Privacy policy

Content of the privacy policy

1 Information on the collection of personal data

2 Your rights

3 Objection or revocation against the processing of your data

4 Obligation to provide personal data

5 Collection of personal data when visiting our website

6 Cookies and local storage

7 Contacting us via e-mail or the contact form

8 Use of our webshop

9 Customer account

10 Happy Clients

11 Direct Marketing

12 Cookiebot

13 Chatbot

14 Availability notifications

15 Product reviews

16 Google Tag Manager

17 Google Maps

18 Hotjar

19 Google Analytics

20 Google Ads and Remarketing

21 Meta Pixel and Custom Audiences

22 Microsoft Advertising

23 Pinterest advertising data functions

24 Social media

1. information on the collection of personal data

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

Cloud7 GmbH

Zur Heide 9

15712 Königs Wusterhausen, OT Zernsdorf

Zernsdorf, Germany

Phone: +49 03375 959 7480

E-mail: office@cloud7.de

We have appointed a data protection officer for our company:

LEROIL Data Protection

Maak Roberts

Holzmarktstr. 25

10243 Berlin

E-Mail: ro@leroil.de

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we will also state the specified criteria for the storage period.

2. Your rights

You have the following rights vis-à-vis us with regard to your personal data:

Right of access,

Right to rectification or erasure,

Right to restriction of processing,

Right to object to processing,

right to data portability.

To exercise these rights, you can contact us using the contact details of the controller or the data protection officer given above.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

3. Objection or revocation against the processing of your data

If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

4. Obligation to provide personal data

There is no obligation to provide the personal data collected on this website. It is not required by law or contract or necessary for the conclusion of a contract. If the collection of data is necessary to display the website, the website cannot be displayed correctly without the collection of data. In these cases, data is collected automatically when the website is made available or on the basis of your consent.

It is generally not possible to contact us or subscribe to our newsletter without providing the minimum data.

When ordering in our online store, the corresponding mandatory information is required for the conclusion of the purchase contract and the execution of the payment. A purchase is not possible without this information.

In order to register as an end customer or retailer and create an account, the mandatory information is required. No account can be created without this information.

5. Collection of personal data when visiting our website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect at least the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

IP address

Date and time of the request

Content of the request (specific page)

Access status/HTTP status code

Website from which the request originates

Websites accessed by the user's system via our website

Transmitted bytes of the requested URL

browser

Operating system and its interface

Language and version of the browser software.

This website is hosted by Shopify. The personal data collected on this website is stored on the hoster's servers. In order to ensure data protection-compliant processing, we have concluded an order processing contract with Shopify.

Our website is provided by Shopify via Cloudflare's Content Delivery Network (CDN) to ensure fast and efficient delivery of the website depending on the utilization of the various servers and capacities. Cloudflare receives access to certain technical data that is automatically transmitted by your browser, such as your IP address. Insofar as processing by Cloudflare takes place on servers in Canada and the USA, this is done on the basis of the EU Commission's adequacy decision for a secure level of data protection in the third country.

6. Cookies and local storage

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

Cookies that are absolutely necessary for the functioning of the website are stored on the legal basis of § 25 para. 2 no. 2 TDDDG. Other cookies are only stored with your consent; the legal basis in this case is § 25 para. 1 TDDDG in conjunction with GDPR Art. 6 para. 1 lit a. Consent can be revoked at any time via the "Cookie Settings" link in the footer of the website.

This website uses the following types of cookies, the scope and function of which are explained below

Transient cookies

Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. Session cookies also include the cookies that we use to ensure that the website is displayed correctly on the end device used. The session cookies are deleted when you log out or close the browser.

Persistent cookies

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

Cookies are used for the following purposes on this website:

Necessary cookies are required for the basic functions of the website, such as the shopping cart, checkout, forms, chatbot or consent management and cannot be deactivated.

Cookies that are set for statistical and analytical purposes by Shopify or other providers such as Google Analytics in order to obtain information about visitor flows on our website. These cookies are only used with your consent.

Cookies for various marketing technologies, such as tracking pixels. These services from Shopify, Google, Meta, Microsoft or Klaviyo enable us to show you targeted advertising on other websites or social media profiles and to analyze the effectiveness of our advertisements. These cookies are only used with your consent.

7. Contacting us via e-mail or the contact form

When you contact us by e-mail or via our contact form, the data you provide (name, e-mail address, message, telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations.

This data is processed by us in order to be able to respond to your request. The data processing is carried out on a contractual basis (Art. 6 para. 1 sentence 1 lit. b GDPR) insofar as it concerns questions relating to a purchase of our products. For the provision of customer service and answering your inquiries, the processing is based on legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR), as it enables us to provide satisfactory customer service.

8. Use of our web store

If you wish to place an order in our web store, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information required for the processing of contracts is marked separately, other information is voluntary. Specifically, we collect the following data:

Surname

First name

Company name (optional)

Telephone (optional)

Delivery address

Billing address

E-mail address

We process the data you provide to process your order. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

For the development and administration of our website and store, we use the services of the E-Shop-Guide GmbH, which may have access to personal data in individual cases. In order to ensure data protection-compliant processing, we have concluded an order processing contract with E-Shop-Guide GmbH.

We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

The use of cookies, which are absolutely necessary for the function of our web store, takes place on the legal basis of § 25 para. 2 no. 1 TDDDG.

When paying, you can choose between paying with PayPal and various other payment methods commonly used in your region. For payment with PayPal, we will forward you to PayPal after your order so that you can enter the required details there. All other payment methods are offered by Shopify. Depending on the payment method, you will be forwarded to the relevant payment service provider.

If you make the payment, we will forward you to the selected payment service provider after your order so that you can initiate the payment there. The service provider is responsible for processing your personal data to process the payment and for fraud prevention, for example through credit checks. Please contact the service provider directly if you have any questions:

Paypal is an offer from PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Data protection information of the provider:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your orders will be shipped via our shipping service provider DHL. In order to send you the desired items, we transmit your name and delivery address to DHL.

9. Customer account

You have the option of voluntarily registering as a customer in our webshop and creating a customer account. To do this, you can enter an e-mail address at which we can contact you. You will be sent a one-time password for each login to this e-mail address. Your order history is stored in your account so that you can access it easily. You can enter further details there, such as your name and billing or delivery address, and manage your orders.

RightsThe basis for the processing of your data is Art. 6 (1) sentence 1 lit. b GDPR, because you provide the data in the context of a contractual relationship or for the initiation of such a relationship.

The data will be stored until you delete the user account and then deleted if there are no statutory retention periods. You can have your user account deleted by sending a corresponding message to support@cloud7.de.

10. Happy Clients

If you submit a photo of your dog in the "Happy Clients" section, we will publish it on the corresponding subpage of our website. If you let us know that it is okay for you to use the photo on our Instagram profile, we may also post it there.

Contributions can be submitted by email or via the form on the subpage.

Your name will only be used if you provide it and thereby signal to us that it is okay for you to be mentioned. You can write a voluntary comment so that we can publish it with your picture.

The publication of images, comments and names is voluntary - both for you and for us.

If you would like to delete your photo later, please send us a short email to press@cloud7.de. We will then immediately delete the post from the website and from the Instagram profile.

The legal basis for processing your personal data is our legitimate interest in presenting our happy customers on our website and Instagram profile. As you provide us with your data voluntarily, we do not assume that you have any objections to the processing.

We store the photo and your email or the form you send us for as long as the post is published on our website so that we can prove that you sent us the post voluntarily.

Please only submit pictures that you have taken yourself or for which you are authorized to grant us the right of use.

Instagram processes your data on servers in the USA, among other places. Certain data processing risks cannot be excluded. Please also bear in mind that although images on Instagram can be deleted, further storage and use by Instagram cannot be ruled out.

11. Direct marketingarketing

You can subscribe to our marketing e-mails with information about our products by agreeing to receive them. We collect your e-mail address for this purpose.

We use Klaviyo, a service from the USA, to send marketing emails. If you call up the registration form and consent to the mailing, we will transfer the data you provide to Klaviyo. Klaviyo's obligation to handle your data in accordance with the GDPR and to take appropriate technical and organizational measures for data security is regulated in a data processing agreement. Klaviyo processes your data on servers in the USA. The legal basis for the transfer to the USA is the adequacy decision of the EU Commission pursuant to Art. 45 GDPR. Klaviyo is certified in the so-called Trans-Atlantic Data Privacy Framework.

We use the so-called double opt-in procedure for registration. This means that after you have registered, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to receive marketing emails. If you do not confirm your registration, you will not be included in our mailing list. As proof of consent, we store the time of registration and confirmation, the IP address used and the texts used. The purpose of the procedure is to prove your consent. Our legitimate interests arise from the aforementioned purpose. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

After your confirmation, we will save your email address for the purpose of sending you marketing emails. The legal basis is your consent and thus Art. 6 para. 1 sentence 1 lit. a GDPR. If consent is not required, for example in the context of advertising to existing customers, we may also send you emails on the basis of our legitimate interests in direct marketing. The legal basis in these cases is Art. 6 para. 1 sentence 1 lit. f GDPR.

We record your user behavior in relation to our marketing emails. This means that we can track whether you open the marketing emails we send and how often and on which links you have clicked. Klaviyo also provides information on possible locations based on the IP addresses you use, so that we can recognize from where you have interacted with the emails. We use this data to optimize the content or frequency of the marketing emails and to provide you with information and offers that are of interest to you. The legal basis is Art. 6 para. 1 lit. a GDPR, insofar as your consent has been obtained. In other cases, the legal basis is our legitimate interest in optimizing our marketing emails and thus Art. 6 para. 1 lit. f GDPR.

You can withdraw your consent to the sending of marketing emails and the analysis of your user behavior at any time by unsubscribing from the marketing emails. You can do this easily by clicking on the link at the end of each marketing email or by sending an email to support@cloud7.de.

In principle, we store your data for the duration of the subscription. We check at regular intervals whether further storage of the e-mail addresses in our mailing list is necessary, in particular we delete undeliverable or unsubscribed addresses. We will delete your consent and e-mail address as well as the associated user data if you withdraw your consent, at the latest after 3 years at the end of the calendar. Further storage is based on our legitimate interest in being able to prove, in the event of any legal disputes, that consent was given at the time of sending and thus on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

In addition, we reserve the right to use your name and postal address to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests in direct marketing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. You can object to direct marketing at any time without giving reasons.

Klaviyo also uses cookies on our website to integrate the mailing list and for web analysis and allocation of visits. These cookies are only used with your consent. The legal basis for the use of cookies is § 25 TDDDG (1). Consent can be revoked at any time via the "Cookie Settings " link in the footer. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.

12. cookiebot

We use the Cookiebot Consent Management Platform as a consent management tool to obtain your consent to cookies or data processing on our website, where necessary. To prove your consent, the following data is collected and stored by the platform: consent ID, consent number, timestamp, language of the consent banner, user selection, version of the banner, information on the end device used, IP address.

A cookie is also stored in order to be able to assign the consent given or its revocation to you. The data collected in this way is stored until you ask us to delete it, delete the cookiebot cookie yourself or the purpose for storing the data no longer applies.

The legal basis for storing the cookie is § 25 para. 2 no. 2 TDDDG. The legal basis for any processing of personal data is Art. 6 para. 1 sentence 1 lit. c GDPR, as it is necessary for compliance with a legal obligation to which we are subject and which arises from Art. 7 para. 1 GDPR.

Data processing takes place in the European Union. In order to ensure data protection-compliant processing, we have concluded an order processing contract with Usercentrics, the provider of Cookiebot.

13 Chatbot

We have integrated the chatbot Chatty into our website, which is provided by Avada Commerce, Inc. Here you can automatically track the delivery status of your order and have the opportunity to view our FAQ (frequently asked questions). Personal data is not processed in chat messages, as this information is only retrieved. The order number and your e-mail address must be entered to track the shipment. In addition, the provider may receive the information that you have visited our website or information about your browser or device. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as the data processing is carried out in connection with a purchase of our products or in advance of such a purchase.

14. availability notifications

If you wish, you can set an availability notification for sold-out items by entering your e-mail address. For this purpose, we use the "Restock Rocket" service from the provider Artos Software, which we have integrated into our Shopify store. Your email address will only be used to send the notification when the desired item is available again. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as the data processing is carried out for a possible later purchase.

15. product reviews

Following your purchase, you have the opportunity to rate the purchased product. To integrate this function, we use the service judge.me, which is offered by the service provider Judge.me Company Limited from Great Britain. You can find the provider's privacy policy at https://judge.me/privacy

If you have given your consent, you will receive an email notification after your purchase inviting you to submit a review. Your product review will then be displayed for the respective product in our store and can be helpful for other customers when making a purchase decision.

Insofar as personal data is processed by the provider in the UK, your data will be transferred on the basis of the EU Commission's adequacy decision for a secure level of data protection in the third country.

The legal basis for the provision of the product evaluation option is our legitimate interest in having our products evaluated by our customers and thus Art. 6 para. 1 lit. f GDPR. The legal basis for sending the evaluation emails and the subsequent processing of your data for the display of the product evaluation is your consent, which you can revoke at any time, and thus Art. 6 para. 1 lit. a GDPR.

16 Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin D04 E5W5, Ireland. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. By using the Tag Manager, your IP address is transmitted to Google, as this is necessary for the function.

17 Google Maps

To make it easier for you to find Cloud7 dealers, we have integrated map material from the Google Maps service via an API on our dealer subpage. Google Maps is a service provided by Google Cloud EMEA Limited ("Google"), 70 Sir John Rogerson's Quay, Dublin 2, Ireland. For this purpose, corresponding program libraries or map content are called up from Google servers. Fonts ("Google Web Fonts") are also loaded from Google Maps.

In order to display the content in your browser, Google must receive your IP address, otherwise Google would not be able to provide you with this integrated content. Google also processes other data, in particular location data - insofar as this is transmitted by your device or browser based on the default settings you have made - and search queries. Technical information about the browser and operating system, referring websites, time of visit and other information about your use of our website may also be transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google profile before accessing these subpages.

Google may store your data as usage profiles and use them for the purposes of advertising, market research and/or the needs-based design and further development of Google products and services. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

The legal basis for the transmission of your data to Google is Art. 6 para. 1 sentence 1 lit. f GDPR, as the integration of Google Maps is based on our legitimate interests in the efficient presentation of an appealing street map. The legal basis for any technically necessary cookies used by Google is TDDDG § 25 para. 2 no. 2.

In this processing, our cooperation with Google is based on a so-called controller-to-controller contract, which can be accessed here. We ourselves do not store any personal data in connection with the integration of Google Maps.

We have no influence on further data processing by Google. Insofar as Google processes data on US servers, the transfer takes place on the basis of Art. 45 GDPR. The EU Commission has issued an adequacy decision for the USA. Google is certified in the so-called Trans-Atlantic Data Privacy Framework.

Further information on the purpose and scope of data collection and its processing by Google can be found in Google's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy:

https://policies.google.com/privacy?hl=de

18 Hotjar

We use Hotjar on our website, an analytics service provided by Hotjar Limited, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. Your data is processed by Hotjar on European servers. Hotjar is only used with your consent. We have concluded an order processing contract with Hotjar, which regulates Hotjar's processing on our behalf.

Only the actions of individual, randomly selected users who have consented to the analysis are documented and evaluated. If you consent to its use, Hotjar may record your actions on our website so that we can evaluate how visits to individual subpages are made. The recordings cannot be assigned to individual users and do not contain a user ID or other identifiers. We can see , for example, how far users scroll down, where they click or where the mouse pointer moves. Hotjar uses the recorded user movements to create aggregated statistics for us about the use of our website, so that we can recognize which pages or areas of the website are visited more or less, where problems may occur during use or which articles are viewed particularly often. We use the findings from the analyses to optimize our website, for example to adjust the placement of articles or the layout.

Data collected by Hotjar is deleted after 12 months.

Hotjar also uses cookies. The legal basis for the storage of cookies is § 25 para. 1 TDDDG in conjunction with GDPR Art. 6 para. 1 lit a. The legal basis for the processing of personal data is your consent and thus Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time via the "Cookie Settings" link in the footer.

19. Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Ltd ("Google") for web analysis, range measurement and measurement of visitor flows. We only use Google Analytics if you give us your consent to do so. The purpose of integrating Google Analytics is to analyze user behavior on our website and to use these findings - e.g. about the time or duration of visits or the most frequently visited subpages - to optimize our offer and our website accordingly. We can also check and optimize the effectiveness of the advertising measures we place on the Internet.

In particular, Google processes data on the browser, end device and operating system you use, the time of your visit to our website, the subpages accessed and the access times, the pages previously and subsequently visited and, if applicable, interactions on the website or location data. No e-mail addresses or names are stored, but user pseudonyms may be created in order to be able to track individual users across different pages.

IP addresses are anonymized by Google.

Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage, including functions for Google Analytics reports on performance according to demographic characteristics and interests. Google Analytics Demographics and Interest Reporting allows us to use data from Google's interest-based advertising and/or third-party data about our advertising audience (e.g. age, gender and interests) in conjunction with Google Analytics for targeted and optimized advertising activities, strategies and the content of our website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Access by US authorities is also not excluded.

The data collected by Google Analytics is deleted after 14 months.

Further information on the processed data can be found at https://www.google.com/intl/de/policies/privacy/#infocollect

Google Analytics also uses cookies. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also opt out of the Google Analytics tracking function with effect for the future by downloading and installing the Google Analytics Opt-out Browser Add-on for your current web browser:

http://tools.google.com/dlpage/gaoptout?hl=de

The legal basis for the storage of cookies is § 25 para. 1 TDDDG in conjunction with GDPR Art. 6 para. 1 lit a. The legal basis for the processing of personal data is your consent and thus Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time via the "Cookie Settings" link in the footer.

We have concluded an order processing contract with Google, which regulates Google's processing on our behalf. Insofar as Google processes data on US servers, the transfer takes place on the basis of Art. 45 GDPR. The EU Commission has issued an adequacy decision for the USA. Google is certified in the Trans-Atlantic Data Privacy Framework.

Information from the third-party provider: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, Fax: +353 (1) 436 1001.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your Google customer account under "My data", "Personal data".

20. Google Ads and remarketing

This website uses Google Ads and various conversion tracking and remarketing technologies offered by Google Ireland Limited ("Google"). Google Ads will only be integrated if you give us your consent to do so.

With the help of these technologies, we and Google can, for example, track whether a user has clicked on one of our ads and has been redirected to our website. Google Ads also allows us to track sales with the data available from Google Analytics. In some cases, these sales can also be assigned to specific customers, for example by transmitting the customer's email address to Google in encrypted form, so that Google can assign our customers to its own users if they were logged into their Google account when purchasing or interacting with one of our ads. We do not receive any information with which users can be personally identified, but only statistics on the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag. We can also address our advertising to visitors to our website and display it on other websites or social media as part of remarketing.

As part of Google Ads, Google processes the following data, among others Browser language, browser type, ads clicked on, cookie ID, cookie information, date and time of visit, duration of visit, pages visited, content in which the user is interested, IP address, referrer URL, usage data, web request, as well as the following encrypted (hashed) customer data, if applicable: E-mail address, name, address or telephone number.

The legal basis for the storage of cookies is § 25 para. 1 TDDDG in conjunction with GDPR Art. 6 para. 1 lit a. The legal basis for the processing of personal data is your consent and thus Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time via the "Cookie Settings" link in the footer.

We have concluded an order processing contract with Google, which regulates Google's processing for us. Google also processes your data on servers in the USA. The legal basis for the transfer to the USA is the adequacy decision of the EU Commission pursuant to Art. 45 GDPR. Google is certified in the Trans-Atlantic Data Privacy Framework.

Information from the third-party provider: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, Fax: +353 (1) 436 1001.

21. Meta Pixel and Custom Audiences

We have integrated a program code on our website from Meta (formerly Facebook) which sets a cookie (the so-called Meta pixel). The integration of the Meta pixel only takes place if you give us your consent. This pixel makes it possible Metato track your visit to our site and the corresponding subpages as well as any actions you perform on our site and, if necessary, to assign them to your Facebook profile and other data that Meta Meta has about you. In this context, it is recorded in particular whether you have previously clicked on an advertisement placed by us on Facebook or other websites. The assignment also takes place across different devices or browsers as long as you are logged in with your Facebook profile. This may also be the case if you do not have a Facebook window open in your browser.

The Custom Audiences function allows us to determine which target groups and Facebook users are shown these ads as part of our placement of ads on Meta. For example, we can set our ads to be displayed to users who have previously visited our website. The function also enables us to measure the success of our ads and thus use our advertising budget as wisely as possible. The data collected by Meta can only be viewed by us in the form of anonymous reports and is only used for the placement of advertisements.

The Meta Pixel and Custom Audiences are an offer from Meta Platforms Ireland Ltd ("Meta"), 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland. You have the option of prohibiting Meta and its partners from placing advertisements. You can edit the settings for Facebook ads at the following link: https://www.facebook.com/ads/website_custom_audiences/. For more information on how Meta processes your data, please refer to Meta's privacy policy: https://www.facebook.com/policy.php

We are jointly responsible with Meta for the processing of your data in connection with the tracking of your activities on our website and the advertisements placed by us - but not for further processing by Meta. We have entered into a joint processing agreement with Meta, which is available here:

https://www.facebook.com/legal/controller_addendum

Meta has agreed to take care of the rights of the data subjects as far as the processing by Meta is concerned. Users can, for example, send information or deletion requests directly to Meta. However, your rights as a data subject (in particular to information, deletion, objection and complaints to the competent supervisory authority) are in no way restricted by our agreements with Meta.

Meta also processes your data in the USA. Meta processes your data on servers in the USA. The legal basis for the transfer to the USA is the adequacy decision of the EU Commission pursuant to Art. 45 GDPR. Meta is certified in the so-called Trans-Atlantic Data Privacy Framework.

22. Microsoft Advertising

We have integrated advertising technologies from Microsoft Ireland Operations Limited on our website. The integration of Microsoft Advertising (formerly: Bing Ads) only takes place if you give us your consent.

The integration of Microsoft Advertising allows us to track, for example, whether a user has clicked on one of our ads on websites, apps and search engines provided by Microsoft (Bing, Yahoo, Duck Duck Go) and then, after being redirected to our website, has performed certain actions there. In addition to clicks, the user behavior tracked in this way primarily includes purchases or newsletter subscriptions. Technically, this works by placing a user tag on our website that allows Microsoft to assign the user's action to the previous click on our ad. We do not receive any information with which users can be personally identified, but only aggregated statistics about the effectiveness of our ads, e.g. which keywords or ads were used to redirect users to our website, or information about the region.

Microsoft Advertising also enables us to categorize users into specific target groups based on the tracked activities and thus determine which of our ads are displayed to these groups when they visit Microsoft offers on the Internet. This enables us to use our advertising budget as efficiently as possible by prioritizing ads to users who are interested in our products.

According to Microsoft, it uses the following cookies

cookie ID	Cookie description
MUID	This is a Microsoft cookie that contains a GUID assigned to your browser. It is set when you interact with a Microsoft property, including a UET beacon call or a visit to a Microsoft property via the browser.
_uetmsclkid	This is Microsoft's click ID to improve the accuracy of completion tracking. Note: UET sets a first-party cookie in the domain of your website for this parameter. If Microsoft's automatic click ID tagging is enabled, the ad click information is generated at the time of the ad click and appended to the URL of the landing page.
_uetsid	This contains the session ID for a unique session on the website. NoteAs of July 2023, _uetsid has been updated with additional parameters as follows: insights_sessionId, timestamp, pagenumber, upgrade, upload.
_uetvid	UET assigns this unique, anonymized visitor ID, which represents a unique visitor. UET stores this data in a first-party cookie. NoteAs of July 2023, _uetvid has been updated with additional parameters as follows: insights_userId, cookieVersion, expiryTime, consent, cookie_creation_time.

The data processed by Microsoft includes device data, browser data, location data, access duration, time, navigation behavior, clicks and IP addresses. The processing of names or email addresses is also possible. If you are logged in with a Microsoft account, your activities can also be merged by Microsoft on different devices by assigning them to your account.

Microsoft processes the collected data itself for its own purposes. Please refer to the privacy policy from Microsoft, as we have no influence on this processing. The legal basis for the transfer of your data to Microsoft is your consent and thus Art. 6 para. 1 lit. a GDPR.

The legal basis for the storage of cookies on our website by Microsoft is § 25 para. 1 TDDDG in conjunction with GDPR Art. 6 para. 1 lit. a. The legal basis for the processing of personal data by us is your consent and thus Art. 6 para. 1 lit. a GDPR.

You can revoke your consent at any time via the "Cookie Settings" link in the footer. You can also change your settings for the display of interest-based advertising by Microsoft at https://account.microsoft.com/privacy/ad-settings . You can also object to data processing by Microsoft by opting out of behavioral tracking and the display of interest-based ads. To do this, use the relevant resources for consumers such as https://youradchoices.com/ or https://optout.networkadvertising.org/

Information from the third-party provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin, Ireland 18, D18 P521.

Microsoft also processes your data on servers in the USA. The legal basis for the transfer to the USA is the adequacy decision of the EU Commission pursuant to Art. 45 GDPR. Microsoft is certified in the Trans-Atlantic Data Privacy Framework.

23. Pinterest advertising data functions

We have integrated advertising data functions from Pinterest on our website. Pinterest is a service provided by Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland. In this respect, our website uses Pinterest technologies that enable us to display relevant advertisements and offers to visitors to our website on Pinterest. These so-called conversion tracking or retargeting technologies are only activated on our website with your consent. You can give your consent in our consent banner, which is displayed when you first load the website, and subsequently adjust or revoke it at any time under the "Cookie Settings" link in the footer.

You can also deactivate data collection for the display of interest-based advertising in your Pinterest account settings. Pinterest explains how this works here: https://help.pinterest.com/de/article/personalization-and-data#info-ad

Pinterest uses cookies and so-called tracking pixels or tags so that Pinterest receives information about your visit to our website, including that you have accessed our website and which products or subpages you have viewed. Pinterest may assign this information to your Pinterest profile and link it to other information that Pinterest may have about you. We ourselves do not receive any personally identifiable information from Pinterest from these evaluations.

The legal basis for the storage of cookies is § 25 para. 1 TTDSG in conjunction with GDPR Art. 6 para. 1 lit a. The legal basis for the processing of personal data is your consent and thus Art. 6 para. 1 lit. a GDPR.

We are jointly responsible with Pinterest Europe Limited for the collection and transmission of personal data in this regard. You can view the contract concluded between us and Pinterest in accordance with Article 26 GDPR on joint responsibility here:

https://business.pinterest.com/en-us/pinterest-advertising-services-agreement/germany/

Pinterest is solely responsible for the subsequent processing of personal data by Pinterest. Information on data processing by Pinterest can be found in Pinterest's privacy policy:

https://policy.pinterest.com/de/privacy-policy

Pinterest is responsible for fulfilling the rights of data subjects under Articles 15-20 GDPR with regard to the personal data stored by Pinterest Europe in accordance with joint processing. Users can, for example, send requests for information or deletion directly to Pinterest. However, your rights as a data subject (in particular to information, deletion, objection and complaints to the competent supervisory authority) are in no way restricted by our agreements with Pinterest.

Pinterest may also process your data in the USA and, according to its own statements, complies with data protection regulations.

24. Social media

General information on data processing in connection with our profiles on social networks

We use our profiles on the social networks Facebook, Instagram, Vimeo, LinkedIn, TikTok and Pinterest to provide information about our company and the products we offer. And, of course, to get in touch and communicate with users of the social networks.

We use the Later service to evaluate our posts on social media and to publish these posts with a time delay. We have concluded an order processing agreement with Later, which regulates data protection-compliant processing by Later on our behalf. Later processes the content of the posts and the reactions to them (such as likes or comments). Later processes this data in the USA and has concluded the standard contractual clauses of the European Commission within the meaning of Article 46 GDPR with us.

Please note that the personal data of social network users may be processed outside the European Union. This may lead to risks for users, e.g. it may be more difficult to enforce users' rights.

If you leave us messages or comments on one of our company profiles, we process your personal data in order to communicate with you. This constitutes a legitimate interest; the legal basis is Art. 6 (1) 1 lit f GDPR. We do not store any further communication data.

The terms and conditions of the operators of these platforms apply. We cannot make any statement about which data is processed by these operators during your visit to these networks. Please obtain information directly from the respective provider; the links to the relevant data protection notices and details of the responsible parties can be found below.

Should you have any further requests for information or wish to assert your rights as a data subject, we would like to point out that these can be asserted most effectively with the providers. Only they have access to their users' data and can take appropriate measures and provide information directly. Should you nevertheless require support, you can of course contact us.

Details of the Facebook fan page

We are jointly responsible with Meta for collecting the personal data of visitors to our Facebook page - but not for further processing by Meta. We have entered into a joint processing agreement with Meta, which is available here: https://www.facebook.com/legal/terms/page_controller_addendum

Meta has agreed to take care of the rights of the data subjects. Users can, for example, send information or deletion requests directly to Meta. However, your rights as a data subject (in particular to information, deletion, objection and complaints to the competent supervisory authority) are in no way restricted by our agreements with Meta.

See "Things done and provided by you and others" in the Facebook Privacy Policy for more information about the personal data included, such as information about the types of content users view or interact with, or user actions: https://www.facebook.com/policy

Regarding the information collected about the user's devices, details can be found under "Device information" - this can be, for example, IP addresses or details of the operating system, browser type, language settings or cookie information. Meta also collects and uses this information to provide site operators with analytics services, known as "Page Insights", to help them understand how users interact with their pages and related content. Information from Meta about "Page Insights" can be found here: https://www.facebook.com/legal/terms/information_about_page_insights_data

Operator details: Meta Platforms Ireland Ltd ("Meta"), 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland.

Instagram

Details of the operator: Meta Platforms Ireland Ltd ("Meta"), 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland. Data protection information: https://de-de.facebook.com/help/instagram/519522125107875

TikTok

Information about the operator: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Data protection information: https://www.tiktok.com/legal/privacy-policy-eea?lang=de

Vimeo

Information about the operator: Vimeo.com, Inc, 555 West 18th Street, New York, New York 10011, USA. Data protection information: https://vimeo.com/privacy

We are jointly responsible with Pinterest for collecting the personal data of visitors to our Pinterest profile - but not for further processing by Pinterest. We have entered into a joint processing agreement with Pinterest, which is available here: https://business.pinterest.com/en-us/pinterest-advertising-services-agreement/germany/

Pinterest has agreed to take care of the rights of data subjects. Users can, for example, send information or deletion requests directly to Pinterest. However, your rights as a data subject (in particular to information, deletion, objection and complaints to the competent supervisory authority) are in no way restricted by our agreements with Pinterest.

Information about the operator: Pinterest Europe Limited 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland. Data protection information: https://policy.pinterest.com/de/privacy-policy

Details of the LinkedIn profile

Information about the provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. We are jointly responsible with LinkedIn for the collection of the personal data of visitors to our LinkedIn profile - but not for further processing by LinkedIn. We have entered into a joint processing agreement with LinkedIn, which is available here: https://legal.linkedin.com/pages-joint-controller-addendum

LinkedIn has agreed to take care of the rights of data subjects. Users can, for example, send information or deletion requests directly to LinkedIn. However, your rights as a data subject (in particular to information, deletion, objection and complaints to the competent supervisory authority) are in no way restricted by our agreements with LinkedIn.

You can view LinkedIn's privacy policy here: https://de.linkedin.com/legal/privacy-policy