Privacy Policy
Privacy Policy
1) Introduction and Contact Details of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data refers to all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is DELAYON Eyewear UG (haftungsbeschränkt), Kollaukamp 5, 22453 Hamburg, Germany, Tel.: +49 (0)178 3765180, Email: info@delayon-eyewear.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website purely for informational purposes, meaning that you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
- Visited website
- Date and time of access
- Amount of data transmitted in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymized form)
The processing is carried out in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
For hosting our website and displaying the page content, we use a service provider that performs its services itself or through selected subcontractors exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and enable the storage of page settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If personal data is also processed through individual cookies used by us, the processing is carried out in accordance with Art. 6 (1)(b) GDPR for the performance of a contract, in accordance with Art. 6 (1)(a) GDPR where consent has been granted, or in accordance with Art. 6 (1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective website experience.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for specific cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be limited.
5) Contacting Us
5.1 Brevo
We use the services of the following provider for review reminders: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.
Only on the basis of your explicit consent pursuant to Art. 6 (1)(a) GDPR do we transmit your email address and, where applicable, additional customer data to the provider so that they may contact you by email with a review reminder.
You may revoke your consent at any time with future effect, either directly with us or with the provider.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.2 CusRev
We use the services of the following provider for review reminders: CUSTOMER REVIEWS LTD, 71–75 Shelton Street, Covent Garden, London, England, WC2H 9JQ.
Only on the basis of your explicit consent pursuant to Art. 6 (1)(a) GDPR do we transmit your email address and, where applicable, additional customer data to the provider so that they may contact you by email with a review reminder.
You may revoke your consent at any time with future effect, either directly with us or with the provider.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
5.3 Own Review Reminder Service
Only on the basis of your explicit consent pursuant to Art. 6 (1)(a) GDPR do we use your email address for a one-time reminder to submit a review of your order. You may revoke your consent at any time by notifying the controller responsible for data processing.
5.4 WhatsApp Business
You have the option of contacting us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the “Business” version of WhatsApp.
If you contact us via WhatsApp regarding a specific business transaction (for example, an order you have placed), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1)(b) GDPR for the purpose of processing and responding to your request. On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) in order to assign your inquiry to a specific transaction.
If you use our WhatsApp contact for general inquiries (for example regarding our services, availability, or our website), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in providing the requested information efficiently and promptly.
Your data will only be used to respond to your inquiry via WhatsApp. It will not be disclosed to third parties.
Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of its parent company, Meta Platforms Inc., in the United States. For the operation of our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, upon first use of the app on their device and by accepting WhatsApp’s terms of use, to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1)(a) GDPR. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and privacy settings options, please refer to WhatsApp’s Privacy Policy.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
As part of the above-mentioned processing activities, data may be transferred to servers of Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
5.5 When contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary for that purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter has been conclusively resolved, provided that no statutory retention obligations prevent deletion.
6) Comment Function
When using the comment function on this website, in addition to your comment, information regarding the time the comment was created and the commenter name you selected will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is carried out for security reasons and in the event that the data subject violates the rights of third parties or posts unlawful content through a submitted comment. We require your email address in order to contact you if a third party objects to your published content as unlawful.
The legal bases for storing your data are Art. 6 (1)(b) and Art. 6 (1)(f) GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
As a user, you may subscribe to follow-up comments. You will receive a confirmation email to ensure that you are the owner of the email address provided (double opt-in procedure). The legal basis for data processing when subscribing to comments is Art. 6 (1)(a) GDPR. You may unsubscribe from comment subscriptions at any time with future effect. Further information on how to unsubscribe can be found in the confirmation email.
7) Data Processing When Opening a Customer Account
Pursuant to Art. 6 (1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for account registration can be found in the input form of the relevant registration form on our website.
You may delete your customer account at any time by sending a message to the controller at the address stated above. After deletion of your customer account, your data will be erased provided that all contracts concluded through the account have been fully processed, no statutory retention periods apply, and we have no legitimate interest in further storage.
8) Use of Customer Data for Direct Marketing
8.1 Subscription to Our E-Mail Newsletter
If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information required for receiving the newsletter is your e-mail address. Providing additional data is voluntary and is used to address you personally. For sending newsletters, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters after you have expressly confirmed your consent by clicking a verification link sent to the specified e-mail address.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. In doing so, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected when subscribing to the newsletter is used strictly for the intended purpose.
You may unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named above. After unsubscribing, your e-mail address will be removed from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, where legally permitted and as described in this privacy policy.
8.2 Brevo
Our e-mail newsletters and other promotional e-mail communications are sent via the following provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.
Based on our legitimate interest in effective and user-friendly e-mail marketing, we transfer the data you provide during registration to this provider pursuant to Art. 6 (1) lit. f GDPR so that the provider can send e-mails on our behalf.
Subject to your explicit consent pursuant to Art. 6 (1) lit. a GDPR, we also reserve the right to carry out statistical analyses of the success of e-mail campaigns using web beacons or tracking pixels embedded in the e-mails sent, which can measure open rates and specific interactions with newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data records.
You may revoke your consent to e-mail tracking at any time with future effect.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
8.3 SMS Marketing
On our website, you have the option to subscribe to SMS notifications regarding current offers, promotions, and information about orders you have placed.
The only mandatory information required for receiving SMS notifications is your mobile phone number. Providing additional data is voluntary and may be used to address you personally.
For sending SMS messages, we use the so-called double opt-in procedure, which ensures that promotional SMS messages are only sent to you after you have expressly confirmed your consent by clicking a verification link sent to the mobile phone number provided.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. The date and time of registration are also stored to enable us to trace any possible misuse of your mobile phone number at a later date. The data collected during registration is used exclusively for promotional communication via SMS.
You may unsubscribe from SMS notifications at any time by sending a corresponding message to the controller named above and thereby revoke your consent with future effect. After unsubscribing, your mobile phone number will be removed from the distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, where legally permitted and as described in this privacy policy.
8.4 SMS Delivery via Brevo
Our SMS notifications are sent via the following provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.
Based on our legitimate interest in an effective, secure, and user-friendly marketing system, we transfer the data you provide when subscribing to SMS notifications to this provider pursuant to Art. 6 (1) lit. f GDPR so that the provider can send SMS messages on our behalf.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
8.5 WonderPush
On this website, you have the option to subscribe to regular push notifications containing information about our offers.
For this purpose, we use the services of the following provider: WonderPush, 19 avenue d’Italie, 75013 Paris, France.
As part of the registration process, during which you provide your explicit consent to receive push notifications and related processing activities pursuant to Art. 6 (1) lit. a GDPR, the provider collects, stores, and uses your browser ID and device ID to ensure the correct assignment and display of notifications.
Subject to your explicit consent pursuant to Art. 6 (1) lit. a GDPR, the provider also performs statistical evaluations of push notification integrations and interactions. Additional information (e.g. time of access and IP address) is collected and analyzed, but not combined with other data records.
You may revoke your consent to data processing for receiving push notifications and for statistical performance measurement at any time with future effect by disabling the service in your browser settings or, depending on your operating system, by unsubscribing through interaction with the respective push notification.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
8.6 WhatsApp Newsletter
If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information required for receiving the newsletter is your mobile phone number.
To receive the newsletter, you must save our communicated mobile phone number in the contacts of your mobile device and send us the message “Start” via WhatsApp. By sending this WhatsApp message, you grant us your consent pursuant to Art. 6 (1) lit. a GDPR to use your personal data for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.
The data collected during newsletter registration will be processed exclusively for promotional communication via the newsletter. You may unsubscribe from the newsletter at any time by sending us the message “Stop” via WhatsApp. After unsubscribing, your mobile phone number will be removed from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, where legally permitted and as described in this privacy policy.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of its parent company, Meta Platforms Inc., in the United States.
For sending our WhatsApp newsletter, we therefore use a mobile device whose address book contains only the WhatsApp contact details of our newsletter recipients. This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their device and accepting the WhatsApp Terms of Service, to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1) lit. a GDPR. The transfer of data relating to users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information about the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and settings options for protecting your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have concluded a data processing agreement with WhatsApp that protects the data of our newsletter recipients and prohibits disclosure to third parties.
As part of the processing activities described above, data may be transferred to servers of Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
8.7 Brevo
Our WhatsApp newsletters are sent via the following provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer your WhatsApp-linked telephone number and, where applicable, your first and last name to this provider pursuant to Art. 6 (1) lit. f GDPR so that the provider can send newsletters on our behalf.
Subject to your explicit consent pursuant to Art. 6 (1) lit. a GDPR, the provider also performs statistical analyses of newsletter campaigns using web beacons or tracking pixels in WhatsApp messages to measure open rates and specific interactions with newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other data records.
You may revoke your consent to newsletter tracking at any time with future effect.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
8.8 Product Availability Notification by E-Mail
For temporarily unavailable products, you may subscribe to receive e-mail notifications when the selected item becomes available again. The only mandatory information required for receiving such notifications is your e-mail address. Providing additional data is voluntary and may be used to address you personally. For sending these notifications, we use the so-called double opt-in procedure, which ensures that you will only receive a notification after you have expressly confirmed your consent by clicking a verification link sent to the specified e-mail address.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. In doing so, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected when registering for our product availability notification service is used strictly for the intended purpose.
You may unsubscribe from product availability notifications at any time by sending a corresponding message to the controller named above. After unsubscribing, your e-mail address will be removed from the distribution list established for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, where legally permitted and as described in this privacy policy.
8.9 Shopping Cart Reminder by E-Mail
If you abandon your purchase process on our website before completing an order, you have the option to receive a one-time e-mail reminder regarding the contents of your virtual shopping cart.
The only mandatory information required for sending this reminder is your e-mail address. Providing additional data is voluntary and may be used to address you personally. For sending reminder e-mails, we use the so-called double opt-in procedure, which ensures that you will only receive a reminder after you have expressly confirmed your consent by clicking a verification link sent to the specified e-mail address.
By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR for the purpose of sending a shopping cart reminder. In doing so, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected when registering for our reminder service is used strictly for the intended purpose.
You may unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named above. After unsubscribing, your e-mail address will be removed from the distribution list established for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, where legally permitted and as described in this privacy policy.
9) Data Processing for Order Fulfilment
9.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned financial institution in accordance with Art. 6 (1) lit. b GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when placing your order in order to inform you personally about such updates within the scope of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact data is used strictly for notifications regarding updates owed by us and is processed only to the extent necessary for the respective information.
For the processing of your order, we also cooperate with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
9.2 Billbee
For order processing, we use the following provider: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.
Name, address, and, where applicable, further personal data are transferred to the provider exclusively for the purpose of processing online orders in accordance with Art. 6 (1) lit. b GDPR. Your data will only be transferred to the extent actually necessary for order fulfilment.
9.3 JUMiNGO
For shipment preparation, we use the services of the following provider: JUMiNGO GmbH, Breslauer Platz 4, 50668 Cologne, Germany.
In accordance with Art. 6 (1) lit. b GDPR, we transmit digital shipping labels containing your delivery information exclusively for the purpose of processing your online order from our order management system to the provider, who then forwards them to our local printers to enable printing. Data is only transferred to the extent necessary for order fulfilment.
9.4 Sendcloud
For shipping purposes, we use the services of the following provider: Sendcloud GmbH, Fürstenrieder Str. 70, 80686 Munich, Germany.
In accordance with Art. 6 (1) lit. b GDPR, we transfer your data exclusively for the purpose of processing your online order to the provider, who, on our behalf, prints shipping labels and transmits shipment data to the commissioned transport company. Data is only transferred to the extent actually necessary for order fulfilment.
On our behalf, the provider also sends shipping notifications and delivery status updates. For this purpose, we transfer certain customer data (e-mail address, first and last name, and address) together with the shipment number to the provider pursuant to Art. 6 (1) lit. f GDPR based on our legitimate interest in effective and informative customer communication and in transparent and reliable shipping processing, which is also in the customer’s interest.
The provider does not transfer the data to third parties and processes it exclusively for the purpose described above. After shipment has been completed, the provider deletes the data.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
9.5 Transfer of Personal Data to Shipping Service Providers
– Deutsche Post
We use the following provider as our transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– DHL
We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– DPD
We use the following provider as our transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– DPD Austria
We use the following provider as our transport service provider: DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, 2333 Leopoldsdorf, Austria.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– FedEx
We use the following provider as our transport service provider: FedEx Express Germany GmbH, Langer Kornweg 34k, 65451 Kelsterbach, Germany.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– GLS
We use the following provider as our transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein, Germany.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– Austrian Post
We use the following provider as our transport service provider: Österreichische Post AG, Rochusplatz 1, 1030 Vienna, Austria.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– Swiss Post
We use the following provider as our transport service provider: Swiss Post AG, Wankdorfallee 4, 3030 Bern, Switzerland.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
In the event of a data transfer to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
– UPS
We use the following provider as our transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
– UPS Austria
We use the following provider as our transport service provider: United Parcel Service Speditionsgesellschaft m.b.H., Cargo Nord, Objekt 1, 1300 Vienna Airport, Austria.
If you have given your explicit consent during the ordering process, we will pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we will only pass on the recipient’s name and delivery address to the provider for delivery purposes in accordance with Art. 6 (1) lit. b GDPR. Data is only transferred to the extent necessary for delivery. In this case, prior coordination of the delivery date or delivery notification by the provider is not possible.
Your consent may be revoked at any time with future effect by contacting either the controller named above or the provider.
9.6 Use of Payment Service Providers (Payment Services)
– Amazon Pay
One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.
If you select a payment method offered by the provider that requires advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number), as well as information about the content of your order, will be transferred to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of payment processing and only to the extent necessary for this purpose.
– Apple Pay
If you choose the payment method “Apple Pay” provided by Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the Apple Pay function of your device running iOS, watchOS, or macOS using a payment card stored in Apple Pay. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, you must enter a code previously defined by you and verify it using the Face ID or Touch ID function of your device.
For payment processing purposes, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data using a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay. This encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment has been completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the success of the payment.
Where personal data is processed in connection with the transmissions described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Due to anonymization, any personal reference is completely excluded. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase that you initiated through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
Further information about data protection with Apple Pay can be found at the following website:
https://support.apple.com/en-us/HT203027
– EPS Transfer
One or more online payment methods from the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria.
If you select a payment method offered by the provider that requires advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number), as well as information about the content of your order, will be transferred to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of payment processing and only to the extent necessary for this purpose.
– giropay
One or more online payment methods from the following provider are available on this website: paydirekt GmbH, Stephanstr. 14–16, 60313 Frankfurt am Main, Germany.
If you select a payment method offered by the provider that requires advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number), as well as information about the content of your order, will be transferred to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of payment processing and only to the extent necessary for this purpose.
– PayPal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
If you select a payment method offered by the provider that requires advance payment, the payment data you provide during the ordering process (including name, address, bank and payment card details, currency, and transaction number), as well as information regarding the content of your order, will be transferred to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of payment processing and only to the extent necessary for this purpose.
If you select a payment method for which we provide advance services, you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, where applicable, information regarding an alternative means of payment).
In order to safeguard our legitimate interest in assessing your creditworthiness, this data will be transmitted to the provider for a credit check in accordance with Art. 6 (1) lit. f GDPR. Based on the personal data you provide and additional data (such as shopping cart contents, invoice amount, order history, and payment experience), the provider evaluates whether the payment option selected by you can be granted with regard to payment and default risks.
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of score values.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
– Sofort Transfer
One or more online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.
If you select a payment method offered by the provider that requires advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number), as well as information about the content of your order, will be transferred to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of payment processing and only to the extent necessary for this purpose.
– Stripe
One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
If you select a payment method offered by the provider that requires advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card details, currency, and transaction number), as well as information about the content of your order, will be transferred to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of payment processing and only to the extent necessary for this purpose.
If you select a payment method for which the provider provides advance services (e.g. purchase on account, installment payment, or direct debit), you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, where applicable, information regarding an alternative means of payment).
To safeguard our legitimate interest in determining the creditworthiness of our customers, this data will be transmitted to the provider for a credit check in accordance with Art. 6 (1) lit. f GDPR. Based on the personal data you provide and additional data (such as shopping cart contents, invoice amount, order history, and payment experience), the provider evaluates whether the payment option selected by you can be granted with regard to payment and default risks.
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of score values.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
9.7 Electronic Cancellation Function for Distance Contracts
Consumers who conclude contracts on this website that are subject to a statutory right of withdrawal have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.
When using the withdrawal function, in addition to information identifying the contract to be withdrawn from, further personal information such as the consumer’s first and last name and email address must be provided or confirmed.
The collection of this information and its transmission to us is carried out pursuant to Art. 6 (1) lit. b GDPR and only to the extent necessary for the proper processing of the withdrawal. Based on Art. 6 (1) lit. b GDPR, the personal data provided is also used to confirm receipt of the withdrawal declaration by email. An additional legal basis for the processing is Art. 6 (1) lit. c GDPR. We are legally obliged to provide an electronic withdrawal function for distance contracts concluded with consumers for consideration.
10) Online Marketing
10.1 Brevo Tracker
This website uses the software-based marketing service of the following provider to deliver and synchronize various customer management services:
Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany
The service enables automated processing of feed activities, management of advertising across marketing channels, analysis of marketing campaign performance, as well as centralized email marketing and contact management.
To provide these functions, cookies are used. Cookies are small text files stored locally in your web browser cache on your device and allow us to analyze your use of the website. These cookies collect certain information, such as:
- IP address
- Location
- Time of page access
All processing activities described above, particularly the storage of cookies and the access to information on your device, are carried out only if you have given your explicit consent in accordance with Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time with future effect by disabling this service via the cookie consent tool provided on our website.
Any additional legal bases applicable to specific processing activities (such as the requirement for explicit consent under Art. 6 (1) lit. a GDPR for sending newsletters) remain unaffected.
We have concluded a data processing agreement (DPA) with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.
10.2 Google AdSense
This website uses Google AdSense, an online advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google AdSense uses cookies, which are text files stored on your device that enable analysis of website usage. Google AdSense also uses so-called web beacons (small invisible graphics) to record, collect, and evaluate simple actions such as visitor traffic on the website.
The information generated by cookies and/or web beacons (including your IP address) regarding your use of this website is generally transmitted to and stored on a Google server. This may also include transmission to servers of Google LLC in the USA.
Google uses this information to evaluate your usage behavior with regard to AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. Information collected by Google may be transferred to third parties where required by law or where such third parties process the data on Google’s behalf.
All processing activities described above, particularly the reading of information stored on your device through cookies and/or web beacons, are carried out only if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google AdSense will not be used during your visit.
You may revoke your consent at any time with future effect by disabling this service in the cookie consent tool provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
11) Web Analytics Services
11.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, Google (Universal) Analytics sets cookies when you visit the website. These cookies are stored on your device and collect certain information. This information includes your IP address, which is shortened by Google to prevent direct personal identification.
The information is transmitted to Google servers and processed there. Transfers to Google LLC in the USA are also possible.
Google uses this information on our behalf to evaluate website usage, compile reports on website activities, and provide other services related to website and internet usage. The shortened IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.
The data collected through Google (Universal) Analytics is stored for two months and then deleted.
All processing activities described above, particularly the setting of cookies on your device, are carried out only with your explicit consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit. You may withdraw your consent at any time via the cookie consent tool provided on the website.
We have concluded a data processing agreement with Google to ensure the protection of visitor data and prohibit unauthorized disclosure to third parties.
Demographic Features
Google (Universal) Analytics may use the “Demographics” feature to generate statistics about visitors’ age, gender, and interests based on advertising and third-party information. The collected data cannot be assigned to specific individuals and is deleted after two months.
Google Signals
Google Signals may be used to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may analyze your behavior across devices and create models, including cross-device conversions, subject to your consent under Art. 6(1)(a) GDPR.
We receive only aggregated statistics and no personal data from Google.
User IDs
If you have consented to Google Analytics and created an account on this website, User IDs may be used to analyze activities, including conversions, across multiple devices when you log in with the same account.
The provider participates in the EU-US Data Privacy Framework.
11.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.
By default, Google Analytics 4 does not use cookies unless you expressly consent to them. Instead, information about your usage behavior is collected via so-called pings (small data packets sent to the host of a device). This information includes your IP address, which is shortened to prevent direct identification.
The information is transmitted to Google servers and processed there. Transfers to Google LLC in the USA are possible.
Google uses this information on our behalf to evaluate website usage, compile reports, and provide additional services related to website and internet use.
Collected data is stored for two months and then deleted.
All processing activities, including the transmission of data via pings and the potential use of Google Analytics cookies, require your explicit consent under Art. 6(1)(a) GDPR.
You may revoke your consent at any time through the cookie consent tool.
We have concluded a data processing agreement with Google.
Demographic Features
Google Analytics 4 may generate statistical information regarding age, gender, and interests based on advertising and third-party data. These data cannot be attributed to a specific individual and are deleted after two months.
Google Signals
Google Signals may be used for cross-device reporting and conversion analysis. We receive only aggregated statistics and no personal data.
User IDs
If enabled, User IDs allow activities and conversions to be analyzed across devices when users log into the same website account.
The provider participates in the EU-US Data Privacy Framework.
11.3 Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited.
Google Tag Manager serves as a technical platform for managing and deploying web applications such as analytics and tracking services. Google Tag Manager itself does not store information on user devices, read data from them, or perform independent analyses.
However, your IP address may be transmitted to Google and stored. Transfers to Google LLC in the USA may occur.
Processing takes place only with your explicit consent under Art. 6(1)(a) GDPR and can be withdrawn at any time via the cookie consent tool.
A data processing agreement has been concluded with Google.
The provider participates in the EU-US Data Privacy Framework.
11.4 Jetpack
This website uses the web analytics service provided by Automattic Inc., San Francisco, USA.
Using cookies and/or similar technologies, Jetpack collects and stores pseudonymized visitor data, including IP addresses and browser information, for statistical analysis and the creation of pseudonymized user profiles.
Heatmap functionality may also be used to analyze visitor behavior such as scrolling, clicks, mouse movements, and time spent on pages.
Processing takes place only with your explicit consent under Art. 6(1)(a) GDPR and can be withdrawn via the cookie consent tool.
A data processing agreement has been concluded with the provider.
The provider participates in the EU-US Data Privacy Framework.
12) Retargeting / Remarketing and Conversion Tracking
12.1 Meta Pixel
We use Meta Pixel provided by Meta Platforms Ireland Limited.
Meta Pixel allows us to measure the effectiveness of Facebook and Instagram advertisements, create custom audiences, and track conversions.
The collected data are anonymous to us but may be stored and processed by Meta and linked to individual user profiles for Meta’s own advertising purposes.
Processing takes place only with your explicit consent under Art. 6(1)(a) GDPR and can be withdrawn via the cookie consent tool.
A data processing agreement has been concluded with Meta.
Data may be transferred to Meta Platforms Inc. in the USA.
The provider participates in the EU-US Data Privacy Framework.
12.2 Google Ads Remarketing
This website uses Google Ads Remarketing provided by Google Ireland Limited.
Google sets a cookie on your device to enable interest-based advertising based on pages visited. If you are logged into your Google account and have consented to Google linking your browsing history with your account, Google may use Analytics data to create cross-device remarketing audiences.
Processing takes place only with your explicit consent under Art. 6(1)(a) GDPR and can be withdrawn via the cookie consent tool.
The provider participates in the EU-US Data Privacy Framework.
13) Website Functionalities
13.1 Facebook Plugins
This website uses plugins from Facebook (Meta Platforms Ireland Ltd.).
The plugins are initially integrated using a two-click/Shariff solution, preventing data transfer before activation.
Only after you activate the plugin and consent pursuant to Art. 6(1)(a) GDPR will a direct connection be established with Meta’s servers.
Data may also be transferred to Meta Platforms Inc. in the USA.
A data processing agreement has been concluded.
The provider participates in the EU-US Data Privacy Framework.
13.2 Instagram Plugins
This website uses plugins from Instagram (Meta Platforms Ireland Ltd.).
The same two-click/Shariff solution is used. Data are transmitted only after activation and consent.
Data may be transferred to Meta Platforms Inc. in the USA.
A data processing agreement has been concluded.
The provider participates in the EU-US Data Privacy Framework.
13.3 Vimeo
This website uses video plugins from Vimeo.com, Inc., USA.
When a page containing a Vimeo plugin is accessed, information including your IP address is transmitted to Vimeo.
When a video is played, Vimeo may use cookies to collect user behavior data and create playback statistics.
Processing takes place only with your consent pursuant to Art. 6(1)(a) GDPR.
The provider participates in the EU-US Data Privacy Framework.
13.4 YouTube
This website uses YouTube plugins provided by Google Ireland Limited.
When a video is played, a direct connection to Google’s servers is established. Information including your IP address may be transmitted.
YouTube may set cookies to collect usage statistics and prevent misuse.
Processing takes place only with your consent under Art. 6(1)(a) GDPR.
The provider participates in the EU-US Data Privacy Framework.
13.5 Google Maps
This website uses Google Maps (API), provided by Google Ireland Limited.
Google Maps enables the display of interactive maps and route planning.
When accessing pages containing Google Maps, information including your IP address may be transmitted to Google servers, including servers in the USA.
Google may store and analyze user profiles, even for users who are not logged in.
Where required by law, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
The provider participates in the EU-US Data Privacy Framework.
13.6 OpenStreetMap
This website uses the mapping service OpenStreetMap Foundation, United Kingdom.
When pages containing OpenStreetMap are accessed, information such as your IP address may be transmitted to the provider.
Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in providing a user-friendly website.
Where required by law, processing is based on your consent under Art. 6(1)(a) GDPR.
An adequate level of data protection is ensured through the European Commission’s adequacy decision for the United Kingdom.
13.7 Google Web Fonts
This website uses Google Web Fonts provided by Google Ireland Limited.
When a page is accessed, your browser loads the required fonts and establishes a direct connection with Google’s servers. Browser information, including your IP address, may be transmitted.
Processing takes place only with your explicit consent under Art. 6(1)(a) GDPR and can be withdrawn via the cookie consent tool.
If your browser does not support web fonts, a standard font from your device will be used instead.
The provider participates in the EU-US Data Privacy Framework.
13.8 Google reCAPTCHA
This website uses the CAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to Google LLC, USA.
For the visual design of the CAPTCHA window, the provider uses “Google Fonts,” which are loaded from the internet by Google. No additional information beyond the data already transmitted to Google through the reCAPTCHA functionality is processed.
The service checks whether data input is made by a natural person or abusively through automated processing and helps prevent spam, DDoS attacks, and similar automated malicious activities. To determine whether an action is performed by a human rather than a bot, the provider collects the IP address of the device used, information about the browser and operating system, as well as the date and duration of the visit, and transmits this information to its servers for analysis. Cookies may also be used.
Where the above-described processing involves the use of cookies, such cookies are only set if you have given your explicit consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the cookie consent tool provided on the website.
Where the above-described processing takes place without the use of cookies, the legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in establishing individual accountability on the internet and preventing misuse and spam.
We have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and prevent unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
13.9 Google Customer Reviews (formerly Google Certified Shops Program)
We work with Google under the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
This program enables us to collect customer reviews from users of our website. After making a purchase on our website, you may be asked whether you would like to participate in a Google email survey.
If you provide your consent in accordance with Art. 6(1)(a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. Your review will then be aggregated with our other reviews and displayed in our Google Customer Reviews badge and Merchant Center dashboard. Your review may also be used for Google Seller Ratings.
As part of the use of Google Customer Reviews, personal data may also be transferred to servers of Google LLC in the USA.
You may withdraw your consent at any time by notifying either us or Google.
For data transfers to the USA, the provider participates in the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
Further information about Google’s privacy practices can be found at:
https://business.safety.google/intl/en/privacy/
13.10 Applications for Job Vacancies by Email
We publish current job vacancies on our website in a dedicated section. Interested applicants may apply by email to the contact address provided.
Applicants must provide all personal data required for a comprehensive assessment of their application, including general information such as name, address, and contact details, as well as qualifications and, where applicable, health-related information. Details regarding the application process can be found in the respective job advertisement.
Upon receipt of an application by email, the data will be stored and processed exclusively for the purpose of handling the application. If we have questions regarding the application, we will use the applicant’s email address or telephone number. Processing is based on Art. 6(1)(b) GDPR (or Section 26(1) BDSG in Germany), as the application process constitutes a pre-contractual employment relationship.
Where special categories of personal data within the meaning of Art. 9(1) GDPR (e.g., health information such as disability status) are requested during the application process, processing is carried out pursuant to Art. 9(2)(b) GDPR to enable us to exercise rights and fulfill obligations under employment, social security, and social protection law.
Alternatively or additionally, processing of special categories of data may be based on Art. 9(2)(h) GDPR where necessary for preventive or occupational medicine, assessment of working capacity, medical diagnosis, health or social care, or management of health and social care systems and services.
If an applicant is not selected or withdraws their application, all submitted data and correspondence, including application emails, will be deleted no later than six months after notification. This retention period is based on our legitimate interest in responding to follow-up questions and fulfilling legal obligations relating to equal treatment of applicants.
If the application is successful, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (or Section 26(1) BDSG in Germany) for the purpose of carrying out the employment relationship.
14) Tools and Miscellaneous
14.1 Billbee
We use the cloud-based accounting software provided by Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.
The provider processes incoming and outgoing invoices and, where applicable, company banking transactions to automatically record invoices, match them with transactions, and generate financial accounting records in a partially automated process.
Where personal data is processed, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the efficient organization and documentation of our business operations.
14.2 DATEV
We use the cloud-based accounting software provided by DATEV eG, Paumgartnerstr. 6–14, 90429 Nuremberg, Germany.
The provider processes incoming and outgoing invoices and, where applicable, company banking transactions to automatically record invoices, match them with transactions, and generate financial accounting records in a partially automated process.
Where personal data is processed, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the efficient organization and documentation of our business operations.
