Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified.
1.2 The controller responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Jean & Len GmbH, Brunnenstraße 31, 72505 Krauchenwies, Germany, Tel.: +49 (0) 7576 / 9295 - 444, Fax: +49 (0) 7576 / 9295 - 205, email: info@jeanlen.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 The controller has appointed a data protection officer, who can be reached as follows: “Matthias Walliser, Altenwaldstraße 8, 72768 Reutlingen, Germany, +49 7121 69 702 - 26, datenschutz@jeanlen.de”
2) Data Collection When You Visit Our Website
2.1 If you use our website for informational purposes only, i.e., if you do not register or otherwise send us information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The page of our website that you visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable, in anonymized form)
The processing is carried out pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.
3) Hosting & Content Delivery Network
3.1 To host our website and display its content, we use a provider that renders its services, itself or through selected subcontractors, exclusively on servers within the European Union.
All data collected on our website is processed on these servers, unless other data recipients are named below for specific data processing operations.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
3.2 Creoline
We use a content delivery network from the following provider: Creoline GmbH, Bergstraße 9a, 48341 Altenberge, Germany
This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) (f) GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
4) Cookies
To make your visit to our website more appealing and to enable certain functions, we use cookies, i.e., small text files that are stored on your end device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your end device for longer and allow site settings to be saved (so-called “persistent cookies”). In the latter case, you can check the storage period in the cookie settings of your web browser.
Where personal data is also processed through individual cookies we use, the processing is carried out pursuant to Art. 6 (1) (b) GDPR for the performance of a contract, pursuant to Art. 6 (1) (a) GDPR if you have given your consent, or pursuant to Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and in providing a customer-friendly and effective site experience.
You can set your browser to notify you when cookies are placed, so that you can decide individually whether to accept them, and to block cookies in specific cases or altogether.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Contacting Us
5.1 Zendesk
This website uses a live chat system from the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland
In order to process responses in a targeted manner and to ensure the best possible user experience, the provider uses artificial intelligence (AI) software solutions from third-party providers, into which your inquiries are fed, and which answer them automatically and then route them accordingly.
The processing of the personal data transmitted to us via the chat is carried out either pursuant to Art. 6 (1) (b) GDPR, because it is necessary for the initiation or performance of a contract, or pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in providing effective support to our website visitors.
Any personal data collected is transmitted to the AI software provider pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the best possible automated handling of your request.
Subject to any statutory retention periods to the contrary, processed personal data will be deleted once the matter concerned has been conclusively resolved.
In addition, for the purpose of creating pseudonymized usage profiles, further information may be collected and evaluated with the help of cookies. This information is not used to identify you personally and is not merged with other data sets. Where this information constitutes personal data, the processing is carried out pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.
The placing of cookies can be prevented by adjusting your browser settings accordingly. In that case, however, the functionality of our website may be restricted. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.2 Zendesk
To process customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland
If you send us an inquiry by email via our website, it is stored and organized in the ticket system so that it can be processed in chronological order and to improve the service experience. Using the individually assigned ticket number, you can check the current status of your inquiry at any time.
To organize and process inquiries, personal data is collected to the extent that you provide it, but in any case your last name, first name and email address. This data is transmitted to the provider, stored and retrieved there.
The legal basis for the processing of this data is our legitimate interest in the efficient organization of our customer service, in responding to your inquiry as quickly as possible and in optimizing our service offering pursuant to Art. 6 (1) (f) GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.3 When you contact us (e.g., via contact form or email), personal data is collected. Which data is collected when a contact form is used can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.
The legal basis for the processing of this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1) (f) GDPR. If your inquiry is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your inquiry has been conclusively processed. This is the case when it is apparent from the circumstances that the matter concerned has been conclusively resolved, provided no statutory retention obligations apply.
6) Use of Customer Data for Direct Marketing
Klaviyo
Our email newsletters and other promotional email communications are sent by this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
On the basis of our legitimate interest in effective and user-friendly email marketing, we pass on the data provided at registration to this provider pursuant to Art. 6 (1) (f) GDPR, so that it can send the emails on our behalf.
Subject to your express consent pursuant to Art. 6 (1) (a) GDPR, the provider also carries out a statistical analysis of the success of email campaigns by means of web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. In doing so, end device information (e.g., time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets.
You can withdraw your consent to email tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
7) Web Analytics Services
7.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are stored on your end device as small text files and collect certain information. This information includes your IP address, the last digits of which are truncated by Google in order to rule out direct identification.
The information is transmitted to Google servers and processed further there. Transfers to Google LLC, based in the USA, are also possible.
On our behalf, Google uses the information collected to evaluate your use of the website, to compile reports on website activity for us and to provide further services related to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the placing of cookies on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without your consent, Google Analytics 4 is not used during your visit to the website. You can withdraw your consent at any time with effect for the future. To do so, please deactivate this service via the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en&gl=de and at https://policies.google.com/technologies/partner-sites
Demographics
Google Analytics 4 uses the special “demographics” function and can use it to generate statistics that provide information about the age, gender and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and have linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 (1) (a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the “Ad personalization” function in the settings of your Google account. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en. Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en
User IDs
As an extension to Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 (1) (a) GDPR, have set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
7.2 Google Tag Manager
This website uses the “Google Tag Manager”, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating and controlling them, and making their execution subject to conditions, via a single user interface. Google Tag Manager itself does not store or read any information on users’ end devices. Nor does the service carry out any independent data analyses. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. A transfer to servers of Google LLC in the USA is also possible.
This processing only takes place if you have given us your express consent to it pursuant to Art. 6 (1) (a) GDPR. Without this consent, Google Tag Manager is not used during your visit to the website. You can withdraw your consent at any time with effect for the future. To do so, please deactivate this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
Further legal information on Google Tag Manager can be found at https://policies.google.com/privacy?hl=en&gl=de.
7.3 Microsoft Clarity
This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA
With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymized visitor data, including information about the end device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. Among other things, this makes it possible to evaluate movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks and mouse-overs). Pseudonymization generally precludes direct identification of individuals. The data is not merged with non-pseudonymized data about you collected from other sources.
All processing described above, in particular the reading or storing of information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
7.4 Shopware Analytics
This website uses the web analytics service of the following provider: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany.
On the basis of joint controllership between us and the service provider within the meaning of Art. 26 GDPR, the service collects and stores pseudonymized visitor data with the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), including information about the end device used such as browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. Among other things, this makes it possible to evaluate movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks and mouse-overs). Pseudonymization generally precludes direct identification of individuals. The data is not merged with non-pseudonymized data about you collected from other sources.
All processing described above, in particular the reading or storing of information on the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
8) Retargeting / Remarketing and Conversion Tracking
8.1 Meta Pixel
On our website, we use the “Meta Pixel” service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
If you click on an advertisement we have placed on Facebook and/or Instagram, the “Meta Pixel” adds a parameter to the URL of our linked page. After the redirect, this URL parameter is then written into the user’s browser by a cookie that our linked page itself sets.
On the one hand, this enables Meta to identify the visitors to our website as a target group for the display of advertisements (so-called “ads”). Accordingly, we use the service to show the Facebook and/or Instagram ads we place only to those users who have also shown an interest in our website or who exhibit certain characteristics (e.g., interests in certain topics or products, determined on the basis of the websites visited), which we transmit to Meta (so-called “Custom Audiences”).
On the other hand, the “Meta Pixel” can be used to track whether users were redirected to our website after clicking on an advertisement and which actions they then take there (so-called “conversion tracking”).
The data collected is anonymous to us, so it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.
All processing described above, in particular the placing of cookies to read information from the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is generally transmitted to a Meta server and stored there; in this context, a transfer to servers of Meta Platforms Inc. in the USA may also take place.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
8.2 Microsoft Advertising
This website uses retargeting technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
This makes it possible to target visitors to our website who have already shown an interest in our shop and our products with personalized, interest-based advertising. The ads are displayed on the basis of a cookie-based analysis of past and current user behavior.
When retargeting technology is used, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your interests and thus tailor the ads to the stored information. These cookies are small text files stored on your computer or mobile device. In this way, you are shown advertising that is highly likely to match your product and information interests.
All processing described above, in particular the placing of cookies to read information from the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without this consent, retargeting technology is not used during your visit to the website.
You can withdraw your consent at any time with effect for the future. To do so, please deactivate this service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
8.3 Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
For the use of Universal Event Tracking, a tag that interacts with the conversion cookie set by Microsoft is placed on every page of our website. This interaction makes your user behavior on our website traceable and sends the information collected in this way to Microsoft. The purpose is that certain predefined goals, such as purchases or leads, can be recorded and evaluated statistically in order to tailor the focus and content of our offerings more closely to users’ interests. The tags are never used to personally identify users.
All processing described above, in particular the placing of cookies to read information from the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. Without this consent, retargeting technology is not used during your visit to the website.
You can withdraw your consent at any time with effect for the future. To do so, please deactivate this service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
8.4 TikTok Pixel
This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
If you reached our website from an advertisement on the provider’s domain, the success of the advertisement can be tracked with the help of cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
For this purpose, the tracking technology reads certain end device and browser information, including, where applicable, your IP address, in order to record and evaluate user actions predefined by us (e.g., completed transactions, leads, searches on the website, views of product pages). This makes it possible to create statistics on user behavior on our website after redirection from an advertisement. We use these statistics to optimize our offering.
All processing described above, in particular the placing of cookies to read information from the end device used, only takes place if you have given us your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
9) Website Functionalities
9.1 Trusted Shops Trustbadge
To display external customer reviews and/or an externally awarded quality seal, graphic elements of the following provider are embedded on our website: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany.
When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements properly. In this process, certain browser information, including your IP address, is transmitted to the provider.
Where personal data is also processed in this context, this takes place pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the optimal marketing of our offering and in an appealing design of our website.
Further processing may take place if you place an online order with us.
Subject to your express consent pursuant to Art. 6 (1) (a) GDPR, your order information (order total, order number, purchased product, if applicable) and your email address are transmitted in encrypted form to the provider via the Trustbadge after you complete an order, in order to check for an existing registration for the provider’s services (in particular the “Buyer Protection”) and, if applicable, to enable a new registration.
If an existing registration is found, or in the case of a new registration with the provider for its services (in particular the Buyer Protection), your order information (order total, order number, purchased product) and your email address are transmitted to the provider and further processed by it on the basis of the contractual agreement with the provider pursuant to Art. 6 (1) (b) GDPR, in order to provide the services (in particular the Buyer Protection).
We and the provider are joint controllers for the processing described above pursuant to Art. 26 GDPR. The joint controller agreement is available here: https://help.etrusted.com/hc/de/articles/23970817960082-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO
9.2 Google Maps
This website uses an online map service of the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive maps in order to present geographic information visually. By using this service, our location is shown to you and it is easier for you to find your way to us.
As soon as you access the subpages on which the Google map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve a transfer to the servers of Google LLC in the USA. This happens regardless of whether you are logged in to a Google user account or have one at all. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the data to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage and evaluation are carried out pursuant to Art. 6 (1) (f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising, in market research and/or in designing Google websites to meet user needs. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in connection with your use of Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off JavaScript in your browser. Google Maps, and thus also the map display on this website, can then no longer be used.
Where legally required, we have obtained your consent pursuant to Art. 6 (1) (a) GDPR for the processing of your data described above. You can withdraw your consent at any time with effect for the future. To withdraw your consent, please use the objection option described above.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures a level of data protection that corresponds to European requirements.
Further information on data protection at Google can be found here: https://business.safety.google/intl/en/privacy/
9.3 Shipment tracking on our website
On our website, you can check the shipping status of your order under "Track your order". You can access this page either via a personalised link, which you will find in our order and shipping confirmation emails and in your customer account, or by entering your order number and the postcode of your billing or delivery address.
To show you the status of your shipment, we match the details you enter against the order stored in our system and transmit only the tracking number(s) of your order to our transport company DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, via an interface. DHL then sends us the shipment status, the shipment history and, where available, the estimated delivery window. We display this information to you together with the order number, order date and delivery address. If you access the page by entering your order number and postcode, the delivery address is shown only in abbreviated form (first name, initial of your surname, postcode, city and country). We temporarily store the shipment data received from DHL for a maximum of 15 minutes in order to avoid repeated requests; it is not stored beyond this period. This processing is based on Art. 6 (1) point b GDPR, as it is necessary to fulfil our contractual delivery obligations, and on Art. 6 (1) point f GDPR, based on our legitimate interest in providing you with convenient updates on the status of your delivery.
To protect against abusive requests, such as the automated guessing of order numbers, we process your IP address and the order number you enter, and we limit the number of requests that can be made. This data is temporarily stored for approximately 10 minutes and then automatically deleted. If you access the page via a personalised link, we store the link to your order in a technically necessary session cookie for the duration of your visit (see Section 4). The legal basis is Art. 6 (1) point f GDPR, based on our legitimate interest in keeping our website secure and protecting our customers’ data.
Below the shipment status, we show you product recommendations, which we select based on the scent and product type of the items you ordered. Where applicable, we also show you a voucher code for your next order. For this purpose, we process only the data relating to the order in question; this data is not disclosed to third parties. The legal basis is Art. 6 (1) point f GDPR, based on our legitimate interest in direct marketing. You can object to this processing at any time (see Section 11).
The "View at DHL" link takes you to DHL’s website. DHL is solely responsible for any data processing carried out there.
10) Tools and Miscellaneous
Cookie Consent Tool
To obtain valid user consent for cookies and cookie-based applications that require consent, this website uses a so-called “cookie consent tool”. The “cookie consent tool” is displayed to you when you access the page in the form of an interactive user interface, on which you can give consent to certain cookies and/or cookie-based applications by checking a box. The tool ensures that all cookies/services requiring consent are only loaded if you give the corresponding consent by checking a box. This way, such cookies are only placed on your end device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.
If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this is carried out pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a compliant design of our website.
A further legal basis for the processing is Art. 6 (1) (c) GDPR. As the controller, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information on the operator and the available settings of the cookie consent tool can be found directly in the corresponding user interface on our website.
11) Rights of the Data Subject
11.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) against us as the controller with regard to the processing of your personal data; the conditions for exercising each right are set out in the provision cited:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Storage Period of Personal Data
The period for which personal data is stored is determined by the respective legal basis, the purpose of the processing and – where applicable – additionally by the respective statutory retention period (e.g., retention periods under commercial and tax law).
In the case of processing of personal data on the basis of express consent pursuant to Art. 6 (1) (a) GDPR, the data concerned is stored until you withdraw your consent.
If statutory retention periods exist for data that is processed in connection with contractual or quasi-contractual obligations pursuant to Art. 6 (1) (b) GDPR, this data is routinely deleted after the retention periods have expired, provided that it is no longer required for the performance of the contract or for pre-contractual steps and/or we no longer have a legitimate interest in continued storage.
In the case of processing of personal data on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
In the case of processing of personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.
Unless the other information in this policy on specific processing situations provides otherwise, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
