Privacy Policy
R/C 107 SL Service GmbH
Plettenbergstraße 49 | D-70186 Stuttgart
Telefon: +49 176 84699945
Fax: +49 711 8895254
Managing Director:
Günter Hoferer, Ralf Nehring
Amtsgericht Stuttgart HRB 777426
Tax ID: 99047/11493
VAT ID: DExxxxxxxxx
Contact Clubshop
Günter Hoferer
Mobile: +49 176 84699945
shop@107sl-club.de
Data Protection Officer:
Bettina Drescher
Mobile: +49 172 2823249
E-Mail: datenschutz@107sl-club.de
Types of data processed:
– Master data (e.g., names, addresses).
– Contact data (e.g., email, phone numbers).
– Content data (e.g., text entries, photographs, videos).
– Contract data (e.g., subject matter of the contract, term, customer category).
– Payment data (e.g., bank account information, payment history).
– Usage data (e.g., websites visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).
Processing of Special Categories of Data (Art. 9(1) GDPR):
No special categories of data are processed.
Categories of Data Subjects:
– Customers, prospective customers, visitors, and users of the online service; business partners.
– Visitors and users of the online service.
Hereinafter, we collectively refer to the data subjects as “users.”
Purpose of processing:
– To provide the online service, its content, and store functions.
– To provide contractual services, support, and customer care.
– Responding to contact requests and communicating with users.
– Marketing, advertising, and market research.
– Security measures.
As of May 2021
1. Definitions
1.1. “Personal data” refers to any information relating to an identified or identifiable natural person (hereinafter “data subject”); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier (e.g., a cookie), or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
1.2. “Processing” means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses virtually any handling of data.
1.3. “Controller” means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
2. Applicable Legal Bases
In accordance with Article 13 of the GDPR, we are providing you with the legal bases for our data processing activities. Unless the legal basis is specified in the Privacy Policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 of the GDPR; the legal basis for processing to fulfill our services, carry out contractual obligations, and respond to inquiries is Article 6(1)(b) of the GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) of the GDPR, and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) of the GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.
3. Changes and Updates to the Privacy Policy
We ask that you review the content of our Privacy Policy regularly. We will update the Privacy Policy as soon as changes to our data processing activities make this necessary. We will notify you as soon as the changes require action on your part (e.g., consent) or any other individual notification.
4. Security Measures
4.1. In accordance with Article 32 of the GDPR, and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk; These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as access to, input of, and disclosure of the data, ensuring its availability, and maintaining its separation. Furthermore, we have established procedures that ensure the exercise of data subjects’ rights, the erasure of data, and a response to data breaches. Furthermore, we take the protection of personal data into account from the very beginning of the development or selection of hardware, software, and procedures, in accordance with the principle of data protection through technology design and privacy-friendly default settings (Art. 25 GDPR).
4.2. Security measures include, in particular, the encrypted transmission of data between your browser and our server.
5. Disclosure and Transfer of Data
5.1. If, in the course of our data processing, we disclose data to other individuals or companies (processors or third parties), transfer it to them, or otherwise grant them access to the data, this is done only on the basis of a legal authorization (e.g., if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Article 6(1)(b) of the GDPR), you have given your consent, a legal obligation requires it, or on the basis of our legitimate interests (e.g., when engaging agents, hosting providers, tax, business, and legal advisors, as well as customer service, accounting, billing, and similar services that enable us to efficiently and effectively fulfill our contractual obligations, administrative tasks, and duties).
5.2. If we engage third parties to process data on the basis of a so-called “Data Processing Agreement,” this is done in accordance with Article 28 of the GDPR.
6. Transfers to Third Countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in connection with the use of third-party services or the disclosure or transfer of data to third parties, this will only take place if it is necessary to fulfill our (pre)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to statutory or contractual permissions, we process data in a third country—or have it processed there—only if the specific requirements of Articles 44 et seq. of the GDPR are met. This means that processing takes place, for example, on the basis of specific safeguards, such as an officially recognized determination that a country provides a level of data protection equivalent to that of the EU (e.g., for the U.S. through the “Privacy Shield”) or compliance with officially recognized specific contractual obligations (so-called “Standard Contractual Clauses”).
7. Rights of Data Subjects
7.1. You have the right to request confirmation as to whether data concerning you is being processed, as well as access to this data, further information, and a copy of the data in accordance with Article 15 of the GDPR.
7.2. In accordance with Art. 16 of the GDPR, you have the right to request that data concerning you be completed or that inaccurate data concerning you be corrected.
7.3. In accordance with Article 17 of the GDPR, you have the right to request that the relevant data be erased without delay or, alternatively, in accordance with Article 18 of the GDPR, to request a restriction on the processing of the data.
7.4. You have the right to request, in accordance with Article 20 of the GDPR, to receive the data concerning you that you have provided to us and to request that it be transmitted to other data controllers.
7.5. You also have the right, pursuant to Article 77 of the GDPR, to lodge a complaint with the competent supervisory authority.
8. Right to Withdraw Consent
You have the right to withdraw any consent you have given, in accordance with Article 7(3) of the GDPR, with future effect.
9. Right to Object
You may object at any time to the future processing of your personal data in accordance with Article 21 of the GDPR. In particular, you may object to processing for direct marketing purposes.
10. Cookies and the Right to Object to Direct Marketing
10.1. “Cookies” are small files that are stored on users’ computers. Various types of information can be stored in cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user’s visit to an online service. “Temporary cookies,” also known as “session cookies” or “transient cookies,” are cookies that are deleted after a user leaves an online service and closes their browser. Such a cookie may, for example, store the contents of a shopping cart in an online store or a login status. Cookies that remain stored even after the browser is closed are referred to as “permanent” or “persistent.” For example, a user’s login status may be stored so that it remains active when the user returns to the site several days later. Similarly, such a cookie may store the user’s interests, which are used for audience measurement or marketing purposes. “Third-party cookies” are cookies set by providers other than the controller operating the online service (in contrast, when only the controller’s own cookies are used, they are referred to as “first-party cookies”).
10.2. We use temporary and permanent cookies and provide information about this in our privacy policy. If users do not wish to have cookies stored on their computer, they are asked to deactivate the corresponding option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. Disabling cookies may lead to functional limitations of this online service.
10.3. A general objection to the use of cookies for online marketing purposes can be declared for many services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that in this case, you may not be able to use all the functions of this online service.
11. Deletion of Data
11.1. The data we process will be erased or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated otherwise in this privacy policy, the data stored by us will be erased as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. If the data is not erased because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
11.2. Germany: In accordance with legal requirements, records must be retained for 6 years, in particular pursuant to Section 257 Paragraph 1 of the German Commercial Code (HGB) (commercial books, inventories, opening balance sheets, annual financial statements, commercial correspondence, accounting documents, etc.), and for 10 years pursuant to Section 147 Paragraph 1 of the German Fiscal Code (AO) (books, records, management reports, accounting documents, commercial and business correspondence, tax-relevant documents, etc.).
11.3. Austria: In accordance with legal requirements, records must be retained for 7 years, in particular pursuant to Section 132 Paragraph 1 of the Austrian Federal Fiscal Code (BAO) (accounting records, receipts/invoices, accounts, vouchers, business papers, statements of income and expenses, etc.), for 22 years in connection with real estate, and for 10 years for documents relating to electronically supplied services, telecommunications, broadcasting, and television services provided to non-business customers in EU member states for which the Mini One-Stop Shop (MOSS) is used.
12. Order processing in the online shop and Customer Account
12.1. We process our customers’ data as part of the order process in our online shop to enable them to select and order their chosen products and services, as well as to process payment and delivery or fulfillment.
12.2. The data processed includes inventory data, communication data, contract data, payment data, and the data subjects are our customers, prospective customers, and other business partners. Processing is carried out for the purpose of providing contractual services within the framework of operating an online shop, invoicing, delivery, and customer service. We use session cookies to store the shopping cart contents and persistent cookies to store the login status.
12.3. Processing is based on Article 6 Paragraph 1 Letter b (performance of a contract) and c (compliance with a legal obligation) of the GDPR. The information marked as required is necessary for the establishment and fulfillment of the contract. We only disclose data to third parties in connection with delivery, payment, or within the scope of legal permissions and obligations to legal advisors and authorities. Data is only transferred to third countries if Processed when necessary for the performance of the contract (e.g., at the customer’s request for delivery or payment).
12.4. Users can optionally create a user account, which allows them, in particular, to view their orders. During registration, users will be informed of the required mandatory information. User accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data relating to the user account will be deleted, unless its retention is necessary for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until its deletion, with subsequent archiving in the event of a legal obligation. It is the users’ responsibility to back up their data before the end of the contract if they have terminated their account.
12.5. During registration, subsequent logins, and use of our online services, we store the IP address and the time of each user action. This storage is based on our legitimate interests, as well as the user’s interest in protection against misuse and other unauthorized use. This data is generally not shared with third parties, unless it is necessary for pursuing our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c GDPR.
12.6. Data is deleted after the expiration of statutory warranty periods and similar obligations. The necessity of retaining the data is reviewed every three years. In the case of statutory archiving obligations, deletion occurs after their expiration (end of the commercial (6 years) and tax-related (10 years) retention periods). Information in the customer account remains until the account is deleted.
13. Business Analyses and Market Research
13.1. To operate our business efficiently and to identify market trends and customer and user needs, we analyze the data we have on business transactions, contracts, inquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, and metadata based on Article 6 Paragraph 1 Letter f of the GDPR. The data subjects include customers, prospective customers, business partners, visitors, and users of our online services. These analyses are conducted for the purposes of business evaluations, marketing, and market research. We may consider the profiles of registered users, including information such as their purchase history. These analyses help us improve user-friendliness, optimize our services, and enhance our business efficiency. The analyses are for our internal use only and will not be disclosed externally, unless they are anonymous analyses with aggregated data.
13.2. If these analyses or profiles contain personal data, they will be deleted or anonymized upon termination of the user’s account, or otherwise two years after the contract was concluded. Furthermore, company-wide business analyses and general trend assessments are created anonymously whenever possible.
14. Credit Check
14.1. If we provide services in advance (e.g., for purchases on account), we reserve the right, in order to protect our legitimate interests, to obtain an identity and credit report for the purpose of assessing credit risk based on mathematical-statistical methods from specialized service providers (credit agencies).
14.2. As part of the credit check, we transmit the following personal data of the customer (name, postal address, date of birth, details of the type of contract, bank details [Please specify further data if applicable]) to the following credit agencies: [Please specify the credit agencies here, e.g.:] SCHUFA (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany), Data Protection Notice: https://www.schufa.de/de/ueber-uns/daten-scoring/.
14.3. We process the information we receive from credit reference agencies regarding the statistical probability of payment default as part of a sound discretionary decision concerning the establishment, execution, and termination of the contractual relationship. We reserve the right to refuse payment by invoice or any other advance payment in the event of a negative credit check.
14.4. The decision as to whether we provide advance payment is made in accordance with Article 22 GDPR solely on the basis of an automated decision in individual cases, which our software makes based on the information provided by the credit reference agency.
14.5 If we obtain your explicit consent, the legal basis for the credit check and the transfer of customer data to the credit reference agencies is your consent pursuant to Article 6(1)(a) and Article 7 GDPR. If no consent is obtained, our legitimate interests in the security of our payment claim constitute the legal basis pursuant to Article 6(1)(f) GDPR.
15. Contact and Customer Service
15.1. When you contact us (via contact form or email), the information you provide will be processed in accordance with Art. 6 para. 1 lit. b) GDPR for the purpose of processing and handling your inquiry.
15.2. Your information may be stored in our Customer Relationship Management system (“CRM system”) or a comparable system for managing inquiries.
15.3. We delete inquiries when they are no longer needed. We review the necessity of retaining inquiries every two years; inquiries from customers with a customer account are stored permanently, and for deletion, we refer to the information in the customer account. Statutory archiving obligations also apply.
16. Collection of Access Data and Log Files
16.1. Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR, we collect data about every access to the server on which this service is located (so-called server log files). Access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
16.2. Log file information is stored for a maximum of seven days for security reasons (e.g., to investigate misuse or fraud) and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until the final resolution of the respective incident.
17. Online Presence on Social Media
17.1. Based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, we maintain online presences within social networks and platforms to communicate with customers, prospective customers, and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
17.2 Unless otherwise stated in our privacy policy, we process user data when users communicate with us within social networks and platforms, e.g., by posting on our online presences or sending us messages.
17.2. We use Google Analytics to display advertisements placed within Google’s and its partners’ advertising services only to users who have also shown an interest in our online offerings or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites visited) that we transmit to Google (so-called “remarketing” or “Google Analytics Audiences”). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interests of users and are not perceived as intrusive.
18. Google Analytics
18.1. Based on our legitimate interests (i.e., our interest in the analysis, optimization, and economic operation of our online services within the meaning of Art. 6 Para. 1 lit. f GDPR), we use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google uses cookies. The information generated by the cookie about users’ use of the online services is generally transmitted to and stored on a Google server in the USA.
18.2. Google is certified under the Privacy Shield Framework and thus guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
18.3. Google will use this information on our behalf to evaluate users’ use of our online services, to compile reports on activity within these online services, and to provide us with other services relating to the use of these online services and internet usage. Pseudonymous user profiles may be created from the processed data.
18.4. We use Google Analytics only with IP anonymization enabled. This means that Google will truncate the IP address of users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
18.5. The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by adjusting their browser settings accordingly. Users can also prevent Google from collecting and processing data generated by the cookie and related to their use of the online service by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
18.6. Further information on Google’s data usage, settings, and opt-out options can be found on Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses data when you use our partners’ sites or apps”), https://policies.google.com/technologies/ads (“How Google uses data for advertising”), https://adssettings.google.com/authenticated (“Manage the information Google uses to show you ads”).
19. Google-Re/Marketing-Services
19.1. Based on our legitimate interests (i.e., our interest in analyzing, optimizing, and ensuring the economic operation of our online offering within the meaning of Article 6(1)(f) of the GDPR), we use the marketing and remarketing services (hereinafter “Google Marketing Services”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).
19.2. Google is certified under the Privacy Shield Framework and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
19.3. Google Marketing Services allow us to display more targeted ads on and for our website, presenting users only with ads that potentially match their interests. For example, if a user is shown ads for products they have previously viewed on other websites, this is called “remarketing.” For this purpose, when our website and other websites using Google Marketing Services are accessed, Google immediately executes a code and integrates so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) into the website. These tags store an individual cookie, i.e., a small file, on the user’s device (comparable technologies may also be used instead of cookies). These cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, and googleadservices.com. This file records which websites the user visits, which content they are interested in, and which offers they click on. It also includes technical information about the browser and operating system, referring websites, visit time, and other information about the use of the online service. The user’s IP address is also recorded. Regarding Google Analytics, we would like to inform you that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and is only transmitted in full to a Google server in the USA and shortened there in exceptional cases. The IP address is not combined with user data from other Google services. Google may also combine the aforementioned information with information from other sources. When the user subsequently visits other websites, they may be shown advertisements tailored to their interests.
19.4. User data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store or process, for example, the name or email address of users, but rather processes the relevant data on a cookie-related basis within pseudonymous user profiles. In other words, from Google’s perspective, ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has explicitly permitted Google to process the data without this pseudonymization. The information collected about users by Google Marketing Services is transmitted to Google and stored on Google’s servers in the USA.
19.5. Among the Google marketing services we use is the online advertising program “Google AdWords.” With Google AdWords, each AdWords customer receives a different “conversion cookie.” Therefore, cookies cannot be tracked across the websites of different AdWords customers. The information collected using the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users.
19.6. We may integrate third-party advertisements based on the Google marketing service “DoubleClick”. DoubleClick uses cookies that enable Google and its partner websites to display ads based on users’ visits to this website and other websites on the internet.
19.7. We may integrate third-party advertisements based on the Google marketing service “AdSense”. AdSense uses cookies that enable Google and its partner websites to display ads based on users’ visits to this website and other websites on the internet.
19.8. We can also use the “Google Optimizer” service. Google Optimizer allows us to track the effects of various website changes (e.g., changes to input fields, design, etc.) through so-called “A/B testing.” For these testing purposes, cookies are stored on users’ devices. Only pseudonymous user data is processed.
19.9. Furthermore, we can use the “Google Tag Manager” to integrate and manage Google’s analytics and marketing services on our website.
19.10. For more information about Google’s use of data for marketing purposes, please see the overview page: https://policies.google.com/technologies/ads. Google’s privacy policy is available at [link to Google’s privacy policy].
19.11. If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: https://adssettings.google.com/authenticated.
20. Facebook, Custom Audiences and Facebook Marketing Services
20.1. Within our online services, we use the so-called “Facebook Pixel” of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), based on our legitimate interests in the analysis, optimization and economic operation of our online services and for these purposes.
20.2. Facebook is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
20.3. With the help of the Facebook pixel, Facebook can identify visitors to our website as a target audience for displaying advertisements (so-called “Facebook Ads”). Accordingly, we use the Facebook pixel to show the Facebook Ads we place only to Facebook users who have shown an interest in our website or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites they visit) that we transmit to Facebook (so-called “Custom Audiences”). We also use the Facebook pixel to ensure that our Facebook Ads correspond to the potential interests of users and are not perceived as intrusive. Furthermore, the Facebook pixel allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
20.4. Facebook processes data in accordance with its Data Policy. General information on how Facebook ads are displayed can be found in Facebook’s Data Policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook Pixel and how it works can be found in Facebook’s Help Center: https://www.facebook.com/business/help/651294705016616.
20.5. You can object to the collection of data by the Facebook pixel and the use of your data for displaying Facebook ads. To adjust which types of ads are displayed to you on Facebook, you can visit the page provided by Facebook and follow the instructions for managing your ad preferences: https://www.facebook.com/settings?tab=ads. These settings are platform-independent, meaning they apply to all devices, such as desktop computers and mobile devices.
20.6. You can also object to the use of cookies for audience measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
21. Facebook Social Plugins
21.1. Based on our legitimate interests (i.e., our interest in analyzing, optimizing, and operating our online services economically, in accordance with Article 6(1)(f) of the GDPR), we use social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can display interactive elements or content (e.g., videos, graphics, or text posts) and are recognizable by one of the Facebook logos (a white “f” on a blue tile, the terms “Like” or “Gefällt mir”, or a “thumbs up” icon) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
21.2. Facebook ist unter dem Privacy-Shield-Abkommen zertifiziert und bietet hierdurch eine Garantie, das europäische Datenschutzrecht einzuhalten (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
21.3. When a user accesses a feature of this online service that contains such a plugin, their device establishes a direct connection to Facebook’s servers. The plugin’s content is transmitted directly from Facebook to the user’s device and integrated into the online service. Usage profiles of users can be created from the processed data. We therefore have no control over the scope of data that Facebook collects using this plugin and are informing users accordingly, based on our current knowledge.
21.4. By integrating these plugins, Facebook receives information that a user has accessed the corresponding page of the website. If the user is logged into Facebook, Facebook can associate the visit with their Facebook account. When users interact with the plugins, for example, by clicking the Like button or leaving a comment, the corresponding information is transmitted directly from their device to Facebook and stored there. Even if a user is not a member of Facebook, it is still possible that Facebook will learn and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.
21.5. The purpose and scope of data collection and the further processing and use of data by Facebook, as well as the related rights and settings options for protecting users’ privacy, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
21.6. If a user is a Facebook member and does not want Facebook to collect data about them via this website and link it to their Facebook profile data, they must log out of Facebook and delete their cookies before using our website. Further settings and options to object to the use of data for advertising purposes are available within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. These settings are platform-independent, meaning they apply to all devices, such as desktop computers and mobile devices.
27. Communication via mail, email, fax, or telephone
27.1 We use remote communication methods, such as mail, telephone, or email, for business transactions and marketing purposes. In doing so, we process inventory data, address and contact data, as well as contract data of customers, participants, prospective customers, and communication partners.
27.2 Processing is based on Article 6(1)(a), Article 7 GDPR, and Article 6(1)(f) GDPR in conjunction with legal requirements for advertising communications. Contact is only made with the consent of the contact partners or within the scope of legal permissions, and the processed data is deleted as soon as it is no longer required, or upon objection/withdrawal of consent, or when the legal basis for processing ceases to exist or statutory archiving obligations expire.
28. Integration of third-party services and content
28.1. Within our online services, we use content or service offerings from third-party providers based on our legitimate interests (i.e., our interest in the analysis, optimization, and economic operation of our online services within the meaning of Art. 6 para. 1 lit. f GDPR) to integrate their content and services, such as videos or fonts (hereinafter referred to collectively as “Content”). This always requires that the third-party providers of this Content are aware of the users’ IP addresses, as they could not send the Content to their browsers without the IP address. The IP address is therefore necessary for displaying this Content. We strive to use only Content from providers who use the IP address solely for delivering the Content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. These pixel tags allow information such as visitor traffic on the pages of this website to be evaluated. The pseudonymous information can also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online service, as well as be combined with such information from other sources.
28.2. The following overview lists third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases, the opt-out options already mentioned here.
– If our customers use third-party payment services (e.g., PayPal or Sofortüberweisung), the terms and conditions and privacy policies of the respective third-party providers apply. These can be accessed on their respective websites or transaction applications.
– External fonts from Google, LLC., https://www.google.com/fonts (“Google Fonts”). Google Fonts are integrated by making a server request to Google (usually in the USA). Privacy policy: https://policies.google.com/privacy, Opt-out: https://adssettings.google.com/authenticated.
– Maps from the third-party service “Google Maps” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
– Videos from the platform “YouTube” of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
– Our website integrates features of the Google+ service. These features are provided by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged into your Google+ account, you can link the content of our pages to your Google+ profile by clicking the Google+ button. This allows Google to associate your visit to our pages with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Google+. Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
– Our website integrates features of the Instagram service. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Privacy Policy: http://instagram.com/about/legal/privacy/.
– We use social plugins from the social network Pinterest, operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). When you visit a page containing such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s server in the USA. This log data may include your IP address, the address of the websites you visit that also contain Pinterest features, your browser type and settings, the date and time of your request, your use of Pinterest, and cookies. Privacy Policy: https://about.pinterest.com/de/privacy-policy.
– Within our online services, we may integrate functions of the Twitter service or platform (hereinafter referred to as “Twitter”). Twitter is a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. These functions include displaying our Twitter posts within our online services, linking to our Twitter profile, and enabling interaction with Twitter posts and functions. They also allow us to measure whether users access our online services via advertisements we place on Twitter (so-called conversion tracking). Twitter is certified under the Privacy Shield Framework and thus guarantees compliance with European data protection law. (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). : https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.