Data Protection

Name and address of the person responsible for processing

YORXS

Ralf H. Nutt

Dienerstr. 12

80331 Munich

Germany

Telephone: 0800-888 0770

Email: service@yorxs.de

Website: https://yorxs.myshopify.com/

Currentness of data protection information

To ensure that data protection information in connection with the services on our website is always up to date, we use the WEBSITE SCAN of the GDPR service.

We have concluded an order processing contract with the GDPR service in accordance with Art. 28 GDPR. The service is operated by Consultatio owner Kerstin Hofmann, Am Andreasberg 15, 99326 Stadtilm.

Rights of data subjects

The EU General Data Protection Regulation (GDPR) provides extensive rights for data subjects in Chapter III, which we will explain to you below with regard to the processing of your personal data:

Collapsible content

Right to information

This requirement applies in particular to information on the following details of data processing:

  • Purposes of processing
  • Categories of data
  • If applicable. Recipients or categories of recipients
  • If applicable. the planned storage duration or the criteria for determining this duration
  • Note on the respective right to correction, deletion, restriction or objection
  • Existence of the right to lodge a complaint with a supervisory authority
  • If applicable. Origin of the data (if not collected from you)
  • If applicable. Existence of automated decision-making including profiling including meaningful information about the logic involved, the scope and the expected effects
  • If applicable. (planned) transfer to a third country or international organization

Right to rectification

If applicable. We will correct incorrect data sets immediately, provided you inform us of the situation accordingly.

Right to deletion (right to be forgotten)

Provided that processing is no longer necessary and one of the following conditions is met:

  • Loss of processing purpose
  • Withdrawal of your consent and lack of another legal basis for processing
  • Objection to processing without an important reason to the contrary
  • Unlawful processing
  • Necessary to fulfill a legal obligation
  • Data was collected in accordance with Article 8 Para. 1 GDPR

Right to restriction of processing

Provided one of the following requirements is met:

  • You dispute the accuracy of your data (restrictions can occur for the duration of the review on our site)
  • In the event of unlawful processing and if the data is not to be deleted, the deletion will be replaced by a restriction on processing
  • If the processing purposes no longer apply, you will also need your data to assert, exercise or defend legal claims
  • After you have objected in accordance with Article 21 Paragraph 1 of the GDPR and for the duration of the review to determine whether our legitimate reasons outweigh yours.

Right to data portability

If it is technically possible and does not affect the rights and freedoms of other people, we will - at your request - transfer your data to another recipient (person responsible).

Right to object

If we collect or have collected and process personal data from you (on the basis of Art. 6 Para. 1 e or f or Art. 9 Para. 2 a GDPR), you have the right to do so at any time (with effect for the future) to object to data processing (including profiling). In exceptional cases the objection may be ineffective, e.g. B. if we can demonstrate compelling legitimate interests for the processing that outweigh your interests or if the processing serves to assert, exercise or defend legal claims. If we process your personal data to carry out direct advertising, you have the right to object to this processing at any time. This also applies to profiling insofar as it is connected to such direct advertising. You also have the right to object to the processing of your data concerning you, which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, unless such processing is necessary Fulfillment of a task in the public interest is required.

Automated decisions in individual cases including profiling

If we collect or have collected and process personal data from you, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take appropriate measures to protect your rights and freedoms and your legitimate interests, which include at least the right to obtain human intervention on our part, to express one's own point of view and to challenge the decision.

Right to revoke your data protection consent

You have the right to revoke your consent to the processing of personal data at any time.

Right to complain to a supervisory authority

A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or under the following link: https://www.bfdi.bund.de/DE/Service/Kontakt/Kontaktfinder/kontaktfinder_node.html.

General information about data processing on the website

The following information applies to data processing on our website in general. If there are exceptions or additions to this information, these will be described in detail in the respective sections.

Collapsible content

Information about data security

We secure our website and other systems through technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons. We have also implemented SSL encryption (SHA256) on our website to protect your data. Despite regular checks, complete protection against all dangers is not possible.

Legal basis for processing

We process personal data in accordance with the requirements of the GDPR, depending on the type and purpose of processing as follows:

  • Permission: Specification of the GDPR
  • Informed consent: Art. 6 Para. 1 a
  • Performance of a contract: Art. 6 Para. 1 b
  • Implementation of pre-contractual measures: Art. 6 Para. 1 b
  • Fulfillment of legal obligations: Art. 6 Para. 1 c
  • Protection of vital interests: Art. 6 Para. 1 d
  • Safeguarding our legitimate interest: Art. 6 Para. 1 f

Our legitimate interest

Our legitimate interest, as defined in Article 6 Para. 1 f GDPR, is based on carrying out our business activities to maintain our operational capability and secure the employment of our employees.

General data deletion deadlines

Once the storage purpose no longer applies, the retention periods are usually at least six or ten years. In accordance with our deletion concept, data is generally deleted immediately, unless this conflicts with an obligation to retain data, a requirement to fulfill the contract or a legitimate interest.

Deletion or blocking of personal data

We only store your personal data for the period necessary to fulfill the specified purpose. Once the purpose no longer applies and any existing retention periods have expired, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:

Data collected

  • Browser types and versions used
  • operating system used, visitor origin (referrer, e.g. Google), subpages clicked on
  • Date and time of access to the website as well as the visitor's IP address and Internet service provider
  • other data and information to avert danger in the event of attacks

Purpose of the survey

  • correct display of page content
  • Optimization of our website content and our advertising
  • Ensuring the long-term functionality of our IT systems (to operate the website) and preventing misuse
  • Providing relevant information to law enforcement authorities in the event of a cyber attack

Obligation to provide personal data

Under certain conditions (e.g. due to legal or contractual regulations), you are obliged to provide us with your personal data. Examples of such processing are as follows:

Type or purpose of processing

  • Conclusion of a purchase contract (e.g. your address)
  • In the employee context (e.g. transmission of data to the tax office)

need

  • Fulfillment of the contractual obligation (e.g. delivery of the goods to your address
  • Compliance with legal requirements (e.g. tax regulations)

Information about specific data processing on the website

If applicable. Deviating from or in addition to the general information mentioned above, you will find details about the individual data processing on our website below.

Collapsible content

Cookies

We use cookies on this website; These are small data sets that are stored or stored on your computer via your Internet browser (e.g. Google Chrome, Safari, Firefox, Edge). Cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that enables internet pages and servers to be assigned to the storing browser. At the same time, we receive information via cookies that allows us to optimize our website to the needs of our visitors. In some cases, we only use cookies for the duration of your stay on the website. All cookies on our website contain purely technical information, not personal data. It is possible to use our offerings (even if not in full functionality) without cookies. Most browsers are set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you when cookies are being sent.

Hosting the website




























CookieFirst

Our website uses the consent technology (Cookie Consent Management) from Digital Data Solutions BV (CookieFirst), Plantage Middenlaan 42a, 1018DH, Amsterdam, Netherlands.

When you enter our website, a connection is established between your device and CookieFirst's servers to provide your consent and other declarations regarding the use of settings in local storage, session storage, cookies and data transfers to obtain services from third parties. CookieFirst then stores cookies on your device in order to be able to assign the consent you have given or its revocation. The data collected in this way will be stored until you request us to delete it, delete the cookies yourself or the purpose for storing the data no longer applies. Mandatory legal retention obligations remain unaffected.

We use this consent solution to fulfill the legally required consents for the use of cookies. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

We have concluded an order processing agreement with the service provider in accordance with Art. 28 GDPR.

Microsoft Azure

Our website uses Microsoft Azure. This is Azure is a huge collection of servers and network hardware components that run a complex set of distributed applications. These applications orchestrate the configuration and operation of the virtualized hardware and software on these servers. The service provider is Microsoft Ireland Operations Ltd., South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland.

When you visit our website, your IP address will be transmitted to Microsoft if you have consented to this transmission and have not revoked this consent. It cannot be ruled out that your data will also be transferred to the USA and thus to an unsafe third country.

Details on data processing at Microsoft can be found at https://privacy.microsoft.com/de-de .

We have concluded a contract for order processing in accordance with Art. 28 GDPR with Microsoft.

Akamai

We use the “Akamai” service from Akamai Technologies, 150, Broadway, East Cambridge, Cambridge, Middlesex County, Massachusetts, 02142, USA.

Akamai offers a global network for secure, confidential, fast and reliable Internet connections on any device. Technically, the information transfer between the visitor's browser to our website is routed via the Akamai network. This enables Akamai to analyze the data traffic between your device and our website. At the same time, Akamai serves as a filter between our servers and potentially malicious traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users. However, according to Akamai, these are only used for the purposes described above.

The use of Akamai is based on our legitimate interest in providing our website as error-free and securely as possible (Art. 6 Para. 1 lit. f GDPR).

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details about data protection at Akamai can be found here: https://www.akamai.com/legal .

We have concluded a contract with the provider for order processing in accordance with Art. 28 GDPR.

Cloudflare

We use the “Cloudflare” service from Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare offers a global network for secure, confidential, fast and reliable Internet connections on any device. Technically, the information transfer between the visitor's browser to our website is routed via the Cloudflare network. This enables Cloudflare to analyze the data traffic between your device and our website. At the same time, Cloudflare serves as a filter between our servers and potentially malicious traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users. However, according to Cloudflare, these are only used for the purposes described above.

The use of Cloudflare is based on our legitimate interest in providing our website as error-free and securely as possible (Art. 6 Para. 1 lit. f GDPR).

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.cloudflare.com/de-de/cloudflare-customer-scc/ .

Further information about security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/ .

We have concluded a contract with the provider for order processing in accordance with Art. 28 GDPR.

Cloudfront

We use the content delivery network (CDN) Amazon CloudFront from Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg (AWS) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 Para. 1 lit. f GDPR). A CDN is a network of servers distributed worldwide that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in AWS server log files.

AWS is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Article 6 Paragraph 1 Sentence 1 Letter f GDPR not to operate a content delivery network ourselves.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Your personal data will be retained by AWS for as long as necessary for the purposes described. Further information on objection and removal options against AWS can be found at: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

AWS has implemented compliance measures for international data transfers. These apply to all global activities where AWS processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, see: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

We have concluded an order processing contract with the service provider in accordance with Art. 28 GDPR.

Bolt DNS

Our website uses the global DNS service from CloudAccess.net, PO Box 4149, Traverse City, MI 49684, USA.

When you visit our website, your IP address will be transmitted to CloudAccess.net if you have consented to this transmission and have not withdrawn this consent.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Details on data processing can be found at https://www.cloudaccess.net/privacy-policy.html .

We have concluded a contract for order processing in accordance with Art. 28 GDPR with CloudAccess.net.

Google Tag Manager Purpose of processingSimplified administration of the analysis instruments through central control and management of the collected analysis mechanismsLegal basisConsent (Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG)If applicable. Recipient (if passed on)Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, IrelandIf applicable. Intention of forwarding to a third country or international organization (including information about the Commission's adequacy decision or appropriate guarantees) If necessary. Transfer, storage and processing of personal data in the USA.

The data transfer is based on the EU Commission’s standard contractual clauses. Google LLC is certified according to the EU-US Data Privacy Framework (DPF).

If known: Duration of data storage See general deadlines for data deletion Obligation to provide personal data (e.g. due to legal or contractual regulations) / Necessity No consequences in the event of a violation (if the required data is not provided) None if applicable. Existence of automated decision-makingIn this context, we do not use automatic decision-making.If necessary. Origin of the data (if not collected directly from the data subject) As a rule, the data comes from the data subject himself. If necessary, categories of personal data (if not collected directly from the data subject). Which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), visited sub-pages, time spent on the website, frequency of visit, date, access location, time of visitOpt-OutSee also under CookiesData protection officer of the provider https://support.google.com/policies/contact/general_privacy_form Data protection declaration of the provider https://policies.google.com/privacy?hl=en Google Fonts Purpose of processingUniform representation of the fontsLegal basisConsent (Art. 6 Para 1 lit. a GDPR) If applicable. Recipient (if passed on)Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, IrelandIf applicable. Intention of forwarding to a third country or international organization (including information about the Commission's adequacy decision or appropriate guarantees) If necessary. Transfer, storage and processing in the USA.

The data transfer is based on the EU Commission’s standard contractual clauses. Google LLC is certified according to the EU-US Data Privacy Framework (DPF).

If known: Duration of data storage Unknown duration See general deadlines for data deletion Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity No consequences in the event of a violation (if the required data is not provided) none if applicable. Existence of automated decision-makingIn this context, we do not use automatic decision-making.If necessary. Origin of the data (if not collected directly from the data subject) The data usually comes from the data subject, but can also come from third parties. If necessary, categories of personal data (if not collected directly from the data subject). IP address, access time, access date, if applicable . Change of purpose Do not use an opt-out browser that does not support Google Fonts Data protection information of the add-in https://www.google.com/policies/privacy/ Google APIs

On our site we use the Google APIs service from Google LLC, 1600 Amphitheater Parkway, 94043 Mountain View, USA, email: support-de@google.com , website: http://www.google.com/ . We use Google APIS to be able to load additional Google services on the website. Google Apis is a collection of interfaces for communication between the various Google services used on your website. For processing purposes, the service or we collect the following data: IP address.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

The legal basis for the transmission of personal data is your consent in accordance with Article 6 (1) (a) GDPR and Article 9 (2) (a) GDPR, which you have given on our website. You can revoke your consent at any time. Further information on how to revoke your consent can be found either in the consent itself or at the end of this data protection declaration.

Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy .

We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR.

3PLAYMEDIA

Our website uses the software from 3PLAYMEDIA, Inc., 77 N. Washington Street, 2nd Floor, Boston, MA 02114, USA, for subtitling, transcription, live subtitling, audio description and translation.

When you visit our website, your IP address will be transmitted to 3PLAYMEDIA if you have consented to this transmission and have not revoked this consent.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Details on data processing can be found at https://www.3playmedia.com/privacy-policy/ .

This consent technology is used to obtain the legally required consent for the use of cookies and other technologies. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

We have concluded a contract for order processing in accordance with Art. 28 GDPR with 3PLAYMEDIA, Inc.

Brightcove

This website uses plugins from the streaming service Brightcove Inc., 290, Congress Street, Financial District, Downtown Boston, Boston, Suffolk County, Massachusetts, 02210, USA.

When you visit one of our video-equipped sites, a connection is established to Brightcove's servers. This tells the Brightcove server which of our pages you have visited, and this service provider obtains your IP address.

We use Brightcove to present our online offerings in an attractive way. This is our legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR. If we request consent, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

The data transfer to the USA is based on the EU Commission's standard contractual clauses and, according to Brightcove, on “legitimate business interests”. Details about data protection at Brightcove can be found here: https://www.brightcove.com/en/legal/privacy/ .

We have concluded a contract for order processing in accordance with Art. 28 GDPR with Brightcove Inc.

Call page

This website uses the live chat service of CallPage sp. z oo, Komuna Warszawa, 31, Nowogrodzka, Śródmieście Południowe, 00-688, Poland.

When you visit our website, a connection is established to Callpage's servers. A connection is established between the Callpage server and your device, whereby this service provider obtains your IP address.

We use Callpage to record your calls or to quickly return calls to you. This type of efficient processing of your inquiries is our legitimate interest within the meaning of Article 6 (1) (f) GDPR. If we request consent, the processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR; Your consent can be revoked at any time.

We store the communication until we have finally processed your request, unless you request us to delete it beforehand. Mandatory legal provisions (e.g. retention periods) remain unaffected.

Details about data protection at Callpage can be found here: https://www.callpage.io/privacy-policy .

We have a contract for order processing in accordance with Art. 28 GDPR with CallPage sp. zoo closed.

Mix panel

Our website uses the analysis platform of Mixpanel Inc., One Front Street, 1, Front Street, Financial District, San Francisco, California, 94111, USA, to measure data.

When you visit our website, your IP address, device and geodata will be transmitted to Mixpanel if you have consented to this transmission and have not withdrawn this consent.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Details on data processing can be found at https://mixpanel.com/legal/mixpanel-gdpr .

This consent technology is used to obtain the legally required consent for the use of cookies and other technologies. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

We have concluded a contract for order processing in accordance with Art. 28 GDPR with Mixpanel Inc.

Contact by telephone or email

In accordance with legal requirements, you will find our telephone number. If you choose these contact options, we will automatically save data in order to be able to process your inquiries or contact you. We will not pass on this data to third parties without your consent.

If contact is made by telephone or via our email address for pre-contractual or contractual purposes, our processing of personal data is based on the legal basis of Article 6 Paragraph 1 b GDPR. For all other contacts from you, the processing of personal data by us is based on our legitimate interest in accordance with Article 6 (f) GDPR.

Customer account and product order Purpose of processing general data Data type Purpose of collection Salutation, title, first name, last name, street, number, zip code, city, country, date of birth (voluntary) Clear identification of the customer account, processing of the product purchase, delivery, payment transactions, processing of complaintsE-mail -Address, passwordAuthentication, independent reset of the passwordTelephone number (voluntary)Contacting by telephoneLegal basisFulfillment of a contract (Art. 6 Para. 1 lit. b GDPR)If applicable. Recipient (if forwarded) Parcel service provider, logistics service provider, payment service provider, if applicable. Intention of transfer to a third country or international organization (including information about the Commission's adequacy decision or appropriate guarantees) Data transfer to a third country does not take place and is not planned. If known: Duration of data storage See general deadlines for data deletion Obligation to provide personal data Data (e.g. due to legal or contractual regulations) / necessityThe data (in the mandatory fields) must be provided as part of the underlying contract. Consequences of violation (if the required data is not provided) The creation of a customer account is in this case not possible. If necessary. Existence of automated decision-makingIn this context, we do not use automatic decision-making.If necessary. Origin of the data (if not collected directly from the data subject) The data comes from the data subject himself. If necessary, categories of personal data (if not collected directly from the data subject). The data comes from the data subject himself. If necessary. Change of purpose none

Opening hours: 10-18 (Mon-Fri), 10-18 (Sat)

About Us

Customer service

Your Order

magazine

Copyright © 2024 Yorxs - All Rights Reserved

Hosting the website

A so-called hosting service provider is used to operate this website, on whose European servers the content of the website is stored. The hosting partner records certain meta data (including IP addresses of website visitors) in log files for verification purposes and to ensure the security of the systems.

The hosting service provider was carefully selected. All necessary measures have also been taken to ensure data processing that is permitted under data protection law (e.g. the conclusion of an order processing contract).

Our website is hosted at:

A100 ROW GmbH, Marcel-Breuer-Straße 12, 80807 Munich.

When you access our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

These are:

• IP address of the website visitor's device,
• device used,
• Host name of the accessing computer, operating system of the visitor,
• Browser type and version,
• name of the retrieved file,
• time of server request,
• Amount of data and
• Information as to whether the data retrieval was successful.

This data is not merged with other data sources.

The personal data collected on this website is stored on the hosting company's servers. In addition to the data mentioned above, this may include, for example, contact requests, contact details, names, website access data, meta and communication data, contract data and other data that is generated via a website.

The legal basis for processing this data is our legitimate interest (Art. 6 Para. 1 f GDPR) in the technically error-free presentation and optimization of this website. If the website is accessed to enter into contract negotiations with us or to conclude a contract, Art. 6 Para. 1 b GDPR serves as a further legal basis.

We have concluded an order processing agreement with the hosting company in accordance with Art. 28 GDPR.

CookieFirst

Our website uses the consent technology (Cookie Consent Management) from Digital Data Solutions BV (CookieFirst), Plantage Middenlaan 42a, 1018DH, Amsterdam, Netherlands.

When you enter our website, a connection is established between your device and CookieFirst's servers to provide your consent and other declarations regarding the use of settings in local storage, session storage, cookies and data transfers to obtain services from third parties. CookieFirst then stores cookies on your device in order to be able to assign the consent you have given or its revocation. The data collected in this way will be stored until you request us to delete it, delete the cookies yourself or the purpose for storing the data no longer applies. Mandatory legal retention obligations remain unaffected.

We use this consent solution to fulfill the legally required consents for the use of cookies. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

We have concluded an order processing agreement with the service provider in accordance with Art. 28 GDPR.

Microsoft Azure

Our website uses Microsoft Azure. This is Azure is a huge collection of servers and network hardware components that run a complex set of distributed applications. These applications orchestrate the configuration and operation of the virtualized hardware and software on these servers. The service provider is Microsoft Ireland Operations Ltd., South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland.

When you visit our website, your IP address will be transmitted to Microsoft if you have consented to this transmission and have not revoked this consent. It cannot be ruled out that your data will also be transferred to the USA and thus to an unsafe third country.

Details on data processing at Microsoft can be found at https://privacy.microsoft.com/de-de.

We have concluded a contract for order processing in accordance with Art. 28 GDPR with Microsoft.

Akamai

We use the “Akamai” service from Akamai Technologies, 150, Broadway, East Cambridge, Cambridge, Middlesex County, Massachusetts, 02142, USA.

Akamai offers a global network for secure, confidential, fast and reliable Internet connections on any device. Technically, the information transfer between the visitor's browser to our website is routed via the Akamai network. This enables Akamai to analyze the data traffic between your device and our website. At the same time, Akamai serves as a filter between our servers and potentially malicious traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users. However, according to Akamai, these are only used for the purposes described above.

The use of Akamai is based on our legitimate interest in providing our website as error-free and securely as possible (Art. 6 Para. 1 lit. f GDPR).

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details about data protection at Akamai here: https://www.akamai.com/legal . We have concluded a contract with the provider for order processing in accordance with Art. 28 GDPR.

Cloudflare

We use the “Cloudflare” service from Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare offers a global network for secure, confidential, fast and reliable Internet connections on any device. Technically, the information transfer between the visitor's browser to our website is routed via the Cloudflare network. This enables Cloudflare to analyze the data traffic between your device and our website. At the same time, Cloudflare serves as a filter between our servers and potentially malicious traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users. However, according to Cloudflare, these are only used for the purposes described above.

The use of Cloudflare is based on our legitimate interest in providing our website as error-free and securely as possible (Art. 6 Para. 1 lit. f GDPR).

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.cloudflare.com/de-de/cloudflare-customer-scc/.

Further information on the subject of security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/ . We have concluded a contract with the provider for order processing in accordance with Art. 28 GDPR.

Cloudfront

We use the content delivery network (CDN) Amazon CloudFront from Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg (AWS) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 Para. 1 lit. f GDPR). A CDN is a network of servers distributed worldwide that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in AWS server log files.

AWS is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Article 6 Paragraph 1 Sentence 1 Letter f GDPR not to operate a content delivery network ourselves.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Your personal data will be retained by AWS for as long as necessary for the purposes described. Further information on objection and removal options against AWS can be found at: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

AWS has implemented compliance measures for international data transfers. These apply to all global activities where AWS processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, see: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf

We have concluded an order processing contract with the service provider in accordance with Art. 28 GDPR.

Bolt DNS

Our website uses the global DNS service of CloudAccess.net, PO Box 4149, Traverse City, MI 49684, USA.

When you visit our website, your IP address will be transmitted to CloudAccess.net if you have consented to this transmission and have not withdrawn this consent.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Details on data processing can be found at https://www.cloudaccess.net/privacy-policy.html.

We have concluded a contract for order processing in accordance with Art. 28 GDPR with CloudAccess.net.

Google Tag Manager

  • Purpose of processing: Uniform display of fonts
  • Legal basis: Consent (Art. 6 Para. 1 lit. a GDPR)
  • If applicable. Recipient (if passed on): Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland
  • If applicable. Intention of transfer to a third country or international organization (including information about the Commission's adequacy decision or appropriate guarantees): 1. If applicable. Transfer, storage and processing in the USA. 2. The data transfer is based on the EU Commission's standard contractual clauses. Google LLC is certified according to the EU-US Data Privacy Framework (DPF).
  • If known: Duration of data storage: 1. Unknown period of time 2. See general data deletion periods
  • Obligation to provide personal data (e.g. due to legal or contractual regulations) / Necessity: none
  • Consequences for non-compliance (if the required data is not provided): none
  • If applicable. Existence of automated decision-making: In this context, we do not use automatic decision-making.
  • If applicable. Origin of the data (if not collected directly from the data subject): The data usually comes from the data subject, but can also come from third parties.
  • Categories of personal data, if applicable (if not collected directly from the data subject). : IP address, access time, access date
  • If applicable. Change of purpose: none
  • Opt-Out: Use a browser that does not support Google Fonts
  • Data protection information of the addin: https://www.google.com/policies/privacy/

Google APIs

On our site we use the Google APIs service from Google LLC, 1600 Amphitheater Parkway, 94043 Mountain View, USA, email: support-de@google.com , website: http://www.google.com/ . We use Google APIS to be able to load additional Google services on the website. Google Apis is a collection of interfaces for communication between the various Google services used on your website. For processing purposes, the service or we collect the following data: IP address.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

The legal basis for the transmission of personal data is your consent in accordance with Article 6 (1) (a) GDPR and Article 9 (2) (a) GDPR, which you have given on our website. You can revoke your consent at any time. Further information on how to revoke your consent can be found either in the consent itself or at the end of this data protection declaration.

Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy.

We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR.

3PLAYMEDIA

Our website uses the software from 3PLAYMEDIA, Inc., 77 N. Washington Street, 2nd Floor, Boston, MA 02114, USA, for subtitling, transcription, live subtitling, audio description and translation.

When you visit our website, your IP address will be transmitted to 3PLAYMEDIA if you have consented to this transmission and have not revoked this consent.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Details on data processing can be found at https://www.3playmedia.com/privacy-policy/.

This consent technology is used to obtain the legally required consent for the use of cookies and other technologies. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

We have concluded a contract for order processing in accordance with Art. 28 GDPR with 3PLAYMEDIA, Inc.

Brightcove

This website uses plugins from the streaming service Brightcove Inc., 290, Congress Street, Financial District, Downtown Boston, Boston, Suffolk County, Massachusetts, 02210, USA.

When you visit one of our video-equipped sites, a connection is established to Brightcove's servers. This tells the Brightcove server which of our pages you have visited, and this service provider obtains your IP address.

We use Brightcove to present our online offerings in an attractive way. This is our legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR. If we request consent, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

The data transfer to the USA is based on the EU Commission's standard contractual clauses and, according to Brightcove, on “legitimate business interests”. Details about data protection at Brightcove can be found here: https://www.brightcove.com/en/legal/privacy/.

We have concluded a contract for order processing in accordance with Art. 28 GDPR with Brightcove Inc.

Call page

This website uses the live chat service of CallPage sp. z oo, Komuna Warszawa, 31, Nowogrodzka, Śródmieście Południowe, 00-688, Poland.

When you visit our website, a connection is established to Callpage's servers. A connection is established between the Callpage server and your device, whereby this service provider obtains your IP address.

We use Callpage to record your calls or to quickly return calls to you. This type of efficient processing of your inquiries is our legitimate interest within the meaning of Article 6 (1) (f) GDPR. If we request consent, the processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR; Your consent can be revoked at any time.

We store the communication until we have finally processed your request, unless you request us to delete it beforehand. Mandatory legal provisions (e.g. retention periods) remain unaffected.

Details about data protection at Callpage can be found here: https://www.callpage.io/privacy-policy.

We have a contract for order processing in accordance with Art. 28 GDPR with CallPage sp. zoo closed.

Mix panel

Our website uses the analysis platform of Mixpanel Inc., One Front Street, 1, Front Street, Financial District, San Francisco, California, 94111, USA, to measure data.

When you visit our website, your IP address, device and geodata will be transmitted to Mixpanel if you have consented to this transmission and have not withdrawn this consent.

Your data will also be processed in a third country for which there is no adequacy decision from the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, for example, may have access to the data collected.

Details on data processing can be found at https://mixpanel.com/legal/mixpanel-gdpr.

This consent technology is used to obtain the legally required consent for the use of cookies and other technologies. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

We have concluded a contract for order processing in accordance with Art. 28 GDPR with Mixpanel Inc.

Contact by telephone or email

In accordance with legal requirements, you will find our telephone number. If you choose these contact options, we will automatically save data in order to be able to process your inquiries or contact you. We will not pass on this data to third parties without your consent.

If contact is made by telephone or via our email address for pre-contractual or contractual purposes, our processing of personal data is based on the legal basis of Article 6 Paragraph 1 b GDPR. For all other contacts from you, the processing of personal data by us is based on our legitimate interest in accordance with Article 6 (f) GDPR.

Contact by telephone

  • Purpose of processing general data:
    Data type
    - Salutation, title, first name, last name, street, number, zip code, city, country, date of birth (voluntary)
    - Purpose of the survey
    - Email address, password
    - Phone number (optional)

    Purpose of the survey
    - Clear identification of the customer account, processing of product purchases, delivery, payment transactions, processing of complaints
    - Authentication, independent password reset
    - Contact by telephone

  • Legal basis: Fulfillment of a contract (Art. 6 Para. 1 lit. b GDPR)

  • If applicable. Recipient (if passed on): parcel service provider, logistics service provider, payment service provider if applicable. Intention of forwarding to a third country or international organization (including information about

  • If applicable. Intention of transfer to a third country or international organization (including information about the Commission's adequacy decision or appropriate guarantees): Data transfer to a third country does not take place and is not planned.

  • If known: Duration of data storage: See general data deletion periods

  • Obligation to provide personal data (e.g. due to legal or contractual regulations) / Necessity: The data (in the mandatory fields) must be provided as part of the underlying contract.
  • Consequences of violation (if the required data is not provided): In this case, it is not possible to create a customer account.

  • If applicable. Existence of automated decision-making: In this context, we do not use automatic decision-making.

  • If applicable. Origin of the data (if not collected directly from the data subject): The data comes from the data subject themselves.

  • If applicable, categories of personal data (if not collected directly from the data subject): The data comes from the data subject themselves.

  • If applicable. Change of purpose: none