Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ORGAINIC GmbH, Gewerbering-Süd 2, 97359 Schwarzach am Main, Germany, E-Mail: info@orgainic.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

3) Hosting

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify’s servers. As part of Shopify’s aforementioned services, data may also be transferred for further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event that data is transferred to Shopify Inc. in Canada, an adequate level of data protection is ensured by a decision of the European Commission. Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. and Shopify (USA) Inc. in the USA are certified under the US-European Privacy Shield agreement, which ensures compliance with the data protection level applicable in the EU.
Further information on Shopify’s data protection can be found at the following website: https://www.shopify.de/legal/datenschutz
Any further processing on servers other than those mentioned above by Shopify will only take place within the scope specified below.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (so-called persistent cookies). When cookies are set, they collect and process certain user information to varying extents, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can find out how long each cookie is stored in the overview of your web browser’s cookie settings.

Some cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR if consent has been given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can set your browser to inform you about the setting of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case when it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

6) Data Processing When Opening a Customer Account and for Contract Processing

According to Art. 6 para. 1 lit. b GDPR, personal data is also collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further data use as permitted by law.

7) Use of Your Data for Direct Advertising

7.1 Subscribing to our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm, by clicking on a corresponding link, that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address as entered by your Internet Service Provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when you register for the newsletter will be used exclusively for the purposes of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we have reserved the right to further data use as permitted by law and about which we inform you in this statement.

7.2 Newsletter delivery via MailChimp
Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.
MailChimp uses this information to send and statistically evaluate the newsletters on our behalf. For analysis purposes, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. With the help of web beacons, Mailchimp automatically generates general, non-personalized statistics about response behavior to newsletter campaigns. Based on our legitimate interest in the statistical evaluation of newsletter campaigns to optimize advertising communication and better tailor it to recipient interests, web beacons also collect and utilize data of the respective newsletter recipient (email address, time of retrieval, IP address, browser type, and operating system) in accordance with Art. 6 para. 1 lit. f GDPR. This data can allow individual conclusions about the newsletter recipient and is processed by Mailchimp to automatically create statistics that show whether a specific recipient has opened a newsletter message.
If you wish to deactivate data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
MailChimp may also use this data itself in accordance with Art. 6 para. 1 lit. f GDPR based on its own legitimate interest in the needs-based design and optimization of the service as well as for market research purposes, for example, to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to contact them itself or to pass them on to third parties.
To protect your data in the USA, we have concluded a data processing agreement (“Data-Processing-Agreement”) with MailChimp based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to MailChimp. This data processing agreement can be viewed at the following internet address if you are interested: https://mailchimp.com/legal/data-processing-addendum/
MailChimp is also certified under the US-European data protection agreement “Privacy Shield” and is therefore committed to complying with EU data protection requirements.
You can view MailChimp’s privacy policy here:
https://mailchimp.com/legal/privacy/

8) Data Processing for Order Fulfillment

8.1 To process your order, we work with the following service providers who support us in whole or in part in fulfilling concluded contracts. Certain personal data will be transmitted to these service providers as described below.

The personal data we collect will be passed on to the shipping company commissioned with the delivery as part of contract processing, to the extent necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of payment processing, if this is necessary for payment processing. If we use payment service providers, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8.2 Use of Special Service Providers for Order Processing and Fulfillment

- Billbee
Order processing is carried out via the service provider "Billbee" (Billbee GmbH, Paulinenstrasse 54, 32756 Detmold). Name, address, and, if applicable, other personal data will be passed on to Billbee exclusively for the purpose of processing the online order in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on to the extent that this is actually necessary for processing the order. Details on Billbee’s data protection and its privacy policy can be found on Billbee’s website at "billbee.io".
- Shipcloud
Shipping is handled via the shipping portal "shipcloud" (shipcloud GmbH, Lüdmoor 35a, 22175 Hamburg). In accordance with Art. 6 para. 1 lit. b GDPR, we pass on your data (name, address, and, if applicable, further information) exclusively for the purpose of processing your online order to shipcloud. Data will only be passed on to the extent that this is actually necessary for processing.
Details on shipcloud’s data protection can be found on shipcloud’s website at "shipcloud.io".

8.3 Use of Payment Service Providers (Payment Services)

- Amazon Pay
If you select the payment method "Amazon Pay", payment processing is carried out via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we pass on the information you provided during the ordering process along with information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Amazon Payments and only to the extent necessary for this purpose. You can find more information about Amazon Payments’ privacy policy at the following internet address: https://pay.amazon.com/de/help/201751600
- Paypal
If you pay via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of payment processing. The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your ability to pay. The result of the credit check regarding the statistical probability of default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. For further information on data protection, including the credit agencies used, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is carried out via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will be passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. For more information on data protection at Shopify Payments, please refer to the following website: https://www.shopify.com/legal/privacy.
For data protection information on Stripe Payments Europe Ltd., please see here: https://stripe.com/de/privacy

9) Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. When you start playing embedded YouTube videos, "YouTube" sets cookies to collect information about user behavior. According to "YouTube", these are used, among other things, to record video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not want this association with your YouTube profile, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research, and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. In the course of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Regardless of the playback of embedded videos, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence.

In the event that personal data is transmitted to Google LLC. based in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

Further information on data protection at "YouTube" can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy

Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for objection described above.

10) Online Marketing

10.1 Facebook Pixel for Creating Custom Audiences
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an ad placed by us that is displayed on Facebook, Facebook Pixel adds an additional parameter to the URL of our linked page. If our page allows data sharing with Facebook via Pixel, this URL parameter is written into the user's browser via a cookie, which is set by our linked page itself. This cookie is then read by Facebook Pixel and enables data to be forwarded to Facebook.
With the help of the Facebook Pixel, Facebook is able to determine the visitors of our online offering as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to show the Facebook Ads we place only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in specific topics or products, determined by the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads match the potential interests of users and do not appear annoying. This also allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "Conversion").
The data collected is anonymous to us, meaning we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display ads on and outside of Facebook.
The data processing associated with the use of the Facebook Pixel is carried out on the basis of our overriding legitimate interest in the analysis, optimization, and economic operation of our online offering as well as our advertising measures in accordance with Art. 6 para. 1 lit. f GDPR.
The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Facebook Inc. in the USA. Facebook Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the data protection level applicable in the EU.
To object to the collection by the Facebook Pixel and the use of your data for the display of Facebook Ads altogether, you can set an opt-out cookie by clicking the link below, which will deactivate Facebook Pixel tracking:
Deactivate Facebook Pixel
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click the above link again.
Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for objection described above.

10.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to ensure a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under the keyword "user settings." You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR. In the context of using Google Ads, it is also possible that personal data may be transmitted to the servers of Google LLC. in the USA.

In the event that personal data is transmitted to Google LLC. based in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield," which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can find more information about Google's privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them through a corresponding setting in your browser software or by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.

11) Web Analytics Services

11.1 Google (Universal) Analytics

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies," which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a server of Google and stored there; this may also involve transmission to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC. in the USA and shortened there. In these exceptional cases, this processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other data from Google.
You can prevent the storage of cookies by setting your browser software accordingly. However, please note that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
If personal data is transferred to Google LLC. based in the USA, Google LLC. is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the above-described option for objection.

11.2 Hotjar (Hotjar Ltd.)

This website uses the web analytics service Hotjar from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).
This tool allows us to track movements on the websites where Hotjar is used (so-called heatmaps). For example, it shows how far users scroll and which buttons users click and how often. The tool also makes it possible to collect feedback directly from website users. In this way, we gain valuable information to make our websites even faster and more user-friendly. The above analysis is based on our legitimate interests in optimization and marketing purposes and the user-friendly design of our website in accordance with Art. 6 para. 1 lit. f GDPR. When using this tool, we pay special attention to the protection of your personal data. We can only track which buttons you click and how far you scroll. Areas of the website where your personal data or that of third parties is displayed are automatically hidden by Hotjar and are therefore never traceable at any time.

Hotjar offers every user the option to prevent the use of the Hotjar tool by means of a “Do Not Track header”, so that no data about the visit to the respective website is recorded. This is a setting supported by all common browsers in their current version. Your browser sends a request to Hotjar with the instruction to disable tracking for the respective user. If you use our website with different browsers/devices, you must set up the “Do Not Track header” separately for each of these browsers/devices.
Detailed instructions with information about your browser can be found at: https://www.hotjar.com/opt-out
Further information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy

Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the above-described option for objection.

12) Retargeting/ Remarketing/ Referral Advertising

Google Ads Remarketing
Our website uses the features of Google Ads Remarketing, which allows us to advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in your device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.
Any further data processing will only take place if you have consented to Google linking your web and app browsing history with your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google while visiting our website and have given this consent, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups. In the context of using Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can find out about the use of cookies and make settings regarding this at the Digital Advertising Alliance at www.aboutads.info. Finally, you can set your browser to notify you about the setting of cookies and to decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.
In the event that personal data is transferred to Google LLC, based in the USA, Google LLC has certified itself under the US-European data protection agreement "Privacy Shield," which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
Further information and Google's privacy policy regarding advertising can be found here:
https://www.google.com/policies/technologies/ads/
Where legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option for objection described above.

13) Tools and Miscellaneous

13.1 Candis
For our accounting, we use the cloud-based accounting software from CANDIS GmbH, Perleberger Straße 42, 10559 Berlin (“Candis”). Candis processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions in order to automatically capture invoices, match them to transactions, and thus create financial accounting in a semi-automated process.

If personal data is processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in efficient organization and documentation of our business processes.
Further information about Candis, the automated processing of data, and the privacy policy can be found at https://www.candis.io/datenschutz

13.2 beeclever
This website uses the cookie consent tool “GDPR Legal Cookie” from beeclever GmbH, Universitätsstraße 3, D-56070 Koblenz a. Rh. (“beeclever”) to obtain effective user consents for cookies and cookie-based applications that require consent.
By integrating the corresponding JavaScript code, users are shown a banner when the page is accessed, in which consents for certain cookies and/or cookie-based applications can be given by ticking checkboxes. The tool blocks the setting of all cookies requiring consent until the respective user has given the necessary consents by ticking the boxes. This ensures that such cookies are only set on the user's device if consent has been given.
In order for the cookie consent tool to uniquely assign page views to individual users and to individually record, log, and store the consent settings made by the user for the duration of the session, certain user information (including the IP address) is collected when our website is accessed, transmitted to beeclever's servers, and stored there.
This data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for the described data processing is Art. 6 para. 1 lit. c GDPR. As the responsible party, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information on data usage by beeclever can be found at https://beeclever.de/pages/datenschutz

14) Rights of the Data Subject

14.1 The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) with respect to the processing of your personal data by the controller, about which we inform you below:

Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR when your data is transferred to third countries;
Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested by you is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of processing, if you need your data for the establishment, exercise, or defense of legal claims after we no longer need them for the intended purpose, or if you have objected to processing for reasons related to your particular situation, as long as it is not yet clear whether our legitimate grounds override yours;
Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request the transmission to another controller, where technically feasible;
Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately delete the affected data unless further processing can be based on a legal ground for processing without consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal;
Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and—if applicable—additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, these data are stored until the data subject withdraws their consent.

If there are statutory retention periods for data processed on the basis of contractual or quasi-contractual obligations pursuant to Art. 6 para. 1 lit. b GDPR, these data are routinely deleted after the retention periods expire, provided they are no longer required for contract fulfillment or initiation and/or there is no legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, these data are stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, these data are stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.