Data protection

Privacy policy

Table of Contents

Data protection

We have written this Privacy Policy (version 19.04.2021-111725926) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679, what information we collect, how we use data and the choices you have as a visitor to this website.

Privacy statements usually sound very technical. This version, on the other hand, is intended to describe the most important things to you as simply and clearly as possible. As far as possible, technical terms are explained in a reader-friendly way. We also want to convey that we only collect and use information with this website if there is a corresponding legal basis. This is certainly not possible by giving the most concise, technical explanations possible, as is often the standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps there is one or the other piece of information that you did not know yet.
If you still have questions, we would like to ask you to follow the existing links and look at further information on third party sites, or simply write us an e-mail. You can find our contact details in the imprint.

Automatic data storage

When you visit websites these days, certain information is automatically created and stored, including on this website. This collected data should be collected as sparingly as possible and only with justification. By website, by the way, we mean the entirety of all web pages on your domain, i.e. everything from the home page (homepage) to the very last subpage (like this one). By domain, we mean, for example, example.de or sampleexample.com.

Even while you are visiting our website right now, our web server - that is the computer on which this website is stored - usually automatically saves data for reasons of operational security, to compile access statistics, etc., such as

  • the complete Internet address (URL) of the accessed website (e.g. https://www.beispielwebsite.de/beispielunterseite.html/)
  • Browser and browser version (e.g. Chrome 87)
  • the operating system used (e.g. Windows 10)
  • the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen.html/)
  • the host name and IP address of the device being accessed (e.g. COMPUTERNAME and 194.23.43.121)
  • Date and time
  • in files, the so-called web server log files.

To illustrate:

Browser and web server

As a rule, these files are stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot exclude the possibility that this data may be viewed by the authorities in the event of unlawful conduct.

In short, your visit is logged by our provider (the company that runs our website on special computers (servers)), but we do not share your information!

Cookies

Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.

What exactly are cookies?

Whenever you browse the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other uses. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to the cookies, our website knows who you are and offers you the setting you are used to. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. Here, the web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.

HTTP cookie interaction between browser and web server

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie is to be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies also cannot access information on your PC.

For example, cookie data can look like this:

Name: _ga
Value: GA1.2.1326744211.152111725926-9
Intended use: to distinguish website visitors
Expiry date: after 2 years

A browser should be able to support these minimum sizes:

  • At least 4096 bytes per cookie
  • At least 50 cookies per domain
  • At least 3000 cookies in total

What are the different types of cookies?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

One can distinguish 4 types of cookies:

Essential cookies
These cookies are necessary to ensure basic website functionality. For example, these cookies are needed when a user adds a product to the shopping cart, then continues to browse other pages and later proceeds to checkout. Through these cookies, the shopping cart is not deleted even if the user closes his browser window.

Purposeful cookies
These cookies collect information about user behaviour and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behaviour of the website with different browsers.

Targeted cookies
These cookies provide a better user experience. For example, entered locations, font sizes or form data are stored.

Advertising cookies
These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these cookie types you would like to allow. And of course, this decision is also stored in a cookie.

How can I delete cookies?

How and whether you want to use cookies, you decide. Regardless of which service or website the cookies come from, you always have the option to delete, disable or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. The best way is to search for the instructions in Google with the search term "delete cookies Chrome" or "disable cookies Chrome" in the case of a Chrome browser.

What about my privacy?

The so-called "Cookie Guidelines" have been in place since 2009. These state that the storage of cookies requires your consent. Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in § 96 para. 3 of the Telecommunications Act (TKG). In Germany, the Cookie Directives were not implemented as national law. Instead, this directive was largely implemented in Section 15 (3) of the Telemedia Act (TMG).

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".

Storage of personal data

Personal information that you provide to us electronically on this website, such as your name, email address, address or other personal details when submitting a form or commenting on the blog, together with the time and IP address, will only be used by us for the stated purpose, kept secure and not passed on to third parties.

We therefore only use your personal data for communication with those visitors who expressly wish to be contacted and for the processing of the services and products offered on this website. We do not disclose your personal data without consent, but we cannot exclude the possibility that this data may be accessed in the event of unlawful conduct.

If you send us personal data by e-mail - thus away from this website - we cannot guarantee secure transmission and protection of your data. We recommend that you never send confidential data unencrypted by e-mail.

Rights under the General Data Protection Regulation

According to the provisions of the GDPR, you are generally entitled to the following rights:

  • Right of rectification (Article 16 GDPR)
  • Right to erasure ("right to be forgotten") (Article 17 GDPR)
  • Right to restriction of processing (Article 18 DSGVO)
  • Right to notification - Obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object (Article 21 GDPR)
  • Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in some way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/, and for Germany you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Evaluation of visitor behaviour

In the following data protection declaration, we inform you whether and how we evaluate data from your visit to this website. The evaluation of the collected data is usually anonymous and we can not conclude from your behavior on this website to your person.

You can find out more about how to object to this analysis of visit data in the following data protection declaration.

TLS encryption with https

TLS, encryption and https sound very technical and they are. We use HTTPS (Hypertext Transfer Protocol Secure stands for "secure hypertext transfer protocol") to transfer data bug-proof on the internet.
This means that the complete transmission of all data from your browser to our web server is secured - no one can "listen in".

In this way, we have introduced an additional layer of security and fulfil data protection through technology design. Article 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
You can recognize the use of this data transmission protection by the small lock symbol  in the top left corner of the browser to the left of the internet address (e.g. examplepage.de) and the use of the scheme https (instead of http) as part of our internet address.
If you want to know more about encryption, we recommend doing a Google search for "Hypertext Transfer Protocol Secure wiki" to get good links to more information.

Google Fonts Privacy Policy

On our website we use Google Fonts. These are the "Google Fonts" of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

You do not have to log in or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you don't need to worry that your Google account information, while using Google Fonts, will be transmitted to Google. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We'll look at exactly what the data storage looks like in more detail.

What are Google Fonts?

Google Fonts (formerly Google Web Fonts) is a directory of over 800 fonts that Google makes available to your users for free.

Many of these fonts are released under the SIL Open Font License, while others are released under the Apache License. Both are free software licenses.

Why do we use Google Fonts on our website?

With Google Fonts we can use fonts on our own website and do not have to upload them on our own server. Google Fonts is an important component to keep the quality of our website high. All Google Fonts are automatically optimized for the web and this saves data volume and is a great advantage especially for mobile use. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can sometimes visually distort texts or entire web pages. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). So, we use the Google Fonts so that we can display our entire online service as beautifully and consistently as possible.

What data is stored by Google?

When you visit our website, the fonts are reloaded via a Google server. Through this external call, data is transmitted to the Google servers. In this way, Google also recognises that you or your IP address is visiting our website. The Google Fonts API was developed to reduce the use, storage and collection of end-user data to what is necessary for the proper provision of fonts. By the way, API stands for "Application Programming Interface" and serves, among other things, as a data transmitter in the software sector.

Google Fonts stores CSS and font requests securely at Google and is therefore protected. Through the collected usage figures, Google can determine how well the individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites are using Google Fonts. This data is published to the Google Fonts BigQuery database. Entrepreneurs and developers use the Google web service BigQuery to be able to examine and move large amounts of data.

However, it should be noted that each Google Font request also automatically transmits information such as language settings, IP address, browser version, browser screen resolution and browser name to the Google servers. Whether this data is also stored is not clearly ascertainable or is not clearly communicated by Google.

How long and where is the data stored?

Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This allows us to use fonts with the help of a Google stylesheet. A stylesheet is a format template that can be used to easily and quickly change the design or font of a web page, for example.

The font files are stored by Google for one year. Google thus pursues the goal of fundamentally improving the loading time of websites. When millions of web pages refer to the same fonts, they are cached after the first visit and immediately reappear on all other web pages visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.

How can I delete my data or prevent data storage?

The data that Google stores for one day or one year cannot simply be deleted. The data is automatically transmitted to Google when the page is accessed. In order to delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=111725926. You can only prevent data storage in this case if you do not visit our site.

Unlike other web fonts, Google allows us unlimited access to all fonts. So we can access an unlimited sea of fonts and get the most out of our website. You can find out more about Google Fonts and other issues at https://developers.google.com/fonts/faq?tid=111725926. While Google does address privacy-related issues there, it doesn't really include detailed information about data storage. It is relatively difficult to get really precise information about stored data from Google.

You can also find out what data is generally collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

Font Awesome Privacy Policy

We use Font Awesome from the American company Fonticons (307 S. Main St., Suite 202, Bentonville, AR 72712, USA) on our website. When you visit one of our web pages, the Font Awesome web font (specifically icons) is loaded via the Font Awesome Content Delivery Network (CDN). This way, the texts or fonts and icons are displayed appropriately on each device. In this privacy policy, we go into more detail about the data storage and data processing by this service.

What is Font Awesome?

Icons are playing an increasingly important role for websites. Font Awesome is a web font that was developed especially for web designers and web developers. With Font Awesome, icons can be scaled and colored as desired using the CSS stylesheet language. This way, they replace old image icons. Font Awesome CDN is the easiest way to upload the icons or fonts to your website. For this, we just had to add a small line of code to our website.

Why do we use Font Awesome on our website?

Through Font Awesome, content on our website can be better presented. This makes it easier for you to navigate our website and grasp the content. With the icons you can even sometimes replace whole words and save space. That's especially handy when we optimize content specifically for smartphones. These icons are inserted as HMTL code instead of an image. This allows us to edit the icons with CSS just the way we want. At the same time, we also improve our loading speed with Font Awesome because it's just HTML elements and not icon images. All these advantages help us to make the website even clearer, fresher and faster for you.

What data does Font Awesome store?

Font Awesome Content Delivery Network (CDN) is used to load icons and symbols. CDNs are networks of servers that are distributed around the world, making it possible to quickly load files from nearby. Thus, as soon as you access one of our pages, the corresponding icons are also provided by Font Awesome.

In order to load the web fonts, your browser must establish a connection to the servers of the company Fonticons, Inc. In the process, your IP address is detected. Font Awesome also collects data about which icon files are downloaded and when. Furthermore, technical data such as your browser version, screen resolution or the time of the page accessed are also transmitted.

This data is collected and stored for the following reasons:

  • to optimize content delivery networks
  • to detect and correct technical errors
  • to protect CDNs from abuse and attacks
  • to be able to calculate fees from Font Awesome Pro customers
  • to know the popularity of icons
  • to know which computer and software you are using

If your browser does not allow web fonts, a default font of your PC will be used automatically. As far as we know at the moment, no cookies are set. We are in contact with Font Awesome's privacy department and will let you know as soon as we find out more.

How long and where is the data stored?

Font Awesome stores data about Content Delivery Network usage on servers located in the United States of America as well. However, CDN servers are located around the world and store user data wherever you are. In identifiable form, the data is generally only stored for a few weeks. Aggregated statistics on usage from the CDNs may be stored for longer. Personal data is not included here.

How can I delete my data or prevent data storage?

Font Awesome does not, to the best of our knowledge, store any personal data about the content delivery networks. Unfortunately, if you do not want data stored about the icons you use, you will not be able to visit our website. If your browser does not allow web fonts, no data will be transmitted or stored. In this case, the default font of your computer will simply be used.

If you would like to learn more about Font Awesome and how they handle data, we encourage you to read their privacy policy at https://fontawesome.com/privacy and their help page at https://fontawesome.com/help.

Google Analytics Privacy Policy

We use the analysis tracking tool Google Analytics (GA) of the American company Google Inc. on our website. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. For example, when you click on a link, this action is stored in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us better tailor our website and service to your preferences. In the following, we will go into more detail about the tracking tool and, in particular, inform you about what data is stored and how you can prevent this.

What is Google Analytics?

Google Analytics is a tracking tool used for traffic analysis of our website. In order for Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions you take on our website. As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we receive reports about your user behavior. These reports may include, but are not limited to, the following:

  • Target group reports: Through target group reports we get to know our users better and know more precisely who is interested in our service.
  • Ad reports: Ad reports make it easier for us to analyze and improve our online advertising.
  • Acquisition reports: Acquisition reports give us helpful information on how to get more people interested in our service.
  • Behavioral reports: This is where we learn how you interact with our website. We can track the path you take on our site and which links you click.
  • Conversion reports: Conversion is the name given to a process in which you take a desired action as a result of a marketing message. For example, you go from being just a website visitor to a buyer or newsletter subscriber. These reports help us learn more about how our marketing efforts are working for you. That's how we want to increase our conversion rate.
  • Real-time reports: Here we always find out immediately what is happening on our website. For example, we can see how many users are currently reading this text.

Why do we use Google Analytics on our website?

Our goal with this website is clear: we want to offer you the best possible service. The statistics and data from Google Analytics help us to achieve this goal.

The statistically evaluated data shows us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is found more easily by interested people on Google. On the other hand, the data helps us to better understand you as a visitor. We therefore know exactly what we need to improve on our website in order to provide you with the best possible service. The data also helps us to carry out our advertising and marketing measures in a more individual and cost-effective way. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics uses a tracking code to create a random, unique ID that is associated with your browser cookie. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a "returning" user. All collected data is stored together with this user ID. This makes it possible to evaluate pseudonymous user profiles.

In order to be able to analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is standard. Alternatively, you can also create the Universal Analytics property. Depending on the property used, data is stored for different lengths of time.

Through identifiers such as cookies and app instance IDs, your interactions on our website are measured. Interactions are all types of actions you take on our website. If you also use other Google systems (such as a Google Account), data generated through Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, authorize it. Exceptions may occur if required by law.

The following cookies are used by Google Analytics:

Name: _ga
Value: 2.1326744211.152111725926-5
Purpose: By default, analytics.js uses the cookie _ga to store the user ID. Basically, it is used to distinguish website visitors.
Expiration date: after 2 years

Name: _gid
Value : 2.1687193234.152111725926-1
Purpose: The cookie is also used to distinguish website visitors
Expiration date: after 24 hours

Name: _gat_gtag_UA_
Value: 1
Intended Use: Used to lower the request rate. When Google Analytics is deployed via Google Tag Manager, this cookie is named _dc_gtm_. .
Expiration date: after 1 minute

Name: AMP_TOKEN
Value: not specified
Purpose: The cookie has a token that can be used to retrieve a user ID from the AMP client ID service. Other possible values indicate a logout, a request, or an error.
Expiration date: after 30 seconds up to one year.

Name: __utma
Value: 1564498958.1564498958.1564498958.1
Purpose: This cookie is used to track your behavior on the website and measure performance. The cookie is updated every time information is sent to Google Analytics.
Expiration date: after 2 years

Name: __utmt
Value: 1
Intended Use: The cookie is set like _gat_gtag_UA_. used to throttle the request rate.
Expiration date: after 10 minutes

Name: __utmb
Value: 3.10.1564498958
Purpose: This cookie is used to determine new sessions. It is updated every time new data or info is sent to Google Analytics.
Expiration date: after 30 minutes

Name: __utmc
Value: 167421564
Purpose: This cookie is used to set new sessions for returning visitors. This is a session cookie and is only stored until you close the browser.
Expiration date: After closing the browser.

Name: __utmz
Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/
Purpose: The cookie is used to identify the source of traffic to our website. That is, the cookie stores where you came to our website from. This may have been another page or an advertisement.
Expiration date: after 6 months

Name: __utmv
Value: not specified
Purpose: The cookie is used to store custom user data. It is updated whenever information is sent to Google Analytics.
Expiration date: after 2 years

Note: This list can not claim to be complete, because Google changes the choice of their cookies again and again.

Here we show you an overview of the most important data that is collected with Google Analytics:

Heatmaps: Google creates so-called heatmaps. Via heatmaps you can see exactly those areas that you click on. This gives us information about where you are "on the road" on our site.

Session duration: Google defines session duration as the time you spend on our site without leaving. If you have been inactive for 20 minutes, the session ends automatically.

Bouncerate: A bounce is when you view only one page on our website and then leave our website again.

Account creation: When you create an account or place an order on our website, Google Analytics collects this data.

IP address: The IP address is only shown in abbreviated form so that no clear allocation is possible.

Location: The IP address can be used to determine the country and your approximate location. This process is also called IP location determination.

Technical information: Technical information includes, but is not limited to, your browser type, Internet service provider, or screen resolution.

Source of origin: Google Analytics or, of course, we are also interested in which website or which advertisement you came to our site from.

Other data include contact details, any ratings, playing media (e.g. when you play a video via our site), sharing content via social media or adding to your favourites. This list does not claim to be complete and only serves as a general orientation of the data storage by Google Analytics.

How long and where is the data stored?

Google has your servers spread all over the world. Most servers are located in America and consequently your data is mostly stored on American servers. You can read exactly where Google's data centers are located here: https://www.google.com/about/datacenters/inside/locations/?hl=de

Your data is distributed on different physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation. Every Google data center has appropriate emergency programs for your data. For example, if Google's hardware fails or natural disasters cripple servers, the risk of service interruption at Google still remains low.

The data retention period depends on the properties used. When using the newer Google Analytics 4 properties, the retention period of your user data is set to 14 months. For other so-called event data, we have the option to choose a retention period of 2 months or 14 months.

For Universal Analytics properties, Google Analytics has a default retention period of 26 months for your user data. Then your user data is deleted. However, we have the option to choose the retention period of user data ourselves. Five variants are available to us for this purpose:

  • Deletion after 14 months
  • Deletion after 26 months
  • Deletion after 38 months
  • Deletion after 50 months
  • No automatic deletion

In addition, there is also the option that data will only be deleted if you no longer visit our website within the period we have chosen. In this case, the retention period will be reset each time you visit our website again within the specified period.

Once the specified period has expired, the data is deleted once a month. This retention period applies to your data associated with cookies, user recognition and advertising IDs (e.g. DoubleClick domain cookies). Reporting results are based on aggregate data and are stored separately from user data. Aggregated data is a merging of individual data into a larger unit.

How can I delete my data or prevent data storage?

Under European Union data protection law, you have the right to access, update, delete or restrict your data. You can prevent Google Analytics from using your data by using the browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js). You can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de. Please note that this add-on only disables the collection of data by Google Analytics.

If you generally want to deactivate, delete or manage cookies (independently of Google Analytics), there are separate instructions for each browser:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

We hope we have been able to provide you with the most important information about the data processing of Google Analytics. If you want to learn more about the tracking service, we recommend these two links: http://www.google.com/analytics/terms/de.html and https://support.google.com/analytics/answer/6004245?hl=de.

Google Analytics IP anonymization

We have implemented Google Analytics IP address anonymization on this website. This feature was developed by Google to enable this website to comply with applicable data protection regulations and recommendations of local data protection authorities when they prohibit storage of the full IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place.

For more information on IP anonymization, please visit https://support.google.com/analytics/answer/2763052?hl=de.

Google Analytics reports on demographic characteristics and interests

We have turned on advertising reporting features in Google Analytics. The demographic and interest reports contain information on age, gender and interests. This allows us - without being able to assign this data to individual persons - to get a better picture of our users. You can find out more about the advertising functions at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.

You can stop the use of the activities and information of your Google account under "Settings for advertising" on https://adssettings.google.com/authenticated via checkbox.

Google Analytics Data Processing Addendum

We have entered into a direct customer agreement with Google for the use of Google Analytics by accepting the "Data Processing Addendum" in Google Analytics.

You can find out more about the data processing addendum for Google Analytics here: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad

Facebook Pixel Privacy Policy

We use the Facebook Pixel from Facebook on our website. For this we have implemented a code on our website. The Facebook pixel is a snippet of JavaScript code that loads a collection of functions that allow Facebook to track your user actions if you have come to our website via Facebook ads. For example, when you purchase a product on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies allow Facebook to match your user data (customer data such as IP address, user ID) with your Facebook account data. Facebook then deletes this data again. The collected data is anonymous and not visible to us and can only be used in the context of ad placements. If you yourself are a Facebook user and are logged in, your visit to our website is automatically assigned to your Facebook user account.

We want to show our services or products only to those people who are really interested in them. With the help of Facebook Pixel, our advertising measures can be better tailored to your wishes and interests. Thus, Facebook users (if they have allowed personalized advertising) get to see appropriate advertising. Furthermore, Facebook uses the collected data for analysis purposes and its own advertisements.

Below we show you those cookies that were set by embedding Facebook Pixel on a test page. Please note that these are only sample cookies. Different cookies are set depending on the interaction on our website.

Name: _fbp
Value: fb.1.1568287647279.257405483-6111725926-7
Purpose: This cookie is used by Facebook to display advertising products.
Expiration date: after 3 months

Name: fr
Value: 0aPf312HOS5Pboo2r..Bdeiuf...1.0.Bdeiuf.
Purpose: This cookie is used to make Facebook Pixel work properly.
Expiration date: after 3 months

Name: comment_author_50ae8267e2bdf1253ec1a5769f48e062111725926-3
Value: Name of the author
Purpose: This cookie stores the text and name of a user who leaves a comment, for example.
Expiration date: after 12 months

Name: comment_author_url_50ae8267e2bdf1253ec1a5769f48e062
Value: https%3A%2F%2Fwww.testseite...%2F (author's URL)
Purpose: This cookie stores the URL of the website that the user enters in a text field on our website.
Expiration date: after 12 months

Name: comment_author_email_50ae8267e2bdf1253ec1a5769f48e062
Value: author's email address
Purpose: This cookie stores the user's email address if they have provided it on the site.
Expiration date: after 12 months

Note: The cookies mentioned above refer to individual user behaviour. Especially with the use of cookies, changes at Facebook can never be excluded.

If you are logged in to Facebook, you can change your settings for advertisements yourself at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. If you are not a Facebook user, you can basically manage your usage-based online advertising at http://www.youronlinechoices.com/de/praferenzmanagement/. There you have the option to deactivate or activate providers.

If you want to learn more about Facebook's privacy practices, we recommend you check out the company's own data policies at https://www.facebook.com/policy.php.

Facebook Automatic Advanced Matching Privacy Policy

We have also enabled Automatic Advanced Matching as part of the Facebook Pixel feature. This feature of the Pixel allows us to send hashed emails, name, gender, city, state, zip code and date of birth or phone number as additional information to Facebook if you have provided us with this data. This activation allows us to tailor advertising campaigns on Facebook even more precisely to people who are interested in our services or products.

MailChimp privacy policy

Like many other websites, we also use the services of the newsletter company MailChimp on our website. The operator of MailChimp is the company The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. Thanks to MailChimp, we can send you interesting news very easily via newsletter. With MailChimp, we don't have to install anything and can still draw from a pool of really useful features. In the following, we will go into more detail about this email marketing service and inform you about the most important data protection-relevant aspects.

What is MailChimp?

MailChimp is a cloud-based newsletter management service. "Cloud-based" means that we do not have to install MailChimp on our own computer or server. Instead, we use the service via an IT infrastructure - which is available via the Internet - on an external server. This way of using a software is also called SaaS (Software as a Service). The following graphic shows schematically how mailchimp distributes emails to newsletter recipients.

Systematic function of mailchimp

With MailChimp we can choose from a wide range of different email types. Depending on what we want to achieve with our newsletter, we can run single campaigns, regular campaigns, autoresponders (automatic emails), A/B tests, RSS campaigns (sending at predefined time and frequency) and follow-up campaigns.

Why do we use MailChimp on our website?

Grundsätzlich nutzen wir einen Newsletter-Dienst, damit wir mit Ihnen in Kontakt bleiben. Wir wollen Ihnen erzählen was es bei uns Neues gibt oder welche attraktiven Angebote wir gerade in unserem Programm haben. Für unsere Marketing-Maßnahmen suchen wir immer die einfachsten und besten Lösungen. Und aus diesem Grund haben wir uns auch für das Newsletter-Management-Service von Mailchimp entschieden. Obwohl die Software sehr einfach zu bedienen ist, bietet sie eine große Anzahl an hilfreichen Features. So können wir in nur kurzer Zeit interessante und schöne Newsletter gestalten. Durch die angebotenen Designvorlagen gestalten wir jeden Newsletter ganz individuell und dank des „Responsive Design“ werden unsere Inhalte auch auf Ihrem Smartphone (oder einem anderen mobilen Endgeräten) leserlich und schön angezeigt.

Through tools such as the A/B test or the extensive analysis options, we see very quickly how our newsletter is received by you. This allows us to react if necessary and improve our offer or our services.

Another advantage is the "cloud system" of Mailchimp. The data is not stored and processed directly on our server. We can retrieve the data from external servers and save our storage space in this way. In addition, the maintenance effort is significantly lower.

What data is stored by MailChimp?

Rocket Science Group LLC (MailChimp) maintains online platforms that allow us to contact you (if you have subscribed to our newsletter). When you become a subscriber to our newsletter via our website, you confirm by email that you are a member of an email list of MailChimp. So that MailChimp can also prove that you have subscribed to the "list provider", the date of subscription and your IP address are stored. Furthermore, MailChimp stores your email address, name, physical address and demographic information such as language or location.

This information is used to send you emails and enable certain other MailChimp features (such as newsletter evaluation).

MailChimp also shares information with third parties to provide better services. MailChimp also shares some information with third-party advertising partners to better understand its customers' interests and concerns in order to provide more relevant content and targeted advertising.

Through so-called "web beacons" (these are small graphics in HTML emails) MailChimp can determine whether the email has arrived, whether it has been opened and whether links have been clicked. All this information is stored on the MailChimp servers. This provides us with statistical evaluations and allows us to see exactly how well our newsletter was received. This way we can adapt our offer much better to your wishes and improve our service.

MailChimp may also use this data to improve its own service. In this way, for example, the dispatch can be technically optimized or the location (country) of the recipients can be determined.

The following cookies can be set by Mailchimp. This is not a complete cookie list, but rather an exemplary selection:

Name: AVESTA_ENVIRONMENT
Value : Prod
Purpose: This cookie is necessary to provide the Mailchimp services. It is always set when a user signs up for a newsletter mailing list.
Expiration date: after end of session

Name: ak_bmsc
Value: F1766FA98C9BB9DE4A39F70A9E5EEAB55F6517348A7000001111725926-3
Purpose: The cookie is used to distinguish a human from a bot. This allows secure reports to be generated about the usage of a website.
Expiration date: after 2 hours

Name: bm_sv
Value: A5A322305B4401C2451FC22FFF547486~FEsKGvX8eovCwTeFTzb8//I3ak2Au...
Purpose: The cookie is from MasterPass Digital Wallet (a MasterCard service) and is used to provide a visitor with a secure and easy virtual payment experience. For this purpose, the user is anonymously identified on the website.
Expiration date: after 2 hours

Name: _abck
Value: 8D545C8CCA4C3A50579014C449B045111725926-9
Purpose: We have not been able to find out any more information about the purpose of this cookie
Expiry date: after one year

Sometimes it may happen that you open our newsletter via a specified link for better display. This is the case, for example, if your email program does not work or the newsletter is not displayed properly. The newsletter is then displayed via a MailChimp website. MailChimp also uses cookies (small text files that store data on your browser) on its own websites. Personal data may be processed by MailChimp and its partners (e.g. Google Analytics). This data collection is the responsibility of MailChimp and we have no influence on it. In MailChimp's "Cookie Statement" (at: https://mailchimp.com/legal/cookies/) you can find out exactly how and why the company uses cookies.

How long and where is the data stored?

Since MailChimp is an American company, all data collected is also stored on American servers.

In principle, the data remains permanently stored on the servers of Mailchimp and is only deleted when a request is made by you. You can have us delete your contact. This permanently removes all your personal data for us and anonymizes you in the Mailchimp reports. However, you can also request MailChimp to delete your data directly. Then all your data will be removed there and we will receive a notification from MailChimp. After we receive the email, we have 30 days to delete your contact from all connected integrations.

How can I delete my data or prevent data storage?

You can withdraw your consent to receive our newsletter at any time within the received email by clicking on the link at the bottom. Once you have unsubscribed by clicking on the unsubscribe link, your data will be deleted from MailChimp.

If you reach a MailChimp website via a link in our newsletter and cookies are set in your browser, you can delete or deactivate these cookies at any time.

Depending on your browser, disabling or deleting cookies works slightly differently. The following instructions show how to manage cookies in your browser:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow it or not.

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

You can find out more about MailChimp's use of cookies at https://mailchimp.com/legal/cookies/, and information about MailChimp's data protection (privacy) can be found at https://mailchimp.com/legal/privacy/.

We use Google Ads (formerly Google AdWords) as an online marketing measure to advertise our products and services. In this way, we want to draw more people's attention to the high quality of our offers on the Internet. As part of our advertising measures through Google Ads, we use the conversion tracking of the company Google Inc. on our website. In Europe, however, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With the help of this free tracking tool, we can better adapt our advertising offer to your interests and needs. In the following article, we will go into more detail about why we use conversion tracking, what data is stored in the process and how you can prevent this data storage.

What is Google Ads conversion tracking?

Google Ads (formerly Google AdWords) is the in-house online advertising system of Google Inc. We are convinced of the quality of our offer and want as many people as possible to get to know our website. In the online sector, Google Ads offers the best platform for this. Of course, we also want to get an accurate overview of the cost-benefit factor of our advertising campaigns. That's why we use the conversion tracking tool from Google Ads.

But what is a conversion actually? A conversion occurs when you go from being a purely interested website visitor to an active visitor. This happens whenever you click on our ad and then perform another action, such as visiting our website. We use Google's conversion tracking tool to record what happens after a user clicks on our Google Ads ad. For example, we can see whether products are purchased, services are used or whether users have signed up for our newsletter.

Why do we use Google Ads conversion tracking on our website?

We use Google Ads to draw attention to our offer on other websites as well. The goal is that our advertising campaigns really only reach those people who are interested in our offers. With the conversion tracking tool we see which keywords, ads, ad groups and campaigns lead to the desired customer actions. We see how many customers interact with our ads on a device and then make a conversion. This data allows us to calculate our cost-benefit factor, measure the success of individual advertising measures and consequently optimise our online marketing measures. We can also use the data obtained to make our website more interesting for you and adapt our advertising offer even more individually to your needs.

What data is stored with Google Ads conversion tracking?

We have included a conversion tracking tag or code snippet on our website to better analyze certain user actions. If you now click on one of our Google Ads ads, the cookie "Conversion" from a Google domain is stored on your computer (usually in the browser) or mobile device. Cookies are small text files that store information on your computer.

Here are the dates of the most important cookies for Google's conversion tracking:

Name: Conversion
Value: EhMI_aySuoyv4gIVled3Ch0llweVGAEgt-mr6aXd7dYlSAGQ111725926-3
Purpose: This cookie stores every conversion you make on our site after coming to us through a Google Ad.
Expiration date: after 3 months

Name: _gac
Value: 1.1558695989.EAIaIQobChMIiOmEgYO04gIVj5AYCh2CBAPrEAAYASAAEgIYQfD_BwE
Purpose: This is a classic Google Analytics cookie and is used to track various actions on our website.
Expiration date: after 3 months

Note: The cookie _gac only appears in connection with Google Analytics. The above list is not exhaustive, as Google also uses other cookies for analytical purposes.

As soon as you complete an action on our website, Google recognises the cookie and saves your action as a so-called conversion. As long as you surf our website and the cookie has not yet expired, we and Google recognize that you have found us through our Google Ads ad. The cookie is read and sent back to Google Ads with the conversion data. It is also possible that other cookies are used to measure conversions. Google Ads' conversion tracking can be further refined and improved using Google Analytics. For ads that Google displays in various locations on the web, cookies named "__gads" or "_gac" may be set under our domain. As of September 2017, various campaign information from analytics.js is stored with the _gac cookie. The cookie stores this data as soon as you visit one of our pages for which the automatic tagging of Google Ads has been set up. Unlike cookies set for Google domains, Google can only read these conversion cookies when you are on our website. We do not collect or receive any personally identifiable information. We receive a report from Google with statistical analyses. For example, we learn the total number of users who clicked on our ad and we see which advertising measures were well received.

How long and where is the data stored?

At this point we would like to point out that we have no influence on how Google uses the collected data. According to Google, the data is encrypted and stored on secure servers. In most cases, conversion cookies expire after 30 days and do not transmit any personal data. The cookies named "Conversion" and "_gac" (which is used in conjunction with Google Analytics) have an expiration date of 3 months.

How can I delete my data or prevent data storage?

You have the option not to participate in the conversion tracking of Google Ads. If you deactivate the Google conversion tracking cookie via your browser, you block conversion tracking. In this case, you will not be included in the statistics of the tracking tool. You can change the cookie settings in your browser at any time. This works slightly differently for each browser. Here you can find the instructions on how to manage cookies in your browser:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. Downloading and installing this browser plug-in at https://support.google.com/ads/answer/7395996 will also disable all "advertising cookies". Keep in mind that by disabling these cookies, you are not preventing the ads, only the personalized ads.

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

If you would like to learn more about Google's privacy policy, we recommend that you read Google's general privacy policy: https://policies.google.com/privacy?hl=de.

Payment provider

We use online payment systems on our website that allow us and you a secure and smooth payment process. Among other things, personal data may be sent to the respective payment provider, stored and processed there.

We therefore offer other payment service providers in addition to banking/credit institutions within the scope of contractual or legal relationships, because of legal obligations and on the basis of legitimate interest. The privacy statements of the individual payment providers (such as Amazon Payments, Apple Pay or Discover) provide you with a detailed overview of data processing and data storage. In addition, you can always contact the responsible parties if you have any questions about data protection-related topics.

What is a payment processor?

Payment providers are online payment systems that allow you to place an order via online banking. The payment processing is carried out by the payment provider you have chosen. We then receive information about the payment made. This method can be used by any user who has an active online banking account with PIN and TAN. There are hardly any banks that do not offer or accept such payment methods.

Why do we use payment providers on our website?

Of course we want to offer the best possible service with our website and our integrated online shop, so that you feel comfortable on our site and use our offers. We know that your time is precious and especially payment processes must work quickly and smoothly. For these reasons we offer you various payment providers. You can choose your preferred payment provider and pay in the usual way.

What data is stored?

Exactly which data is processed depends, of course, on the respective payment provider. But basically, data such as name, address, bank data (account number, credit card number, passwords, TANs, etc.) are stored. These are necessary data to be able to carry out a transaction at all. In addition, any contractual data and user data, such as when you visit our website, what content you are interested in or which sub-pages you click on, may also be stored. Your IP address and information about the computer you are using are also stored by most payment providers.

The data is usually stored and processed on the servers of the payment providers. We as the website operator do not receive this data. We are only informed whether the payment has worked or not. For identity and credit checks, it may happen that payment providers forward data to the appropriate body. For all payment transactions, the business and data protection principles of the respective provider always apply. Therefore, please always check the general terms and conditions and the privacy policy of the payment provider. You also have the right to have data deleted or corrected at any time. Please contact the respective service provider regarding your rights (right of revocation, right to information and right to be affected).

Information on the specific payment providers - if available - can be found in the following sections.

Visa Privacy Policy

We use Visa, a global payment provider, on our website. The service provider is the American company Visa Inc. The company responsible for the European region is Visa Europe Services Inc. (1 Sheldon Square, London W2 6TT, United Kingdom) is responsible for Europe. You can find out more about the data processed through the use of Visa in the Privacy Policy at https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

Shop Pay Privacy Policy

We use Shop Pay, a service for online payment solutions, on our website. The service provider is the American company Shopify Inc. The company Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland) is responsible for the European region. You can find out more about the data processed through the use of Shop Pay in the Privacy Policy at https://www.shopify.de/legal/datenschutz.

PayPal Privacy Policy

We use the online payment service PayPal on our website. The service provider is the American company PayPal Inc. The company PayPal Europe (S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) is responsible for the European area. You can find out more about the data processed through the use of PayPal in the Privacy Policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Mastercard Privacy Policy

We use the payment service provider Mastercard on our website. The service provider is the American company Mastercard Inc. The company Mastercard Europe SA (Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium) is responsible for the European area. You can find out more about the data processed through the use of Mastercard in the Privacy Policy at https://www.mastercard.de/de-de/datenschutz.html.

iDEAL Privacy Policy

We use iDEAL, a payment system service, on our website. The service provider is the Dutch company Currence B.V., Gustav Mahlerplein 33-35, Amsterdam, Noord-Holland 1082 MS, The Netherlands. You can read more about the data processed through the use of iDEAL in the Privacy Policy at https://www.ideal.nl/en/disclaimer-privacy-statement/.

Google Pay Privacy Policy

We use the online payment provider Google Pay on our website. The service provider is the American company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. You can find out more about the data processed through the use of Google Pay in the Privacy Policy at https://policies.google.com/privacy.

giropay privacy policy

We use the online payment provider giropay on our website. The service provider is the German company paydirekt GmbH, Stephanstraße 14-16, 60313 Frankfurt am Main, Germany. You can find out more about the data processed through the use of giropay in the Privacy Policy at https://www.giropay.de/rechtliches/datenschutzerklaerung/.

eps transfer privacy policy

We use eps-Überweisung, an online payment service, on our website. The service provider is the Austrian company Stuzza GmbH, Frankgasse 10/8, 1090 Vienna, Austria. You can find out more about the data processed through the use of eps-Überweisung in the Privacy Policy at https://eservice.stuzza.at/de/datenschutzerklaerung.html.

Apple Pay Privacy Policy

We use Apple Pay, a service for online payment processes, on our website. The service provider is the American company Apple Inc, Infinite Loop, Cupertino, CA 95014, USA. You can find out more about the data processed through the use of Apple Pay in the Privacy Policy at https://www.apple.com/legal/privacy/de-ww/.

Amazon Payments Privacy Policy

We use Amazon Payments on our website, a service for online payment procedures. The service provider is the American company Amazon.com Inc. The company Amazon Payments Europe S.C.A. (38 Avenue J.F. Kennedy, L-1855 Luxembourg) is responsible for the European region. You can find out more about the data processed through the use of Amazon Payments in the Privacy Policy at https://pay.amazon.de/help/201212490.

Sofortüberweisung Privacy Policy

We offer on our website the payment method "Sofortüberweisung" of the company Sofort GmbH for cashless payment. Sofort GmbH has belonged to the Swedish company Klarna since 2014, but has its headquarters in Germany, Theresienhöhe 12, 80339 Munich.

If you choose this payment method, among other things, personal data will be transmitted to Sofort GmbH or Klarna, stored and processed there. With this data protection text we give you an overview of the data processing by Sofort GmbH.

What is an "instant transfer"?

Sofortüberweisung is an online payment system that allows you to place an order via online banking. The payment processing is carried out by Sofort GmbH and we immediately receive information about the payment made. This method can be used by any user who has an active online banking account with PIN and TAN. Only a few banks do not yet support this payment method.

Why do we use "Sofortüberweisung" on our website?

Our goal with our website and integrated online shop is to provide you with the best possible service. In addition to the overall experience on the website and in addition to our offers, this also includes a smooth, fast and secure payment processing of your orders. To ensure this, we use "Sofortüberweisung" as a payment system.

What data is stored by "Sofortüberweisung"?

When you make an instant transfer via the Sofort/Klarna service, data such as name, account number, bank code, subject, amount and date are stored on the company's servers. We also receive this information via the payment confirmation.

As part of the account coverage check, Sofort GmbH checks whether your account balance and overdraft facility cover the payment amount. In some cases, it is also checked whether instant transfers have been successfully carried out in the last 30 days. In addition, your user identification (such as user number or contract number) in abbreviated ("hashed") form and your IP address are collected and stored. For SEPA transfers, the BIC and IBAN are also stored.

According to the company, no other personal data (such as account balances, turnover data, disposition limits, account lists, mobile phone number, authentication certificates, security codes or PIN/TAN) is collected, stored or passed on to third parties.

Sofortüberweisung also uses cookies to make its own service more user-friendly. When you order a product, you will be redirected to the Sofort or Klarna website. After the successful payment you will be redirected to our thank you page. The following three cookies are set here:

Name: SOFUEB
Value: e8cipp378mdscn9e17kajlfhv7111725926-5
Purpose: This cookie stores your session ID.
Expiration date: after the browser session ends.

Name: User[user_cookie_rules] Value : 1
Purpose: This cookie stores your consent to the use of cookies.
Expiration date: after 10 years

Name: _ga
Value: GA1.2.69759879.1589470706
Purpose: By default, analytics.js uses the cookie _ga to store the user ID. Basically, it is used to distinguish the website visitors. This is a cookie from Google Analytics.
Expiration date: after 2 years

Note: The cookies listed here do not claim to be complete. It is always possible that Sofortüberweisung also uses other cookies.

How long and where is the data stored?

All collected data is stored within the legal obligation to retain it. This obligation can last between three and ten years.

Klarna/Sofort GmbH tries to store data only within the EU or the European Economic Area (EEA). If data is transferred outside the EU/EEA, the data protection must comply with the GDPR and the country must be in an adequacy decision of the EU.

How can I delete my data or prevent data storage?

You can withdraw your consent for Klarna to process personal data at any time. You also always have the right to access, correct and delete your personal data. To do so, you can simply contact the company's data protection team by emailing datenschutz@sofort.com.

Possible cookies that Sofortüberweisung uses, you can manage in your browser, delete or disable. Depending on your preferred browser, this works in different ways. The following instructions show how to manage cookies in the most common browsers:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

If you want to learn more about the data processing by the "Sofortüberweisung" of the company Sofort GmbH, we recommend the privacy policy at https://www.sofort.de/datenschutz.html.

Stripe Privacy Policy

We use a payment tool from the American technology company and online payment service Stripe on our website. For customers within the EU, Stripe Payments Europe (Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) is responsible. This means that if you choose Stripe as your payment method, your payment will be processed through Stripe Payments. In doing so, data necessary for the payment process will be forwarded to Stripe and stored. In this privacy policy, we give you an overview of this data processing and storage by Stripe and explain why we use Stripe on our website.

What's Stripe?

The technology company Stripe offers payment solutions for online payments. With Stripe it is possible to accept credit and debit card payments in our webshop. Stripe takes care of the entire payment process. A big advantage of Stripe is, for example, that you never have to leave our website or shop during the payment process and the payment processing is very fast.

Why do we use Stripe for our website?

Of course we want to offer the best possible service with our website and our integrated online shop, so that you feel comfortable on our site and use our offers. We know that your time is precious and therefore especially payment processes must work quickly and smoothly. In addition to our other payment providers, we have found a partner in Stripe that guarantees secure and fast payment processing.

What data is stored by Stripe?

If you choose Stripe as your payment method, personal data about you will also be transmitted to Stripe and stored there. This is transaction data. This data includes the payment method (i.e. credit card, debit card or account number), bank code, currency, amount and date of payment. In the case of a transaction, your name, e-mail address, billing or shipping address and sometimes your transaction history may also be transmitted. This information is required for authentication. Stripe may also collect your name, address, phone number and country in addition to technical data about your device (such as IP address) for fraud prevention, financial reporting and to fully provide its services.

Stripe does not sell any of your data to independent third parties, such as marketing agencies or other companies that have nothing to do with the Stripe company. However, the data may be shared with internal departments, a limited number of external Stripe partners, or for regulatory compliance purposes. Stripe also uses cookies to collect data. Here is a selection of cookies that Stripe may set during the payment process:

Name: m
Value: edd716e9-d28b-46f7-8a55-e05f1779e84e040456111725926-5
Purpose: This cookie appears when you select the payment method. It stores and recognizes whether you access our website via a PC, tablet or smartphone.
Expiration date: after 2 years

Name: __stripe_mid
Value: fc30f52c-b006-4722-af61-a7419a5b8819875de9111725926-1
Purpose: In order to perform a credit card transaction, this cookie is required. For this purpose, the cookie stores your session ID.
Expiration date: after one year

Name: __stripe_sid
Value: 6fee719a-c67c-4ed2-b583-6a9a50895b122753fe
Purpose: This cookie also stores your ID and is used for the payment process on our website by Stripe.
Expiration date: after session expires

How long and where is the data stored?

When data is automatically entered into a form, cookies are always involved. If you do not want to use this function, you can disable these cookies at any time. Further down in the text you will find instructions on how to basically delete, deactivate or manage cookies in your browser. Our tests have shown that no cookies are set by Klarna directly. If you choose the payment method "Klarna Sofort" and click on "Order", you will be redirected to the Sofort website. After the successful payment you will come to our thank you page. There the following cookie is set by sofort.com:

How can I delete my data or prevent data storage?

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Name: SOFUEB
Value: e8cipp378mdscn9e17kajlfhv7111725926-4
Purpose: This cookie stores your session ID.
Expiration date: after the browser session ends.

Klarna strives to store your data only within the EU or the European Economic Area (EEA). However, it may happen that data is transferred outside the EU/EEA. If this happens, Klarna ensures that the data protection is in accordance with the GDPR and the third country is in an adequacy decision of the European Union. The data is always stored for as long as Klarna needs it for the processing purpose.

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

You can withdraw your consent for Klarna to process personal data at any time. You also always have the right to access, correct and delete your personal data. To do so, you simply need to contact the company or the company's data protection team by emailing datenschutz@klarna.de. You can also contact Klarna directly via the Klarna website "My data protection request".

Klarna Checkout Privacy Policy

You can delete, disable or manage cookies that Klarna may use for its functions in your browser. Depending on which browser you use, this works in different ways. The following instructions show how to manage cookies in your browser:

We hope we have given you a good overview of the data processing by Klarna. If you would like to learn more about the handling of your data, we recommend that you read the Klarna privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

We use selected tools from Facebook on our website. Facebook is a social media network owned by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. These tools enable us to provide you and people interested in our products and services with the best possible experience. Below we provide an overview of the various Facebook tools, what data is sent to Facebook and how you can delete this data.

What are Facebook tools?

Among many other products, Facebook also offers the so-called "Facebook Business Tools". This is the official name of Facebook. However, since the term is hardly known, we have decided to call them simply Facebook Tools. Among them are:

Facebook Pixel

Social plug-ins (such as the "Like" or "Share" button).

Facebook Login

  • account kit
  • APIs (Application Programming Interface)
  • SDKs (collection of programming tools)

Platform integrations

Plugins

Codes

Specifications

How long and where is the data stored?

Documentations

How can I delete my data or prevent data storage?

Technologies and services

Through these tools, Facebook expands services and has the ability to obtain information about user activity outside of Facebook.

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

Why do we use Facebook tools on our website?

 

Facebook privacy policy

We only want to show our services and products to people who are really interested in them. With the help of advertisements (Facebook ads), we can reach exactly these people. However, Facebook needs information about people's wishes and needs in order to show them suitable ads. Thus, information about user behaviour (and contact details) on our website is made available to the company. As a result, Facebook collects better user data and can show interested people the appropriate ads about our products or services. The tools thus enable tailored advertising campaigns on Facebook.

Data about your behavior on our website is called "event data" by Facebook. This is also used for measurement and analytics services. This allows Facebook to create "campaign reports" on our behalf about the impact of our advertising campaigns. We also use analytics to get a better understanding of how you use our services, website or products. As a result, we use some of these tools to optimize your user experience on our website. For example, social plug-ins allow you to share content on our site directly on Facebook.

What data do Facebook tools store?

  • By using individual Facebook tools, personal data (customer data) can be sent to Facebook. Depending on the tools used, customer data such as name, address, telephone number and IP address may be sent.
  • Facebook uses this information to match the data with the data it itself has from you (if you are a Facebook member). Before customer data is transferred to Facebook, a process called "hashing" takes place. This means that a data set of any size is transformed into a string of characters. This also serves to encrypt data.
  • In addition to contact details, "event data" is also transmitted. Event data" refers to the information that we receive about you on our website. For example, which subpages you visit or which products you buy from us. Facebook does not share the information it receives with third parties (such as advertisers) unless the company has explicit permission or is legally required to do so. "Event data" can also be linked to contact information. This allows Facebook to provide better personalized advertising. After the matching process already mentioned, Facebook deletes the contact data again.
  • In order to deliver ads in an optimized manner, Facebook uses Event Data only when it is aggregated with other data (collected by Facebook in other ways). Facebook also uses this event data for security, protection, development and research purposes. Much of this data is transferred to Facebook via cookies. Cookies are small text files used to store data or information in browsers. Depending on the tools you use and whether you are a Facebook member, different numbers of cookies are placed in your browser. We discuss individual Facebook cookies in more detail in the descriptions of each Facebook tool. General information about the use of Facebook cookies can also be found at https://www.facebook.com/policies/cookies.
  • Basically, Facebook stores data until it is no longer needed for its own services and Facebook products. Facebook has servers all over the world where its data is stored. However, customer data is deleted within 48 hours after it has been compared with its own user data.
  • In accordance with the basic data protection regulation, you have the right to information, correction, transferability and deletion of your data.
  • A complete deletion of the data only occurs if you delete your Facebook account completely. And this is how deleting your Facebook account works:
  • 1) Click Settings on the right side of Facebook.
  • 2) Next, click on "Your Facebook Information" in the left column.
  • 3) Now click "Deactivation and deletion".
  • 4) Now select "Delete account" and then click "Continue and delete account".
  • 5) Now enter your password, click on "Next" and then on "Delete account".

The storage of data that Facebook receives via our site is carried out, among other things, via cookies (e.g. for social plugins). In your browser, you can deactivate, delete or manage individual or all cookies. Depending on which browser you use, this works in different ways. The following instructions show how to manage cookies in your browser:

We hope we have provided you with the most important information about the use and data processing by Facebook tools. If you want to learn more about how Facebook uses your data, we recommend that you read the data policy at https://www.facebook.com/about/privacy/update.

Facebook Social Plug-ins Privacy Policy

So-called social plug-ins of the company Facebook Inc. are installed on our website. You can recognize these buttons by the classic Facebook logo, such as the "Like" button (the hand with raised thumb) or by a clear "Facebook Plug-in" label. A social plug-in is a small part of Facebook that is integrated into our site. Each plug-in has its own function. The most commonly used functions are the familiar "Like" and "Share" buttons.

The following social plug-ins are offered by Facebook:

"Save" button

"Like" button, share, send and quote

Page plug-in

Comments

How long and where is the data stored?

Messenger plug-in

How can I delete my data or prevent data storage?

Embedded posts and video player

Group Plug-in

At https://developers.facebook.com/docs/plugins you will find more detailed information on how the individual plug-ins are used. We use the social plug-ins on the one hand to offer you a better user experience on our site, on the other hand because Facebook can optimize our ads.

If you have a Facebook account or have visited facebook.com before, Facebook has already set at least one cookie in your browser. In this case, your browser sends information to Facebook via this cookie as soon as you visit our site or interact with social plug-ins (e.g. the "Like" button).

The information obtained is deleted or anonymized again within 90 days. According to Facebook, this data includes your IP address, which website you visited, the date, the time and other information concerning your browser.

To prevent Facebook from collecting a lot of data during your visit to our website and connecting it with Facebook data, you must log out of Facebook during your visit to the website.

If you are not logged into Facebook or do not have a Facebook account, your browser sends less information to Facebook because you have fewer Facebook cookies. Nevertheless, data such as your IP address or which website you visit may be transmitted to Facebook. We would like to point out that we do not know the exact content of the data. However, we try to inform you as best as possible about the data processing according to our current state of knowledge. You can also read about how Facebook uses the data in the company's data policy at https://www.facebook.com/about/privacy/update.

The following cookies are set in your browser at a minimum when you visit a website with social plug-ins from Facebook:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow it or not.

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Name: dpr
Value: not specified
Purpose: This cookie is used to enable the social plug-ins on our website to work.
Expiration date: after end of session

Name: fr
Value: 0jieyh4111725926c2GnlufEJ9..Bde09j...1.0.Bde09j
Purpose: The cookie is also necessary for the plug-ins to work properly.
Expiration date:: after 3 months

Note: These cookies were set after a test, even if you are not a Facebook member.

If you are logged in to Facebook, you can change your ad settings yourself at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. If you are not a Facebook user, you can manage your usage-based online advertising at http://www.youronlinechoices.com/de/praferenzmanagement/grundsätzlich. There you have the option to deactivate or activate providers.

  • We have incorporated Instagram features on our website. Instagram is a social media platform of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Facebook Inc. since 2012 and is one of the Facebook products. Embedding Instagram content on our website is called embedding. This allows us to show you content such as buttons, photos or videos from Instagram directly on our website. When you visit web pages on our website that have an Instagram function integrated, data is transmitted to Instagram, stored and processed. Instagram uses the same systems and technologies as Facebook. Your data is thus processed across all Facebook companies.
  • In the following, we want to give you a more detailed insight into why Instagram collects data, what kind of data it is and how you can largely control the data processing. Since Instagram belongs to Facebook Inc., we obtain our information on the one hand from the Instagram policies, but on the other hand also from the Facebook data policies themselves.
  • What is Instagram?
  • Instagram is one of the most popular social media networks in the world. Instagram combines the advantages of a blog with the advantages of audiovisual platforms like YouTube or Vimeo. You can upload photos and short videos on "Insta" (as many of the users casually call the platform), edit them with various filters and also distribute them on other social networks. And if you don't want to be active yourself, you can also just follow other interesting users.
  • Why do we use Instagram on our website?
  • Name: rur
    Value: ATN
    Purpose: This is an Instagram cookie that provides functionality on Instagram.
    Expiration date: after the end of the session
  • Name: urlgen
    Wert: “{”194.96.75.33”: 1901}:1iEtYv:Y833k2_UjKvXgYe111725926”
    Verwendungszweck: Dieses Cookie dient den Marketingzwecken von Instagram.
    Ablaufdatum: nach Ende der Sitzung

Note: We cannot claim completeness here. Which cookies are set in individual cases depends on the embedded features and your use of Instagram.

Instagram shares the information it receives between Facebook companies with external partners and with people you connect with around the world. The data processing is carried out in compliance with its own data policy. Your data is distributed on Facebook servers around the world, in part for security reasons. Most of these servers are located in the USA.

Thanks to the Basic Data Protection Regulation, you have the right of access, portability, rectification and deletion of your data. You can manage your data in the Instagram settings. If you want to completely delete your data on Instagram, you must permanently delete your Instagram account.

And here's how deleting your Instagram account works:

First, open the Instagram app. On your profile page, go down and click on "Help section". Now you will get to the company's website. On the website, click on "Manage your account" and then click on "Delete your account".

When you delete your account entirely, Instagram deletes posts such as your photos and status updates. Information that other people have shared about you is not part of your account and therefore will not be deleted.

As mentioned above, Instagram primarily stores your data via cookies. You can manage, disable or delete these cookies in your browser. Depending on your browser, the management always works a bit differently. Here we show you the instructions of the most important browsers.

You can also basically set up your browser so that you are always informed when a cookie is to be set. Then you can always decide individually whether you want to allow the cookie or not.

We have tried to provide you with the most important information about Instagram's data processing. You can learn more about Instagram's data policies at https://help.instagram.com/519522125107875
.

We use buttons and widgets of the social media network Pinterest, of the company Pinterest Inc.,808 Brannan Street, San Francisco, CA 94103, USA on our site.

If you want to learn more about Facebook's privacy practices, we recommend you check out the company's own data policies at https://www.facebook.com/policy.php.

Instagram privacy policy

By calling up pages that use such functions, data (IP address, browser data, date and time, cookies) are transmitted to Pinterest, stored and evaluated.

For their privacy policy, what information Pinterest collects, and how they use it, please visit https://policy.pinterest.com/de/privacy-policy.

We have integrated YouTube videos on our website. This way we can present you interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you call up a page on our website that has a YouTube video embedded, your browser automatically connects to the YouTube or Google servers. In the process, various data are transferred (depending on the settings). Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing in the European area.

In the following, we would like to explain in more detail which data is processed, why we have integrated YouTube videos and how you can manage or delete your data.

What is YouTube?

On YouTube, users can watch, rate, comment and upload videos for free. Over the last few years, YouTube has become one of the most important social media channels in the world. In order for us to display videos on our website, YouTube provides a code snippet that we have built into our site.

Why do we use YouTube videos on our website?

YouTube is the video platform with the most visitors and the best content. We are committed to providing you with the best possible user experience on our website. And of course, we can't do without interesting videos. With the help of our embedded videos, we provide you with further helpful content in addition to our texts and images. In addition, the embedded videos make our website easier to find on the Google search engine. Also, when we run ads through Google Ads, Google - thanks to the collected data - can really only show these ads to people who are interested in what we have to offer.

What data is stored by YouTube?

As soon as you visit one of our pages that has a YouTube video embedded, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet service provider. Other data may include contact details, any ratings, sharing of content via social media or adding to your favourites on YouTube.

If you're not signed in to a Google Account or YouTube account, Google stores data with a unique identifier associated with your device, browser, or app. For example, your preferred language setting is retained. But a lot of interaction data can't be stored because fewer cookies are set.

In the following list, we show cookies that were set in the browser in a test. On the one hand, we show cookies that are set without a logged-in YouTube account. On the other hand, we show cookies that are set with a logged-in account. The list cannot claim to be complete, because the user data always depends on the interactions on YouTube.

Name: YSC
Value: b9-CV6ojI5Y111725926-1
Purpose: This cookie registers a unique ID to store statistics of the video watched.
Expiration date: after session end

Name: PREF
Value: f1=50000000
Purpose: This cookie also registers your unique ID. Google gets statistics about how you use YouTube videos on our website through PREF.
Expiration date: after 8 months

Name: GPS
Value: 1
Purpose: This cookie registers your unique ID on mobile devices to track GPS location.
Expiration date: after 30 minutes

Name: VISITOR_INFO1_LIVE
Value: 95Chz8bagyU
Purpose: This cookie tries to estimate the bandwidth of the user on our web pages (with embedded YouTube video).
Expiration date: after 8 months

Other cookies that are set when you are logged in with your YouTube account:

Name: APISID
Value: zILlvClZSkqGsSwI/AU1aZI6HY7111725926-
Purpose: This cookie is used to create a profile about your interests. The data is used for personalized advertisements.
Expiration date: after 2 years

Name: CONSENT
Value: YES+AT.en+20150628-20-0
Purpose: The cookie stores the status of a user's consent to use various Google services. CONSENT is also used for security purposes to verify users and protect user data from unauthorized attacks.
Expiration date: after 19 years

Name: HSID
Value: AcRwpgUik9Dveht0I
Purpose: This cookie is used to create a profile about your interests. This data helps to display personalized advertising.
Expiration date: after 2 years

How long and where is the data stored?

Name: LOGIN_INFO
Value: AFmmF2swRQIhALl6aL...
Purpose: This cookie stores information about your login details.
Expiration date: after 2 years

How can I delete my data or prevent data storage?

Name: SAPISID
Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM
Purpose: This cookie works by uniquely identifying your browser and device. It is used to create a profile about your interests.
Expiration date: after 2 years

Name: SID
Value: oQfNKjAsI111725926-
Purpose: This cookie stores your Google Account ID and your last login time in digitally signed and encrypted form.
Expiration date: after 2 years

Name: SIDCC
Value: AN0-TYuqub2JOcDTyL
Purpose: This cookie stores information about how you use the site and what advertisements you may have seen before visiting our site.
Expiration date: after 3 months

The data that YouTube receives from you and processes is stored on Google servers. Most of these servers are located in America. You can see exactly where Google's data centers are located at https://www.google.com/about/datacenters/inside/locations/?hl=de. Your data is spread across the servers. This means that the data can be accessed more quickly and is better protected against manipulation.

Google stores the collected data for different lengths of time. Some data you can delete at any time, others are automatically deleted after a limited time and still others are stored by Google for a longer period of time. Some data (such as items from "My activity", photos or documents, products) stored in your Google Account will remain stored until you delete them. Even if you're not signed in to a Google Account, you can delete some data associated with your device, browser, or app.

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

Basically, you can manually delete data in Google Account. With the automatic deletion function of location and activity data introduced in 2019, information is stored depending on your decision - either 3 or 18 months and then deleted.

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Whether you have a Google account or not, you can configure your browser to delete or disable cookies from Google. Depending on which browser you use, this works in different ways. The following instructions show how to manage cookies in your browser:

Pinterest Privacy Policy

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. This way, you can decide for each individual cookie whether you allow it or not. Since YouTube is a subsidiary of Google, there is a shared privacy policy. If you want to learn more about how your data is handled, we recommend the privacy policy at https://policies.google.com/privacy?hl=de.

Our primary goal is to secure and protect our website for you and for us in the best possible way. To ensure this, we use Google reCAPTCHA of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With reCAPTCHA we can determine whether you are really a flesh and blood human being and not a robot or other spam software. By spam we mean any unsolicited information sent to us electronically. With the classic CAPTCHAS, you usually had to solve text or image puzzles to verify the information. With reCAPTCHA from Google, we usually don't have to bother you with such puzzles. Here, in most cases, it's enough to simply check a box to confirm that you're not a bot. With the new Invisible reCAPTCHA version, you don't even have to put a checkmark anymore. How this works exactly and especially what data is used for this, you will learn in the course of this privacy policy.

What is reCAPTCHA?

YouTube privacy policy

reCAPTCHA is a free captcha service from Google that protects websites from spam software and abuse by non-human visitors. The most common use of this service is when you fill out forms on the web. A captcha service is a type of automatic Turing test designed to ensure that an action on the Internet is performed by a human and not a bot. In the classic Turing test (named after computer scientist Alan Turing), a human determines the distinction between a bot and a human. In captchas, the computer or a software program also does this. Classic captchas work with small tasks that are easy for humans to solve, but present significant difficulties for machines. With reCAPTCHA, you no longer have to actively solve puzzles. The tool uses modern risk techniques to distinguish humans from bots. Here, you only need to check the "I am not a robot" text box, or with Invisible reCAPTCHA, even that is no longer necessary. With reCAPTCHA, a JavaScript element is embedded in the source code and then the tool runs in the background and analyzes your user behavior. From these user actions, the software calculates a so-called captcha score. Google uses this score to calculate how likely you are to be a human even before the captcha is entered. reCAPTCHA or captchas in general are always used when bots could manipulate or abuse certain actions (such as registrations, surveys, etc.).

Why do we use reCAPTCHA on our website?

We only want to welcome flesh and blood people on our site. Bots or spam software of any kind may confidently stay at home. That's why we pull out all the stops to protect ourselves and offer the best possible user experience for you. For this reason we use Google reCAPTCHA from Google. This way we can be pretty sure that we remain a "bot-free" website. By using reCAPTCHA, data is sent to Google to determine if you are actually human. reCAPTCHA is therefore used to ensure the security of our website and, by extension, your security. For example, without reCAPTCHA, it could happen that a bot registers as many email addresses as possible during registration in order to "spam" forums or blogs with unwanted advertising content. With reCAPTCHA we can avoid such bot attacks.

What data is stored by reCAPTCHA?

reCAPTCHA collects personal data from users in order to determine whether the actions on our website actually originate from people. Therefore, the IP address and other data required by Google for the reCAPTCHA service may be sent to Google. IP addresses are almost always shortened beforehand within the member states of the EU or other contracting states to the Agreement on the European Economic Area before the data ends up on a server in the USA. The IP address is not combined with other data from Google unless you are logged in with your Google account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services (YouTube. Gmail, etc.) are already placed on your browser. Then, reCAPTCHA places an additional cookie on your browser and captures a snapshot of your browser window.

The following list of collected browser and user data does not claim to be complete. Rather, they are examples of data that, according to our knowledge, are processed by Google.

Referrer URL (the address of the page from which the visitor comes)

IP address (e.g. 256.123.123.1)

Info about the operating system (the software that allows your computer to run. Known operating systems are Windows, Mac OS X, or Linux).

Cookies (small text files that store data in your browser)

Mouse and keyboard behavior (every action you perform with the mouse or keyboard is saved)

Date and language settings (which language or date you have preset on your PC is saved)

All JavaScript objects (JavaScript is a programming language that allows websites to adapt to the user. JavaScript objects can collect all kinds of data under one name).

Screen resolution (shows how many pixels the image display consists of)

It is undisputed that Google uses and analyzes this data even before you click on the checkbox "I am not a robot". With the Invisible reCAPTCHA version, even the ticking is omitted and the whole recognition process runs in the background. How much and which data Google stores exactly, one does not learn from Google in detail.

The following cookies are used by reCAPTCHA: Here we refer to the reCAPTCHA demo version from Google at https://www.google.com/recaptcha/api2/demo. All of these cookies require a unique identifier for tracking purposes. Here is a list of cookies that Google reCAPTCHA has set on the demo version:

Name: CONSENT
Wert: YES+AT.de+20150628-20-0
Verwendungszweck: Das Cookie speichert den Status der Zustimmung eines Users zur Nutzung unterschiedlicher Services von Google. CONSENT dient auch der Sicherheit, um User zu überprüfen und Userdaten vor unbefugten Angriffen zu schützen.
Ablaufdatum: nach 19 Jahren

Name: HSID
Wert: AcRwpgUik9Dveht0I
Verwendungszweck: Dieses Cookie wird verwendet, um ein Profil über Ihre Interessen zu erstellen. Diese Daten helfen personalisierte Werbung anzeigen zu können.
Ablaufdatum: nach 2 Jahren

Name: LOGIN_INFO
Wert: AFmmF2swRQIhALl6aL…
Verwendungszweck: In diesem Cookie werden Informationen über Ihre Login-Daten gespeichert.
Ablaufdatum: nach 2 Jahren

Name: SAPISID
Wert: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM
Verwendungszweck: Dieses Cookie funktioniert, indem es Ihren Browser und Ihr Gerät eindeutig identifiziert. Es wird verwendet, um ein Profil über Ihre Interessen zu erstellen.
Ablaufdatum: nach 2 Jahren

Name: SID
Wert: oQfNKjAsI111725926-
Verwendungszweck: Dieses Cookie speichert Ihre Google-Konto-ID und Ihren letzten Anmeldezeitpunkt in digital signierter und verschlüsselter Form.
Ablaufdatum: nach 2 Jahren

Name: SIDCC
Wert: AN0-TYuqub2JOcDTyL
Verwendungszweck: Dieses Cookie speichert Informationen, wie Sie die Webseite nutzen und welche Werbung Sie vor dem Besuch auf unserer Seite möglicherweise gesehen haben.
Ablaufdatum: nach 3 Monaten

How long and where is the data stored?

Die Daten, die YouTube von Ihnen erhält und verarbeitet werden auf den Google-Servern gespeichert. Die meisten dieser Server befinden sich in Amerika. Unter https://www.google.com/about/datacenters/inside/locations/?hl=de  sehen Sie genau wo sich die Google-Rechenzentren befinden. Ihre Daten sind auf den Servern verteilt. So sind die Daten schneller abrufbar und vor Manipulation besser geschützt.

Die erhobenen Daten speichert Google unterschiedlich lang. Manche Daten können Sie jederzeit löschen, andere werden automatisch nach einer begrenzten Zeit gelöscht und wieder andere werden von Google über längere Zeit gespeichert. Einige Daten (wie Elemente aus „Meine Aktivität“, Fotos oder Dokumente, Produkte), die in Ihrem Google-Konto gespeichert sind, bleiben so lange gespeichert, bis Sie sie löschen. Auch wenn Sie nicht in einem Google-Konto angemeldet sind, können Sie einige Daten, die mit Ihrem Gerät, Browser oder App verknüpft sind, löschen.

How can I delete my data or prevent data storage?

Grundsätzlich können Sie Daten im Google Konto manuell löschen. Mit der 2019 eingeführten automatischen Löschfunktion von Standort- und Aktivitätsdaten werden Informationen abhängig von Ihrer Entscheidung – entweder 3 oder 18 Monate gespeichert und dann gelöscht.

Unabhängig, ob Sie ein Google-Konto haben oder nicht, können Sie Ihren Browser so konfigurieren, dass Cookies von Google gelöscht bzw. deaktiviert werden. Je nachdem welchen Browser Sie verwenden, funktioniert dies auf unterschiedliche Art und Weise. Die folgenden Anleitungen zeigen, wie Sie Cookies in Ihrem Browser verwalten:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

Falls Sie grundsätzlich keine Cookies haben wollen, können Sie Ihren Browser so einrichten, dass er Sie immer informiert, wenn ein Cookie gesetzt werden soll. So können Sie bei jedem einzelnen Cookie entscheiden, ob Sie es erlauben oder nicht. Da YouTube ein Tochterunternehmen von Google ist, gibt es eine gemeinsame Datenschutzerklärung. Wenn Sie mehr über den Umgang mit Ihren Daten erfahren wollen, empfehlen wir Ihnen die Datenschutzerklärung unter https://policies.google.com/privacy?hl=de.

Google reCAPTCHA Privacy Policy

Unser oberstes Ziel ist es, unsere Webseite für Sie und für uns bestmöglich zu sichern und zu schützen. Um das zu gewährleisten, verwenden wir Google reCAPTCHA der Firma Google Inc. Für den europäischen Raum ist das Unternehmen Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Irland) für alle Google-Dienste verantwortlich. Mit reCAPTCHA können wir feststellen, ob Sie auch wirklich ein Mensch aus Fleisch und Blut sind und kein Roboter oder eine andere Spam-Software. Unter Spam verstehen wir jede, auf elektronischen Weg, unerwünschte Information, die uns ungefragter Weise zukommt. Bei den klassischen CAPTCHAS mussten Sie zur Überprüfung meist Text- oder Bildrätsel lösen. Mit reCAPTCHA von Google müssen wir Sie meist nicht mit solchen Rätseln belästigen. Hier reicht es in den meisten Fällen, wenn Sie einfach ein Häkchen setzen und so bestätigen, dass Sie kein Bot sind. Mit der neuen Invisible reCAPTCHA Version müssen Sie nicht mal mehr ein Häkchen setzen. Wie das genau funktioniert und vor allem welche Daten dafür verwendet werden, erfahren Sie im Verlauf dieser Datenschutzerklärung.

Was ist reCAPTCHA?

reCAPTCHA ist ein freier Captcha-Dienst von Google, der Webseiten vor Spam-Software und den Missbrauch durch nicht-menschliche Besucher schützt. Am häufigsten wird dieser Dienst verwendet, wenn Sie Formulare im Internet ausfüllen. Ein Captcha-Dienst ist eine Art automatischer Turing-Test, der sicherstellen soll, dass eine Handlung im Internet von einem Menschen und nicht von einem Bot vorgenommen wird. Im klassischen Turing-Test (benannt nach dem Informatiker Alan Turing) stellt ein Mensch die Unterscheidung zwischen Bot und Mensch fest. Bei Captchas übernimmt das auch der Computer bzw. ein Softwareprogramm. Klassische Captchas arbeiten mit kleinen Aufgaben, die für Menschen leicht zu lösen sind, doch für Maschinen erhebliche Schwierigkeiten aufweisen. Bei reCAPTCHA müssen Sie aktiv keine Rätsel mehr lösen. Das Tool verwendet moderne Risikotechniken, um Menschen von Bots zu unterscheiden. Hier müssen Sie nur noch das Textfeld „Ich bin kein Roboter“ ankreuzen bzw. bei Invisible reCAPTCHA ist selbst das nicht mehr nötig. Bei reCAPTCHA wird ein JavaScript-Element in den Quelltext eingebunden und dann läuft das Tool im Hintergrund und analysiert Ihr Benutzerverhalten. Aus diesen Useraktionen berechnet die Software einen sogenannten Captcha-Score. Google berechnet mit diesem Score schon vor der Captcha-Eingabe wie hoch die Wahrscheinlichkeit ist, dass Sie ein Mensch sind. reCAPTCHA bzw. Captchas im Allgemeinen kommen immer dann zum Einsatz, wenn Bots gewisse Aktionen (wie z.B. Registrierungen, Umfragen usw.) manipulieren oder missbrauchen könnten.

Warum verwenden wir reCAPTCHA auf unserer Webseite?

Wir wollen nur Menschen aus Fleisch und Blut auf unserer Seite begrüßen. Bots oder Spam-Software unterschiedlichster Art dürfen getrost zuhause bleiben. Darum setzen wir alle Hebel in Bewegung, uns zu schützen und die bestmögliche Benutzerfreundlichkeit für Sie anzubieten. Aus diesem Grund verwenden wir Google reCAPTCHA der Firma Google. So können wir uns ziemlich sicher sein, dass wir eine „botfreie“ Webseite bleiben. Durch die Verwendung von reCAPTCHA werden Daten an Google übermittelt, um festzustellen, ob Sie auch wirklich ein Mensch sind. reCAPTCHA dient also der Sicherheit unserer Webseite und in weiterer Folge damit auch Ihrer Sicherheit. Zum Beispiel könnte es ohne reCAPTCHA passieren, dass bei einer Registrierung ein Bot möglichst viele E-Mail-Adressen registriert, um im Anschluss Foren oder Blogs mit unerwünschten Werbeinhalten „zuzuspamen“. Mit reCAPTCHA können wir solche Botangriffe vermeiden.

Welche Daten werden von reCAPTCHA gespeichert?

reCAPTCHA sammelt personenbezogene Daten von Usern, um festzustellen, ob die Handlungen auf unserer Webseite auch wirklich von Menschen stammen. Es kann also die IP-Adresse und andere Daten, die Google für den reCAPTCHA-Dienst benötigt, an Google versendet werden. IP-Adressen werden innerhalb der Mitgliedstaaten der EU oder anderer Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum fast immer zuvor gekürzt, bevor die Daten auf einem Server in den USA landen. Die IP-Adresse wird nicht mit anderen Daten von Google kombiniert, sofern Sie nicht während der Verwendung von reCAPTCHA mit Ihrem Google-Konto angemeldet sind. Zuerst prüft der reCAPTCHA-Algorithmus, ob auf Ihrem Browser schon Google-Cookies von anderen Google-Diensten (YouTube. Gmail usw.) platziert sind. Anschließend setzt reCAPTCHA ein zusätzliches Cookie in Ihrem Browser und erfasst einen Schnappschuss Ihres Browserfensters.

Die folgende Liste von gesammelten Browser- und Userdaten, hat nicht den Anspruch auf Vollständigkeit. Vielmehr sind es Beispiele von Daten, die nach unserer Erkenntnis, von Google verarbeitet werden.

  • Referrer URL (die Adresse der Seite von der der Besucher kommt)
  • IP-Adresse (z.B. 256.123.123.1)
  • Infos über das Betriebssystem (die Software, die den Betrieb Ihres Computers ermöglicht. Bekannte Betriebssysteme sind Windows, Mac OS X oder Linux)
  • Cookies (kleine Textdateien, die Daten in Ihrem Browser speichern)
  • Maus- und Keyboardverhalten (jede Aktion, die Sie mit der Maus oder der Tastatur ausführen wird gespeichert)
  • Datum und Spracheinstellungen (welche Sprache bzw. welches Datum Sie auf Ihrem PC voreingestellt haben wird gespeichert)
  • Alle Javascript-Objekte (JavaScript ist eine Programmiersprache, die Webseiten ermöglicht, sich an den User anzupassen. JavaScript-Objekte können alle möglichen Daten unter einem Namen sammeln)
  • Bildschirmauflösung (zeigt an aus wie vielen Pixeln die Bilddarstellung besteht)

Unumstritten ist, dass Google diese Daten verwendet und analysiert noch bevor Sie auf das Häkchen „Ich bin kein Roboter“ klicken. Bei der Invisible reCAPTCHA-Version fällt sogar das Ankreuzen weg und der ganze Erkennungsprozess läuft im Hintergrund ab. Wie viel und welche Daten Google genau speichert, erfährt man von Google nicht im Detail.

Folgende Cookies werden von reCAPTCHA verwendet: Hierbei beziehen wir uns auf die reCAPTCHA Demo-Version von Google unter https://www.google.com/recaptcha/api2/demo. All diese Cookies benötigen zu Trackingzwecken eine eindeutige Kennung. Hier ist eine Liste an Cookies, die Google reCAPTCHA auf der Demo-Version gesetzt hat:

Name: IDE
Wert: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-111725926-8
Verwendungszweck: Dieses Cookie wird von der Firma DoubleClick (gehört auch Google) gesetzt, um die Aktionen eines Users auf der Webseite im Umgang mit Werbeanzeigen zu registrieren und zu melden. So kann die Werbewirksamkeit gemessen und entsprechende Optimierungsmaßnahmen getroffen werden. IDE wird in Browsern unter der Domain doubleclick.net gespeichert.
Ablaufdatum: nach einem Jahr

Name: 1P_JAR
Wert: 2019-5-14-12
Verwendungszweck: Dieses Cookie sammelt Statistiken zur Webseite-Nutzung und misst Conversions. Eine Conversion entsteht z.B., wenn ein User zu einem Käufer wird. Das Cookie wird auch verwendet, um Usern relevante Werbeanzeigen einzublenden. Weiters kann man mit dem Cookie vermeiden, dass ein User dieselbe Anzeige mehr als einmal zu Gesicht bekommt.
Ablaufdatum: nach einem Monat

Name: ANID
Wert: U7j1v3dZa1117259260xgZFmiqWppRWKOr
Verwendungszweck: Viele Infos konnten wir über dieses Cookie nicht in Erfahrung bringen. In der Datenschutzerklärung von Google wird das Cookie im Zusammenhang mit „Werbecookies“ wie z. B. “DSID”, “FLC”, “AID”, “TAID” erwähnt. ANID wird unter Domain google.com gespeichert.
Ablaufdatum: nach 9 Monaten

Name: CONSENT
Wert: YES+AT.de+20150628-20-0
Verwendungszweck: Das Cookie speichert den Status der Zustimmung eines Users zur Nutzung unterschiedlicher Services von Google. CONSENT dient auch der Sicherheit, um User zu überprüfen, Betrügereien von Anmeldeinformationen zu verhindern und Userdaten vor unbefugten Angriffen zu schützen.
Ablaufdatum: nach 19 Jahren

Name: NID
Wert: 0WmuWqy111725926zILzqV_nmt3sDXwPeM5Q
Verwendungszweck: NID wird von Google verwendet, um Werbeanzeigen an Ihre Google-Suche anzupassen. Mit Hilfe des Cookies „erinnert“ sich Google an Ihre meist eingegebenen Suchanfragen oder Ihre frühere Interaktion mit Anzeigen. So bekommen Sie immer maßgeschneiderte Werbeanzeigen. Das Cookie enthält eine einzigartige ID, um persönliche Einstellungen des Users für Werbezwecke zu sammeln.
Ablaufdatum: nach 6 Monaten

Name: DV
Wert: gEAABBCjJMXcI0dSAAAANbqc111725926-4
Verwendungszweck: Sobald Sie das „Ich bin kein Roboter“-Häkchen angekreuzt haben, wird dieses Cookie gesetzt. Das Cookie wird von Google Analytics für personalisierte Werbung verwendet. DV sammelt Informationen in anonymisierter Form und wird weiters benutzt, um User-Unterscheidungen zu treffen.
Ablaufdatum: nach 10 Minuten

Anmerkung: Diese Aufzählung kann keinen Anspruch auf Vollständigkeit erheben, da Google erfahrungsgemäß die Wahl ihrer Cookies immer wieder auch verändert.

How long and where is the data stored?

Durch das Einfügen von reCAPTCHA werden Daten von Ihnen auf den Google-Server übertragen. Wo genau diese Daten gespeichert werden, stellt Google, selbst nach wiederholtem Nachfragen, nicht klar dar. Ohne eine Bestätigung von Google erhalten zu haben, ist davon auszugehen, dass Daten wie Mausinteraktion, Verweildauer auf der Webseite oder Spracheinstellungen auf den europäischen oder amerikanischen Google-Servern gespeichert werden. Die IP-Adresse, die Ihr Browser an Google übermittelt, wird grundsätzlich nicht mit anderen Google-Daten aus weiteren Google-Diensten zusammengeführt. Wenn Sie allerdings während der Nutzung des reCAPTCHA-Plug-ins bei Ihrem Google-Konto angemeldet sind, werden die Daten zusammengeführt. Dafür gelten die abweichenden Datenschutzbestimmungen der Firma Google.

How can I delete my data or prevent data storage?

Wenn Sie wollen, dass über Sie und über Ihr Verhalten keine Daten an Google übermittelt werden, müssen Sie sich, bevor Sie unsere Webseite besuchen bzw. die reCAPTCHA-Software verwenden, bei Google vollkommen ausloggen und alle Google-Cookies löschen. Grundsätzlich werden die Daten sobald Sie unsere Seite aufrufen automatisch an Google übermittelt. Um diese Daten wieder zu löschen, müssen Sie den Google-Support auf  https://support.google.com/?hl=de&tid=111725926 kontaktieren.

Wenn Sie also unsere Webseite verwenden, erklären Sie sich einverstanden, dass Google LLC und deren Vertreter automatisch Daten erheben, bearbeiten und nutzen.

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Etwas mehr über reCAPTCHA erfahren Sie auf der Webentwickler-Seite von Google auf https://developers.google.com/recaptcha/. Google geht hier zwar auf die technische Entwicklung der reCAPTCHA näher ein, doch genaue Informationen über Datenspeicherung und datenschutzrelevanten Themen sucht man auch dort vergeblich. Eine gute Übersicht über die grundsätzliche Verwendung von Daten bei Google finden Sie in der hauseigenen Datenschutzerklärung auf https://www.google.com/intl/de/policies/privacy/.

Alle Texte sind urheberrechtlich geschützt.

Quelle: Erstellt mit dem Datenschutz Generator von AdSimple