1) Introduction and contact details of the responsible party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is SuperCharged Europe Limited, Bessie-Coleman-Str. 13, Suite 33, 60549 Frankfurt am Main, Germany, Email: hello@ivybears.de. Der The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 This website uses cookies for security reasons and to protect the transmission of personal data and other confidential content (z.BOrders or inquiries to the data controller are transmitted using SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the padlock icon in your browser's address bar.

2) Data collection when visiting our website

When you simply browse our website for informational purposes, i.e., without registering or otherwise providing us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

1. The website we visited

2. Date and time of access

3. Amount of data sent in bytes

4. Source/referral from which you accessed this page

5. Browser used

6. Operating system used

7. IP address used (possibly in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

3) Hosting & Content Delivery Network

- Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying our online shop, based on data processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event of data transfer to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection practices can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify will only take place within the scope outlined below.

4) Cookies

To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow us to save your website settings (so-called "persistent cookies"). In the latter case, you can find information about the storage duration in your web browser's cookie settings.
If any of the cookies we use process personal data, this processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.
You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them individually, or to exclude the acceptance of cookies in certain cases or entirely.
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Making contact

5.1 Review reminder by Loox
If you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR during or after your order, we will transmit your email address and, if applicable, other previously collected customer data to the review tool Loox, a service of Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel ("Loox"), so that it can send you a review reminder by email. You can revoke your consent at any time by sending a message to the data controller or to the review platform.
For the transfer of data to Loox in Israel, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
We have concluded a data processing agreement with Loox, obligating Loox to protect our customers' data and not to disclose it to third parties. This agreement can be viewed here: https://loox.io/legal/data_processing_addendum.pdf
You can find more information about Loox's data protection policy at [link to Loox privacy policy]. https://loox.io/legal/privacy_policy_merchants.pdf

5.2 When contacting us (z.BWhen you contact us (via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.

6) Use of customer data for direct marketing

6.1 Subscribe to our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send you the newsletter is your email address. Providing any further information is voluntary and is used to personalize our communications with you. We use the so-called [service name] for sending the newsletter.Double opt-in procedure, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. We store your IP address, which is registered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller named above. After you unsubscribe, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this privacy policy.

6.2 Sending the email newsletter to existing customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our product range via email. According to Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. The data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6 Paragraph 1 Letter f of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the data controller named at the beginning of this document. You will only incur transmission costs according to the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

6.3 - Newsletter distribution via Klaviyo
Our email newsletters are sent via the technical service provider »Klaviyo«, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we forward the data you provided when subscribing to our newsletter. This transfer is carried out in accordance with Article 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to and stored on a Klaviyo server in the USA.
Klaviyo uses this information to send newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them directly or to share it with third parties.
To protect your data in the USA, we have entered into a data processing agreement with Klaviyo, in which Klaviyo commits to protecting our users' data, processing it on our behalf in accordance with its data protection regulations, and in particular not passing it on to third parties.
You can view Klaviyo's privacy policy here: https://www.klaviyo.com/legal/privacy

6.4 If you cancel your purchase with us before completing your order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart.
The only mandatory information required to send you this reminder is your email address. Providing further information is voluntary and may be used to personalize our communications with you. We use a double opt-in procedure for sending emails, which ensures that you only receive a notification after you have explicitly confirmed your consent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR for sending you shopping cart reminders. We store your IP address, registered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you register for our email notification service is used strictly for this purpose. You can unsubscribe from shopping cart reminders at any time by sending a message to the data controller named above. After you unsubscribe, your email address will be immediately deleted from our mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this statement.

7) Data processing for order processing

7.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the ordering process (name, address, email address) in order to personally inform you about upcoming updates within the legally prescribed period, in accordance with our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR, via a suitable communication channel (e.g., by post or email). Your contact details will be used strictly for the purpose of notifying you about updates we owe you and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in fulfilling concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.2 Transfer of personal data to shipping service providers

- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will forward your email address to DHL before delivery in accordance with Article 6 Paragraph 1 Letter a of the GDPR for the purpose of coordinating a delivery date or providing delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b of the GDPR, we will only forward the recipient's name and delivery address to DHL. This data is only shared to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent can be withdrawn at any time with effect for the future by contacting the controller named above or the transport service provider DHL.

7.3 Use of payment service providers (payment services)

- Klarna
When selecting a Klarna payment service, payment processing is handled by Klarna Bank AB (publ), https://www.klarna.com/de/Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To process your payment, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number and IP address, and, if applicable, your date of birth and bank details) as well as data related to your order (e.g., invoice amount, items, delivery method) will be forwarded to Klarna for identity and credit checks, provided you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a GDPR during the ordering process. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the factors, but not the only one, used in calculating the score values. Klarna uses the information obtained about the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.
Your personal data will be processed in accordance with applicable data protection regulations and as described in Klarna's privacy policy for data subjects residing in Germany. https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for those affected who are based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.
- Mollie
If you choose a payment method offered by the payment service provider Mollie, the payment processing will be handled by the payment service provider Mollie. B.VWe will transfer the information you provided during the ordering process, along with information about your order (name, address, IBAN, BIC, invoice amount, currency, and transaction number), to [Company Name], Keizersgracht 313, 1016 EE Amsterdam, Netherlands, in accordance with Article 6(1)(b) GDPR. Your data will be transferred solely for the purpose of payment processing with the payment service provider Mollie and only to the extent necessary for this purpose.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we will transmit your payment data to PayPal (Europe) as part of the payment processing. S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be processed in accordance with Art. 6 para. 1 lit.Pursuant to Article 6(1)(f) of the GDPR, PayPal may share your information with credit agencies based on its legitimate interest in assessing your creditworthiness. PayPal uses the result of the credit check, specifically the statistical probability of payment default, to decide whether to offer you a particular payment method. The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the information used to calculate the score values, but is not the only factor. For further information regarding data protection, including the credit agencies used, please refer to PayPal's Privacy Statement. https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

8) Online Marketing

8.1 Facebook Pixel for creating Custom Audiences with advanced data matching (with cookie consent tool)
Within our online service, the so-called "Facebook pixel" of the social network Facebook is used in the mode of extended data matching, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
Based on the user's explicit consent, when a user clicks on an advertisement we have placed on Facebook, the Facebook Pixel adds a parameter to the URL of our linked page. This URL parameter is then stored in the user's browser via a cookie set by our linked page itself. This cookie also collects specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during processes like purchases, account logins, or registrations (extended matching). The Facebook Pixel then reads this cookie and transmits the data, including the specific customer data, to Facebook.
With the help of the Facebook pixel and advanced matching, Facebook can precisely identify visitors to our website as a target audience for displaying advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel with advanced matching to ensure that the Facebook ads we place are only shown to Facebook users who have demonstrated an interest in our website or who possess certain characteristics (z.BWe transmit to Facebook (so-called "Custom Audiences") information about users' interests in specific topics or products, determined based on the websites they visit. Using the Facebook Pixel with Advanced Matching, we also want to ensure that our Facebook ads correspond to users' potential interests and are not perceived as intrusive. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of the Facebook Pixel, the Advanced Matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook uses the data for its own advertising purposes, in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/) can use the data. This data can enable Facebook and its partners to display advertisements on and off Facebook.
These processing operations are carried out exclusively with the express consent given in accordance with Art. 6 para. 1 lit. a GDPR.
The information generated by Facebook is generally transmitted to and stored on a Facebook server. This may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

8.2 - Google Ads conversion tracking
This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to advertise our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from these advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to ensure a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on a Google ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different Google Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users.
When using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA.
Details about the processing triggered by Google Ads Conversion Tracking and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
To target advertising more effectively to users whose data we have obtained through business or similar relationships, we use a customer matching feature within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and phone numbers) to Google. Google does not gain access to unencrypted data; instead, it automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then only use the encrypted information to associate it with existing Google accounts that the individuals have created. This enables the delivery of personalized advertising across all Google services linked to the respective Google account.
Customer data is only transferred to Google if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures regarding the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

9) Web analytics services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies,” which are text files placed on your device to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct identification of individuals. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server. LLC.in The information is transferred to the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics, through a special feature called "demographics," also allows for the creation of statistics with information about the age, gender, and interests of website visitors, based on an analysis of interest-based advertising and the use of third-party information. This enables the definition and differentiation of website user groups for the purpose of targeting marketing measures more effectively.However, data sets collected via "demographic characteristics" cannot be assigned to any specific person.
Details about the processing initiated by Google Analytics and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on your device, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

10) Retargeting/ Remarketing/ Referral Advertising

Pinterest retargeting pixel
This website uses a pixel (Pinterest tag) from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest")). This pixel allows information about the browsing behavior of website visitors to be collected, stored, and analyzed in pseudonymized form. This information can be linked to the individual user using other information provided by Pinterest. z.BThis information can be associated with the user's account on the social network "Pinterest." Pinterest uses an algorithm to analyze browsing behavior and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest can also combine the information collected via the pixel with other information that Pinterest has collected from other websites and/or in connection with the use of the social network "Pinterest," thus creating pseudonymized user profiles. Under no circumstances, however, can the collected information be used to personally identify visitors to this website.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

Pinterest tag conversion tracking
This website uses the conversion tracking technology “Pinterest Tag” from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”).
If you accessed our website via a Pinterest pin, we will place a cookie on your computer that interacts with a Pinterest "tag" (a JavaScript code) that is also implemented on our site. Cookies are small text files that are stored on your device. These cookies expire after 180 days and are not used for personal identification.
If a user is redirected from a pin on Pinterest to pages of this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (z.B(e.g., completed transactions, leads, website searches, product page views). When such an action is performed, your browser sends an HTTP request from the cookie to Pinterest's server via the Pinterest tag, containing certain information about the action (u.a. Type of action, time, browser type of the end device) will be transmitted.
This transmission allows Pinterest to create statistics about user behavior on our website after being redirected from a Pinterest Pin, which we use to optimize our offering.
However, we do not receive any information that could personally identify users.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

Snap Pixel (Snapchat)
This website uses the “Snapchat Pixel”, a tracking technology of the social network Snapchat of Snap Inc., 63 Market Street, Venice, CA 90291, USA (“Snapchat”).
If you arrived at our website via a Snapchat advertisement, we will place a cookie on your computer that interacts with a JavaScript code also implemented by Snapchat. Cookies are small text files that are stored on your device.
If a user is redirected from an ad on Snapchat to pages of this website, the pixel records certain user actions predefined by us and can track them (z.B(e.g., completed transactions, leads, website searches, product page views). When you perform such an action, your browser sends an HTTP request from the cookie to Snapchat's server via the Snapchat Pixel, containing certain information about the action (u.a. Type of action, time, browser type of the end device) will be transmitted.
This data transfer allows Snapchat to compile statistics on user behavior on our website after being redirected from an advertisement, which we use to optimize our offerings. However, we do not receive any personally identifiable information.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have a data processing agreement ("Data Processing Agreement," available at [link to agreement]) with Snapchat for the use of the Snapchat Pixel. https://www.snap.com/es/terms/data-processing-agreementWe have concluded an agreement with Snapchat that obligates us to protect the data of our website visitors and not to share it with third parties. Snapchat generally transfers collected information outside the European Economic Area and relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.

TikTok Pixel
This website uses the “TikTok Pixel”, a tracking technology of the social network “TikTok” by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).
Cookies (small text files stored on your device) are used to collect pseudonymized information about your browsing behavior on our website, transmit it to TikTok, where it is stored and analyzed to enable the display of interest-based and personalized product recommendations on TikTok. The information collected and processed in this pseudonymized form generally includes the device ID, device type, timestamp, operating system, and IP address. This information can be linked to the user's identity using additional information provided by TikTok. z.BThe information collected via the pixel, which TikTok has stored about the user due to their ownership of an account on the social network "TikTok," can be associated with this information. TikTok can also combine the information collected via the pixel with other information that TikTok has collected from other websites and/or in connection with the use of the social network "TikTok," thus creating pseudonymized user profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok pixel allows us to continue tracking the effectiveness of ads on TikTok. If a user is redirected from a TikTok ad to pages on this website and the cookies have not yet expired, the pixel records and tracks certain user actions that we have predefined.z.B(Completed transactions, leads, website searches, product page views). When you perform such an action, your browser sends an HTTP request from the cookie to TikTok's server via the TikTok pixel, transmitting certain information about the action. This transmission allows TikTok to compile statistics on user behavior on our website after being redirected from a TikTok ad, which we use to optimize our offerings.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our website visitors and not to pass it on to third parties. TikTok generally transfers collected information outside the European Economic Area and relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11) Page functionalities

11.1 Applications for job postings via email
On our website, we list currently vacant positions in a separate section, for which interested parties can apply by email to the provided contact address.
Inclusion in the application process requires that applicants provide us with all personal data necessary for a sound and informed assessment and selection along with their application via email.
The required information includes general personal details (name, address, telephone or email contact information) as well as performance-related documentation demonstrating the qualifications necessary for the position. Health-related information may also be required, as it must be given special consideration under labor and social security law in the interest of the applicant's social protection.
The specific components that an application must contain to be considered, and the form in which these components must be submitted via email, can be found in the respective job posting.
Upon receipt of your application submitted using the provided email address, we will store your application data and evaluate it solely for the purpose of processing your application. For any follow-up questions that may arise during the processing process, we will, at our discretion, use either the email address or telephone number provided by the applicant with their application.
The legal basis for this processing, including contacting you for follow-up questions, is generally Article 6(1)(b) GDPR (for processing in Germany). i.V.m. § 26 para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Article 9(1) GDPR are processed during the application process (z.BIf health data (such as information about severe disability) is requested from applicants, the processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR, so that we can exercise the rights arising from employment law and the law of social security and social protection and fulfill our obligations in this regard.
Alternatively or cumulatively, the processing of special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for the purposes of preventive or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnosis, for the provision of health or social care or treatment or for the management of health or social care systems and services.
If the applicant is not selected during the evaluation process described above, or if an applicant withdraws their application prematurely, their data transmitted by email, as well as all electronic correspondence, including the original application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (for processing in Germany). i.V.m. § 26 para. 1 BDSG) for the purposes of carrying out the employment relationship.

11.2 Google reCAPTCHA
This website uses the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5Ireland (“Google”). This function primarily serves to distinguish whether an entry is made by a natural person or is being misused through automated processing. The service involves sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in establishing individual responsibility on the internet and preventing misuse and spam.When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA.
Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

12) Tools and other items

- DATEV
For our accounting, we use the cloud-based accounting software of DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg (“DATEV”).
DATEV processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions in order to automatically record invoices, match them to the transactions and create the financial accounting from this in a semi-automated process.
If personal data is processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in an efficient organization and documentation of our business processes.
Further information about DATEV, the automated processing of data and the data protection regulations can be found at https://www.datev.de/web/de/m/ueber-datev/datenschutz/

13) Rights of the data subject

13.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercising these rights:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Article 16 GDPR;
• Right to erasure pursuant to Article 17 GDPR;
• Right to restriction of processing pursuant to Article 18 GDPR;
• Right to information pursuant to Article 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Article 77 GDPR.

13.2 RIGHT OF OBJECTION

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.

If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.

14) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (z.B. commercial and tax law retention periods).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his or her consent.

If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of a contract or for initiating a contract and/or we no longer have a legitimate interest in its continued storage.

When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.