.lu
info@mavelos.lu

Cookie Policy for CBD-LUX

This is the Cookie Policy for CBD-LUX, accessible from https://cbd-lux.lu/

What Are Cookies

As is common practice with almost all professional websites this site uses cookies, which are tiny files that are downloaded to your computer, to improve your experience. This page describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored however this may downgrade or 'break' certain elements of the sites functionality.

For more general information on cookies see the Wikipedia article on HTTP Cookies.

How We Use Cookies

We use cookies for a variety of reasons detailed below. Unfortunately in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use.

Disabling Cookies

You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site. Therefore it is recommended that you do not disable cookies.

The Cookies We Set

• Account related cookies

  If you create an account with us then we will use cookies for the management of the signup process and general administration. These cookies will usually be deleted when you log out however in some cases they may remain afterwards to remember your site preferences when logged out.

• Login related cookies

  We use cookies when you are logged in so that we can remember this fact. This prevents you from having to log in every single time you visit a new page. These cookies are typically removed or cleared when you log out to ensure that you can only access restricted features and areas when logged in.

• Email newsletters related cookies

  This site offers newsletter or email subscription services and cookies may be used to remember if you are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users.

• Orders processing related cookies

  This site offers e-commerce or payment facilities and some cookies are essential to ensure that your order is remembered between pages so that we can process it properly.

• Surveys related cookies

  From time to time we offer user surveys and questionnaires to provide you with interesting insights, helpful tools, or to understand our user base more accurately. These surveys may use cookies to remember who has already taken part in a survey or to provide you with accurate results after you change pages.

• Forms related cookies

  When you submit data to through a form such as those found on contact pages or comment forms cookies may be set to remember your user details for future correspondence.

• Site preferences cookies

  In order to provide you with a great experience on this site we provide the functionality to set your preferences for how this site runs when you use it. In order to remember your preferences we need to set cookies so that this information can be called whenever you interact with a page is affected by your preferences.

Third Party Cookies

In some special cases we also use cookies provided by trusted third parties. The following section details which third party cookies you might encounter through this site.

• This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.

  For more information on Google Analytics cookies, see the official Google Analytics page.

• Third party analytics are used to track and measure usage of this site so that we can continue to produce engaging content. These cookies may track things such as how long you spend on the site or pages you visit which helps us to understand how we can improve the site for you.

• From time to time we test new features and make subtle changes to the way that the site is delivered. When we are still testing new features these cookies may be used to ensure that you receive a consistent experience whilst on the site whilst ensuring we understand which optimisations our users appreciate the most.

• As we sell products it's important for us to understand statistics about how many of the visitors to our site actually make a purchase and as such this is the kind of data that these cookies will track. This is important to you as it means that we can accurately make business predictions that allow us to monitor our advertising and product costs to ensure the best possible price.

• The Google AdSense service we use to serve advertising uses a DoubleClick cookie to serve more relevant ads across the web and limit the number of times that a given ad is shown to you.

  For more information on Google AdSense see the official Google AdSense privacy FAQ.

• We use adverts to offset the costs of running this site and provide funding for further development. The behavioural advertising cookies used by this site are designed to ensure that we provide you with the most relevant adverts where possible by anonymously tracking your interests and presenting similar things that may be of interest.

• Several partners advertise on our behalf and affiliate tracking cookies simply allow us to see if our customers have come to the site through one of our partner sites so that we can credit them appropriately and where applicable allow our affiliate partners to provide any bonus that they may provide you for making a purchase.

• We also use social media buttons and/or plugins on this site that allow you to connect with your social network in various ways. For these to work the following social media sites including; {List the social networks whose features you have integrated with your site?:12}, will set cookies through our site which may be used to enhance your profile on their site or contribute to the data they hold for various purposes outlined in their respective privacy policies.

More Information

Hopefully that has clarified things for you and as was previously mentioned if there is something that you aren't sure whether you need or not it's usually safer to leave cookies enabled in case it does interact with one of the features you use on our site. This Cookies Policy was created with the help of the Cookies Policy Template Generator and the Terms and Conditions Template.

However if you are still looking for more information then you can contact us through one of our preferred contact methods:

• Email: shop@cbd-lux.lu