1. Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ZeoBent Handels GmbH, Weißen 2, 07407 Uhlstädt-Kirchhasel, Germany, Tel.: +49 (0)371 820 59 75, email: info@zeolith-bentonit-versand.de. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 The person responsible has appointed a data protection officer, who can be reached as follows: "Mario Markotic, Weißen 2, 07407 Uhlstädt-Kirchhasel, Germany, Tel.: +49 (0)371 820 59 75, email: info@zeolith-bentonit-versand.de.

1.4 This website is used for security reasons and to protect the transmission of personal data and other confidential content (e.g.b Orders or inquiries to the person responsible) an SSL or. TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2. Terms of the Data Protection Regulation

Our data protection declaration is based on the terms used by European legislators within the framework of the Data Protection Regulation (GDPR). Our data protection declaration should be readable and understandable for the public, but also for our customers and business partners. To ensure this, we would first like to explain some of the terms used.

• Personal data

Personal data is any information about a specific or identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or by means of one or more specific physical, physiological, genetic, mental characteristics , economic, cultural or social identity of that natural person.

• Affected person

Any identified or identifiable natural person whose personal data has been processed by the data controller is affected.

• Processing

Processing is any operation or set of operations which is carried out on personal data, whether collected, recorded, organized, structured, stored, adapted or modified, accessed, consulted, used, transmitted or disseminated by automated means or otherwise made accessible, aligned or combined, restricted, deleted or destroyed.

• Profiling

Profiling means any form of automated processing of personal data, which consists of the use of personal data to evaluate certain aspects of a natural person, in particular to analyze or predict aspects of work performance, economic situation, health, personal preferences , interests, reliability, behavior, location or movements of that natural person.

• Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific person without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures to ensure that the Personal data cannot be assigned to a specific or identifiable natural person.

• Person responsible (Controller)

Responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be determined by Union or Member State law.

• Processor

Processor is a natural or legal person, authority, authority or other body that processes personal data on behalf of the person responsible or Controller processed.

• Recipient

The recipient is a natural or legal person, public authority, agency or other body to which the personal data is passed on, regardless of whether it is a third party or not. However, public authorities which may receive personal data in the context of a specific investigation under Union or Member State law shall not be deemed to be recipients; the processing of these data by those authorities shall be in accordance with applicable data protection rules, in accordance with the purposes of the processing.

• Third party

Third parties are natural or legal persons, authorities, agencies or bodies other than the data subject, the controller, the processor and the persons authorized to process personal data under the direct supervision of the controller or the processor.

• Consent

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

3. Data collection when you visit our website

If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the site server (so-called “Server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our website visited
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable): in anonymized form)

The processing takes place in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

We delete or block the data subject's personal data as soon as the purpose of storage no longer applies. Deletion can also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which our company is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to conclude or fulfill a contract.

4.2 Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with. Art. 6 para. 1 lit. f GDPR We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with European data protection levels.

4. 3 OneDrive Personal Cloud Storage

As part of the use of this website and the integrated content management platform, we process certain personal data with your consent in accordance with Art. 6 para. 1 lit. a GDPR. These data include, for example:b Contact information, IP addresses, etc. We use Microsoft's OneDrive Personal Cloud Storage service, whose servers are located within the European Union.

We have entered into an order processing agreement with the provider, which is recorded in the document “Microsoft Products and Services Data Protection Addendum”. This ensures the protection of your data and prohibits unauthorized disclosure to third parties.

Despite the local server locations, we would like to point out that it cannot be ruled out that your data will be transferred to the USA. Particularly in light of the ECJ ruling of 16. July 2020 (Case C311/18), which declared the data transfer based on the Privacy Shield unlawful, your data could be accessed by US security authorities in accordance with 50 U.SC §1881(b)(4), 50U.SC § 1881a (= FISA 702). This could mean that your data can be accessed and used without your knowledge or consent and that you may not be able to fully exercise your rights as a data subject.

You can revoke your consent at any time. To do this, send us an email to the email address listed above. Please note that the revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.

As a data subject, you have the right to information, correction, deletion, restriction of processing and data portability. You also have the right to object to the processing of your personal data at any time for reasons relating to your particular situation.

6. Contact

6.1 When contacting us (e.g.b via contact form or email) personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

The processing of the personal data from the input mask serves us solely to process your request. If you contact us via email, this also represents the necessary legitimate interest in processing the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

If you have requested product information or an offer, we reserve the right to store the data for two years in order to measure the profitability of our sales and marketing. Otherwise, we delete the data as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

The user(s) have the opportunity to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue. In this case, all personal data that was stored in the course of contacting you will be deleted.

6.2 Trusted Shops

For review reminders we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany

Only based on your express consent in accordance with Art. 6 para. 1 lit. a DSGVO we transmit your email address and, if necessary. further customer data to the provider so that they can contact you with a review reminder by email.

You can revoke your consent to us or the provider at any time with future effect.

A special contract for order processing is not required as Trusted Shops is based in Germany. Nevertheless, we have entered into agreements with Trusted Shops to ensure the privacy of our visitors and to prevent the unauthorized transfer of data to third parties.

7. Data processing when opening a customer account

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on our website.

Registration is necessary to fulfill the customer's or Partner contract or required to carry out pre-contractual measures.

It is possible to delete your customer account at any time and can be done by sending a message to the above.G address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded regarding it have been completely processed, there are no legal retention periods to the contrary and we have no legitimate interest in continuing to store it.

8. Use of customer data for direct advertising

8.1 Sign up for our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. To send newsletters we use the so-called Double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when registering for the newsletter is used strictly for a specific purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

8.2 Klaviyo

Our email newsletters are sent via this provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter in accordance with. Art. 6 para. 1 lit. f GDPR to this provider so that they can send the newsletter on our behalf.

Subject to your express consent in accordance with. Art. 6 para. 1 lit. a DSGVO, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or Web beacons in the emails sent, which can measure opening rates and specific interactions with the content of the newsletter. Device information (e.g.b Time of call,

IP address, browser type and operating system) is collected and evaluated, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with future effect.

We have concluded an order processing agreement with the provider, which protects the data of our site visitors and prohibits passing it on to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses from the European Commission, which are intended to ensure compliance with European data protection levels.

8.3 If you cancel your purchase with us before completing the order, you have the option of receiving a one-time email reminder of the contents of your virtual shopping cart.
The only mandatory information for sending this reminder is your email address. Providing further data is voluntary and will be provided if necessary. used to address you personally. For sending emails we use the so-called Double opt-in procedure that ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a shopping cart reminder. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The information we provided when registering for our

Data collected by the email notification service is used strictly for the intended purpose.

You can unsubscribe from shopping cart reminders at any time by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

8.4 Goods availability notification via email

For items that are temporarily unavailable, you can sign up to receive email inventory availability notifications. We will send you a one-off email informing you about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. Providing further data is voluntary and will be provided if necessary. used to address you personally. For sending emails we use the so-called Double opt-in procedure that ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for our email notification service about product availability is used strictly for the intended purpose.

You can unsubscribe from availability notifications at any time by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

8.5 Advertising by letter post

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 para. 1 lit. f GDPR and to use them to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time.

10. Online marketing

As part of our online marketing efforts, we use technologies from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”), specifically the so-called “Meta Pixel”. This tool enables us to place tailored advertising messages on Facebook and Instagram (“Facebook Ads” and “Instagram Ads”) and to measure and optimize their effectiveness (“Conversion Tracking”). The implementation of the “Meta Pixel” and the associated data processing are based on your express consent in accordance with Article 6 Paragraph 1 lit a GDPR.

When you visit our website, your web browser initiates direct communication with Meta's servers, regardless of whether you have an account with Meta or are currently logged in to one. During this process, Meta may collect your IP address and other identifiers that may be used for profiling purposes. The scope and use of this data is beyond our control.

The information collected may be stored on meta servers, including those in the United States. Despite the abolition of the EU-US Privacy Shield, Meta has pledged to comply with applicable data protection laws when transferring data internationally and has taken measures that meet a comparable standard. In addition, we have agreed standard data protection clauses with Meta to ensure an appropriate level of data protection.

You can revoke your consent at any time without affecting the lawfulness of the previous data processing. The easiest way to do this is through our consent management platform. Logged in users can also object via the provider's platform, using the following links: www.facebook.com/settings/?tab=ads# possible or https://privacycenter.instagram.com/policy/?subpage=7.subpage.5-WithdrawConsentWhereWe

We also use the “Custom Audiences” remarketing function. This feature also uses the Meta Pixel to show you relevant advertisements on our website and on other websites that use the Meta Pixel. Through these personalized ads, we aim to provide you with a more interesting online experience and to promote our services effectively.

For further information about the Meta Pixel and how it works, we refer you to the Meta help section at https://www.facebook.com/business/help/742478679120153? id=1205376682832142 and to Meta's privacy policy at https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0.

10.2 Google AdSense

This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called Cookies, i.e. text files that are stored on your computer and which enable your use of the website to be analyzed. In addition, Google AdSense also uses so-called “Web beacons” (small invisible graphics), which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also result in a transmission to the Google LLC servers. come to the USA.

Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

All processing described above, in particular reading out information on the device used via cookies and/or web beacons, will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a GDPR you have given your express consent to this. Without this consent, Google AdSense will not be used during your visit to the site.

You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/Drittlandtransfer

11. Web analysis services

11.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

Google (Universal) Analytics is used on this website exclusively without the use of cookies, which means that the service never sets cookies on your device.

Instead, your browser's local storage is used to store an individual ID assigned by Google (Universal) Analytics, which enables your use of the website to be analyzed. For this purpose, certain user information is processed via the ID. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude any direct personal reference.

The information is transferred to Google servers and further processed there. Transfers to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing described above, including the storage of information on the device used in the form of the ID, will only take place if you have given us your express consent in accordance with. Art. 6 para. 1 lit. a GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time with future effect.

To exercise your revocation, you can download and install the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in or within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie, which will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again):

Deactivate Google Analytics

We have concluded an order processing agreement with Google that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google (Universal) Analytics uses the special “demographic characteristics” function and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the data collected cannot be assigned to a specific person and will be deleted after being stored for a period of two months.

Google Signals

As an extension to Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google may, subject to your consent, use Google Analytics in accordance with. Art. 6 para. 1 lit. a DSGVO analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can use the "Personalized Advertising" feature in the settings of your

Deactivate Google account. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can find more information about Google Signals at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google (Universal) Analytics, the “UserIDs” function can be used on this website. If you use Google (Universal) Analytics in accordance with. Art. 6 para. 1 lit. a GDPR, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

Hotjar

This website uses the web analysis service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymized visitor data, including information from the end device used such as the IP address and browser information, in order to evaluate them for statistical analyzes of usage behavior on our website and to create pseudonymized usage profiles. Among other things, the evaluation of movement patterns (so-called Heatmaps) are possible, which show the duration of page visits and interactions with page content (e.g. b Text input, scrolling, clicks and mouse-overs). Pseudonymization fundamentally excludes any direct personal reference. It will not be merged with clear personal data collected about you in any other way.

All processing described above, in particular the reading or storage of information on the device used, will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a GDPR you have given your express consent to this. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

11.2 Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics sets 4 cookies, which are stored as small text modules on your device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude any direct personal reference.

The information is transferred to Google servers and further processed there. Transfers to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected when using Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, will only take place if you have given us your express consent in accordance with. Art. 6 para. 1 lit. a GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.

We have concluded an order processing agreement with Google that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google Analytics 4 uses the special “demographic characteristics” function and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the data collected cannot be assigned to a specific person and will be deleted after being stored for a period of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google may, subject to your consent, use Google Analytics in accordance with. Art. 6 para. 1 lit. a DSGVO analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the "Personalized advertising" function in your Google account settings. To do this, follow the instructions on this page: https://support.google.com/analytics/answer/7532985?hl=de 

UserIDs

As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you use Google Analytics 4 in accordance with. Art. 6 para. 1 lit. a GDPR, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

11.3 Google Tag Manager

This website uses the “Google Tag Manager”, a service from the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling and attaching conditions to them via a uniform user interface. The Google Tag Manager itself does not store or read any information on user devices. The service also does not carry out any independent data analysis. However, when you access the page, Google Tag Manager will transfer your IP address to Google and, if necessary, store it there. Also a transmission to Google LLC servers. In the USA it is possible.

This processing will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a GDPR you have given your express consent to this. Without this consent, Google Tag Manager will not be used during your visit to the site. You can revoke your consent at any time with future effect To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

11.4 AdCell
Adcell is an affiliate marketing network operated by Firstlead GmbH based in Berlin, Germany. It is designed to enable website operators to earn commission through advertising links. Adcell may collect a variety of data about user behavior, including clicks on advertising links, website visits and purchasing behavior.

The purpose of Adcell's data collection is to measure the effectiveness of affiliate advertising and to generate commissions for website operators. The technologies used to transfer data include cookies, web protocols and similar technologies. Regarding the data collected, various information is collected, including the date and time of the click, device type, IP address, pages visited and purchasing behavior. Legally, the processing of data is based on Art. 6 para. 1 p. 1 lit. a GDPR. The data is processed and stored in the European Union

Firstlead GmbH is listed as the recipient of the data. It is possible that data may also be shared with third parties in order to analyze and optimize advertising activities. Further information, including the privacy policy, can be found on the Adcell website.

It is also possible to revoke the processing of data by Adcell by restricting the use of cookies in your browser settings.

Finally, it should be noted that Adcell cookies can have a variable storage period, which depends on the website operator's settings and legal regulations.

11.5 Own affiliate programme

In connection with the product presentations on our website, we maintain our own affiliate programme, under which we provide interested third-party site operators with partner links for placement on their websites that lead to our offers. Cookies are used for the affiliate programme, which are generally set on the partner site after clicking on a corresponding partner link and for which we are therefore not responsible under data protection law. Cookies are small text files that are stored on your end device in order to be able to trace the origin of transactions (e.g. sales leads) generated via such links. Among other things, we can recognise that you have clicked on the partner link and have been redirected to our website. This information is required for payment processing between us and the affiliate partners. If the information also contains personal data, the described processing is based on our legitimate financial interest in the processing of commission payments in accordance with Art. 6 para. 1 lit. f GDPR.

If you wish to block the evaluation of user behaviour via cookies, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

11.6 Microsoft Clarity

This website uses the web analysis service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymised visitor data, including information about the end device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. Among other things, this makes it possible to analyse movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymisation rules out the possibility of direct personal identification. Your personal data is not merged with clear data collected in any other way.

All processing described above, in particular the reading or storage of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the ‘cookie consent tool’ provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

11.7 Tracify

This website uses the web analysis service ‘Tracify’ from Tracify GmbH, Agnes-Pockels-Bogen 1, 80992 Munich, Germany. With the help of Tracify, certain usage data of site visitors (date and time of access, user agent of the browser) is collected in anonymised form, evaluated and processed in automatic reports. On the one hand, this enables us to continuously optimise our online offering and, on the other hand, helps us to identify and resolve technical problems such as error messages when pages are accessed or search engine problems. Tracify operates via a simple script code without the use of cookies, which means that Tracify does not place cookies on your end device at any time.

The information processed via Tracify is not personally identifiable at any time and therefore does not allow any conclusions to be drawn about your person.

All processing described above, in particular the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. you can revoke your consent at any time with effect for the future by deactivating this service in the ‘cookie consent tool’ provided on the website.

12. Retargeting/remarketing and conversion tracking

12.1 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Any further data processing will only take place if you have agreed to Google that your internet and app browser history will be linked by Google to your Google account and that information from your Google account will be used to personalize ads that you display on the web regard. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. come to the USA.

All processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a GDPR you have given your express consent to this. Without this consent, retargeting technology will not be used during your visit to the site.

You can revoke your consent at any time with future effect To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

12.2 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") . We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can use the data from the advertising campaigns to determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. come to the USA.

Details about the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a GDPR you have given your express consent to this. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be possible or may only be used to a limited extent if you have deactivated the use of cookies.

Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

Third country transfer

The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. Possibly. You are not entitled to any legal remedies against access by authorities.

If data is processed outside the EU/EEA and there is no data protection level corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to ensure an appropriate level of data protection. Google Ireland's parent company, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out.

All processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a GDPR you have given your express consent to this. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.

Further legal information about Google (Universal) Analytics, including a copy of the standard contractual clauses mentioned, can be found at https://policies.google.com/privacy?hl=de&gl=de and under https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be possible or may only be used to a limited extent if you have deactivated the use of cookies.

13. Page functionalities

13.1 Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data can also be transmitted to: Google LLC., USA

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your site visit, your data will be assigned directly to your account when you click on a video. If you do not want it to be associated with your account, you must log out before clicking the play button.

All of the aforementioned processing, in particular the setting of cookies to read information on the device used, will only take place if you have given us your express consent in accordance with. Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

13.2 Vimeo

This website uses plugins to display and play videos from the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your site visit, your data will be assigned directly to your account when you click on a video. If you do not want it to be associated with your account, you must log out before clicking the play button.

All of the aforementioned processing, in particular the setting of cookies to read information on the device used, will only take place if you have given us your express consent in accordance with. Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the “cookie consent tool” provided on the website.

13.3 Trusted Shops Trustbadge

Graphic elements from the following provider are integrated into our website to display external customer reviews and/or an externally awarded quality mark: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

If you access a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed, this is done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the optimal marketing of our offering and the attractive design of our website.

13.4 Google Maps

This website uses an online map service from the following provider: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, our location will be displayed to you and any journey will be made easier.

When you access the sub-pages in which the Google Maps map is integrated, information about your use of our website (such as:b Your IP address) is transmitted to Google servers and stored there; this may also result in a transmission to the servers of Google LLC. come to the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and therefore the map display on this website cannot then be used.

To the extent legally required, we have your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR obtained. You can revoke your consent at any time with future effect To exercise your revocation, please follow the option described above for making an objection.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

13.5 Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data can also be transmitted to: Google LLC, USA. For the visual design of the Captcha window, the provider uses “Google Fonts”, i.e. fonts downloaded from the Internet by Google. There is no processing of any information other than that mentioned above, which is already transmitted to Google via the ReCaptcha functionality.

The service checks whether an entry is made by a natural person or improperly through machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. In order to ensure that an action is carried out by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the device used, identification data for the type of browser and operating system used, as well as the date and duration of the visit and sends these to for evaluation Provider server.

The legal basis is our legitimate interest in determining individual personal responsibility on the Internet and avoiding misuse and spam in accordance with Art. 6 para. 1 lit. f GDPR

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

13.6 Google Web Fonts

This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.

Data can also be transmitted to: Google LLC, USA

The processing of personal data in the course of contacting the font provider will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a GDPR you have given your express consent to this. You can revoke your consent at any time with future effect by deactivating this service using the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.

For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission.

13.7 Geolocation

This website uses geolocation technologies to provide location-based services. This can be done by determining your IP address or by GPS-supported location data, provided you have activated this in your end device.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) to optimise our offer or on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR if active consent is required.

You can deactivate the geolocation function in the settings of your browser or end device. Further information on the processing of location data can be found in our privacy policy.

14. Tools and Miscellaneous

Cookie consent tool

To obtain effective user consent for cookies and cookie-based applications that require consent, this website uses a so-called

“Cookie consent tool”. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface on which consent can be given for certain cookies and/or cookie-based applications by checking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the box. This ensures that such cookies are only set on the user's device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.

If in individual cases personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website.

Another legal basis for processing is Art. 6 para. 1 lit. c GDPR As those responsible, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user consent.

If necessary, we have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options of the

Cookie consent tools can be found directly in the corresponding user interface on our website.

15. Rights of the data subject

15.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) towards the person responsible with regard to the processing of your personal data, whereby reference is made to the legal basis listed for the respective exercise requirements:

• Right to information in accordance with Art. 15 GDPR;
• Right to rectification in accordance with Art. 16 GDPR;
• Right to deletion in accordance with Art. 17 GDPR;
• Right to restriction of processing in accordance with Art. 18 GDPR;
• Right to information in accordance with Art. 19 GDPR;
• Right to data portability in accordance with Art. 20 GDPR;
• Right to revoke consent given in accordance with Art. 7 para. 3 GDPR;
• Right to complain according to Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPLEX REASONS FOR THE PROCESSING THAT ARE DESIGNED TO BE PROTECTED, WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR OPT-OUT AS DESCRIBED ABOVE.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

16. Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing and - if relevant - additionally based on the respective statutory retention period (e.g.b commercial and tax law retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the affected data will be stored until you revoke your consent.

Are there any statutory retention periods for data that are stored in the context of legal transactions or obligations similar to legal transactions on the basis of Art. 6 para. 1 lit. b DSGVO are processed, these data will be routinely deleted after the retention periods have expired, provided that they are no longer required to fulfill or initiate the contract and/or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f DSGVO, this data will be stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f DSGVO, this data will be stored until you exercise your right to object in accordance with Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.