Privacy Policy

1) Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data here means all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Esoft24 GmbH, Senator-Braun-Allee 9, 31135 Hildesheim, Germany, Tel.: +49 3221 2292585, Email: shop@Esoft24.com The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When you use our website for informational purposes only, meaning you do not register or otherwise provide us with information, we collect only data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Data is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not shared or otherwise used. However, we reserve the right to review the server log files retrospectively if specific indications of unlawful use come to our attention.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” string and the lock icon in your browser bar.

3) Hosting and Content Delivery Network

Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prevents unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

To make your visit to our website attractive and enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for longer and allow site settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies implemented by us, the processing takes place either in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR if consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective visit to the site.

You can configure your browser to notify you when cookies are set and to decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or in general.

Please note that our website's functionality may be limited if you do not accept cookies.

5) Contacting us

5.1 Zendesk

This website uses a live chat system provided by: Zendesk Inc., 1019 Market St, San Francisco, USA

Personal data transmitted during the chat is processed either in accordance with Art. 6(1)(b) GDPR, insofar as this is necessary to initiate or perform the contract, or in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in effectively assisting visitors to our website. Unless statutory retention obligations prevent this, your transmitted data will be deleted once the matter in question has been conclusively resolved. In addition, further information may be collected and analyzed using cookies to create pseudonymized usage profiles.

However, this information is not used to identify you personally and is not combined with other data sets. If this information can be linked to an individual, it is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in statistical analysis of user behavior for optimization purposes.

You can prevent cookies from being set by changing your browser settings. However, this may limit the functionality of our website. You may object at any time, with effect for the future, to the collection and storage of data for the purpose of creating a pseudonymized usage profile.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

5.2 Trusted Shops

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne

We transmit your email address and, where applicable, other customer data to the provider solely on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, so that the provider can contact you by email with a review reminder.

You may withdraw your consent at any time, with effect for the future, by contacting us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

5.3 Zendesk

To handle customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd, 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland

If you submit contact inquiries by email via our website, they are stored and organized in the ticketing system to enable chronological processing and improve the service experience. You can check the current status of your inquiry at any time using the individually assigned ticket number.

To organize and handle inquiries, personal data is collected according to the scope of the information provided, but in any case including first name, last name, and email address, and is transmitted to the provider, where it is stored and processed.

The legal basis for processing this data is our legitimate interest in efficiently organizing our customer service, responding to your request as quickly as possible, and optimizing our service offering in accordance with Art. 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

5.4 - Custom form for price proposals
On our website, we give customers the option to submit a price proposal for selected items they wish to buy using an electronic form. In accordance with Article 6(1)(b) GDPR, when the form is submitted electronically, we collect and store certain personal data about the requester (such as their name and email address) to process the price proposal. We use this data to subsequently inform the requester whether the offer has been rejected or accepted, or to make a counteroffer. The data provided via the form is used strictly for the purpose of collecting and attributing the price proposal and deciding whether to accept it in preparation for a possible contract. After a price proposal request has been fully processed, the personal data will be deleted unless statutory retention obligations apply.
- Make an offer
On this website, you can use Buraleo Limited’s “Make an Offer” service, Suite 2, Ground Floor Orchard Brae House, Edinburgh, Eh4 2hs, United Kingdom (“Make an Offer”), to submit price proposals for items for sale.
The user is asked to provide their name, email address, and, where applicable, telephone number and delivery address. If the price proposal is submitted, these details are first sent to Make an Offer and then to the aforementioned controller, enabling them to respond to the price proposal, i.e., accept it, reject it, or make a counteroffer.
Data is processed on the basis of Article 6(1)(b) GDPR. It is processed only to the extent necessary for the purpose of initiating and fulfilling the contract. After an offer request has been fully processed, your data will be deleted unless statutory retention periods apply.
If data is transferred to Buraleo Limited in the United Kingdom, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For more information about the privacy policy of “Make an Offer,” visit https://makeofferapp.herokuapp.com/static/private_policy.

5.5 When you contact us (e.g., via the contact form or email), personal data is collected. The data collected when using a contact form is shown in the relevant contact form. This data is stored and used solely to respond to your inquiry or to contact you, and for the associated technical administration.

The legal basis for data processing is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is intended to enter into a contract, the additional legal basis for processing is Art. Art. 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed; this is the case when the circumstances indicate that the matter in question has been conclusively resolved and provided that no statutory retention requirements apply.

6) Data Processing When Opening a Customer Account and for Contract Fulfillment

Pursuant to Art. Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide us with this data upon opening a customer account. The data required to open an account can be found in the input fields of the relevant form on our website. You can delete your customer account at any time by sending a message to the controller at the address provided above. After your customer account is deleted, your data will be deleted, provided that all contracts concluded through it have been fully completed, no statutory retention periods apply, and we have no legitimate interest in continuing to store it.

7) Comment Function

When using the comment function on this website, in addition to your comment, information about when the comment was created and the commenter name you chose is stored and published on the website. Your IP address is also logged and stored. Your IP address is stored for security reasons, in case the person concerned violates the rights of third parties or posts unlawful content in a comment. We need your email address to contact you if a third party objects to your published content as unlawful. The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if third parties object to them as unlawful.

8) Use of Customer Data for Direct Marketing

8.1 Subscribe to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only information required to send you the newsletter is your email address. Providing any additional information is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm, by clicking the appropriate link, that you wish to receive newsletters in the future.

By activating the confirmation link, you consent to our use of your personal data pursuant to Article 6(1)(a) GDPR. When you subscribe to the newsletter, we store the IP address entered by your Internet service provider (ISP), as well as the date and time of registration, so that we can trace any possible misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of sending promotional communications via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named above. After you unsubscribe, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this statement.

8.2 Sending newsletters to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for similar goods or services to those you have already purchased. In this case, under Section 7(3) of the German Act Against Unfair Competition (UWG), we do not need to obtain your separate consent. The data is processed solely on the basis of our legitimate interest in personalized direct advertising pursuant to Article 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails. You are entitled to object at any time, with effect for the future, to the use of your email address for the advertising purpose stated above by notifying the controller named at the beginning. You will only incur transmission costs at the basic rates. Upon receipt of your objection, use of your email address for advertising purposes will cease immediately.

8.3 MailChimp

Our email newsletters are sent through this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided when subscribing to the newsletter with this provider pursuant to Art. 6 para. 1 lit. f GDPR so that it can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical analysis of the success of newsletter campaigns by using web beacons or tracking pixels in emails sent, which can measure open rates and specific interactions with newsletter content. Information about end devices (e.g. page view time, IP address, browser type and operating system) is also collected and analyzed, but is not combined with other data sets.

You may withdraw your consent to newsletter tracking at any time, effective for the future.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

9) Data processing for order fulfillment

9.1 To the extent necessary to fulfill the contract for delivery and payment purposes, the personal data we collect is shared, pursuant to Art. 6 para. 1 lit. b GDPR, with the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products under a corresponding contract, we process the contact details you provided when placing your order (name, address, email address) to personally inform you, using appropriate means of communication (e.g. by post or email), about upcoming updates within the period prescribed by law, as part of our legal obligation to provide information pursuant to Art. 6 (1) lit. c GDPR. Your contact details are used exclusively to inform you about updates we owe you and are processed by us for this purpose only to the extent necessary for the relevant information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in fulfilling contracts. Certain personal data is transferred to these service providers in accordance with the information below.

9.2 Transfer of personal data to shipping service providers

-DHL

We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

If you have expressly given your consent to this during the ordering process, we will forward your email address and/or telephone number to the provider before the goods are delivered, in accordance with Art. 6(1)(a) GDPR, so that a delivery time can be arranged or the delivery can be announced. Otherwise, for the purpose of delivery and in accordance with Art. 6(1)(b) GDPR, we will forward only the recipient’s name and delivery address to the provider. The information is shared only to the extent necessary for delivery of the goods. In this case, it is not possible to arrange a delivery time with the provider in advance or to announce the delivery.

You may withdraw your consent at any time, effective for the future, from the controller named above or from the provider.

9.3 Use of payment service providers

-Amazon Pay

Online payment methods from the following provider are available on this website: Amazon Payments Europe sca, 38 avenue John F. Kennedy, L-1855 Luxembourg

If you select a payment method offered by the provider that requires you to pay in advance (e.g. credit card payment), the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency and transaction number) as well as information about the contents of your order will be shared with the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data will be shared solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
Apple Pay
If you choose the “Apple Pay” payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed through the “Apple Pay” function on your iOS-, watchOS- or macOS-powered device by charging a payment card stored in “Apple Pay.” Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, you must therefore enter a code you have previously set and verify it using your device’s “Face ID” or “Touch ID” function.
For the purpose of processing your payment, the data you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider for the payment card stored in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment information. After the payment is completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed in connection with the transfers described, it is processed exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any link to an individual. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, your Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store this information in a format that could identify you. You can disable the use of Apple Pay on your Mac in your iPhone settings. To do so, go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
Further information about privacy with Apple Pay is available at the following web address: https://support.apple.com/en-gb/HT203027
- giropay

Online payment methods from the following provider are available on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main

Online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider that pays in advance (such as payment by invoice, installment payments, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details of alternative payment methods).

To protect our legitimate interest in determining our customers' ability to pay, we will share this data with the provider for a credit check pursuant to Art. 6(1)(f) GDPR. Based on the personal data you provide and other data (such as shopping cart contents, invoice amount, order history, and payment behavior), the provider checks whether the payment method you have selected can be offered in light of the risk of non-payment and/or default.

In addition to the provider's internal criteria, identity and creditworthiness information from the following credit agencies may also be included in the decision-making process as part of the application review in accordance with Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit check may include probability values (so-called score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things, but is not limited to, address data.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may still be entitled to process your personal data if this is necessary to process the payment in accordance with the contract.
- Mollie

Online payment methods from the following provider are available on this website: Mollie BV, Keizersgracht 313, 1016 EE Amsterdam, Netherlands

Online payment methods from the following provider are available on this website: PayPal (Europe) S.arl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider that requires you to pay in advance, your payment details provided during the ordering process (including your name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data will be shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method offered by the provider under which the provider pays in advance, you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, details of alternative payment methods).

Online payment methods from the following provider are available on this website: PayPal (Europe) S.arl et Cie, S.CA, 22-24 Boulevard Royal, L-2449 Luxembourg

Online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

10) Online marketing

10.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland (“Google”). Google AdSense uses cookies, text files that are stored on your computer and enable analysis of your use of the website. In addition, Google AdSense also uses web beacons (small, invisible graphics) to collect information. These can be used to record, collect and evaluate simple actions, such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transferred to and stored on a Google server. This may also involve transmission to the servers of Google LLC in the USA.

Google uses the information obtained in this way to evaluate your use of this website with regard to AdSense ads. The IP address transmitted by your browser in connection with Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google’s behalf.

All processing described above, in particular reading information from the device used, only takes place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

For more information about Google’s privacy policy, please visit: https://privacy.google.com/intl/en-GB/take-control.html?categories_activeEl=sign-in

10.2 ADCELL affiliate program

We participate in the affiliate program of the following provider: ADCELL” Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany

In this context, we have placed links on our website that lead to offers on the provider’s or third parties’ websites (“affiliate sites”).

To measure the success of an affiliate link, analyze the orders generated through it, and settle the corresponding commission payments, the provider uses cookies and/or similar technologies that are generally set on the affiliate websites, for which we are not responsible under data protection law. In this context, the provider also regularly processes the IP address and, where applicable, other device information.

All processing described above, particularly the reading or storage of information on your device, is carried out only if you have expressly consented to it in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by using the cookie consent management tool on the partner websites.

10.3 AWIN performance advertising network

We participate in the affiliate program of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany

10.4 Sober

We use the services of the following provider for our voucher offers: Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe

The provider operates a voucher network through which participating partner stores can create vouchers and distribute them to their customers. For this purpose, we encrypt and forward your data required to issue your voucher to the provider. The data is only forwarded to the provider after you have completed your purchase and clicked on the voucher banner. This data is shared solely to pre-fill the fields required to issue the voucher.

The data processing described is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in having third parties advertise to you, allowing you to benefit from their offers by redeeming the vouchers.

11) Web analytics services

11.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyze website usage.
When using Google Analytics 4, so-called “cookies” are used by default. Cookies are text files stored on your device that enable analysis of your use of the website. The information collected by cookies about your use of this website (including the IP address transmitted by your device, shortened by omitting the last digits; see below) is generally transferred to and stored and processed on a Google server. This may also involve the transfer of information to the servers of Google LLC, based in the USA, where the information is further processed.
When Google Analytics 4 is used, the IP address transmitted by your device when you use the website is always collected and processed in anonymized form by default and automatically, so that the collected information cannot be directly linked to an individual. This automatic anonymization takes place by Google shortening the IP address transmitted by your device by removing the final digits within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, compile reports on your website activities and usage behavior, and provide us with other services related to your website use and internet use. In this context, the IP address transmitted by your device as part of Google Analytics and shortened is not combined with other data held by Google. Data collected through the use of Google Analytics 4 is stored for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics about website users’ age, gender, and interests through a special feature known as “demographic characteristics,” based on an analysis of interest-based advertising and the inclusion of third-party information. This makes it possible to identify and distinguish groups of website users in order to target marketing measures. However, data collected through “demographic characteristics” cannot be attributed to any particular person, and therefore cannot be attributed to you personally. Data collected through the “demographic characteristics” feature is stored for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies to store and read information on the device you use to access the website, takes place only if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Google Analytics will not be used while you browse the website without your consent. You may withdraw your consent at any time, with effect for the future. To withdraw your consent, please deactivate this service using the “Cookie Consent Tool” provided on the website.
As an extension of Google Analytics 4, this website may also use the “Google Signals” service. Google Signals allows Google to create cross-device reports (so-called “cross-device tracking”). If you have enabled “personalized advertising” in your Google Account settings and linked your internet-enabled devices to your Google Account, Google may analyze user behavior across devices and create database models based on it, provided you have consented to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR (see above). This takes into account the sign-ins and device types of all site visitors who were signed in to a Google Account and completed a conversion. Among other things, the data can show which device you first clicked on an ad with and which device the corresponding conversion took place on. When Google Signals is used, we do not receive any personal data from Google, only statistics created on the basis of Google Signals. You can disable the “personalized advertising” feature in your Google Account settings and thereby stop cross-device analysis. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
You can find more information here: https://support.google.com/analytics/answer/7532985?hl=de
As an extension of Google Analytics 4, this website may also use the “UserIDs” feature. By assigning individual UserIDs, we can have Google create cross-device reports (so-called “cross-device tracking”). This means your usage behavior can also be analyzed across devices if you have given your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, created a personal account by registering on this website, and are signed in to your personal account on various devices using your respective login details. Among other things, the data collected in this way can show which device you first clicked on an ad with and which device the corresponding conversion took place on.
We have concluded a so-called data processing agreement with Google for the use of Google Analytics 4, obligating Google to protect the data of users of our website and not to disclose it to third parties.
To ensure compliance with European data protection standards even in the event of a possible transfer of data from the EU or EEA to the USA and possible further processing there, Google relies on the so-called Standard Contractual Clauses of the European Commission, which we have agreed with Google by contract.
Further legal information about Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=en
Details of the processing triggered by Google Analytics 4 and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

11.2 Cloudflare Web Analytics

This website uses the web analytics service provided by the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as IP address and browser information, in order to evaluate this data for statistical analyses of user behavior on our website and create pseudonymized usage profiles. This enables, among other things, the analysis of movement patterns (so-called heatmaps), which show how long visitors stay on pages and how they interact with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymization generally rules out the possibility of directly identifying individuals. Your personal data is not combined with data collected from other sources.

All of the processing described above, particularly the reading or storage of information on the device being used, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

11.3 This website uses “Google Tag Manager,” a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides the technical basis for bundling various web applications, including tracking and analytics services, and calibrating, controlling and setting conditions for them through a single user interface.
Google Tag Manager itself does not store any information on users’ devices or read any such information. The service also does not perform any independent data analyses.
However, when you access a page, Google Tag Manager transmits your IP address to Google, where it may be stored. It may also be transferred to servers operated by Google LLC in the USA.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

12) Retargeting/ Remarketing/ Referral Advertising

12.1 Facebook Pixel for creating custom audiences with advanced matching functionality (with cookie consent tool)
The so-called “Facebook Pixel” of the social network Facebook is used on our online services in advanced matching mode. It is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter “Facebook”).
If a user who has given explicit consent clicks on an ad we run that is displayed on Facebook, Facebook Pixel adds the URL of our linked page to the URL. This URL parameter is then stored in the user’s browser in a cookie after the redirect, which is set by our linked page itself. In addition, this cookie collects specific customer information, such as the email address that we collect on our website connected to Facebook during transactions such as purchases, account logins, or registrations (advanced matching). Facebook Pixel subsequently reads the cookie and allows the data, including specific customer data, to be forwarded to Facebook.
With the help of the Facebook Pixel with advanced matching, Facebook can identify visitors to our online services as a target audience for displaying ads (so-called “Facebook Ads”). Accordingly, the Facebook Ads we run are shown only to Facebook users who have also expressed an interest in our online services or who have certain characteristics (e.g., interests in specific topics or products determined based on the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). We also want to use the Facebook Pixel to ensure that our Facebook Ads correspond to users’ potential interests and are not intrusive. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users are redirected to our website after clicking on a Facebook ad (“conversion”). Compared with the standard version of the Facebook Pixel, the advanced matching feature helps us measure the effectiveness of our advertising campaigns more accurately by recording more associated conversions.
All data transmitted is stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use the data for its own advertising purposes, in accordance with Facebook’s Data Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display ads on and off Facebook.
This processing is based on your explicit consent pursuant to Art. 6(1)(a) GDPR.
Consent to the use of the Facebook Pixel may only be given by users over the age of 13. If you are younger, please ask your parents or legal guardians for permission.
The information generated by Facebook is generally transmitted to and stored on a Facebook server; this may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can withdraw your consent at any time with effect for the future. To withdraw your consent, uncheck the setting for “Facebook Pixel” in the “Cookie Consent Tool” embedded on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

12.2 idealo Performance Tracking

This website uses tracking technology from Ingenious Technologies AG, Französische Straße 48, 10117 Berlin (“Ingenious”) to establish a connection between a click on or display of an advertising medium (touchpoint) and an action you perform (e.g., a purchase in an online store or a newsletter signup). At each touchpoint, your browser sends an HTTP request to the Ingenious server, which in turn transmits certain information.
This information includes the URL of the website on which the advertisement is displayed (referrer URL), the device's browser identifier (user agent) (including information about the device type and operating system), the device's IP address (Ingenious anonymizes this IP address before storing it), HTTP headers (data packets automatically transmitted by your browser containing various technical information), the time of the request and, if already stored on the device, the cookie and its full contents.

A cookie is a small data packet exchanged between your browser and the server. This data packet can store and transmit information relevant to the web application, such as the contents of a virtual shopping cart.
Tracking technology places cookies on your device to document actions. The cookie stores information about the most recently used touchpoints (i.e., when an advertising medium was displayed on or clicked from a device). The cookie also contains a cookie ID generated by Ingenious. Ingenious uses the cookie ID to store data about the touchpoints used and information about your activities. The recorded touchpoints can be combined into a user journey when needed.
In the case of a promotional request, the order number and basket value of your order are generally also transmitted and stored by Ingenious. In addition, the following data may be transmitted and stored: your customer number, new customer status, your age and gender, and your responses to a customer survey.

The information transmitted to Ingenious and the cookies are used exclusively to correctly attribute the success of an advertising material to the corresponding billing.
All processing described above, in particular the retrieval of information from the device used via the tracking pixel, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, idealo Performance Tracking will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To withdraw your consent, please deactivate this service in the “Cookie Consent Tool” provided on the website.
The collection and processing of tracking data can also be prevented by visiting the tracking opt-out page listed below:
https://marketing.net.idealo-partner.com/ts/i5040718/tsv?settrackingoptout

When you visit the tracking opt-out page, a special cookie is written that disables tracking in the respective web browser on the device. However, tracking will be reactivated as soon as you delete the tracking opt-out cookie.

Below, we inform you which cookies our tracking technology uses:

A cookie named “tsv” is set each time an advertising material is displayed. This cookie contains a cookie ID and a list of data from the most recent view touchpoints, consisting of the time, referrer URL, and the Admedia code (a unique identifier for an advertising material that contains information about the sales channel, publisher, publisher website, and advertising material).

The cookie named “tsc” is set every time an advertising material is clicked. This cookie contains a cookie ID and a list of data from the most recent click touchpoints, consisting of the time, referrer URL, page ID in the customer’s shop system, and the Admedia code (a unique identifier for an advertising material that contains information about the sales channel, publisher, publisher website, and advertising material).

The cookie named “trackingoptout” is written when the opt-out link is clicked to disable tracking for the current web browser on this device.

12.3 Google Ads remarketing

This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine how successful individual advertising measures are in relation to the data from advertising campaigns. Our aim is to show you advertising that is of interest to you, make our website more appealing to you, and ensure fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users. When using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

Details about the processing initiated by Google Ads conversion tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites?hl=en
All processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google conversion tracking will not be used during your visit to the website.

You can permanently disable the setting of cookies by Google Ads conversion tracking for ad preferences. To do so, you can download and install the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?
Please note that certain features of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.

More information about Google's privacy policies can be found at:
https://www.google.com/policies/technologies/ads/

12.4 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

This allows us to target visitors to our website who have already shown an interest in our shop and products with personalized, interest-based advertising. The advertising materials are displayed based on a cookie-based analysis of previous and current user behavior; no personal data is stored. Retargeting technology stores a cookie on your computer or mobile device to collect pseudonymized data about your interests and tailor the advertising to the information stored. These cookies are small text files stored on your computer or mobile device. As a result, you will be shown advertising that is highly likely to match your product and information interests.

All processing activities described above, in particular the setting of cookies to read information on the device being used, are carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time, with effect for the future. To withdraw your consent, please deactivate this service in the “Cookie Consent Tool” provided on the website.

For the transfer of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

12,5 billiger.de sales tracking

This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany

If you reached our website via an advertisement on the provider’s domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain device and browser information, potentially including your IP address, is read using the tracking technology in order to record and evaluate user actions predefined by us (e.g., completed transactions, leads, searches on the website, visits to product pages). This enables us to create statistics on user behavior on our website after they click through from an advertisement, which we use to optimize our offering.

All of the processing described above, in particular the setting of cookies to read information on the device being used, will only be carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.

12.6 Google Ads conversion tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites by means of advertising materials (known as Google AdWords). We can determine how successful individual advertising measures are in relation to the data from advertising campaigns. In doing so, we aim to show you advertising that is of interest to you, make our website more interesting for you, and achieve fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users.
Using Google Ads may also involve the transfer of personal data to the servers of Google LLC. in the USA.

You can find details about the processing triggered by Google Ads conversion tracking and Google's handling of data from websites here: https://policies.google.com/technologies/partner-sites.

You can also permanently opt out of Google Ads conversion tracking cookies by downloading and installing the Google browser plugin available at the following link:
https://www.google.com/settings/ads/plugin?hl=en

To target users whose data we have received in the course of business or business-like relationships with more relevant advertising, we use a customer matching feature as part of Google Ads. To do this, we electronically send one or more files containing aggregated customer data (in particular email addresses and phone numbers) to Google. Google does not have access to the data in plain text; instead, it automatically encrypts the information in the customer files during transmission using a special algorithm. Google can then use the encrypted information only to match it with existing Google accounts belonging to the individuals concerned. This allows personalized advertising to be shown across all Google services linked to the relevant Google account.

Customer data is only transferred to Google if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future. For more information about Google’s data protection measures in connection with the Customer Match feature, see here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182
You can view Google’s privacy policy here: https://policies.google.com/privacy

12.7 Kelkoo Sales Tracking

This website uses the conversion tracking technology of the following provider: Kelkoo Group, Parc Sud Galaxie, 6 rue des Méridiens, 38130 Échirolles, France

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.

12.8 Microsoft Advertising Universal Event Tracking

This website uses the conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.

12.9 shopping24 Conversion Tracking

This website uses the conversion tracking technology of the following provider: shopping24 Gesellschaft für multimediale Anwendungen mbH, Poßmoorweg 2
22301 Hamburg, Germany

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties.

13) Site features

13.1 Sign in with Amazon

We provide a single sign-on function on our website from the following provider: Amazon EU S.arl, 38 Avenue John F. Kennedy, L-1855, Luxembourg

In addition to data transfers to the provider location named above, data may also be transferred to: Amazon.com Inc, USA

If you have an account with the provider, you can use these account details to create a user account or register on our website.

When you visit this page, this login function may establish a direct connection between your browser and the provider's servers, even if you do not have an account with the provider or are not currently logged in. This enables the provider to learn that you have visited our site. The information collected in this process (including your IP address, where applicable) is transmitted directly from your browser to a provider server and stored there. However, this information is not used to identify you personally and is not shared with third parties.

These data processing operations are carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user-friendly and interactive design of our online presence.

When you log in to the provider's website using your account details by clicking the registration button, the provider transmits the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender) to us based on your explicit consent pursuant to Art. 6(1)(a) GDPR.

We store and use the data transmitted by the provider to set up a user account with the required information (salutation, first name, last name, address details, country, email address, date of birth), provided you have authorized the provider to share it. Conversely, data (e.g., information about your browsing or purchasing behavior) may be transferred by us to your account with the provider based on your consent.

The consent granted can be revoked at any time with effect for the future.

13.2 EHI quality seal widget

Our website incorporates graphic elements from the following provider to display external customer reviews and/or externally awarded quality seals: EHI Retail Institute GmbH, Spichernstraße 55, 50672 Cologne

When you visit a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers so that the elements can load correctly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, it is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our services and designing our website attractively.

13.3 Trustami trust seal

Our website incorporates graphic elements from the following provider to display external customer reviews and/or externally awarded quality seals: Trustami GmbH, Schröderstraße 5, 10115 Berlin

13.4 Trusted Shops Trustbadge

Our website incorporates graphic elements from the following provider to display external customer reviews and/or externally awarded quality seals: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne

13.5 reCAPTCHA

On this website, we use the CAPTCHA service provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA. The provider uses “Google Fonts,” fonts downloaded from the internet from Google, to style the CAPTCHA window. No other information is processed apart from the information listed above, which is already transmitted to Google through ReCaptcha functionality.

The service checks whether an entry is made by a natural person or through abusive machine-based and automated processing, with the aim of blocking spam, DDoS attacks, and similar automated malicious attacks. To ensure that an action is performed by a human and not an automated bot, Cloudflare Turnstile collects the IP address of the device being used, browser identification data, the type of operating system, and the date and duration of the visit, and sends this data to the provider's servers for analysis.

The basis for this process is our legitimate interest in determining individual responsibility when using the internet and preventing misuse and spam, in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prevents its unauthorized disclosure to third parties.

14) Tools and other items

14.1 This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users as an interactive user interface when they visit the site, where they can grant consent to specific cookies and/or cookie-based applications by checking boxes. The tool only loads cookies/services that require consent if the respective user has granted consent by checking the relevant boxes. This ensures that such cookies are only placed on the user’s device if consent has been granted.
The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed.
Where personal data (such as the IP address) is processed in individual cases for the purpose of storing, assigning, or logging cookie settings, this is carried out on the basis of Art. 6(1) lit. Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management, and thus in ensuring that our website is designed in a legally compliant manner.
Another legal basis for processing is Art. 6(1)(c) GDPR. As the data controller, we are legally required to make the use of technically unnecessary cookies dependent on the respective user’s consent.
Further information about the operator and the settings available for the cookie consent tool can be found directly in the corresponding user interface on our website.

14.2 Cloudflare

For security reasons, this website uses the service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA

The provider protects the website and the associated IT infrastructure against unauthorized access by third parties, cyberattacks, viruses, and malware. The provider collects users’ IP addresses and, where applicable, other data about their behavior on our website (in particular, URLs accessed and header information) in order to identify and prevent unauthorized access to the site and threats. The collected IP address is compared with a list of known attackers. If the collected IP address is identified as a security risk, the provider may automatically block access to the website. The information collected in this way is transmitted to and stored on a server belonging to the provider.

The data processing described is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interests in protecting the website against malicious cyberattacks and maintaining the integrity and security of its structure and data.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prevents unauthorized disclosure to third parties.

14.3 FINDOLOGIC

This website uses the search technology service of the following provider: FINDOLOGIC GmbH, Jakob-Haringer-Straße 5a, 5020 Salzburg, Austria

To provide the product search function via the search field, as well as navigation and filtering, the provider collects and stores certain user information (such as the user or session ID) in anonymized form.

If personal data is also processed in this context, such processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a fault-tolerant product search and thereby optimally marketing our offering.

15) Data subject rights

15.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) in relation to the controller with regard to the processing of your personal data, which we explain below:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Retention period for personal data

The retention period for personal data depends on the applicable legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g., retention periods under commercial and tax law).

When personal data is processed on the basis of explicit consent under Art. 6(1)(a) GDPR, it is stored until the data subject withdraws their consent.

Where statutory retention periods apply to data processed in connection with legal or similar obligations on the basis of Art. These data are routinely deleted in accordance with Art. 6(1)(b) GDPR once the retention periods have expired, provided they are no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in further storage.

When personal data is processed on the basis of Art. These data are stored in accordance with Art. 6(1)(f) GDPR until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it is stored until the data subject exercises their right to object under Art. 21(2) GDPR.

Unless otherwise provided in this statement regarding specific processing situations, stored personal data will be deleted when it is no longer required for the purposes for which it was collected or otherwise processed.