mail@heatsupply.nl<\/a>
\n <\/address>\n\n We are pleased that you are interested in our website. Protecting your
\n privacy is very important to us. Below, we provide detailed information
\n about how we process your personal data.\n <\/p>\n
1. Access data and hosting<\/h2>\n
\n You can visit our websites without providing any personal information about
\n yourself. Whenever you access a website, the web server automatically stores
\n a so-called server log file. This file contains, for example, the name of
\n the requested file, your IP address, the date and time of access, the amount
\n of data transferred and the requesting provider. This access data documents
\n the visit to the website.\n <\/p>\n
\n This access data is evaluated exclusively to ensure the proper operation of
\n the website and to improve our services. This serves to protect our
\n legitimate interests, which prevail following a balancing of interests, in
\n the correct presentation of our services pursuant to Article 6(1)(f) of the
\n General Data Protection Regulation (GDPR).\n <\/p>\n
\n All access data is deleted no later than thirty days after the end of your
\n visit to our website. Access data is not processed for longer than is
\n necessary to achieve the processing purposes stated above.\n <\/p>\n
Hosting<\/h3>\n
\n The services for hosting and displaying the website are partly provided by
\n service providers who process personal data on our behalf.\n <\/p>\n
\n Unless otherwise explained in this Privacy Policy, all access data and all
\n data collected through forms provided on this website are processed on the
\n servers of these service providers.\n <\/p>\n
\n If you have any questions about our service providers or the legal basis for
\n our cooperation with them, please contact us using the contact details
\n provided in this Privacy Policy.\n <\/p>\n
2. Data processing for contract performance and contacting us<\/h2>\n2.1 Data processing for contract performance<\/h3>\n
\n For the purpose of performing the contract \u2014 including handling questions
\n relating to and claims arising from statutory warranty rights, defective
\n performance, the right of withdrawal and any statutory updating obligations
\n \u2014 we collect personal data when you voluntarily provide it to us in
\n connection with your order.\n <\/p>\n
\n Mandatory fields are marked as such because we require this information to
\n process the contract. Without providing this information, we may not be able
\n to process or ship your order. The data collected is indicated in the
\n relevant input forms.\n <\/p>\n
\n Further information about the processing of your data, including the
\n disclosure of data to our service providers for order, payment and shipping
\n processing, can be found in the following sections of this Privacy Policy.\n <\/p>\n
\n After the contract has been fully performed, further processing of your data
\n will be restricted. Following expiry of the statutory retention periods under
\n tax and commercial law, your data will be deleted pursuant to Article
\n 6(1)(c) GDPR, unless you have expressly consented to further use of your
\n data pursuant to Article 6(1)(a) GDPR or we have reserved the right to use
\n your data beyond this scope where legally permitted and where we inform you
\n of this in this Privacy Policy.\n <\/p>\n
Inventory and order management system<\/h3>\n
\n For order and contract processing, we use inventory and order management
\n systems provided by external service providers. Our service providers
\n process personal data on our behalf as processors.\n <\/p>\n
\n If you have any questions about our service providers or the legal basis for
\n our cooperation with them, please contact us using the contact details
\n provided in this Privacy Policy.\n <\/p>\n
2.2 Customer account<\/h3>\n
\n If you have given your consent pursuant to Article 6(1)(a) GDPR by choosing
\n to create a customer account, we use your data to create your customer
\n account and store your data for future orders on our website.\n <\/p>\n
\n You may delete your customer account at any time. You can do this by sending
\n a message to the contact details provided in this Privacy Policy or by using
\n the relevant function in your customer account.\n <\/p>\n
\n After your customer account has been deleted, your data will be deleted
\n unless you have expressly consented to further use of your data pursuant to
\n Article 6(1)(a) GDPR or we have reserved the right to use your data beyond
\n this scope where legally permitted and where we inform you of this in this
\n Privacy Policy.\n <\/p>\n
Contacting us<\/h3>\n
\n As part of customer communication, we collect personal data when you
\n voluntarily provide it to us when contacting us, for example via a contact
\n form, live chat or email.\n <\/p>\n
\n The processing is carried out to handle your request and is based on
\n Article 6(1)(b) GDPR insofar as the processing is necessary for the
\n performance of a contract or for taking steps at your request prior to
\n entering into a contract.\n <\/p>\n
\n Mandatory fields are marked as such because we require this information to
\n process your request. The data collected is indicated in the relevant input
\n forms.\n <\/p>\n
\n Once your request has been fully handled, your data will be deleted unless
\n you have expressly consented to further use of your data pursuant to Article
\n 6(1)(a) GDPR or we have reserved the right to use your data beyond this
\n scope where legally permitted and where we inform you of this in this
\n Privacy Policy.\n <\/p>\n
3. Data processing for shipping<\/h2>\n
\n For the performance of the contract pursuant to Article 6(1)(b) GDPR, we
\n disclose your data to the carrier responsible for delivery insofar as this
\n is necessary to deliver the products you have ordered.\n <\/p>\n
\n If you have any questions about our service providers or the legal basis for
\n our cooperation with them, please contact us using the contact details
\n provided in this Privacy Policy.\n <\/p>\n
Disclosure of data to carriers for delivery notifications<\/h3>\n
\n If you have expressly consented to this during or after placing your order,
\n we will disclose your email address and telephone number to the carrier
\n selected by you on the basis of Article 6(1)(a) GDPR.\n <\/p>\n
\n The carrier may use this information to contact you before delivery to
\n announce the delivery or coordinate the delivery time with you.\n <\/p>\n
\n You may withdraw your consent at any time by sending a message to the
\n contact details provided in this Privacy Policy.\n <\/p>\n
\n After withdrawing your consent, we will delete the data provided for this
\n purpose unless you have expressly consented to further use of your data or we
\n have reserved the right to use your data for another legally permitted
\n purpose about which we inform you in this Privacy Policy.\n <\/p>\n
4. Data processing for payment processing<\/h2>\n
\n When processing payments in our online shop, we cooperate with the following
\n types of partners:\n <\/p>\n
\n- technical service providers;<\/li>\n
- banks;<\/li>\n
- payment service providers.<\/li>\n<\/ul>\n
4.1 Data processing for transaction processing<\/h3>\n
\n Depending on the payment method selected, we disclose the data required to
\n process the payment transaction to our technical service providers, the
\n relevant banks or the selected payment service provider.\n <\/p>\n
\n This is done insofar as necessary to process the payment and perform the
\n contract pursuant to Article 6(1)(b) GDPR.\n <\/p>\n
\n Some payment service providers collect the data required for payment
\n processing themselves, for example on their own website or through a
\n technical integration during the ordering process. In this case, the
\n privacy policy of the respective payment service provider applies.\n <\/p>\n
\n Depending on the payment method selected, personal data may be transferred
\n to countries outside the European Union or the European Economic Area (EEA).
\n For some of these countries, the European Commission has determined that an
\n adequate level of data protection exists.\n <\/p>\n
\n Where personal data is transferred to countries outside the EU or EEA for
\n which the European Commission has not adopted an adequacy decision, we base
\n the transfer on the European Commission\u2019s Standard Contractual Clauses,
\n where applicable.\n <\/p>\n
\n If you have any questions about our payment partners or the legal basis for
\n our cooperation with them, please contact us using the contact details
\n provided in this Privacy Policy.\n <\/p>\n
\n 4.2 Data processing for fraud prevention and optimisation of payment
\n processes
\n <\/h3>\n
\n We may provide the service providers referred to above with additional data.
\n They may use this data together with the data required for payment
\n processing for fraud prevention and to optimise our payment processes.\n <\/p>\n
Examples include:<\/p>\n
\n- invoicing;<\/li>\n
- handling disputed payments;<\/li>\n
- supporting our accounting processes.<\/li>\n<\/ul>\n
\n The processing is based on Article 6(1)(f) GDPR. Our legitimate interest
\n consists of protection against fraud and efficient payment management.\n <\/p>\n
\n 4.3 Identity and creditworthiness checks when using Klarna
\n <\/h3>\nKlarna Pay Later<\/h4>\n
\n If you choose payment services provided by Klarna Bank AB (publ),
\n Sveav\u00e4gen 46, 111 34 Stockholm, Sweden \u2014 hereinafter referred to as
\n \u201cKlarna\u201d \u2014 we may ask for your consent pursuant to Article 6(1)(a) GDPR to
\n disclose the data necessary for payment processing, identity verification
\n and creditworthiness checks to Klarna.\n <\/p>\n
\n In Germany, Klarna may use credit reference agencies referred to in Klarna\u2019s
\n Privacy Policy for identity and creditworthiness checks.\n <\/p>\n
\n Klarna uses the information received about the statistical probability of
\n payment default to make a balanced decision regarding the establishment,
\n performance or termination of the contractual relationship.\n <\/p>\n
\n You may withdraw your consent at any time by sending a message to the contact
\n details provided in this Privacy Policy. This may mean that we can no longer
\n offer you certain payment options.\n <\/p>\n
\n You may also withdraw your consent to this use of your personal data directly
\n with Klarna.\n <\/p>\n
5. Advertising by email<\/h2>\n5.1 Email newsletter with registration and tracking<\/h3>\n
\n If you subscribe to our newsletter, we use the data required for this
\n purpose or other data that you have separately provided to us to send you
\n our email newsletter regularly.\n <\/p>\n
\n The newsletter is sent on the basis of your consent pursuant to Article
\n 6(1)(a) GDPR.\n <\/p>\n
\n You may unsubscribe from the newsletter at any time. You can do this by
\n sending a message to the contact details specified below or by using the
\n unsubscribe link provided in the newsletter.\n <\/p>\n
\n After unsubscribing, we will delete your email address from the recipient
\n list unless you have expressly consented to further use of your data or we
\n have reserved the right to use your data for another legally permitted
\n purpose about which we inform you in this Privacy Policy.\n <\/p>\n
Newsletter tracking<\/h3>\n
\n Please note that we may analyse your use of our newsletter. This may include
\n analysing your interaction with the newsletter by measuring, storing and
\n evaluating open rates and click rates.\n <\/p>\n
\n We do this to improve the design of future newsletter campaigns.\n <\/p>\n
\n For this analysis, the emails sent may contain one-pixel technologies, such
\n as web beacons or tracking pixels. These technologies may be stored on our
\n website.\n <\/p>\n
\n For the analysis, we may process the following newsletter data:\n <\/p>\n
\n- the page from which the page was requested, also known as the referrer URL;<\/li>\n
- the date and time of access;<\/li>\n
- the type and description of the web browser used;<\/li>\n
- the IP address of the computer from which the website is accessed;<\/li>\n
- the email address;<\/li>\n
- the date and time of registration and confirmation;<\/li>\n
- information from tracking technologies.<\/li>\n<\/ul>\n
\n This data may be linked to your email address, IP address and, where
\n applicable, an individual identifier. Links contained in the newsletter may
\n also contain this identifier.\n <\/p>\n
\n If you do not want newsletter tracking, you may unsubscribe from the
\n newsletter at any time as described above.\n <\/p>\n
\n The data will be stored for as long as you are subscribed to the newsletter.\n <\/p>\n
5.2 Newsletter delivery<\/h3>\n
\n The newsletter and the tracking described above may also be sent by service
\n providers who process personal data on our behalf.\n <\/p>\n
\n If you have any questions about our service providers or the legal basis for
\n our cooperation with them, please contact us using the contact details
\n provided in this Privacy Policy.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries for which
\n the European Commission has determined that an adequate level of data
\n protection exists, including the United States.\n <\/p>\n
\n The adequacy decision for the United States serves as the basis for
\n transfers to a third country insofar as the relevant service provider is
\n certified under the applicable framework.\n <\/p>\n
\n Until certification has taken place, the transfer may be based on the
\n European Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
6. Cookies and other technologies<\/h2>\n6.1 General information<\/h3>\n
\n To make visiting our website more attractive and to enable the use of
\n certain functions, we use technologies on various pages, including cookies.\n <\/p>\n
\n Cookies are small text files that are automatically stored on your device.\n <\/p>\n
\n Some of the cookies we use are deleted when your browser session ends, for
\n example when you close your browser. These are known as session cookies.\n <\/p>\n
\n Other cookies remain on your device and enable us to recognise your browser
\n when you visit our website again. These are known as persistent cookies.\n <\/p>\n
\n You can find the storage period for cookies in the cookie settings overview
\n of your web browser.\n <\/p>\n
Privacy protection when using your device<\/h3>\n
\n When you use our online services, we use strictly necessary technologies to
\n provide the digital service expressly requested by you.\n <\/p>\n
\n In this case, storing information on your device or accessing information
\n already stored on your device does not require consent insofar as this is
\n strictly necessary to provide the service.\n <\/p>\n
\n For functions that are not strictly necessary, your consent is required to
\n store information on your device or access information already stored on
\n your device.\n <\/p>\n
\n If you do not provide consent, parts of the website may not be fully
\n available.\n <\/p>\n
\n Any consent you provide remains valid until you change or reset the relevant
\n settings on your device.\n <\/p>\n
Subsequent processing of data through cookies and other technologies<\/h3>\n
\n We use technologies that are strictly necessary for the use of certain
\n functions of our website.\n <\/p>\n
\n These technologies may collect and process the following data:\n <\/p>\n
\n- IP address;<\/li>\n
- time of access;<\/li>\n
- device information;<\/li>\n
- browser information;<\/li>\n
- information about your use of our website.<\/li>\n<\/ul>\n
\n This processing is based on our legitimate interest in displaying our
\n website as effectively as possible pursuant to Article 6(1)(f) GDPR,
\n insofar as the technology concerned is not subject to a consent requirement.\n <\/p>\n
We also use technologies:<\/p>\n
\n- \n to comply with legal obligations, for example to demonstrate that consent
\n was given for the processing of personal data;\n <\/li>\n - for web analytics;<\/li>\n
- for online marketing.<\/li>\n<\/ul>\n
\n Further information, including the legal basis for processing, can be found
\n in the following sections of this Privacy Policy.\n <\/p>\n
What types of cookies are used?<\/h3>\n
\n An overview of the cookies and other technologies used can be found in our
\n cookie settings.\n <\/p>\n
Cookie settings<\/h3>\n
\n You can find your browser\u2019s cookie settings through the following links:\n <\/p>\n
\n- Microsoft Edge;<\/li>\n
- Safari;<\/li>\n
- Google Chrome;<\/li>\n
- Mozilla Firefox;<\/li>\n
- Opera.<\/li>\n<\/ul>\n
\n Where you have consented to the use of technologies pursuant to Article
\n 6(1)(a) GDPR, you may withdraw your consent at any time by sending a message
\n to the contact details provided in this Privacy Policy.\n <\/p>\n
\n You can also change your settings using the privacy or cookie button on our
\n website.\n <\/p>\n
\n If you do not accept cookies, the functionality of our website may be
\n limited.\n <\/p>\n
6.2 Cookiebot Consent Management Platform<\/h3>\n
\n We use Cookiebot on our website to inform you about the cookies and other
\n technologies we use. Cookiebot is also used to collect, manage and document
\n any consent required for the processing of personal data through these
\n technologies.\n <\/p>\n
\n This is necessary pursuant to Article 6(1)(c) GDPR in order to comply with
\n our legal obligation under Article 7(1) GDPR to demonstrate your consent to
\n the processing of personal data.\n <\/p>\n
\n Cookiebot is a service provided by Usercentrics A\/S, Havnegade 39, 1058
\n Copenhagen, Denmark. Usercentrics processes your data on our behalf.\n <\/p>\n
\n After you save your cookie preferences on our website, Cookiebot\u2019s web
\n server stores, among other things:\n <\/p>\n
\n- your anonymised IP address;<\/li>\n
- the date and time of your declaration;<\/li>\n
- browser information;<\/li>\n
- the URL from which the declaration was sent;<\/li>\n
- information about your consent preferences;<\/li>\n
- an anonymous random key.<\/li>\n<\/ul>\n
\n A cookie is also used to store information about your consent preferences
\n and the key.\n <\/p>\n
\n Your data will be deleted after twelve months unless you have expressly
\n consented to further use of your data or we have reserved the right to use
\n your data for another legally permitted purpose about which we inform you in
\n this Privacy Policy.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries for which
\n the European Commission has determined that an adequate level of data
\n protection exists, including the United States.\n <\/p>\n
\n The adequacy decision for the United States serves as the basis for the
\n transfer to a third country insofar as the relevant service provider is
\n certified.\n <\/p>\n
\n Until certification, the transfer may be based on the European Commission\u2019s
\n Standard Contractual Clauses.\n <\/p>\n
6.3 Information about transfers to third countries<\/h3>\n
\n We use technologies on our website provided by service providers that may be
\n based in third countries outside the European Union or the European Economic
\n Area.\n <\/p>\n
\n Where no adequacy decision has been adopted by the European Commission for a
\n country, an adequate level of protection must be ensured through other
\n appropriate safeguards.\n <\/p>\n
\n Appropriate safeguards may include Standard Contractual Clauses adopted by
\n the European Commission or binding corporate rules. A prior assessment must
\n be carried out to determine whether these safeguards ensure an adequate
\n level of protection.\n <\/p>\n
\n According to the case law of the Court of Justice of the European Union,
\n additional safeguards may be required.\n <\/p>\n
\n With the technology providers we use that process personal data in a third
\n country, we have generally agreed on the Standard Contractual Clauses
\n adopted by the European Commission.\n <\/p>\n
\n Where possible, we also agree on additional safeguards intended to ensure an
\n adequate level of data protection in third countries without an adequacy
\n decision.\n <\/p>\n
\n Despite contractual and technical measures, the level of protection in a
\n third country may not be equivalent to the level of protection within the
\n European Union.\n <\/p>\n
\n In such cases, where necessary, we may ask for your consent under Article
\n 49(1)(a) GDPR as part of our cookie consent process to transfer your
\n personal data to a third country.\n <\/p>\n
\n There is a particular risk that local authorities in the third country may
\n obtain access to your personal data that is not sufficiently restricted from
\n a European data protection perspective. It is also possible that we, as the
\n data exporter, or you, as the data subject, may not be informed of this, or
\n that sufficient legal remedies may not be available to prevent or challenge
\n such access.\n <\/p>\n
\n Examples of third countries for which no adequacy decision by the European
\n Commission currently exists include:\n <\/p>\n
\n- China;<\/li>\n
- Russia;<\/li>\n
- Taiwan.<\/li>\n<\/ul>\n
\n The countries to which personal data is transferred can be found in the
\n privacy information of the relevant tool or consent management service used.\n <\/p>\n
7. Use of cookies and other technologies<\/h2>\n
\n We use the cookies and other technologies from third parties described below
\n on our website.\n <\/p>\n
\n Unless otherwise stated for a specific technology, this is based on your
\n consent pursuant to Article 6(1)(a) GDPR.\n <\/p>\n
\n When the purpose of the processing has ended or we no longer use the relevant
\n technology, the data collected in this context will be deleted.\n <\/p>\n
\n You may withdraw your consent at any time with effect for the future.
\n Further information about withdrawing your consent can be found in the
\n section \u201cCookies and other technologies\u201d.\n <\/p>\n
\n Further information, including the basis for our cooperation with the
\n individual providers, can be found in the sections relating to the
\n respective technologies.\n <\/p>\n
7.1 Use of Google services<\/h3>\n
\n We use the technologies described below provided by Google Ireland Limited,
\n Gordon House, Barrow Street, Dublin 4, Ireland \u2014 hereinafter referred to as
\n \u201cGoogle\u201d.\n <\/p>\n
\n The information automatically collected by Google technologies about your
\n use of our website is generally transferred to and stored on a server
\n operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043,
\n United States.\n <\/p>\n
\n Unless otherwise stated for a particular technology, the processing of data
\n takes place on the basis of an agreement between joint controllers pursuant
\n to Article 26 GDPR or a data processing agreement with Google, depending on
\n the service concerned.\n <\/p>\n
\n Further information about Google\u2019s processing of data can be found in
\n Google\u2019s privacy information.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries outside
\n the EU and EEA for which the European Commission has determined that an
\n adequate level of protection exists.\n <\/p>\n
\n Our service providers may also be based in and\/or use servers in countries
\n outside the EU and EEA for which no adequacy decision has been adopted by
\n the European Commission. Our cooperation with these service providers is
\n based on the European Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
Google Analytics<\/h4>\n
\n For analytical purposes, Google Analytics automatically collects and stores
\n data, including:\n <\/p>\n
\n- IP address;<\/li>\n
- time of access;<\/li>\n
- device information;<\/li>\n
- browser information;<\/li>\n
- information about your use of our website.<\/li>\n<\/ul>\n
\n Based on this data, usage profiles may be created using pseudonyms. Cookies
\n may be used for this purpose.\n <\/p>\n
\n If you access our website from within the EU, your IP address is processed on
\n a server located in the EU to derive location data. The IP address is then
\n deleted immediately before the data is forwarded to other Google servers for
\n further processing.\n <\/p>\n
\n The processing of data takes place on the basis of a data processing
\n agreement with Google.\n <\/p>\n
Google reCAPTCHA<\/h4>\n
\n To protect our web forms against misuse and spam from automated software,
\n such as bots, Google reCAPTCHA collects, among other things:\n <\/p>\n
\n- IP address;<\/li>\n
- time of access;<\/li>\n
- browser information;<\/li>\n
- information about your use of our website.<\/li>\n<\/ul>\n
\n Google analyses your use of our website using JavaScript and cookies. Other
\n cookies stored in your browser by Google services may also be analysed.\n <\/p>\n
\n The processing of data takes place on the basis of a data processing
\n agreement with Google.\n <\/p>\n
\n According to Google, users who access websites protected by reCAPTCHA are
\n not directly subject to Google\u2019s Privacy Policy and Terms of Use. This
\n section should be checked against Google\u2019s current documentation, as the
\n legal wording and conditions may change.\n <\/p>\n
Google Tag Manager<\/h4>\n
\n Google Tag Manager enables us to manage various codes and services on our
\n website.\n <\/p>\n
\n When implementing individual tags, Google may also process personal data
\n under certain circumstances, such as:\n <\/p>\n
\n- IP addresses;<\/li>\n
- online identifiers;<\/li>\n
- cookies.<\/li>\n<\/ul>\n
\n The processing of data takes place on the basis of a data processing
\n agreement with Google.\n <\/p>\n
\n The use of Google Tag Manager allows various services and technologies to be
\n integrated.\n <\/p>\n
\n If you do not wish to use individual tracking services and have therefore
\n disabled them, the deactivation remains in place for all affected tracking
\n tags integrated through Google Tag Manager.\n <\/p>\n
YouTube video plugin<\/h4>\n
\n To embed third-party content, the YouTube video plugin may collect and
\n transmit data to Google in the extended privacy mode used by us.\n <\/p>\n
This may include:<\/p>\n
\n- IP address;<\/li>\n
- time of access;<\/li>\n
- device information;<\/li>\n
- browser information.<\/li>\n<\/ul>\n
\n This data is collected and processed only when you play a video.\n <\/p>\n
7.2 Use of Meta services<\/h3>\nMeta Pixel<\/h4>\n
\n We use the Meta Pixel as part of technologies provided by Meta Platforms
\n Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland \u2014 hereinafter
\n referred to as \u201cMeta\u201d.\n <\/p>\n
\n The Meta Pixel automatically collects and stores data, including:\n <\/p>\n
\n- IP address;<\/li>\n
- time of access;<\/li>\n
- device information;<\/li>\n
- browser information;<\/li>\n
- \n information about your use of our website based on events defined by us,
\n such as visiting a webpage or subscribing to a newsletter.\n <\/li>\n<\/ul>\n\n Based on this data, usage profiles may be created using pseudonyms.\n <\/p>\n
\n As part of so-called advanced matching, hashed data may also be collected and
\n stored for matching purposes. This data may be used to identify individuals
\n and may include:\n <\/p>\n
\n- names;<\/li>\n
- email addresses;<\/li>\n
- telephone numbers.<\/li>\n<\/ul>\n
\n When you visit our website, the Meta Pixel may automatically place a cookie.
\n This cookie enables your browser to be recognised through a pseudonymous
\n cookie ID when you visit other websites.\n <\/p>\n
\n Meta Platforms Ireland may combine this information with other data from your
\n Meta or Facebook account. Meta may use this information to create reports
\n about website activity and provide other services related to website use,
\n including personalised and group-based advertising.\n <\/p>\n
\n The information automatically collected by Meta technologies about your use
\n of our website is generally transferred to and stored on a server operated
\n by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025,
\n United States.\n <\/p>\n
\n Further information about data processing by Meta can be found in Meta\u2019s
\n privacy information.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries for which
\n the European Commission has determined that an adequate level of data
\n protection exists, including:\n <\/p>\n
\n- Brazil;<\/li>\n
- the United States;<\/li>\n
- Canada;<\/li>\n
- Japan;<\/li>\n
- South Korea;<\/li>\n
- New Zealand;<\/li>\n
- the United Kingdom;<\/li>\n
- Argentina.<\/li>\n<\/ul>\n
\n For the United States, the adequacy decision serves as the basis for
\n transfers to a third country insofar as the relevant service provider is
\n certified. According to the original text, such certification is in place.\n <\/p>\n
\n Our service providers are also based in and\/or use servers in:\n <\/p>\n
\n- Australia;<\/li>\n
- Hong Kong;<\/li>\n
- India;<\/li>\n
- Indonesia;<\/li>\n
- Malaysia;<\/li>\n
- Singapore;<\/li>\n
- Thailand;<\/li>\n
- Taiwan;<\/li>\n
- Mexico.<\/li>\n<\/ul>\n
\n No adequacy decision by the European Commission exists for these countries.
\n Our cooperation with these service providers is based on the European
\n Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
Meta Ads Manager<\/h4>\n
\n Through Meta Ads Manager, we advertise this website on Facebook and other
\n Meta platforms.\n <\/p>\n
\n We determine the parameters of the relevant advertising campaign. Meta
\n Platforms Ireland is responsible for the specific implementation, including
\n the decision as to which users see advertisements.\n <\/p>\n
\n Unless otherwise stated for the individual technologies, data processing is
\n carried out on the basis of an arrangement between joint controllers
\n pursuant to Article 26 GDPR.\n <\/p>\n
\n The joint controllership is limited to the collection of data and its
\n transfer to Meta Platforms Ireland. The subsequent processing by Meta
\n Platforms Ireland is not covered by this joint controllership.\n <\/p>\n
\n Based on visitor activity statistics created through the Meta Pixel, we may
\n use group-based advertising through Custom Audiences. We determine the
\n characteristics of the relevant target group.\n <\/p>\n
\n In the context of advanced matching for determining the target group, Meta
\n Platforms Ireland acts as our processor.\n <\/p>\n
\n Based on the pseudonymous cookie ID placed by the Meta Pixel and the data
\n collected about your use of our website, we may use Custom Audiences to
\n display personalised advertising.\n <\/p>\n
\n Through conversions \u2014 measured, for example, via the Meta Pixel or
\n Conversions API \u2014 we may measure your subsequent behaviour when you have
\n reached our website via an advertisement from Meta Ads Manager.\n <\/p>\n
\n The processing of data takes place on the basis of a data processing
\n agreement with Meta Platforms Ireland.\n <\/p>\n
\n 7.3 Other providers of web analytics and online marketing services
\n <\/h3>\nUse of AWIN for online marketing<\/h4>\n
\n Through our advertising partner AWIN AG, Otto-Ostrowski-Stra\u00dfe 1A, 10249
\n Berlin, Germany \u2014 hereinafter referred to as \u201cAWIN\u201d \u2014 we provide advertising
\n space for third-party advertisements.\n <\/p>\n
\n These advertisements may be displayed in various places on our website.\n <\/p>\n
\n Using cookies, AWIN can track the course of an order. In particular, AWIN
\n may determine that you clicked on an advertisement and subsequently ordered
\n a product.\n <\/p>\n
\n For this purpose, the following data may be collected, transmitted to AWIN
\n and processed by AWIN:\n <\/p>\n
\n- IP address;<\/li>\n
- time of access;<\/li>\n
- device information;<\/li>\n
- browser information;<\/li>\n
- information about your use of our website.<\/li>\n<\/ul>\n
\n We have no influence over this data processing.\n <\/p>\n
\n The processing of data takes place on the basis of an arrangement between
\n joint controllers pursuant to Article 26 GDPR.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries outside
\n the EU and EEA for which the European Commission has determined that an
\n adequate level of data protection exists.\n <\/p>\n
\n Our service providers may also be based in and\/or use servers in countries
\n outside the EU and EEA for which no adequacy decision has been adopted by
\n the European Commission. Our cooperation with these service providers is
\n based on the European Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
\n 8. Integration of the Trusted Shops Trustbadge and other widgets
\n <\/h2>\n
\n Trusted Shops widgets are integrated into this website to display Trusted
\n Shops services, such as a trustmark and collected reviews. These widgets may
\n also be used to offer Trusted Shops products to buyers after an order has
\n been placed.\n <\/p>\n
\n This serves to protect our legitimate interest in optimal marketing and
\n enabling secure shopping pursuant to Article 6(1)(f) GDPR.\n <\/p>\n
\n The Trustbadge and the services offered through it are provided by Trusted
\n Shops SE, Subbelrather Stra\u00dfe 15C, 50823 Cologne, Germany \u2014 hereinafter
\n referred to as \u201cTrusted Shops\u201d.\n <\/p>\n
\n We are joint controllers with Trusted Shops pursuant to Article 26 GDPR.
\n Below, we inform you about the main aspects of this joint controllership.\n <\/p>\n
\n When you interact with Trustbadge AI+, session cookies may be placed to store
\n your login status and display a so-called welcome layer. This layer may
\n contain information about the relevant online shop, such as:\n <\/p>\n
\n- company information;<\/li>\n
- reviews;<\/li>\n
- information about the availability of buyer protection;<\/li>\n
- the so-called #trstd secret.<\/li>\n<\/ul>\n
\n To recognise logged-in users, a cookie is placed and stored for a maximum of
\n 400 days after login.\n <\/p>\n
\n Session cookies may also be placed to send push notifications when using the
\n app, provided that you have allowed this.\n <\/p>\n
\n This is necessary to provide the digital service requested by you from
\n Trusted Shops. Trusted Shops is responsible for data processing when you
\n interact with Trustbadge AI+.\n <\/p>\n
Joint controllership with Trusted Shops<\/h3>\n
\n For questions about data protection and to exercise your rights, you should
\n preferably contact Trusted Shops using the contact details provided in its
\n privacy information.\n <\/p>\n
\n However, you may always contact either controller of your choice. Your
\n request may, where necessary, be forwarded to the other controller for a
\n response.\n <\/p>\n
\n 8.1 Data processing when integrating the Trustbadge and other widgets
\n <\/h3>\n
\n The Trustbadge is provided through a US-based content delivery network
\n provider.\n <\/p>\n
\n An adequate level of protection is ensured through an adequacy decision of
\n the European Commission, where applicable.\n <\/p>\n
\n Service providers in the United States are generally certified under the
\n EU-U.S. Data Privacy Framework. If a service provider is not certified under
\n this framework, Standard Contractual Clauses have been agreed as an
\n appropriate safeguard.\n <\/p>\n
\n When the Trustbadge is loaded, the web server automatically stores a server
\n log file. This may include:\n <\/p>\n
\n- IP address;<\/li>\n
- date and time of access;<\/li>\n
- amount of data transferred;<\/li>\n
- internet service provider.<\/li>\n<\/ul>\n
\n The IP address is anonymised immediately after collection so that the stored
\n data cannot be associated with you.\n <\/p>\n
\n The anonymised data is used in particular for statistical purposes and error
\n analysis.\n <\/p>\n
8.2 Data processing after completion of an order<\/h3>\n
\n After an order has been completed, the Trustbadge may access order
\n information stored on your device, such as:\n <\/p>\n
\n- order amount;<\/li>\n
- order number;<\/li>\n
- any product purchased;<\/li>\n
- your email address.<\/li>\n<\/ul>\n
\n This is necessary to provide Trusted Shops services and, where applicable,
\n automatically protect your order.\n <\/p>\n
\n For this purpose, your email address is hashed using a cryptographic
\n one-way function and transmitted to Trusted Shops.\n <\/p>\n
\n The legal basis is Article 6(1)(f) GDPR.\n <\/p>\n
\n This serves to check whether you are already registered for Trusted Shops
\n services. The processing is necessary to protect the legitimate interests of
\n us and Trusted Shops in providing buyer protection and transaction-related
\n review services linked to the specific order.\n <\/p>\n
\n If you are already registered, further processing takes place in accordance
\n with the agreement between you and Trusted Shops.\n <\/p>\n
\n If you are not yet registered for the services, you will be given the
\n opportunity to register for the first time.\n <\/p>\n
\n Further processing after registration is also governed by the agreement with
\n Trusted Shops.\n <\/p>\n
\n If you do not register, Trusted Shops will automatically delete all data
\n transmitted. After that, it will no longer be possible to associate the
\n data with you.\n <\/p>\n
\n Trusted Shops uses service providers for hosting, monitoring and logging.\n <\/p>\n
\n The legal basis is Article 6(1)(f) GDPR, for the purpose of ensuring the
\n proper operation of the services.\n <\/p>\n
\n Processing may take place in third countries, including:\n <\/p>\n
\n- the United States;<\/li>\n
- the United Kingdom;<\/li>\n
- Israel.<\/li>\n<\/ul>\n
\n An adequate level of protection is ensured through adequacy decisions of the
\n European Commission, where applicable.\n <\/p>\n
\n Service providers in the United States are generally certified under the
\n EU-U.S. Data Privacy Framework. If a service provider is not certified under
\n this framework, Standard Contractual Clauses have been agreed as an
\n appropriate safeguard.\n <\/p>\n
9. Social media<\/h2>\n9.1 Social media buttons from Facebook and Instagram<\/h3>\n
\n Our website uses social media buttons from social networks.\n <\/p>\n
\n These buttons are integrated into the website solely as HTML links. As a
\n result, no connection to the servers of the relevant provider is established
\n when you open our website.\n <\/p>\n
\n When you click on a button, the website of the relevant social network opens
\n in a new browser window. There, you may use a Like or Share button, for
\n example.\n <\/p>\n
9.2 Our online presence on social media<\/h3>\n
\n We maintain online profiles on the following social media platforms:\n <\/p>\n
\n- Facebook;<\/li>\n
- X;<\/li>\n
- Instagram;<\/li>\n
- YouTube;<\/li>\n
- Pinterest;<\/li>\n
- LinkedIn.<\/li>\n<\/ul>\n
\n Where you have given your consent to the relevant social media operator
\n pursuant to Article 6(1)(a) GDPR, your data may be automatically collected
\n and stored when you visit our profiles on these platforms for market
\n research and advertising purposes.\n <\/p>\n
\n Based on this data, usage profiles may be created using pseudonyms.\n <\/p>\n
\n These profiles may be used to display advertisements within and outside the
\n platforms that are presumed to correspond to your interests.\n <\/p>\n
\n Cookies are generally used for this purpose.\n <\/p>\n
\n Detailed information about the processing and use of data by the relevant
\n social media operator, as well as contact details and information about your
\n rights and privacy settings, can be found in the privacy policies of the
\n relevant providers.\n <\/p>\n
\n If you require assistance with this, you may contact us.\n <\/p>\n
Facebook<\/h3>\n
\n Facebook is a service provided by Meta Platforms Ireland Ltd., Block J,
\n Serpentine Avenue, Dublin 4, Ireland.\n <\/p>\n
\n The information automatically collected by Meta Platforms Ireland about your
\n use of our Facebook page is generally transferred to and stored on a server
\n operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California
\n 94025, United States.\n <\/p>\n
\n Data processing when visiting our Facebook page is based on an arrangement
\n between joint controllers pursuant to Article 26 GDPR.\n <\/p>\n
\n Further information, including information about Insights data, can be found
\n in Meta\u2019s privacy information.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries for which
\n the European Commission has determined that an adequate level of protection
\n exists, including:\n <\/p>\n
\n- Brazil;<\/li>\n
- the United States;<\/li>\n
- Canada;<\/li>\n
- Japan;<\/li>\n
- South Korea;<\/li>\n
- New Zealand;<\/li>\n
- the United Kingdom;<\/li>\n
- Argentina.<\/li>\n<\/ul>\n
\n For the United States, the adequacy decision serves as the basis for
\n transfers to a third country insofar as the relevant service provider is
\n certified.\n <\/p>\n
\n Our service providers are also based in and\/or use servers in:\n <\/p>\n
\n- Australia;<\/li>\n
- Hong Kong;<\/li>\n
- India;<\/li>\n
- Indonesia;<\/li>\n
- Malaysia;<\/li>\n
- Singapore;<\/li>\n
- Thailand;<\/li>\n
- Taiwan;<\/li>\n
- Mexico.<\/li>\n<\/ul>\n
\n No adequacy decision by the European Commission exists for these countries.
\n Our cooperation with these service providers is based on the European
\n Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
X<\/h3>\n
\n X is a service provided by X Internet Unlimited Company, One Cumberland
\n Place, Fenian Street, Dublin 2, D02 AX07, Ireland.\n <\/p>\n
\n The information automatically collected by X about your use of our presence
\n on X is generally transferred to and stored on a server operated by X Corp.,
\n FM 1209, Building 2, Bastrop, Texas 78602, United States.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries outside
\n the EU and EEA for which the European Commission has determined that an
\n adequate level of protection exists.\n <\/p>\n
\n Our service providers may also be based in and\/or use servers in countries
\n outside the EU and EEA for which no adequacy decision has been adopted by
\n the European Commission. Our cooperation with these service providers is
\n based on the European Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
Instagram<\/h3>\n
\n Instagram is a service provided by Meta Platforms Ireland Ltd., Block J,
\n Serpentine Avenue, Dublin 4, Ireland.\n <\/p>\n
\n The information automatically collected by Meta Platforms Ireland about your
\n use of our Instagram page is generally transferred to and stored on a server
\n operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California
\n 94025, United States.\n <\/p>\n
\n Data processing when visiting our Instagram page is based on an arrangement
\n between joint controllers pursuant to Article 26 GDPR.\n <\/p>\n
\n Further information, including information about Insights data, can be found
\n in Meta\u2019s privacy information.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries for which
\n the European Commission has determined that an adequate level of protection
\n exists, including:\n <\/p>\n
\n- Brazil;<\/li>\n
- the United States;<\/li>\n
- Canada;<\/li>\n
- Japan;<\/li>\n
- South Korea;<\/li>\n
- New Zealand;<\/li>\n
- the United Kingdom;<\/li>\n
- Argentina.<\/li>\n<\/ul>\n
\n For the United States, the adequacy decision serves as the basis for
\n transfers to a third country insofar as the relevant service provider is
\n certified.\n <\/p>\n
\n Our service providers are also based in and\/or use servers in:\n <\/p>\n
\n- Australia;<\/li>\n
- Hong Kong;<\/li>\n
- India;<\/li>\n
- Indonesia;<\/li>\n
- Malaysia;<\/li>\n
- Singapore;<\/li>\n
- Thailand;<\/li>\n
- Taiwan;<\/li>\n
- Mexico.<\/li>\n<\/ul>\n
\n No adequacy decision by the European Commission exists for these countries.
\n Our cooperation with these service providers is based on the European
\n Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
YouTube<\/h3>\n
\n YouTube is a service provided by Google Ireland Limited, Gordon House,
\n Barrow Street, Dublin 4, Ireland.\n <\/p>\n
\n The information automatically collected by Google about your use of our
\n presence on YouTube is generally transferred to and stored on a server
\n operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043,
\n United States.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries outside
\n the EU and EEA for which the European Commission has determined that an
\n adequate level of protection exists.\n <\/p>\n
\n Our service providers may also be based in and\/or use servers in countries
\n outside the EU and EEA for which no adequacy decision has been adopted by
\n the European Commission. Our cooperation with these service providers is
\n based on the European Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
Pinterest<\/h3>\n
\n Pinterest is a service provided by Pinterest Europe Ltd., Waterloo Exchange,
\n 3rd Floor, Waterloo Road, Dublin 4, Ireland.\n <\/p>\n
\n The information automatically collected by Pinterest about your use of our
\n presence on Pinterest is generally transferred to and stored on a server
\n operated by Pinterest, Inc., 505 Brannan Street, San Francisco, CA 94107,
\n United States.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries outside
\n the EU and EEA for which the European Commission has determined that an
\n adequate level of protection exists.\n <\/p>\n
\n Our service providers may also be based in and\/or use servers in countries
\n outside the EU and EEA for which no adequacy decision has been adopted by
\n the European Commission. Our cooperation with these service providers is
\n based on the European Commission\u2019s Standard Contractual Clauses.\n <\/p>\n
LinkedIn<\/h3>\n
\n LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton
\n Place, Dublin 2, Ireland.\n <\/p>\n
\n The information automatically collected by LinkedIn about your use of our
\n presence on LinkedIn is generally transferred to and stored on a server
\n operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085,
\n United States.\n <\/p>\n
\n Our service providers are based in and\/or use servers in countries for which
\n the European Commission has determined that an adequate level of protection
\n exists, including the United States.\n <\/p>\n
\n For the United States, the adequacy decision serves as the basis for
\n transfers to a third country insofar as the relevant service provider is
\n certified.\n <\/p>\n
10. Contact details and your rights<\/h2>\n10.1 Your rights<\/h3>\n
As a data subject, you have the following rights:<\/p>\n
Right of access<\/h4>\n
\n Under Article 15 GDPR, you have the right to request access to the personal
\n data we process about you within the limits specified in that provision.\n <\/p>\n
Right to rectification<\/h4>\n
\n Under Article 16 GDPR, you have the right to request without undue delay the
\n rectification of inaccurate personal data or the completion of incomplete
\n personal data.\n <\/p>\n
Right to erasure<\/h4>\n
\n Under Article 17 GDPR, you have the right to request the deletion of your
\n personal data stored by us unless further processing is necessary:\n <\/p>\n