Data Protection Notices

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is STEPCRAFT GmbH & Co. KG, An der Beile 2, 58708 Menden, Germany, Tel.: +49 (0) 23 73 - 179 11 60, Fax: +49 (0) 23 73 - 179 11 59, Email: [email protected]. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When You Visit Our Website

2.1 If you use our website solely for informational purposes, meaning that you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server (known as “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The page of our website visited
The date and time of access
The amount of data transmitted in bytes
The source/referral from which you reached the page
The browser used
The operating system used
The IP address used (where applicable, in anonymized form)

Processing is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files subsequently if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller). You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

Cloudflare

We use a content delivery network provided by: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files, such as graphics, page content, or scripts, more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Article 6(1)(f) GDPR. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For transfers of data to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

To make visiting our website appealing and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for longer and allow website preferences to be saved (“persistent cookies”). In the latter case, you can find the storage period in your web browser’s cookie settings overview.

If any cookies we use also process personal data, processing is carried out pursuant to Article 6(1)(b) GDPR for the performance of a contract, pursuant to Article 6(1)(a) GDPR where consent has been given, or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible website functionality and a user-friendly, effective browsing experience.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to reject cookies in specific cases or altogether.

Please note that rejecting cookies may limit the functionality of our website.

5) Contacting Us

5.1 - OpenAI

To provide autonomous customer support, we have integrated an artificial intelligence software solution on this website from the following provider: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland

Data may also be transferred to: OpenAI OpCo, LLC, USA

Through an API-based integration, visitors can submit text inquiries about offers, website functions, orders placed, and the exercise of contractual rights. These inquiries are then answered and processed by the provider’s language models.

For this purpose, the provider’s software may collect the requester’s personal data to compare it with their order history, associate the input with a specific order, review the request automatically, and then resolve it by autonomously initiating processing workflows.

Personal data is collected and further processed solely to handle the specific request. The processing of website visitors’ input for the purpose of training and further developing the provider’s AI language models is expressly prevented.

Data processing is based on our legitimate interest in effectively assisting our website visitors, optimally marketing our offerings, and automating customer support to reduce the operational workload, pursuant to Article 6(1)(f) GDPR.

Subject to any statutory retention periods that require otherwise, the personal data collected is deleted when the provider’s software determines, using automated mathematical and statistical methods, that the matter has been conclusively resolved.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For transfers of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with the European level of data protection.

5.2 - OpenAI

Data may also be transferred to: OpenAI OpCo, LLC, USA

Through an API-based integration, visitors can enter their preferences as text. These are then processed by the provider’s language models to identify product recommendations that match their interests.

For this purpose, the provider’s software may collect the requester’s personal data to review the request automatically and then resolve it by autonomously initiating processing workflows.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For transfers of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with the European level of data protection.

5.3 When you contact us (e.g., via a contact form or email), personal data is processed solely for the purpose of handling and responding to your request and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR. If your contact relates to a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted once it is apparent from the circumstances that the matter has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

6) Use of Customer Data for Direct Marketing

6.1 Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. Your email address is the only information required to receive the newsletter. Providing additional data is voluntary and allows us to address you personally. We use a double opt-in procedure for newsletter subscriptions. This ensures that you receive newsletters only after you have expressly confirmed your consent to receive them by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Article 6(1)(a) GDPR. We store the IP address assigned by your Internet service provider (ISP), as well as the date and time of registration, so that we can trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for its intended purpose.

You may unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning of this policy. Once you unsubscribe, your email address will be deleted from our newsletter mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to continue using your email address for marketing purposes where this is permitted by law and explained in this policy.

After you unsubscribe from the newsletter, your email address may be stored in a suppression list and compared against recipient lists for future newsletters to technically prevent further delivery of newsletters that require consent. This processing is based on our legitimate interest in avoiding unsolicited marketing communications pursuant to Article 6(1)(f) GDPR.

6.2 MailChimp

Our email newsletters are sent through the following provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we disclose the data you provided when subscribing to the newsletter to this provider pursuant to Article 6(1)(f) GDPR, so that it can send the newsletter on our behalf.

Subject to your express consent pursuant to Article 6(1)(a) GDPR, the provider also carries out a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent. These can measure open rates and specific interactions with newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but is not combined with other datasets.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits disclosure to third parties.

7) Data Processing for Order Fulfillment

7.1 To the extent necessary for performing the contract for delivery and payment purposes, the personal data we collect is disclosed to the commissioned transport company and financial institution pursuant to Article 6(1)(b) GDPR.

If, under a corresponding contract, we are required to provide you with updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order to inform you personally in accordance with our statutory information obligations pursuant to Article 6(1)(c) GDPR. Your contact details are used strictly for communications concerning updates we are required to provide and are processed for this purpose only to the extent necessary for the respective notification.

7.2 Disclosure of Personal Data to Shipping Providers

- DHL

We use the following transport service provider: DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany

We disclose your email address and/or telephone number to the provider before delivery of the goods for the purpose of arranging a delivery date or providing a delivery notification pursuant to Article 6(1)(a) GDPR, provided that you expressly consented to this during the ordering process. Otherwise, we disclose only the recipient’s name and delivery address to the provider for delivery purposes pursuant to Article 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to arrange a delivery date with the provider in advance or provide a delivery notification.

You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider.

7.3 Use of Payment Service Providers

- Google Pay

If you select the “Google Pay” payment method offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed using the payment method stored in your Google Account.
To authorize a payment via Google Pay on a desktop computer, you must first sign in to your Google Account. On a mobile device, you must complete the corresponding verification procedure (e.g., facial recognition, password, fingerprint, or pattern).

For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is disclosed to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a unique transaction number, which is used to verify that payment has been made. This transaction number contains no information about the actual payment details of the payment instruments you have stored in Google Pay. Instead, it is generated and transmitted as a numerical token valid for a single use. For all transactions via Google Pay, Google acts solely as an intermediary for payment processing. The transaction takes place exclusively between the user and the originating website by charging the payment instrument stored in Google Pay.

If personal data is processed during the transfers described above, processing is carried out exclusively for payment processing purposes pursuant to Article 6(1)(b) GDPR.

Google reserves the right to collect, store, and analyze certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction; the merchant’s location and description; a description of the goods or services purchased provided by the merchant; photos you have attached to the transaction; the name and email address of the seller and buyer or sender and recipient; the payment method used; your description of the reason for the transaction; and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively pursuant to Article 6(1)(f) GDPR on the basis of its legitimate interest in proper accounting, verifying transaction data, and optimizing and maintaining the functionality of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services.

The Google Pay Terms of Service are available here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay is available at the following address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider that requires you to pay in advance (such as payment by credit card), the payment data you provide during the ordering process (including your name, address, bank and payment card information, currency, and transaction number), together with information about the contents of your order, is disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of processing payment with the provider and only to the extent necessary for that purpose.

If you select a payment method under which the provider extends credit or makes an advance payment (such as purchase on account, installment payments, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, details of an alternative payment instrument).

To safeguard our legitimate interest in establishing our customers’ ability to pay, we forward this data to the provider for the purpose of a credit check pursuant to Article 6(1)(f) GDPR. On the basis of the personal data you provide and other data (such as shopping cart contents, invoice amount, order history, and payment history), the provider checks whether the payment option you have selected can be granted in view of payment and/or receivables default risks.

In addition to the provider’s internal criteria, identity and creditworthiness information from the following credit reporting agencies may be used when deciding on the application pursuant to Article 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (“scores”). Where scores are included in the credit report results, they are based on a scientifically recognized mathematical and statistical method. Address data, among other information, is used to calculate the scores.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is necessary to process payments in accordance with the contract.
- PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider that requires you to pay in advance, the payment data you provide during the ordering process (including your name, address, bank and payment card information, currency, and transaction number), together with information about the contents of your order, is disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of processing payment with the provider and only to the extent necessary for that purpose.

If you select a payment method under which we provide our performance in advance of payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, where applicable, details of an alternative payment instrument).

To safeguard our legitimate interest in establishing your ability to pay in such cases, we forward this data to the provider for the purpose of a credit check pursuant to Article 6(1)(f) GDPR. On the basis of the personal data you provide and other data (such as shopping cart contents, invoice amount, order history, and payment history), the provider checks whether the payment option you have selected can be granted in view of payment and/or receivables default risks.

7.4 Electronic Withdrawal Function for Distance Contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists may exercise that right using an electronic withdrawal function in accordance with the applicable withdrawal provisions.

When using the withdrawal function, you must provide or confirm information identifying the contract from which you wish to withdraw, as well as additional personal information, such as the consumer’s first and last name and email address.

This information is collected and transmitted to us pursuant to Article 6(1)(b) GDPR and only to the extent necessary to process the withdrawal properly. The personal data provided is also used to confirm receipt of the withdrawal notice by email on the basis of Article 6(1)(b) GDPR. Article 6(1)(c) GDPR provides a further legal basis for processing. We are legally required to provide an electronic withdrawal function for consumer distance contracts involving an obligation to pay.

8) Online Marketing

Google AdSense

This website uses Google AdSense, an online advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses cookies, which are text files stored on your computer that enable analysis of your use of the website. Google AdSense also uses “web beacons” (small, invisible graphics) to collect information. These enable simple actions, such as visitor traffic on the website, to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to a Google server and stored there. This may also involve transmission to servers operated by Google LLC in the USA.

Google uses the information obtained in this way to analyze your usage behavior in relation to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties where this is required by law and/or where third parties process this data on Google’s behalf.
All processing described above, in particular the reading of information on your device using cookies and/or web beacons, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

Further information on Google’s privacy policies is available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

9) Web Analytics Services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are stored on your device as small text files and collect certain information. This information also includes your IP address, although Google truncates its final digits to prevent direct identification of an individual.

The information is transmitted to Google servers and processed further there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services relating to website and Internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The data collected through the use of Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service using the cookie consent tool provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 is available at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites

Demographics
Google Analytics 4 uses the special “Demographics” feature and can generate statistics on the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target audiences to be identified for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after being stored for two months.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Article 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized advertising” feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals is available at: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension of Google Analytics 4, the “UserIDs” feature may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Article 6(1)(a) GDPR, created an account on this website, and signed in to that account on different devices, your activities, including conversions, may be analyzed across devices.

9.2 Google Tag Manager

This website uses “Google Tag Manager,” a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

Google Tag Manager provides a technical framework for combining various web applications, including tracking and analytics services, and configuring, managing, and assigning conditions to them through a single user interface. Google Tag Manager itself does not store information on users’ devices or read information from them. The service also does not carry out any independent data analysis. However, when you access a page, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers operated by Google LLC in the USA is also possible.

This processing is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To do so, please disable this service in the cookie consent tool provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Tag Manager is available at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

10) Retargeting/Remarketing and Conversion Tracking

10.1 Google Ads Remarketing

This website uses retargeting technology provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in your device’s browser that automatically enables interest-based advertising using a pseudonymous cookie ID and the pages you have visited. The information collected generally also includes your IP address.

Further data processing takes place only if you have agreed with Google that your Internet and app browsing history may be linked to your Google Account and that information from your Google Account may be used to personalize the ads you see online. If you are signed in to Google while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target audiences. The use of Google Ads Remarketing may also involve the transfer of personal data to servers operated by Google LLC in the USA.

All processing described above, in particular the setting of cookies to read information on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To do so, please disable this service in the cookie consent tool provided on the website.

Details of the processing initiated by Google and how Google handles data from websites are available here: https://policies.google.com/technologies/partner-sites

Further information on Google’s privacy policies is available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.2 Google Ads Conversion Tracking

We use Google Ads to draw attention to our offers on external websites through advertising materials (known as Google AdWords). Using data from the advertising campaigns, we can determine how successful individual advertising measures are. Our aim is to show you advertising that is relevant to your interests, make our website more interesting for you, and ensure fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks an Ads advertisement displayed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie, which also includes your IP address, is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked their ad and were redirected to a page containing a conversion tracking tag. However, they do not receive any information that would allow them to identify users personally.

The use of Google Ads may also involve the transfer of personal data to servers operated by Google LLC in the USA.

Details of the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites are available here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies to read information on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

To tailor advertising more closely to the interests of users whose data we have obtained through business or similar relationships, we use a Customer Match feature within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not gain access to unencrypted data; instead, it automatically encrypts the information in the customer files using a special algorithm during the transmission process. Google can then use the encrypted information only to match it to existing Google Accounts created by the individuals concerned. This enables personalized advertising to be displayed across all Google services linked to the respective Google Account.

Customer data is transmitted to Google only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw this consent by contacting us at any time with effect for the future. Further information on Google’s data protection measures for the Customer Match feature is available here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s privacy policies are available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.3 Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites through advertising materials (known as Google AdWords). Using data from the advertising campaigns, we can determine how successful individual advertising measures are. Our aim is to show you advertising that is relevant to your interests, make our website more interesting for you, and ensure fair calculation of the advertising costs incurred.

Details of the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites are available here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies to read information on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

Please note that certain functions of this website may be unavailable or available only to a limited extent if you have disabled the use of cookies.
Google’s privacy policies are available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.4 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).

GMP uses cookies to display ads relevant to users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. Using a cookie ID, Google records which ads are displayed in which browser and can therefore prevent them from being displayed repeatedly. GMP can also use cookie IDs to record conversions associated with ad requests. This is the case, for example, when a user sees a GMP ad and later uses the same browser to visit the advertiser’s website and make a purchase there. According to Google, GMP cookies do not contain personal information.
As a result of the marketing tools used, your browser automatically establishes a direct connection to Google’s server.

We have no control over the scope or further use of the data Google collects through this tool and therefore provide the following information based on our current knowledge: By integrating GMP, Google receives information that you have accessed the relevant part of our website or clicked one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not signed in, the provider may still obtain and store your IP address. The use of GMP may also involve the transfer of personal data to servers operated by Google LLC in the USA.

All processing described above, in particular the setting of cookies to read information on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

The privacy policies for GMP by Google are available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11) Website Functions

11.1 YouTube

This website uses plug-ins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC., USA

When you access a page of our website containing such a plug-in, your browser establishes a direct connection to the provider’s servers to load the content, no later than when video playback begins. Certain information, including your IP address, is transmitted to the provider in the process.

When playback of embedded videos is started through the plug-in, the provider also uses cookies to collect information on user behavior, generate playback statistics, and prevent abusive behavior.

If you are signed in to an account with the provider while visiting our website, your data will be associated directly with your account when you click a video. If you do not want your data to be associated with your account, you must sign out before clicking the play button.

All processing described above, in particular the setting of cookies to read information on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service using the cookie consent tool provided on the website.

11.2 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service that displays interactive maps to present geographic information visually. Using this service allows you to see our location and makes it easier to find directions to us.

As soon as you access a subpage containing an embedded Google Maps map, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there. This may also involve transmission to servers operated by Google LLC in the USA. This takes place regardless of whether you are signed in to a Google user account or whether such an account exists. If you are signed in to Google, your data will be associated directly with your account. If you do not want your data to be associated with your Google profile, you must sign out before activating the button. Google stores your data as usage profiles (even for users who are not signed in) and analyzes them.

Your personal data is processed pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in designing our website to meet users’ needs. If you do not agree to future transfers of your data to the provider, you can completely disable the provider’s online map service by turning off JavaScript in your browser. The online map service on this website can then no longer be used.

Further information on Google’s privacy policies is available here: https://business.safety.google/intl/de/privacy/

11.3 Google Web Fonts

This website uses web fonts from the following provider to ensure consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider in the process.

Data may also be transferred to: Google LLC, USA

Personal data is processed when establishing a connection to the font provider only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service using the cookie consent tool provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google’s privacy policies is available here: https://business.safety.google/intl/de/privacy/

11.4 - Google reCAPTCHA

On this website, we use the CAPTCHA service from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA.

The provider uses “Google Fonts,” meaning fonts downloaded from Google over the Internet, for the visual design of the CAPTCHA window. This does not involve the processing of any information beyond the information mentioned above that is already transmitted to Google through the functionality of reCAPTCHA.

The service checks whether input is made by a natural person or abusively through automated machine processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human rather than an automated bot, the provider collects the IP address of the device used, identifying information about the browser and operating system type, and the date and duration of the visit, and transmits this information to its servers for analysis. Cookies, which are small text files stored in the device’s browser, may be used in the process.

If the processing described above is based on cookies, these are set only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

If the processing described above takes place without the use of cookies, the legal basis is our legitimate interest in establishing individual accountability on the Internet and preventing misuse and spam pursuant to Article 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

12) Tools and Miscellaneous

12.1 Cookie Consent Tool

This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent. When users access the website, the cookie consent tool is displayed as an interactive interface where they can give consent to specific cookies and/or cookie-based applications by checking boxes. The tool ensures that all cookies/services requiring consent are loaded only if the respective user has given the corresponding consent by checking the relevant box. This ensures that such cookies are placed on the user’s device only when consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as an IP address) is nevertheless processed for the purpose of storing, assigning, or logging cookie settings, this is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and, consequently, in ensuring that our website complies with the law.

Article 6(1)(c) GDPR provides a further legal basis for processing. As the controller, we are legally required to make the use of cookies that are not technically necessary dependent on the respective user’s consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings available in the cookie consent tool can be found directly in the corresponding interface on our website.

12.2 Cloudflare

For security purposes, this website uses the service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA

The provider protects the website and its associated IT infrastructure against unauthorized third-party access, cyberattacks, viruses, and malware. The provider records users’ IP addresses and, where applicable, additional data about their behavior on our website (in particular, URLs accessed and header information) to detect and prevent illegitimate access and threats. The recorded IP address is compared against a list of known attackers. If the recorded IP address is identified as a security risk, the provider may automatically block it from accessing the website. The information collected in this way is transmitted to a server operated by the provider and stored there.

The data processing described above is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interests in protecting the website against harmful cyberattacks and maintaining the integrity and security of its structure and data.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

13) Rights of the Data Subject

13.1 Applicable data protection law grants you the following rights as a data subject against the controller with regard to the processing of your personal data (rights of access and intervention). The conditions for exercising each right are set out in the legal provisions cited:

Right of access pursuant to Article 15 GDPR;
Right to rectification pursuant to Article 16 GDPR;
Right to erasure pursuant to Article 17 GDPR;
Right to restriction of processing pursuant to Article 18 GDPR;
Right to be informed pursuant to Article 19 GDPR;
Right to data portability pursuant to Article 20 GDPR;
Right to withdraw consent pursuant to Article 7(3) GDPR;
Right to lodge a complaint pursuant to Article 77 GDPR.

13.2 RIGHT TO OBJECT

IF, FOLLOWING A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Retention Period for Personal Data

The retention period for personal data is determined by the relevant legal basis, the purpose of processing, and, where applicable, the relevant statutory retention period (e.g., retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Article 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, this data is routinely deleted after those retention periods expire, provided that it is no longer required to perform or enter into a contract and/or we no longer have a legitimate interest in continuing to store it.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Article 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: October 14, 2026, 15:23:57