Privacy

1. Information on the collection of personal data and contact details of the Controller

2. Data collection when you visit our website

3. Contacting us

4. Cookies

5. Data processing for order processing

6. Data processing when opening a customer account and for contract processing

7. Comment function

8. Use of your data for direct marketing

9. Contacting us for the review reminder

10. Use of social media: Social plugins

11. Use of social media: Video

12. Online Marketing

13. Web analysis services

14. Retargeting / Remarketing / Referral Advertising

15. Rights of the Data Subject

16. Duration of storage of personal data

17. Use of the revocation button

1. Information on the collection of personal data and contact details of the Controller

1.1. Thank you for visiting our website. In the following, we would like to inform you about the handling of your personal data when using our website. Personal data is basically all data with which you can be personally identified.

1.2. The controller for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:

Koelbel Training Research, Koelbel GmbH

Hans-Boeckler-Str. 36

Langenhagen, Germany

Tel: ++49-511-735200

E-mail: info@koelbel.de

1.3. In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. Data collection when you visit our website

Every time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:

• Our visited website

• Date and time at the time of access

• Amount of data sent in bytes

• Source/reference from which you came to the page

• Operating system used

• Browser used

• IP address used (if applicable: in anonymized form)

The legal basis for the processing is Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.

We reserve the right to check the server log files retrospectively if there are concrete indications of illegal use. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

3. Contacting us

If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be found in the respective input mask. If you contact us by e-mail, only the data you enter there will be transmitted to us.

The data will be used exclusively for the processing of the conversation and your request. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR if the user has consented. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected and provided that there are no statutory retention obligations to the contrary. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the facts in question have been conclusively clarified. The user has the option of withdrawing his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

3.1. If you have purchased goods with digital elements or a digital product from us and we owe you updates thereto in accordance with the contract, we will inform you of upcoming updates via an appropriate means of communication. For this purpose, we process the data you provide when ordering (name, address, email address) for a specific purpose and only to the extent necessary. The legal basis for this processing is Art. 6 (1) (c) GDPR, namely the fulfilment of our legal obligation.

4. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's end device. When a user visits a website, a cookie may be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. In the above-mentioned purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f) GDPR.

In addition, our website may use cookies that enable an analysis of users' surfing behaviour (so-called third-party cookies). You can find more detailed information on the scope, purpose, legal basis and objection options in the respective sections of the respective chapter of this data protection declaration.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict or delete the transmission of cookies. If you disable cookies for our website, you may not be able to take full advantage of all the features of the website. You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.

You can find help with the settings in the respective help menu of your browser or under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

5. Data processing for order processing

5.1. If you want to order in our webshop, it is necessary for you to provide your personal data, which we need to process your order, in order to conclude the contract. We process the data you provide to process your order.

In some cases, we work together with external service providers to process your order. For this purpose, we must pass on the personal data required for this purpose.

If we commission transport companies to deliver your goods, we will pass on your data required for the delivery of the goods to the respective transport company. For the processing of payments, we will pass on your data to the commissioned credit institution within the scope of what is necessary. If we use payment service providers, you will also be informed below.

The legal basis for the disclosure of your data is Art. 6 (1) (b) GDPR.

5.2. Use of payment service providers

- PayPal

If you select the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" via PayPal, the payment will be processed via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

We pass on your personal data to PayPal in accordance with Art. 6 (1) (b) GDPR within the scope of necessity. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal.

For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method.

The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.

The other data collected by PayPal can be found in the respective privacy policy of PayPal. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

- Stripe

If you select a payment method from the payment service provider Stripe, payment processing will be carried out by Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (hereinafter referred to as "stripe").

We pass on your personal data together with the information about your order (name, address, account number, bank code, credit card number, invoice amount, currency and transaction number) to stripe in accordance with Art. 6 (1) (b) GDPR exclusively for the purpose of payment processing and only within the scope of what is necessary.

5.3. Carrying out credit checks

- Tesch mediafinanz GmbH

If we make advance payments (e.g. purchase on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We pass on the personal data required for this purpose to the following service provider in accordance with Art. 6 (1) (f) GDPR:

Tesch mediafinanz GmbH

White Width 5

D-49084 Osnabrück

The credit report may contain so-called "score values" (probability values), which, insofar as they are included in the result of the credit report, are based on a scientifically recognised mathematical-statistical procedure. Among other things, your address data is included in the calculation of these score values. You can object to this processing of your data at any time by sending a message to the person responsible for the processing of your data or to the credit reference agency named here. However, we may still be entitled to process your personal data if this is necessary for the contractual payment processing.

6. Data processing when opening a customer account and for contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 (1) (b) GDPR. The scope of the data can be seen from the input form. The data you enter will be stored and used by us for the purpose of processing the contract.

You can delete your customer account at any time. This can be done by sending a message to the Controller's address or, if offered, directly in the customer account. In this case, we will also block your data in consideration of retention periods under tax and commercial law and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or a legally permitted further use of data on our part.

7. Comment function

If you use the comment function on our website, in addition to your comment content, information about the time of creation of the comment and the commenter name you have chosen will be stored and published on the website. It also logs and stores your IP address.

The legal basis for the storage of your data is Art. 6 (1) (b) and (f) GDPR. The IP address is stored for security reasons and in the event that the data subject violates the rights of third parties or publishes illegal content through a comment submitted. Your email address is required to contact you in case a third party objects to your published content as illegal. We reserve the right to delete comments if they are objected to by third parties as illegal.

8. Use of your data for direct marketing

8.1. Newsletter

On our website it is possible to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. Only your email address is mandatory. If you make further voluntary entries, they will only be used for personal contact.

The legal basis for the processing of your data after subscribing to the newsletter is Art. 6 para. 1 lit. a GDPR if the user has consented. We obtain this information by sending you a confirmation e-mail containing a confirmation link after registering for the newsletter. If you click on this link, you also give your consent to receive the newsletter.

When you register for the newsletter, we store your IP address as well as the date and time of registration. This storage serves to track possible misuse of your e-mail address.

We use the data collected by us when registering for the newsletter exclusively for the purpose of sending the newsletter.

You can cancel your subscription to the newsletter at any time. For this purpose, there is a corresponding link in every newsletter. This also enables a revocation of consent to the storage of personal data collected during the registration process.

8.2. Newsletter for existing customers

If you purchase goods or services on our website and provide your e-mail address, this may subsequently be used by us to send you a newsletter. In such a case, the newsletter will only be used to send direct advertising for its own similar goods or services.

The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG and Art. 6 (1) (f) GDPR. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising.

If you have already objected to the use of your email address for direct marketing purposes, you will not receive this newsletter. However, you also have the option at a later date and at any time to object to the use of your e-mail address for the advertising purpose specified here with effect for the future by notifying us. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

8.3. Advertising by post

If, as a result of an order placed with us, you have left your first and last name, your postal address and, if applicable, other personal data, we reserve the right to store this data in order to safeguard our legitimate interest in personalised direct advertising in accordance with Art. 6 (1) (f) GDPR and to send you our offers by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller.

8.4. Sending newsletters via klicktipp

We send our newsletters via KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, United Kingdom (hereinafter referred to as "klicktipp").

We pass on the data entered by you when registering for the newsletter to klicktipp in accordance with Art. 6 (1) (f) GDPR in order to safeguard our legitimate interest in using an advertising-effective, secure and user-friendly newsletter system.

The data entered when subscribing to the newsletter (e.g. e-mail address) will be stored on klicktipp's servers in the United Kingdom. Your data will be used by klicktipp to send and statistically evaluate the newsletter on our behalf. For this purpose, the newsletter emails contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. In this way, it can be traced whether a newsletter email has been opened and which links from it have been clicked. With the help of this conversion tracking, it is also possible to track whether an action (such as the purchase of an item from our shop) has been taken after opening a link from the newsletter. In addition, technical information is also collected (e.g. the time of access, your IP address, browser type and/or operating system). This data is collected exclusively in pseudonymized form and is not linked to your other personal data. If you do not wish to receive the data analysis described here, you must unsubscribe from the newsletter.

The transfer of data is secured on the basis of the EU standard contractual clauses.

Details on klicktipp's data protection can be found at:

https://www.klicktipp.com/datenschutzerklarung/

9. Contacting us for the review reminder

Own review reminder

After your explicit consent in accordance with Art. 6 (1) (a) GDPR, you will receive an e-mail from us as a one-time reminder to submit a review of your order. You can withdraw your consent at any time by sending a message to the controller of your data.

10. Use of social media: Social plugins

10.1. Facebook plugins with Shariff solution

On our website, we use social plugins ("plugins") from the social network Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) (hereinafter referred to as "Facebook").

In order to increase the protection of your data when you visit our website, the buttons of the plugins with the so-called Shariff solution are only integrated into the page using an HTML link. This ensures that when you access our website with a Facebook button, a connection to the Facebook servers is only established when you click on the button and interact with the plugin, which then opens in a new browser window. You may also have to log in separately. A transfer of your data to a Facebook server in the USA is not excluded.

Meta Platforms, Inc., based in the USA, is certified for the US-European data protection agreement "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.

Further information can be found in Facebook's privacy policy: http://www.facebook.com/policy.phphttps://www.facebook.com/legal/EU_data_transfer_addendum

10.2. Instagram plugin as a Shariff solution

On our website, we use social plugins ("plugins") of the online service Instagram (operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) (hereinafter referred to as "Instagram")

In order to increase the protection of your data when you visit our website, the buttons of the plugins with the so-called Shariff solution are only integrated into the page using an HTML link. This ensures that when you access our website with an Instagram button, you will not connect to Instagram's servers until you click on the button and interact with the plugin, which then opens in a new browser window. You may also have to log in separately. When interacting with Instagram, data may be transferred to Meta's servers in the USA.

You can find more information about this in Instagram's privacy policy:

https://instagram.com/about/legal/privacy/

10.3. LinkedIn plugin as a Shariff solution

On our website, we use social plugins ("plugins") of the online service LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA) (hereinafter referred to as "LinkedIn").

In order to increase the protection of your data when you visit our website, the buttons of the plugins with the so-called Shariff solution are only integrated into the page using an HTML link. This ensures that when you access our website with a LinkedIn button, a connection to the LinkedIn servers is only established when you click on the button and interact with the plugin, which then opens in a new browser window. You may also have to log in separately.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://de.linkedin.com/legal/l/dpa

LinkedIn privacy policy:

https://www.linkedin.com/legal/privacy-policy

10.4. Pinterest plugin as a Shariff solution

On our website, we use social plugins ("plugins") of the online service Pinterest (Pinterest Inc., 808 Brannan Street, San Francisco, CA, 94103, USA) (hereinafter referred to as "Pinterest").

In order to increase the protection of your data when you visit our website, the buttons of the plugins with the so-called Shariff solution are only integrated into the page using an HTML link. This ensures that when you access our website with a Pinterest button, you will not connect to Pinterest's servers until you click on the button and interact with the plugin, which then opens in a new browser window. You may also have to log in separately.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

https://policy.pinterest.com/de/privacy-policy#section-residents-of-the-eea

Pinterest's privacy policy:

https://about.pinterest.com/de/privacy-policy

10.5. X (Formerly Twitter) - Plugin as Shariff solution

On our website, we use social plugins ("plugins") from the online service X (X Corp.., 1355 Market St, Suite 900, San Francisco, CA 94103, US) (hereinafter referred to as "X").

In order to increase the protection of your data when you visit our website, the buttons of the plugins with the so-called Shariff solution are only integrated into the page using an HTML link. This ensures that when you access our website with an X button, a connection to X's servers is only established when you click on the button and interact with the plugin, which then opens in a new browser window. You may also have to log in separately.

X participates in the EU-US Data Privacy Framework, which guarantees adequate protection of your data even when processed on US servers.

Details can be found here: https://x.com/de/privacy

Twitter privacy policy: https:/x.com/privacy

10.6. Xing plugins

We have integrated the "XING Share Button" on our website.

When you access our website, your browser establishes a short-term connection to servers of XING SE, Caffamacherreihe 8, 20355 Hamburg (hereinafter referred to as "XING"), which are used to perform the "XING Share Button" functions (in particular the calculation/display of the meter value). However, XING does not store any personal data about you when you access this website, in particular IP addresses. Likewise, there is no evaluation of your usage behaviour via the use of cookies in connection with the "XING Share Button".

Details can be found here:

https://www.xing.com/app/share?op=data_protection

11. Use of social media: Video

How to Use YouTube Videos

On this website, we use the YouTube embed function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). In doing so, we use the extended data protection mode, which, according to the provider, only initiates the storage of user information when the video(s) is played. When you start playing embedded YouTube videos, the provider "Youtube" uses cookies to collect information about your user behavior. According to YouTube, these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account.

If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

Such an evaluation is carried out in particular in accordance with Art. 6 (1) (a) GDPR on the basis of your express consent.

You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this. Regardless of whether the embedded videos are played, a connection to the Google network "DoubleClick" is established every time this website is accessed, which can trigger further data processing processes without our influence.

Data may also be transmitted to the servers of Google LLC. in the USA. Further information on data protection at "YouTube" can be found in the provider's privacy policy at:

https://policies.google.com/privacy?hl=de

Settings for personalized advertising are possible at:

https://adssettings.google.com/authenticated.

Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/

12. Online Marketing

Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Our offers are advertised with the help of advertising materials (so-called Google Adwords) on external websites. Our legitimate interest lies in the display of advertising that is interesting for you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 (1) (a) GDPR, namely your explicit consent.

Google Ads uses cookies for conversion tracking, which are set when you click on an AdWords ad placed by Google.

These cookies usually expire after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie, so cookies can't be tracked across Ads customers' websites.

The information obtained in this way is used to compile conversion statistics for ads customers about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.

You cannot be personally identified with it.

If you want to prevent tracking, you can deactivate the Google Conversion Tracking cookie via your Internet browser under User Settings.

Google LLC, based in the USA, is certified for the US-European data protection agreement "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU. You can find more information about Google's privacy policy at the following internet address:

http://www.google.de/policies/privacy/

Further information on Google's data protection can be found here: https://business.safety.google/privacy/

You can permanently deactivate conversion cookies by setting your browser accordingly or download and install the browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

In this case, certain functions of this website may not be able to be used or can only be used to a limited extent.

Further information on Google's data protection can be found here:

https://business.safety.google/privacy/

13. Web analysis services

13.1. Google Analytics 4

On our website, we use Google Analytics 4, a web analysis service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) (hereinafter referred to as "GA4").

Google Analytics uses "cookies". These are small text files that are stored on your device and enable an analysis of your use of the website. The information generated in this way about your use of this website (including the abbreviated IP address) will be transmitted to a Google server where it will be stored and processed, whereby a transfer to the USA is possible. The IP addresses are anonymized by default. For IPv4 addresses, the last octet and for IPv6 addresses the last 80 bits in memory are set to zero and thus "anonymized". A personal reference is excluded. A transfer to servers of Google LLC based in the USA is not excluded.

During your visit to the website, GA4 records your user behaviour in the form of "events", such as: page views, first visit to the website, start of the session, your "click path", interaction with the website, scrolls, clicks on external links, internal search queries, interaction with videos, file downloads, viewed / clicked ads, language preference. In addition, GA4 collects your approximate location (region), your IP address (in anonymized form), technical information about your browser and the devices you use (e.g. language settings, screen resolution), your Internet provider, the referrer URL (via which website/advertising medium you came to this website).

On our behalf, Google uses this information to evaluate your website usage, to compile reports on website activity and to provide us with other services related to website and internet usage. There will be no combination of your anonymized IP collected in this context with other data from Google.

The data collected in this context will be stored for fourteen months.

The legal basis for the data processing described here, as well as for the setting of cookies, is your

explicit consent in accordance with Art. 6 (1) (a) GDPR. This consent can be revoked at any time with effect for the future, for example by deactivating this Google service via the cookie consent tool in which you have already given your consent.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the Website.

We have also concluded a data processing agreement with Google.

Further information on data protection by Google Analytics 4 can be found on the following websites:

https://policies.google.com/technologies/partner-sites

and

https://policies.google.com/privacy?hl=de&gl=de

Demographics

GA4's "Demographics" feature can generate statistics about it, which can be used to make statements about the age, gender, and interests of site visitors. For this purpose, advertising and information from third-party providers are analysed and target groups for certain marketing activities are identified. However, there is no personal assignment of data in this case. The data is deleted after fourteen months.

UserIDs

If we use the extended function "UserIDs", your activities (including conversions) can be analyzed across devices. In this case, the analysis is not pseudonymous.

This is possible if you give your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR, you have set up an account on this website and log in with this account on different devices.

Google Signals

If we use the "Google Signals" extension, we may have cross-device reports on your usage behavior made. However, we only receive statistics and no personal data. This analysis is only possible if you have activated personalized ads in your Google Account and linked your devices to a Google Account. You must also have your consent to the use of Google Analytics in accordance with Art. 6 (1) (a) GDPR.

You can opt out of cross-device analytics by disabling the Personalized Ads feature in your Google Account.

For more information about Google Signals, see https://support.google.com/analytics/answer/7532985?hl=de

Further information on Google's data protection can be found here:

https://business.safety.google/privacy/

13.2. Matomo (formerly Piwik)

On our website, we use the web analysis service Matomo (www.matomo.org) (InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand) (hereinafter referred to as "Matomo").

In order to safeguard our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes, Matomo collects, evaluates and stores pseudonymised visitor data, from which pseudonymised user profiles can be created and evaluated. Matomo uses cookies to recognize the browser and thus enable a more accurate determination of statistical data.

The legal basis is Art. 6 (1) (a) GDPR, namely your express consent. The data collected with the Matomo technology (including your pseudonymized IP address) is processed on our servers.

Your data will not be used to identify you personally and will not be merged with personal data about the bearer of the pseudonym.

If you do not wish your data to be stored and evaluated, you can object to its storage and use at any time at the click of a mouse. In this case, a so-called opt-out cookie is set in your browser so that Matomo can no longer collect any session data. The complete deletion of your cookies means that the opt-out cookie will also be deleted and may have to be reactivated by you.

For New Zealand, the European Commission has issued a so-called adequacy decision, which certifies compliance with European data protection standards for international data transfers. There is an order processing agreement with Matomo, which can be viewed here: https://matomo.org/matomo-cloud-dpa/

14. Retargeting / Remarketing / Referral Advertising

14.1. Meta Custom Audience via the pixel process

On this website, we use the "meta-pixel" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). If explicit consent is given, this can be used to track the behavior of users after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising efforts. The data collected is anonymous to us, so we cannot draw any conclusions about the identity of the users. However, data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/).

You can allow Meta and its partners to run ads on and off Facebook. For these purposes, a cookie may be stored on your device. These processing operations are carried out exclusively upon the granting of explicit consent in accordance with Art. 6 (1) (a) GDPR. Consent to the use of the Meta-Pixel may only be given by users who are older than 13 years of age. If you are younger, we ask you to ask your legal guardians for permission. You can disable the use of cookies on your computer through the appropriate browser setting. However, this may mean that some functions on our website can no longer be used in full. You can also opt out of the use of cookies by third-party providers such as Meta on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

Meta Platforms Inc. is certified for the US-European data protection agreement "EU-U.S. Data Privacy Framework", which ensures compliance with the level of data protection applicable in the EU.

Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.

14.2. Google AdWords Remarketing

Our website uses the functions of Google Ads (formerly "Google AdWords) Remarketing, with which we advertise this website in the Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and based on the pages you have visited and usually loses its validity after 30 days. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website and the exploitation of the financial potential of our website. The legal basis is Art. 6 (1) (a) GDPR, namely your express consent.

Any further data processing will only take place if you have agreed to Google that your Internet and app browsing history will be linked by Google to your Google account and that information from your Google account will be used to personalize ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google to Google Analytics data in order to form target groups.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can find out more about the setting of cookies from the Digital Advertising Alliance at the Internet address www.aboutads.info and make settings for this. Finally, you can set your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Further information on Google's data protection can be found here: https://business.safety.google/privacy/

15. Rights of the Data Subject

15.1. The applicable data protection law grants you comprehensive rights of data subjects (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right of access according to Art. 15 GDPR:

You may request confirmation from the Controller as to whether personal data concerning you is being processed by the Controller. In addition, you have the right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of other rights such as correction of the data or the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if it has not been collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the data involved. the logic and scope of such processing and the intended effects of such processing, as well as your right to be informed of the guarantees in accordance with Article 46 of the GDPR in the event of the transfer of your data to third countries;

- Right to rectification pursuant to Art. 16 GDPR:

You have the right to have the inaccurate data concerning you rectified without undue delay and/or to have your incomplete data stored by us completed; the correction or completion must be made without delay.

- Right to restriction of processing in accordance with Art. 18 GDPR:

You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you contest is verified, if you refuse to delete your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation, pending the determination of whether our legitimate reasons prevail;

Where the processing of personal data concerning you has been restricted, such data may only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

- Right to erasure in accordance with Art. 17 GDPR:

You have the right to request the immediate deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right to erasure does not apply in particular - not exclusively - if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims

- Right to information pursuant to Art. 19 GDPR:

If you have exercised your right to rectification, erasure or restriction of processing, the Controller is obliged to notify all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this is impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

- Right to data portability in accordance with Art. 20 GDPR:

You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller, to the extent technically feasible;

- Right of revocation in accordance with Art. 7 para. 3 GDPR:

You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.

You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent before the revocation.

- Right to lodge a complaint pursuant to Art. 77 GDPR:

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.

15.2. Right to object

You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after weighing up interests.

If you make use of this right to object, we will stop processing your data if there is no evidence of overriding compelling legitimate grounds to prevent the termination or if the further processing serves to exercise or defend legal claims.

16. Duration of storage of personal data

The duration of the storage of personal data depends on statutory retention periods. After the expiry of this period, we routinely delete the data if it is no longer necessary for the fulfilment or initiation of a contract and/or if we have no legitimate interest in continuing to store it.

17. Use of the revocation button

As soon as the revocation button is used, we process the personal data entered there: name, order data / contract data, communication data (declaration of revocation), time of revocation, user account/IP data if applicable (in the case of online form). The processing is carried out for the purpose of identifying your contract and documenting your revocation. We store the data for the purpose of documentation for a maximum of 10 years and delete it automatically, provided that the deletion does not conflict with statutory retention obligations. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) Art. 6 (1) (c) (fulfilment of a legal obligation)