1) Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Carl Cotton GmbH, Am Tobel 7, 88263 Horgenzell, Germany, Tel.: 07504971625, Email: info@carl-cotton.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

If you simply use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:- The website we visited- Date and time of access- Amount of data sent in bytes- Source/reference from which you accessed the page- Browser used- Operating system used- IP address used (if applicable: in anonymized form)The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values.

Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. You can find out how long a cookie is stored for in the overview of the cookie settings in your web browser. Cookies are sometimes used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either to execute the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent being given, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit. Please note that you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links: Internet Explorer: https://support.microsoft.com/de-de/help/17442/win... Firefox: https://support.mozilla.org/de/kb/cookies-erlauben... Chrome: https://support.google.com/chrome/answer/95647?hl=... Safari: https://support.apple.com/de-de/guide/safari/sfri1... Opera: https://help.opera.com/de/latest/web-preferences/#... Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

When you contact us (e.g. via contact form or email), personal data is collected. The data collected when you use a contact form can be seen from the respective contact form. This data is stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Paragraph 1 Letter f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Paragraph 1 Letter b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

5) Data processing when opening a customer account and for contract processing

In accordance with Art. 6 Paragraph 1 Letter b of GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above-mentioned address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data that is permitted by law.

6) Use of customer data for direct marketing

6.1 Registration for our e-mail newsletterIf you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Paragraph 1 Letter a of GDPR. When you register for the newsletter, we save your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used exclusively for the purposes of advertising in the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.

6.2 - Advertising by post Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 Paragraph 1 Letter f of GDPR and to use it to send you interesting offers and information about our products by post. You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.

7) Data processing for order processing

7.1 To process your order, we work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.

7.2 Transfer of personal data to shipping service providers
- German postal service
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your e-mail address to Deutsche Post in accordance with Art. 6 Para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to Deutsche Post.
- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DHL.
- DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will pass on your email address and telephone number to DPD before the goods are delivered in accordance with Art. 6 Paragraph 1 Letter a of GDPR for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery in accordance with Art. 6 Paragraph 1 Letter b of GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or delivery notification is not possible.
The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DPD.

7.3 Use of payment service providers (payment services)
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The data is passed on in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for the payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Paragraph 1 Letter f of GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values ​​(so-called score values). Insofar as score values ​​are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, among other things, but not exclusively, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-f...You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Stripe
If you choose a payment method from the payment service provider Stripe, payment processing will be carried out via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Further information on Stripe's data protection can be found at the URL https://stripe.com/de/privacy#translation.
Stripe reserves the right to carry out a credit check based on mathematical-statistical procedures in order to protect the legitimate interest in determining the user's ability to pay. Stripe may transmit the personal data required for a credit check and received as part of the payment processing to selected credit agencies, which Stripe will disclose to users upon request. The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit report, these are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, among other things, but not exclusively, address data. Stripe uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the eligibility to use the selected payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the commissioned credit agencies.
However, Stripe may still be entitled to process your personal data if this is necessary for the contractual payment processing.

8) Online Marketing

8.1 Facebook Pixel for creating custom audiences with advanced data matching (without cookie consent tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used in the extended data matching mode, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook"). Based on their express consent, when a user clicks on an advertisement displayed on Facebook and placed by us, an addition is added to the URL of our linked page by Facebook Pixel. This URL parameter is then written into the user's browser via a cookie after forwarding, which our linked page itself sets. In addition, this cookie records specific customer data such as the email address that we collect on our website linked to the Facebook ad during processes such as purchases, account registrations or registrations (extended data matching). The cookie is then read by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook. With the help of the Facebook pixel with extended data matching, Facebook is able to, on the one hand, identify visitors to our online offering to precisely determine the target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel with extended data matching to only display the Facebook ads we place to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel with extended data matching, we also want to ensure that our Facebook ads correspond to the potential interests of users and do not appear annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of Facebook Pixel, the extended data matching function helps us to better measure the effectiveness of our advertising campaigns by recording more assigned conversions.All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place advertisements on and outside of Facebook.This processing only takes place if explicit consent is given in accordance with Art. 6 Para. 1 lit. a GDPR.Consent to the use of the Facebook pixel may only be given by users who are older than 16 years. If you are younger, we ask you to ask your legal guardian for permission.The information generated by Facebook is usually transferred to a Facebook server and stored there; this may also involve transmission to the servers of Facebook Inc. in the USA. You can revoke your consent at any time by deactivating Facebook pixel tracking. To do so, you can set an opt-out cookie by clicking on the link below, which deactivates Facebook pixel tracking:<a href="javascript-removed:void(0)" onclick-removed="if (typeof fbpOptOut == 'function') { fbpOptOut(); } else { alert(atob-removed('QUNIVFVORzogRmVobGVuZGVyIEZhY2Vib29rLVBpeGVsIE9wdE91dC1Db2RlIQ==')); }">Deactivate Facebook pixel</a>This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on the link above again.

8.2 - Google AdSenseThis website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses "web beacons" (small, invisible graphics) to collect information, allowing simple actions such as visitor traffic to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon (including your IP address) about your use of the website is usually transferred to a Google server and stored there. This may also involve transmission to Google LLC servers in the USA. Google uses the information obtained in this way to analyze your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other data from Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google. All processing described above, in particular reading information on the device used via cookies and/or web beacons, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, Google AdSense will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website. You can find further information about Google's data protection provisions at the following internet address: https://www.google.de/policies/privacy/- Google Ads Conversion TrackingThis website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers using advertising materials (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transferred to Google LLC servers in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-s...All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Ads Conversion Tracking will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:https://www.google.com/settings/ads/plugin?hl=dePlease note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.You can find further information about Google's data protection policy at the following internet address: https://www.google.de/policies/privacy/- Google Marketing PlatformThis website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").GMP uses cookies to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. GMP can also use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later visits the advertiser's website using the same browser and purchases something through that website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you as follows according to our level of knowledge: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC in the USA. All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, GMP will not be used during your visit to the website.You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.You can find further information about the data protection provisions of GMP by Google at the following internet address: https://www.google.de/policies/privacy/

9) Web analysis services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) is usually transferred to a Google server and saved there; this may also involve transmission to Google LLC servers in the USA. This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which anonymizes the IP address by shortening it and prevents it from being directly linked to a person. This extension means that Google will shorten your IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google LLC server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data. Google Analytics uses a special function known as "demographic features" to compile statistics with information about the age, gender and interests of website visitors based on an evaluation of interest-based advertising and with the use of third-party information. This allows the definition and differentiation of user groups on the website for the purpose of targeting marketing measures that are optimized for specific target groups. However, data records collected via the "demographic characteristics" cannot be assigned to a specific person. Details on the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-s... All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, Google Analytics will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties. For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA. Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

10) Page functionalities

10.1 Facebook Plugins with 2-Click Solution
Our website uses so-called social plugins ("plugins") from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" solution. You can recognize deactivated plugins by the fact that they are grayed out. This integration ensures that no connection is established with the Facebook servers when you call up a page on our website that contains such plugins. Only when you activate the plugins and thus give your consent to the data transmission in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the Facebook servers. The content of the respective plugin is sent directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects using the plugins. To the best of our knowledge, Facebook receives information about which of our websites you have currently and previously visited. By integrating the plug-ins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in. The information collected (including your IP address) is transmitted from your browser directly to a Facebook Inc. server in the USA and stored there. If you interact with the plug-ins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your contacts there.You can revoke your consent at any time by deactivating the activated plug-in by clicking on it again. However, the revocation has no influence on the data that has already been transferred to Facebook.For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and setting options to protect your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

10.2 Facebook plugins with Shariff solution Our website uses so-called social plugins ("plugins") from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plugins, but only using an HTML link. This type of integration ensures that when you call up a page on our website that contains such buttons, no connection is established with the Facebook servers. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins there (if necessary after entering your login data). The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options to protect your privacy can be found in Facebook's privacy policy: https://www.facebook.com/policy.php

10.3 Instagram plugin as Shariff solution

Our website uses so-called social plugins ("plugins") from the online service Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook"). In order to increase the protection of your data when you visit our website, these buttons are not fully integrated into the page as plugins, but only using an HTML link. This type of integration ensures that when you visit a page on our website that contains such buttons, no connection is established with the Instagram servers. When you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (if necessary after entering your login data). For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights and setting options to protect your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

10.4 Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider “Youtube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The extended data protection mode is used here, which, according to the provider, only starts storing user information when the video(s) is played. If embedded YouTube videos are started, the provider “Youtube” uses cookies to collect information about user behavior. According to information from “Youtube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not want to be assigned to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC in the USA. Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations without our influence. All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, YouTube videos will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website via alternative options communicated to you on the website. Further information on data protection at “Youtube” can be found in the YouTube terms of use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy.

10.5 Online applications via a form

On our website, we offer prospective job applicants the opportunity to apply online using a corresponding form. In order to be accepted into the application process, applicants must use the form to provide us with all the personal data required for a well-founded and informed assessment and selection. The required information includes general personal information (name, address, telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. If necessary, health-related information may also be required, which must be taken into account in terms of labor and social law in the interests of social protection for the applicant.When the form is submitted, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated solely for the purpose of processing the application.The legal basis for this processing is generally Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Para. 1 BDSG), within the meaning of which going through the application process is considered to be the initiation of an employment contract.If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 Para. 2 lit. b. GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfil our obligations in this regard. Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 Para. 1 lit. h GDPR if it is carried out for the purposes of healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector. If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his application prematurely, the data submitted on the form will be deleted after a corresponding notification after 6 months at the latest. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligations to provide evidence under the provisions on equal treatment of applicants. In the event of a successful application, the data provided will be further processed on the basis of Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Para. 1 BDSG) for the purposes of carrying out the employment relationship.

10.6 Applications for job advertisements by email

We advertise currently vacant positions in a separate section on our website, for which interested parties can apply by email to the contact address provided.Inclusion in the application process requires that applicants provide us with all the personal data required for a well-founded and informed assessment and selection along with the application by email.The required information includes general personal information (name, address, telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. In addition, health-related information may be required, which must be given special consideration in terms of labor and social law in the interests of social protection in the person of the applicant.The components that an application must contain in individual cases in order to be considered and in what form these components must be sent by email can be found in the respective job advertisement.After receipt of the application sent using the email contact address provided, the applicant data is stored by us and evaluated solely for the purpose of processing the application. For queries that arise during processing, we will use either the email address provided by the applicant with their application or a specified telephone number, at our discretion.The legal basis for this processing, including contacting us for queries, is generally Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Para. 1 BDSG), within the meaning of which completing the application process counts as initiating an employment contract.If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 Para. 2 lit. b. GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfil our obligations in this regard.Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 Para. 1 lit. h GDPR if it is carried out for the purposes of healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector.If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his application prematurely, the data sent by email and all electronic correspondence, including the original application email, will be deleted after a corresponding notification no later than 6 months. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligations to provide evidence under the provisions on equal treatment of applicants. In the event of a successful application, the data provided will be further processed on the basis of Art. 6 Para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Para. 1 BDSG) for the purposes of carrying out the employment relationship.

10.7 - Adobe Fonts (Typekit)

This site uses so-called web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA ("Adobe") for the uniform display of fonts. When you open a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to the Adobe servers. This may also result in personal data being transmitted to the Adobe servers in the USA. In this way, Adobe becomes aware that our website was accessed via your IP address. Adobe Fonts are used in the interest of a uniform and attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 Paragraph 1 Letter f of GDPR. If your browser does not support web fonts, a standard font from your computer will be used. Further information about Adobe Fonts can be found at https://fonts.adobe.com/ and in Adobe's privacy policy: https://www.adobe.com/de/privacy.html- Google Web FontsThis site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you visit a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.For this purpose, the browser you use must connect to Google's servers. This may also result in personal data being transmitted to Google LLC servers in the USA. In this way, Google becomes aware that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 Paragraph 1 Letter f of GDPR. If your browser does not support web fonts, a standard font from your computer will be used. Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/10.8 Google reCAPTCHA On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input has been made by a natural person or has been misused by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Paragraph 1 Letter f of GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding misuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA. Further information on Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/To the extent legally required, we have obtained your consent to process your data as described above in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the option to object described above.10.9 Google Customer Reviews (formerly Google Certified Merchant Program)We work with Google as part of the Google Customer Reviews program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to take part in an email survey from Google. If you give your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the purchasing experience on our website. The rating you submit will then be summarized with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. When using Google Customer Reviews, personal data may also be transferred to Google LLC servers in the USA.You can revoke your consent at any time by sending a message to the data controller or to Google.You can find more information about Google's data protection in connection with the Google Customer Reviews program at the following link: https://support.google.com/merchants/answer/718852...You can find more information about Google Seller Ratings' data protection at this link: https://support.google.com/google-ads/answer/23754...

11) Tools and OthersCookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they visit the page in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking boxes. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by ticking the corresponding box. This ensures that such cookies are only placed on the user's respective device if consent has been given. The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed here.If in individual cases personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.Another legal basis for the processing is Art. 6 (1) (c) GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12) Rights of the data subject

12.1 The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below: - Right to information in accordance with Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when your data is forwarded to third countries; - Right to rectification in accordance with Art. 16 GDPR: You have the right to have any incorrect data concerning you rectified immediately and/or any incomplete data stored by us completed;- Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; - Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail; - Right to information in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the responsible party, this party is obliged to inform all recipients to whom the personal data concerning you was disclosed of this rectification or erasure of the data. data or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure. You have the right to be informed of these recipients.
- Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party, insofar as this is technically feasible; - Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation; - Right to complain according to Art. 77 GDPR: If you consider that the processing of personal data concerning you violates the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement.

12.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO CARRY OUT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT OF OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and - if applicable - also by the respective statutory retention period (e.g. retention periods under commercial and tax law). When personal data is processed on the basis of an explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data is stored until the data subject revokes his or her consent. If statutory retention periods exist for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided that it is no longer required to fulfill or initiate a contract and/or we have no legitimate interest in continuing to store it. When personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the data subject exercises his or her right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.When personal data is processed for direct marketing purposes on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.Unless the other information in this declaration on specific processing situations indicates otherwise, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.