Data Protection

Privacy Policy

1. Data Protection at a Glance

General Notes

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text. Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice (Impressum) of this website.

How do we collect your data?

Your data is collected, on the one hand, by you providing it to us. This may be, for example, data that you enter into a contact form.

Other data is collected automatically by our IT systems when visiting the website. These are primarily technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. For this and other questions regarding data protection, you can contact us at any time at the address specified in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to this website: Disable Google Analytics. Analysis tools and third-party tools

When visiting our website, your surfing behavior may be statistically evaluated. This is mainly done with cookies and so-called analysis programs. The analysis of your surfing behavior is generally carried out anonymously; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

You can object to this analysis. We will inform you about the options for objection in this privacy policy.

2. General Notes and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this happens.

We point out that data transmission on the Internet (e.g., in communication via email) may have security gaps. Complete protection of data against access by third parties is not possible. Information on the responsible party

The responsible party for data processing on this website is:

Contact person: Theresa Deppisch

GOCATH e.V. Kolpingstr. 11 97828 Marktheidenfeld Germany

Email: hallo＠gocath．org

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses or similar). Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw a consent already given at any time. An informal notification via email to us is sufficient for this. The lawfulness of the data processing that has taken place up to the withdrawal remains unaffected by the withdrawal. Right of complaint to the competent supervisory authority

In the event of data protection law violations, the affected person has a right of complaint to the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place insofar as it is technically feasible. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to receive free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, if applicable, a right to the correction, blocking, or deletion of this data. For this and further questions regarding personal data, you can contact us at any time at the address given in the imprint. Objection to advertising emails

The use of contact details published as part of the imprint obligation for the transmission of advertising and information materials not expressly requested is hereby objected to. The site operators expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as via spam emails.

3. Data collection on our website

The website partially uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies allow us to recognize your browser during your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you (e.g., shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. To the extent that other cookies (e.g., cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy. Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version operating system used referrer URL hostname of the accessing computer time of the server request IP address

No merging of this data with other data sources is performed.

The basis for data processing is Art. 6 Para. 1 lit. f GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Contact form

If you send us inquiries via the contact form, your details from the inquiry form including the contact details you provided there will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered into the contact form therefore takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can withdraw this consent at any time. An informal notification via email to us is sufficient for this. The lawfulness of the data processing operations that have taken place up to the withdrawal remains unaffected by the withdrawal.

The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent for storage, or the purpose for the data storage no longer exists (e.g., after your request has been processed). Mandatory legal requirements – in particular retention periods – remain unaffected. Registration on this website

You can register on our website to use additional features on the page. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse registration.

For important changes, such as in the scope of the offer or for technically necessary changes, we use the email address provided during registration to inform you via this channel.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You may withdraw consent given by you at any time. For this purpose, an informal notification by email to us is sufficient. The lawfulness of the data processing that has already taken place remains unaffected by the withdrawal.

The data collected during registration is stored by us as long as you are registered on our website and will subsequently be deleted. Legal retention periods remain unaffected. Registration with Facebook Connect

Instead of a direct registration on our website, you can register with Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you choose to register with Facebook Connect and click on the “Login with Facebook” / “Connect with Facebook” button, you will be automatically redirected to the Facebook platform. There, you can log in with your user data. This links your Facebook profile with our website or our services. Through this link, we obtain access to your data stored on Facebook. These are primarily:

Facebook name Facebook profile and cover photo Facebook cover photo Email address stored on Facebook Facebook ID Facebook friends lists Facebook likes Birthday Gender Country Language

This data is used for the setup, provision, and personalization of your account.

Further information can be found in the Facebook Terms of Service and the Facebook Privacy Policy. These can be found at: https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/. Comment function on this website

For the comment function on this page, in addition to your comment, information regarding the time the comment was created, your email address, and, if you do not post anonymously, the username chosen by you are stored.

Storage of the IP address

Our comment function stores the IP addresses of users who write comments. Since we do not check comments on our page before they are released, we require this data in order to take action against the author in the event of legal violations such as insults or propaganda.

Subscribing to comments

As a user of the page, you can subscribe to comments after logging in. You will receive a confirmation email to verify whether you are the owner of the specified email address. You can unsubscribe from this function at any time via a link in the info emails. The data entered as part of subscribing to comments will be deleted in this case; however, if you have transmitted this data to us for other purposes and in other places (e.g., newsletter order), it will remain with us.

Storage duration of comments

Comments and the associated data (e.g., IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g., insulting comments).

Legal basis

The storage of comments is based on your consent (Art. 6 para. 1 lit. a GDPR). You may withdraw consent given by you at any time. For this purpose, an informal notification by email to us is sufficient. The lawfulness of the data processing operations that have already taken place remains unaffected by the withdrawal. Processing of data (customer and contract data)

We collect, process, and use personal data only insofar as it is necessary for the establishment, substantive design, or modification of the legal relationship (master data). This is based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process, and use personal data regarding the use of our website (usage data) only insofar as this is necessary to enable the user to make use of the service or for billing purposes.

The collected customer data will be deleted after the completion of the order or termination of the business relationship. Legal retention periods remain unaffected. Data transmission upon conclusion of a contract for online shops, traders, and goods shipment

We transmit personal data to third parties only if this is necessary as part of the contract processing, such as to the companies entrusted with the delivery of the goods or the credit institution commissioned with the payment processing. No further transmission of data takes place, or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Data transmission upon conclusion of a contract for services and digital content

We transmit personal data to third parties only if this is necessary as part of the contract processing, such as to the credit institution commissioned with the payment processing.

No further transmission of data takes place, or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without express consent, for example for advertising purposes.

The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

4. Analysis Tools and Advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to and stored on a Google server in the USA.

The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.

IP Anonymization

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by adjusting the settings in your browser software; however, we point out that in this case, you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to Data Collection

More information on the handling of user data at Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order Data Processing

We have concluded a contract for order data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic Characteristics in Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created containing statements about the age, gender, and interests of the site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be attributed to any specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the "Objection to Data Collection" section. Google AdSense

This website uses Google AdSense, a service for integrating advertisements from Google Inc. ("Google"). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses so-called "cookies", text files stored on your computer that enable an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on these pages.

The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transferred to and stored on a Google server in the USA. This information may be passed on by Google to Google's contractual partners. However, Google will not merge your IP address with other data stored by you.

The storage of AdSense cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.

You can prevent the installation of cookies by adjusting the settings in your browser software; however, we point out that in this case, you may not be able to use all functions of this website to their full extent. By using this website, you agree to the processing of the data collected about you by Google in the manner described above and for the purpose mentioned above. Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages, which were adapted to you based on your previous usage and surfing behavior on one device (e.g., mobile phone), can also be displayed on another of your devices (e.g., tablet or PC).

If you have given the corresponding consent, Google links your web and app browser history with your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account.

To support this function, Google Analytics collects google-authenticated IDs of users, which are temporarily linked with our Google Analytics data in order to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google account; to do so, follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google account takes place exclusively on the basis of your consent, which you can give or withdraw from Google (Art. 6 para. 1 lit. a GDPR). In the case of data collection processes that are not merged in your Google account (e.g., because you do not have a Google account or have objected to the merger), the collection of data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

Further information and the privacy policy can be found in Google's privacy statement at: https://www.google.com/policies/technologies/ads/. Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google AdWords, we use so-called conversion tracking. If you click on an advertisement placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user's computer. These cookies expire after 30 days and do not serve to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the advertisement and was redirected to this page.

Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page provided with a conversion tracking tag. However, they do not receive information that allows users to be personally identified. If you do not wish to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.

More information about Google AdWords and Google Conversion Tracking can be found in Google's privacy policies: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or generally, as well as activate the automatic deletion of cookies upon closing the browser. If cookies are deactivated, the functionality of this website may be limited. Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

reCAPTCHA is intended to verify whether data entry on our websites (e.g., in a contact form) is carried out by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, duration of the website visitor's stay on the website, or mouse movements made by the user). The data collected during the analysis are forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated reconnaissance and from SPAM.

Further information on Google reCAPTCHA as well as Google's privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html. Facebook Pixel

Our website uses the Facebook visitor action pixel for conversion measurement, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

In this way, the behavior of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook advertisement. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data are anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data are stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage policy. This allows Facebook to enable the placement of advertisements on Facebook pages and outside of Facebook. This use of data cannot be influenced by us as the page operator.

You can find further information on protecting your privacy in Facebook's privacy notices: https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the ad settings area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.

If you do not have a Facebook account, you can deactivate interest-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

5. Newsletter

Newsletter data

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No further data are collected, or they are collected only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke the consent given for the storage of the data, the email address, and their use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation.

The data you have provided for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after the newsletter has been cancelled. Data stored by us for other purposes (e.g. email addresses for the member area) remain unaffected by this. MailChimp

This website uses the services of MailChimp for the dispatch of newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service that can be used, among other things, to organize and analyze the dispatch of newsletters. If you enter data for the purpose of newsletter subscription (e.g. email address), this data is stored on MailChimp's servers in the USA.

MailChimp has a certification according to the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA intended to ensure compliance with European data protection standards in the USA.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent via MailChimp, a file contained in the email (so-called web beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message was opened and which links, if any, were clicked. Technical information is also collected (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It serves exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you do not want analysis by MailChimp, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

Data processing is carried out on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations that have already taken place remains unaffected by the revocation.

The data you have provided for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after the newsletter has been cancelled from both our servers and MailChimp's servers. Data stored by us for other purposes (e.g. email addresses for the member area) remain unaffected by this.

For further details, please refer to MailChimp's privacy policy at: https://mailchimp.com/legal/terms/.

Conclusion of a Data Processing Agreement

We have concluded a so-called “Data Processing Agreement” with MailChimp, in which we obligate MailChimp to protect the data of our customers and not to pass it on to third parties. This contract can be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.

6. Plugins and Tools

Google Web Fonts

This page uses so-called web fonts provided by Google for a consistent display of fonts. When a page is called up, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must establish a connection to Google's servers. As a result, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/. Google Maps

This page uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this page has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and the easy findability of the locations specified by us on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/. SoundCloud

Plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, Great Britain) may be integrated into our pages. You can recognize the SoundCloud plugins by the SoundCloud logo on the affected pages.

When you visit our pages, a direct connection between your browser and the SoundCloud server is established after the plugin is activated. SoundCloud thereby receives information that you have visited our page with your IP address. If you click the “Like” button or “Share” button while logged into your SoundCloud user account, you can link and/or share the content of our pages with your SoundCloud profile. This allows SoundCloud to assign the visit to our pages to your user account. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by SoundCloud. Further information on this can be found in SoundCloud's privacy policy at: https://soundcloud.com/pages/privacy.

If you do not want SoundCloud to assign the visit to our pages to your SoundCloud user account, please log out of your SoundCloud user account before activating content of the SoundCloud plugin.

7. Payment Providers

PayPal

On our website, we offer payment via PayPal, among others. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing for the fulfillment of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the legality of data processing operations that have taken place in the past. Klarna

On our website, we offer payment using the services of Klarna, among others. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”).

Klarna offers various payment options (e.g., installment purchase). If you decide to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. You can find details on this in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimize the use of the Klarna checkout solution. The optimization of the checkout solution represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Cookies are small text files stored on your device that do not cause any harm. They remain on your device until you delete them. For details on the use of Klarna cookies, please refer to the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

The transmission of your data to Klarna is based on Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing for the fulfillment of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the legality of data processing operations that have taken place in the past. Sofortüberweisung

On our website, we offer payment via “Sofortüberweisung” (instant bank transfer), among others. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”).

With the help of the “Sofortüberweisung” process, we receive payment confirmation from Sofort GmbH in real time and can immediately begin fulfilling our obligations.

If you have decided on the payment method “Sofortüberweisung”, you transmit the PIN and a valid TAN to Sofort GmbH, which it can use to log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you provided. Subsequently, it immediately transmits a transaction confirmation to us. After logging in, your transactions, the credit limit of the overdraft facility, and the existence of other accounts as well as their balances are also checked automatically.

In addition to the PIN and the TAN, the payment data you enter as well as data regarding your person are also transmitted to Sofort GmbH. Personal data include first and last name, address, telephone number(s), email address, IP address, and potentially other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud attempts.

The transmission of your data to Sofort GmbH is based on Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing for the fulfillment of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the legality of data processing operations that have taken place in the past.

Details regarding payment with Sofortüberweisung can be found at the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/. Paydirect

On our website, we offer payment via Paydirekt, among others. The provider of this payment service is Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany (hereinafter “Paydirekt”).

If you carry out payment via Paydirekt, Paydirekt collects various transaction data and forwards it to the bank where you are registered with Paydirekt. In addition to the data required for payment, Paydirekt may collect further data as part of the transaction processing, such as delivery address or individual items in the shopping cart.

Paydirekt then authenticates the transaction using the authentication method stored at the bank for this purpose. Subsequently, the payment amount is transferred from your account to our account. Neither we nor third parties have access to your account data.

Details regarding payment with Paydirekt can be found in the T&Cs and the privacy policy of Paydirekt under: https://www.paydirekt.de/agb/index.html.