Privacy and data protection

Last updated on 5th May 2020

1. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens. Please note that data transmitted via the internet (e.g. via e-mail communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Information regarding the party responsible for this website

The party responsible for processing data on this website is:
DICTUM GmbH
Gottlieb-Daimler-Str. 3
94447 Plattling
Germany
Telephone: +49 (0)9931 4058-100
E-Mail: privacy@dictum.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, e-mail addresses, etc.).

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection by the »https://« at the beginning of your browser's address line and the lock icon displayed within your browser's address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Encrypted payments on this website

If you enter into a contract which requires you to send us your payment information (e.g. account number for direct debits), this is because we need this data to process your payment. Payment transactions using common means of payment (Visa/MasterCard/American Express, direct debit) are only made via encrypted SSL or TLS connections. You can recognise an encrypted connection by the »https://« at the beginning of your browser's address line and the lock icon in your browser’s address bar. In the case of encrypted communication, none of the payment details you submit to us can be read by third parties.

Objection to promotional e-mails

We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements for sending promotional and informational materials not expressly requested. The website operators reserve the right to take specific legal action if unsolicited advertising material, such as e-mail spam, is received.

2. Data protection officer

Statutory data protection officer

Wir haben für unser Unternehmen einen Datenschutzbeauftragten bestellt.
E-Mail: privacy@dictum.com

3. Data collection on our website

Cookies

Some of our web pages use cookies. Cookies help make our website more user-friendly and enable its functionality. Cookies are small text files that are stored on your computer and saved by your browser. Some of the cookies we use are »session cookies«. They are automatically deleted after your visit. Other cookies (»persistent cookies«) remain on your device and enable us to recognise your browser on your next visit. If cookies are activated, they collect and process certain user information on an individual basis, such as browser and location data, as well as the IP address. »Persistent cookies« are automatically deleted after a specified period of time, which may vary depending on the cookie. You can see the storage duration of the respective cookie in the overview of the cookie settings of your web browser.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, processing is carried out pursuant to Art. 6 (1) (b) GDPR, either for the execution of the contract, pursuant to Art. 6 (1) (a) GDPR in the case of a granted consent, or pursuant to Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective site visit.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Every browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=en&amp%3Bhlrm=en
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/12.0/mac/10.14
Opera: https://help.opera.com/en/latest/web-preferences/

Disabling cookies may limit the functionality of this website.

Data collection when visiting our website

When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (known as »server log files«). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the site
  • Browser type and browser version
  • Operating system used
  • IP address

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our justified interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

Contact form

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
We will, therefore, only process any data you enter onto the contact form with your consent per Art. 6 (1) (a) GDPR and our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. You may revoke your consent at any time. An informal e-mail making this request is sufficient. The legality of the data processing operations carried out up to the time of revocation shall remain unaffected by the revocation.
If the purpose of your contact with us is the conclusion of a contract, this additional legal basis for data processing is covered by Art. 6 (1) (b) GDPR. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

»Item back in stock« form

This function is available to website visitors if an item is currently unavailable and so cannot be ordered. In this case, you can opt to receive an e-mail notifying you when the item is back in stock and available to order. To fulfil this request, we store the e-mail address you provide. We will not pass this on without your consent.
We use the »double opt-in procedure« to send this notification. This means that we will not send you any such notification until you have expressly confirmed to us that you agree to receive such a message. We will then send you a confirmation email asking you to confirm that you wish to receive such a notification by clicking on the appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) (a) GDPR. You may revoke this consent at any time. An informal e-mail making this request is sufficient. The legality of the data processing operations carried out up to the time of revocation shall remain unaffected by the revocation.

The data you provide in the »Item back in stock« form will remain with us until you ask us to delete it, or withdraw your consent to its storage, or the data is no longer needed for the purpose for which it was stored. This does not affect mandatory legal requirements – in particular retention periods.

Registration on this website

You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration. To inform you about important changes such as those regarding the scope of our site or technical changes, we will use the e-mail address specified during registration.
We will only process the data provided during registration based on your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time. An informal e-mail making this request is sufficient. The legality of the data processing operations carried out up to the time of revocation shall remain unaffected by the revocation.
We will continue to store the data collected during registration for as long as you remain registered on our website and then delete them. Statutory retention periods remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only insofar as it is necessary to establish or modify legal relationships with us (master data). This is performed according to Art. 6 (1) (b) GDPR, which allows the processing of data to fulfil a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same. Furthermore, your data will be used for the purposes of advertising and market research by the responsible body.
Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transmitted for order processing

To process your order, we cooperate with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract process insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the assigned credit institute as part of the payment process if this is necessary to process the payment. If payment service providers are used, we shall inform you explicitly about this. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.
In order to fulfil our contractual obligations towards our customers, we work together with external shipping partners. We will pass on your name as well as your delivery address and, if necessary for the delivery, your telephone number, exclusively for the purpose of delivering the goods Art. 6 (1) (b) GDPR to a shipping partner selected by us.

Use of special service providers for order processing and order handling on platforms

Order processing is performed by the service provider »magnalister« (RedGecko GmbH, Paul-Lincke-Ufer 20-22, 10999 Berlin, Germany). Name, address and, if applicable, other personal data are passed on to magnalister in accordance with Art. 6 (1) (b) GDPR exclusively for processing the online order. Your data will only be passed on as far as this is actually necessary for the processing of the order. Details on privacy at magnalister and its data protection declaration can be viewed on the magnalister website https://www.magnalister.com/en/privacy/.

4. Analytics and advertising

Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies. These are text files that are stored on your computer and make it possible to analyse how you use the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA.
Google Analytics cookies are stored on your computer based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics. For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic data collection by Google Analytics

This website uses Google Analytics' demographic features function. This allows reports to be generated containing information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section »Refusal of data collection«.

Google Analytics Remarketing

Our website uses the functions of Google Ads Remarketing, with which we advertise this website in Google search results and on third party websites. This service is provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (»Google«). For this purpose, Google stores a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. This processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) (F) GDPR.
Any further processing of data will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalise ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google to Google Analytics data in order to form target groups. In the course of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA. You can permanently opt out of the storage of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can inform yourself about the storage of cookies and adjust the settings at the Digital Advertising Alliance on www.aboutads.info. Finally, you can set up your browser so that you are informed about the storage of cookies and can decide individually whether to accept them or to reject the use of cookies for certain cases or generally. If cookies are not accepted, the functionality of our website may be limited. In the event that personal data is transferred to Google LLC. with headquarters in the USA, Google LLC. has been certified for the US-European “Privacy Shield« data protection agreement, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

Further information and the privacy policy regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/

Google AdWords and Google Conversion Tracking

This website uses the online advertising program »Google Ads« and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (»Google«). We use the services of Google Ads to draw attention to our attractive offers with the help of advertising material (»Google AdWords«) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

When you click on an ad served by Google, a conversion tracking cookie is activated. Cookies are small text files that your internet browser stores on your computer. These cookies usually expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page. Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the Ad-Words advertisers who have opted for conversion tracking. The advertisers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings under the keyword »User Settings«. In doing so, you will not be included in the conversion tracking statistics. We use Google Ads because of our legitimate interest in targeted advertising in accordance with Art. 6 (1) (f) GDPR. In the course of using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.
In the event that personal data is transferred to Google LLC. with headquarters in the USA, Google LLC. has been certified for the US-European »Privacy Shield« data protection agreement, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
You can find more information about Google's privacy policy at the following web address: https://www.google.de/policies/privacy/
If you do not want to participate in tracking, you can opt out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings or by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may not be available or may only be used to a limited extent if you have deactivated the use of cookies.
Conversion cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and its advertising.

Google Tag Manager

Google Tag Manager is a solution that allows you to manage web site tags through a web interface. The Tag Manager itself (which implements the tags) does not process any personal data of the users. With regard to the processing of users' personal data, reference is made to the following information on the Google services. Use Policy: https://www.google.com/intl/de/tagmanager/use-policy.html.

Bing Universal Event Tracking (UET)

This website uses Universal Event Tracking of the conversion tracking technology »Bing Ads« from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA).
To use Universal Event Tracking, a tag is placed on each page of our website that interacts with the conversion cookie activated by Microsoft Bing Ads. This interaction allows us to track user behaviour on our site and send the information collected to Microsoft Bing Ads. The purpose of this is to enable certain predefined targets, such as purchases or leads, to be statistically recorded and evaluated in order to make the orientation and content of our offers more in line with your interests. At no time do these tags collect information about your identity.
Insofar as the transmission of information on user behaviour to Microsoft Bing Ads includes personal user data, this is performed in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical evaluation of the success of product ads in Microsoft Bing Ads and the purchasing behaviour of users, and thus serves to optimise our online offering.
Microsoft Corporation, headquartered in the USA, is certified for the US-European »Privacy Shield« data protection agreement, which guarantees compliance with the level of data protection applicable in the EU.
If you do not want to participate in tracking, you can opt out of this by easily disabling the Bing Ads Conversion Tracking cookie by changing your browser settings under the keyword »User Settings«. If you do so, you will not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for EU consumers http://www.youronlinechoices.com/de/praferenzmanagement/ to check whether advertising cookies from Microsoft are activated in your browser and to deactivate them.
For more information about the Microsoft Bing Ads privacy policy, visit the following Web address: https://privacy.microsoft.com/en-gb/privacystatement

Pingdom

This website uses the Pingdom monitoring service, which is operated by Pingdom AB, Kopparbergsvägen 8, 722 13, Västerås, Sweden. Pingdom uses cookies, which are small text files that are stored locally in the cache of the site visitor's browser. These cookies are used to recognise the browser and thus enable an analysis of your access, as well as the behaviour (»performance«) and availability of our website, in order to improve the behaviour and the presentation of the contents on the website.

Insofar as personal data is also processed by the cookies, this is performed in accordance with Art. 6 (1) (f) GDPR on the basis of our justified interest in the continuous optimisation of the content and technology of our online presence.

In order to generally deactivate the use of cookies on your computer, you can set your browser so that no more cookies can be stored on your computer in the future or that already stored cookies are deleted. However, switching off all cookies may mean that some functions on our web pages can no longer be executed. You can find Pingdom's privacy policy at https://www.pingdom.com/legal/privacy-policy/.

5. Advertising / Newsletter

Newsletter data

If you would like to receive the newsletter offered on our website, we need an e-mail address from you as well as information that enables us to check that you are the owner of the e-mail address provided and agree to receive the newsletter. No further data is collected unless it is provided on a voluntary basis. We only use this data for the purpose of sending out the requested information. This is performed by a certified newsletter-distribution provider. We do not pass on your data to any other third parties.
We will, therefore, only process any data you enter onto the contact form with your consent per Art. 6 (1) (a) GDPR. You can revoke consent to the storage of your data and e-mail address, as well as their use for sending the newsletter at any time, e.g. through the »unsubscribe« link in the newsletter. The data processed before we receive your request may still be legally processed.
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when these data will be deleted. Any data that we have stored for other purposes (e.g. e-mail addresses for the members area) remain unaffected.

Advertising by post

On the basis of our justified interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of a contractual relationship – your title, academic degree, year of birth and your professional, industry or business name in accordance with Art.6 (1) (f) GDPR and to use this information to send you interesting offers and information on our products by post.
You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible.

6. Plugins and tools

YouTube

This website uses the YouTube embedding feature to display and play videos from the provider »YouTube«, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (»Google«).
This uses the extended data protection mode, which – according to the provider's information – only starts storing user information when the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider »YouTube« uses cookies to collect information about user behaviour. According to information from »YouTube«, this information is used, among other things, to collect video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your information is associated directly with your account when you click on a video. If you do not want to be associated with your profile on YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of Google's justified interests in the insertion of personalised advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. In the course of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Regardless of any playback of the embedded videos, each time this website is accessed, a connection to the Google network is established, which may trigger further data processing operations without our influence. In the event that personal data is transferred to Google LLC. with headquarters in the USA, Google LLC. has been certified for the US-European »Privacy Shield« data protection agreement, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
For more information on data protection at »YouTube«, please refer to the provider's privacy policy at: https://www.google.de/intl/en/policies/privacy
YouTube is used to help make our website appealing. This constitutes a justified interest in accordance with Art. 6 (1) (f) GDPR.

Google Maps

This site uses the Google Maps map service via an API. It is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (»Google«). Google Maps is a web service for the display of interactive maps to visually present geographical information. By using this service, our location will be displayed to you and this will facilitate any potential journey to our premises.
From the moment you call up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers. This may also result in transmission to the servers of Google LLC. in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your information is directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. In accordance with Art. 6 (1) (f) GDPR, the collection, storage and evaluation are based on the legitimate interest of Google in the insertion of personalised advertising, market research and/or the needs-based design of Google websites. You have a right to object to the creation of these user profiles, and you must contact Google in order to exercise this right.
In the event that personal data is transferred to Google LLC. with headquarters in the USA, Google LLC. has been certified for the US-European »Privacy Shield« data protection agreement, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, it is also possible to completely deactivate the web service of Google Maps by switching off the application JavaScript in your browser. Google Maps and thus the map display on this website cannot then be used.
You can view Google's terms of use at https://www.google.de/intl/en/policies/terms/regional.html, while the additional terms of use for Google Maps can be found at https://www.google.com/intl/en_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (»Google Privacy Policy«): https://www.google.de/intl/en/policies/privacy/

7. Payment service providers

PayPal

In the case of payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – »purchase on account« or »payment by instalments« via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter »PayPal«) as part of the payment process. The data you provide will be supplied to PayPal based on Art. 6 (1) (a) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods »credit card via Pay-Pal«, »direct debit via PayPal« or – if offered – »purchase on account« or »payment by instalments« via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit assessment with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (»score values«). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including the credit agencies used, please refer to Pay-Pal's privacy policy:
https://www.paypal.com/us/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.

ConCardis

On our website we also offer the option to pay by credit card. The provider of this payment service is ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn, Germany (hereinafter referred to as »ConCardis«), to whom we pass on the information you provide during the ordering process together with the information about your order in accordance with Art. 6 (1) (b) GDPR. Your data will be passed on exclusively for the purpose of payment processing with the payment service provider ConCardis and only to the extent necessary for this purpose. You can obtain further information on ConCardis' data protection provisions at the following Internet address: https://www.concardis.com/de-en/protecting-your-data.

SOFORT transfer

If you select the payment method »SOFORT«, the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter »SOFORT«), to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 (1) (b) GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. The following website provides further information about the data protection regulations of SOFORT: https://www.klarna.com/sofort/datenschutz.

8. Application for job vacancies by e-mail

On our website we advertise currently vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.
In order to be included in the application process, applicants must provide us in their application by e-mail with all personal data required for a thorough and informed assessment and selection.
The information required includes general personal information (name, address, telephone or electronic contact details) and evidence of the qualifications required for the job. Where appropriate, it may also be necessary to include health-related information which, in the interests of social protection, must be given special consideration with respect to the applicant under labour and social law.
The elements which an individual application must contain for it to be considered and in what form these elements are to be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent to the e-mail contact address provided, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For any queries arising in the course of processing, we will use at our discretion either the e-mail address provided by the applicant with his or her application or a telephone number provided.
The legal basis for these processing operations, including contact for further inquiries, is in principle Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG, according to which the completion of the application procedure is considered to be the initiation of an employment contract. Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on the status of severely disabled persons) are requested from applicants in the course of the application procedure, processing is carried out in accordance with Art. 9 (2) (b) GDPR so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this respect.
Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9 (1) (h) GDPR if it is carried out for the purposes of health care or for assessing the applicant's ability to work. If, in the course of the evaluation described above, the applicant is not selected or withdraws his or her application prematurely, his or her data transmitted by e-mail and all electronic correspondence, including the original application e-mail, will be deleted after 6 months at the latest following notification. This period is based on our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to comply with our obligations to provide evidence under the regulations on the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 (1) (b) GDPR in conjunction with § 26 para. 1 BDSG for the purposes of the employment relationship.

9. Rights of the data subject

The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the person responsible for processing your personal data, about which we inform you below:

Right to information in accordance with Art. 15 GDPR: In particular, you have the right to be informed about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees provided under Art. 46 GDPR when your data is transferred to third countries;
Right to rectification under Art. 16 GDPR: You have a right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored with us;
Right to erasure in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
Right to restrict processing in accordance with Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data which you dispute is checked, if you refuse to have your data deleted due to unlawful data processing and demand instead the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims, after we no longer require these data after the purpose has been achieved, or if you have lodged an objection for reasons of your particular situation, as long as it has not yet been established whether our justified reasons outweigh the objection;
Right to information in accordance with Art. 19 GDPR: If you have asserted the right to rectify, erase or limit the processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data transferability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible;
Right to revoke consents granted under Art. 7 (3) GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation;
Right of appeal under Art. 77 GDPR: If you believe that the processing of personal data relating to you is in breach of GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work is located or the place where the alleged breach occurs.

RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10. Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective legal retention period (e.g. retention periods under commercial and tax law).
When personal data are processed on the basis of an express consent in accordance with Art. 6 (1) (a) GDPR, these data are stored until the person concerned revokes his or her consent.
If there are legal retention periods for data which are processed within the framework of legal or similar obligations based on Art. 6 (1) (b) GDPR, these data are routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfilment or initiation of a contract and/or we have no justified interest in their further storage.
When personal data are processed on the basis of Art. 6 (1) (f) GDPR, these data are stored until the person concerned exercises his or her right to object in accordance with Art. 21 (1) GDPR, unless we can prove compelling reasons for processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.
When personal data are processed for the purpose of direct advertising on the basis of Art. 6 (1) (f) GDPR, these data are stored until the person concerned exercises his or her right of objection under Art. 21 (2) GDPR.
Moreover, unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.