Privacy Policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data includes all data that can be used to personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Markus Nilles, WildNatur, Färberstraße 26, 90402 Nuremberg, Germany, Email: kontakt@wildenatur.com. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 If you use our website for informational purposes only, that is, if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

Squarespace

We use the system of the following provider for hosting our website and displaying the site content: Squarespace, Le Pole House, Ship Street Great, Dublin 8, Ireland.

All data collected on our website is processed on the provider’s servers.
We have concluded a processing agreement with the provider, ensuring the protection of our site visitors’ data and prohibiting unauthorized disclosure to third parties.

As part of the above services, data may also be transferred to Squarespace Inc. in the USA for further processing.

For data transfers to the USA, the provider is affiliated with the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

4) Cookies

To make our website more attractive and enable certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after the browser is closed (“session cookies”), while others remain on your device longer, allowing page settings to be saved (“persistent cookies”). In the latter case, you can view the storage duration in your browser’s cookie settings overview.

If personal data is processed through individual cookies we use, processing is either in accordance with Article 6(1)(b) GDPR for contract performance, Article 6(1)(a) GDPR in the event of consent, or Article 6(1)(f) GDPR to protect our legitimate interests in the optimal functionality of the website and a customer-friendly and effective site visit experience.

You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contact

When contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent required.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR. If your contact is aimed at a contract, then an additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided there are no statutory retention obligations.

6) Comment Function

When using the comment function on this website, information about the time of the comment’s creation and the chosen commenter name will be stored and published on this website along with your comment. Furthermore, your IP address will be logged and saved. The IP address is stored for security reasons in the event that the data subject violates the rights of third parties or posts illegal content. We need your email address to contact you if a third party should complain about your published content as unlawful.

The legal basis for storing your data is Article 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are deemed unlawful by third parties.

Follow-up comments can be subscribed to by you as a user. You will receive a confirmation email to ensure that you are the owner of the specified email address (double opt-in procedure). The legal basis for data processing when subscribing to comments is Article 6(1)(a) GDPR. You can unsubscribe from ongoing comment subscriptions at any time with future effect; for more information on how to unsubscribe, please refer to the confirmation email.

7) Data Processing When Opening a Customer Account

Pursuant to Article 6(1)(b) GDPR, personal data will continue to be collected and processed as necessary if you provide it when opening a customer account. The required data for opening the account can be found in the entry form on our website.

You can delete your customer account at any time by notifying the controller at the above address. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, there are no legal retention obligations, and there is no legitimate interest on our part in further storage.

8) Use of Customer Data for Direct Advertising

8.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and will be used to personally address you. We use the so-called double opt-in procedure to send the newsletter, which ensures that you will only receive the newsletter if you have explicitly confirmed your consent to receive it by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address, provided by the Internet Service Provider (ISP), and the date and time of registration to track any potential misuse of your email address at a later time. The data collected upon newsletter registration will be used strictly for its intended purpose.

You may unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller specified above. Upon unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, as permitted by law and about which we inform you in this policy.

8.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers by email for similar goods or services from our range. Pursuant to Section 7(3) of the German Act Against Unfair Competition (UWG), we do not need to obtain separate consent for this. The data processing is therefore solely based on our legitimate interest in personalized direct advertising according to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, no email will be sent.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller specified above. You only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

8.3 Cart Reminders by Email

If you abandon your shopping cart on our website before completing an order, you may receive a one-time email reminder of the contents of your virtual shopping cart.

The only mandatory information required for sending this reminder is your email address. Providing further data is optional and may be used to personally address you. We use the double opt-in procedure to send the email reminder, ensuring you only receive a notification if you have explicitly confirmed your consent by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR for sending a cart reminder. We store your IP address provided by the ISP and the date and time of registration to track any potential misuse of your email address at a later time. The data collected for our email notification service will be used strictly for its intended purpose.

You may unsubscribe from cart reminders at any time by notifying the controller specified above. Upon unsubscribing, your email address will be immediately deleted from our designated distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, as permitted by law and about which we inform you in this policy.

9) Data Processing for Order Handling

9.1 If necessary for the fulfillment of the contract for delivery and payment purposes, the personal data we collect will be transmitted to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or digital products based on a corresponding contract, we will process the contact details you provided at the time of ordering (name, address, email address) to inform you personally about upcoming updates within the legally prescribed period using an appropriate communication method (e.g., postal or email) in accordance with Art. 6(1)(c) GDPR. Your contact details will be used strictly for communications regarding updates we are obliged to provide and will be processed only to the extent necessary for the respective notification.

To process your order, we also work with the following service provider(s) who support us in full or in part in the execution of contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

9.2 Use of Payment Service Providers (Payment Services)

Paypal

Our website offers one or more online payment options from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method offered by the provider that requires an advance payment, the payment data you provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order content will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. This data is transferred solely for payment processing and only to the extent necessary.

If you select a payment method for which we make an advance payment, you will be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative payment method) during the order process.

To protect our legitimate interest in determining your creditworthiness, this data will be forwarded to the provider for a credit check in accordance with Art. 6(1)(f) GDPR. The provider will verify, based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experience), whether the selected payment option can be granted with regard to payment and/or default risks.

The credit report may include probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical process. Address data, among other things, are incorporated into the calculation of the score values.

You may object to this processing of your data at any time by sending us a message or notifying the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

Stripe

Our website offers one or more online payment options from the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you choose a payment method from the provider that requires an advance payment (e.g., credit card payment), the payment data you provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order content will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. This data is transferred solely for payment processing and only to the extent necessary.

If you select a payment method for which the provider makes an advance payment (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative payment method) during the order process.

To protect our legitimate interest in determining our customers’ creditworthiness, this data will be forwarded to the provider for a credit check in accordance with Art. 6(1)(f) GDPR. The provider will verify, based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experience), whether the selected payment option can be granted with regard to payment and/or default risks.

9.3 Electronic Cancellation Option for Ongoing Obligations with Consumers

Consumers who have entered into contracts for paid recurring obligations (e.g., subscription contracts) on this website can cancel these electronically in accordance with the applicable cancellation periods via an electronic button.

Activating the button leads to a confirmation page where the consumer can provide further details about the cancellation, clearly identify themselves, and subsequently submit the cancellation electronically.

The collection and transmission of personal data is based on Art. 6(1)(b) GDPR and is only carried out to the extent necessary for the proper processing of the cancellation. Also, based on Art. 6(1)(b) GDPR, the provided personal data will be used to confirm receipt of the cancellation and the cancellation date electronically in text form. Another legal basis for processing is Art. 6(1)(c) GDPR, as we are legally obliged to provide an electronic cancellation option for consumer contracts over paid recurring obligations entered into electronically.

10) Online Marketing

10.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses “cookies,” text files that are stored on your computer and enable an analysis of your use of the website. Additionally, Google AdSense uses “web beacons” (small invisible graphics) to collect information, allowing simple actions such as visitor traffic on the website to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. This may also involve transmission to Google LLC servers in the USA.

Google uses this information to evaluate your usage of AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. Google may transfer the collected information to third parties if this is legally required or if third parties process the data on Google’s behalf.
All the processing described above, particularly reading information from the device used via cookies and/or web beacons, is carried out only if you have given your explicit consent to this in accordance with Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your website visit.

You can revoke your consent at any time for future effect by deactivating this service in the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection based on an adequacy decision by the European Commission.

Further information about Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/.

10.2 Amazon

We participate in the affiliate program of the following provider: Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg.

In this context, we have placed links on our website that lead to offers on the provider’s websites or third-party websites (“partner sites”).

To measure the success of an affiliate link, evaluate orders generated through such a link, and account for commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible under data protection law. The provider regularly processes the IP address and, if applicable, other device information.

All the processing described above, particularly reading or storing information on the device you use, only takes place if you have given your explicit consent to this in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time for future effect by using the cookie consent management options on the partner sites.

11) Web Analysis Services

11.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables the analysis of your use of our website.

By default, Google (Universal) Analytics sets cookies when visiting the website, which are stored as small text blocks on your device and collect specific information. This information includes your IP address, which is shortened by Google to exclude direct personal references.

The information is transmitted to Google servers and further processed there, with possible transfers to Google LLC servers based in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide further services related to website and internet use. The IP address transmitted by your browser and shortened by Google Analytics is not merged with other Google data. The data collected by Google (Universal) Analytics is stored for two months and then deleted.

All processing described above, especially setting cookies on the device used, only takes place if you have given your explicit consent to this in accordance with Art. 6(1)(a) GDPR. Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You can revoke your consent at any time for future effect. To exercise your right to withdraw, please deactivate this service via the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with Google, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google (Universal) Analytics uses the “demographic features” function, enabling statistics that provide insights into website visitors’ age, gender, and interests through the analysis of advertisements and third-party information. This helps identify target audiences for marketing activities. The collected data cannot be assigned to a specific individual and will be deleted after two months of storage.

Google Signals
As an extension of Google (Universal) Analytics, this website may use Google Signals to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, with your consent to the use of Google Analytics under Art. 6(1)(a) GDPR, analyze your cross-device usage behavior and generate database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable “personalized advertising” in your Google account settings by following the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. Further information on Google Signals is available at https://support.google.com/analytics/answer/7532985?hl=de.

User IDs
As an extension of Google (Universal) Analytics, the “User IDs” function may be used on this website. If you have agreed to the use of Google (Universal) Analytics under Art. 6(1)(a) GDPR, have created an account on this website, and log in to it on different devices, your activities, including conversions, can be analyzed cross-device.

11.2 Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables the analysis of your use of our website.

By default, Google Analytics 4 sets cookies when visiting the website, which are stored as small text blocks on your device and collect specific information. This information includes your IP address, which is shortened by Google to exclude direct personal references.

The information is transmitted to Google servers and further processed there, with possible transfers to Google LLC servers based in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide further services related to website and internet use. The IP address transmitted by your browser and shortened by Google Analytics is not merged with other Google data. Data collected by Google Analytics 4 is stored for two months and then deleted.

All processing described above, especially setting cookies on the device used, only takes place if you have given your explicit consent to this in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your website visit. You can revoke your consent at any time for future effect by deactivating this service via the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with Google, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google Analytics 4 uses the “demographic features” function, enabling statistics that provide insights into website visitors’ age, gender, and interests through the analysis of advertisements and third-party information. This helps identify target audiences for marketing activities. The collected data cannot be assigned to a specific individual and will be deleted after two months of storage.

Google Signals
As an extension of Google Analytics 4, this website may use Google Signals to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, with your consent to the use of Google Analytics under Art. 6(1)(a) GDPR, analyze your cross-device usage behavior and generate database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable “personalized advertising” in your Google account

settings by following the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. Further information on Google Signals is available at https://support.google.com/analytics/answer/7532985?hl=de.

User IDs
As an extension of Google Analytics 4, the “User IDs” function may be used on this website. If you have agreed to the use of Google Analytics 4 under Art. 6(1)(a) GDPR, have created an account on this website, and log in to it on different devices, your activities, including conversions, can be analyzed cross-device.

11.3 Google Optimize

This website uses “Google Optimize,” a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Based on “Google Analytics,” the service enables a statistical evaluation of the use of new features and content on the website by displaying test variants to specific user groups. This allows us to assess which variants are preferred by users, with the aim of enhancing the attractiveness of our website.

Google Optimize uses cookies, which are small text files stored on your device to analyze your use of a website. The information collected by cookies about your use of the website is usually transmitted to a Google server, where it is stored and processed. This may also involve transmission to Google LLC servers based in the USA for further processing.

All processing described above, particularly setting cookies to store and read information on the device you use to access the website, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Optimize will not be used during your website visit. You may revoke your consent at any time for future effect. To exercise your right to withdraw, please deactivate this service via the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

Further information on Google’s data protection can be found here: https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de.

11.4 Google Tag Manager

This website uses “Google Tag Manager,” a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Tag Manager provides a technical basis for managing various web applications, including tracking and analytics services, through a unified user interface. The Google Tag Manager itself does not store or read information on user devices, nor does it perform independent data analysis. However, Google Tag Manager transfers your IP address to Google when you access a page, where it may be stored, including possible transmission to Google LLC servers in the USA.

This processing only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Tag Manager will not be used during your website visit. You may revoke your consent at any time for future effect by deactivating this service via the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de.

11.5 Microsoft Clarity

This website uses the web analytics service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms to read device and browser information), the service collects and stores pseudonymized visitor data, including device information such as IP address and browser details, for statistical analysis of usage behavior on our website and the creation of pseudonymized user profiles. This enables evaluations of movement patterns (so-called heatmaps), showing the duration of page visits and interactions with page content (e.g., text inputs, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally prevents direct personal identification. Data collected is not merged with other personal data collected elsewhere.

All processing described above, particularly reading or storing information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time for future effect by deactivating this service via the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

11.6 PayPal Marketing Solutions

This website uses the web analytics service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

11.7 Piwik PRO

This website uses the web analytics service provided by Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin, Germany.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

11.8 Squarespace Analytics

This website uses the web analytics service provided by Squarespace, Le Pole House, Ship Street Great, Dublin 8, Ireland.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

11.9 Yahoo Web-Analytics

This website uses the web analytics service provided by Yahoo! EMEA Limited, 5-7 Point Village, North Wall Quay, Dublin 1, Ireland.

All processing described above, particularly reading or storing information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6(1

)(a) GDPR. You may revoke your consent at any time for future effect by deactivating this service via the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

12) Retargeting/Remarketing and Conversion Tracking

Meta Pixel

Within our online offering, we use the “Meta Pixel” service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).

When a user clicks on an ad we have placed on Facebook and/or Instagram, the URL of our linked page is extended using a parameter via “Meta Pixel.” This URL parameter is then embedded in the user’s browser by a cookie set by our linked page.

This enables Meta to identify visitors to our online offering as a target audience for displaying ads (“Ads”). We use this service to show Facebook and/or Instagram ads only to users who have shown interest in our online offering or have specific characteristics (e.g., interests in certain topics or products determined based on visited websites) that we share with Meta (“Custom Audiences”).

Meta Pixel also allows tracking of whether users were redirected to our website after clicking on an ad and what actions they took (so-called “Conversion Tracking”).

The data we collect is anonymous to us, meaning it does not allow us to identify users. However, Meta stores and processes this data, allowing a connection to the respective user profile and enabling Meta to use the data for its advertising purposes.

All processing described above, particularly setting cookies to read information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time for future effect by deactivating this service via the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

Information generated by Meta is typically transmitted to and stored on a Meta server; this may also involve transfers to Meta Platforms Inc. servers in the USA.

13) Site Functionalities

13.1 AddThis Bookmarking Plugins

Our website uses plugins from the social network provider AddThis LLC, Inc., 8000 Westpark Drive, Suite 625, McLean, VA 22102, USA.

These plugins enable direct interactions with content on the social network.

To protect your data when visiting our website, plugins are initially disabled and embedded in the page using the “2-click” or “Shariff” solution.

This embedding ensures that no connection with the provider’s servers is established when accessing a page on our website that contains such plugins.

Only when you activate the plugins and thereby grant your consent to data transmission in accordance with Art. 6(1)(a) GDPR, will your browser establish a direct connection to the provider’s servers. In this process, information about your device (including your IP address), your browser, and your browsing history may be transmitted and potentially processed, independent of a login to an existing user profile.

If you are logged into an existing user profile on the provider’s social network, any interactions via the plugins will also be published there and visible to your contacts.
You can withdraw your consent at any time by deactivating the activated plugin by clicking it again. However, the withdrawal will not affect data already transmitted to the provider.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

13.2 Embedding Instagram Feed via Lightwidget

On our website, we use Lightwidget, a widget from Black Sail Division, Krystian Żwak, Molczyn 17, Leszna Gorna, 43-445 Dziegielow, Poland (www.lightwidget.com) to display preview images from our Instagram profile. This uses cookies, which are small text files stored locally in your internet browser’s cache.

The widget establishes a connection to Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”) when visitors access our website. This gives Instagram certain browser information, including your IP address. In some cases, data may also be transmitted to Meta Platforms Inc. servers in the USA.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

13.3 Embedding the Instagram Feed via SnapWidget

We use the services of SnapWidget, a widget by SnapWidget (Pty) Ltd., based in Johannesburg, South Africa (www.snapwidget.com), to display preview images from our Instagram profile on our website. Cookies are used in this process—small text files stored locally in your internet browser’s cache.

When visitors access our website, the widget connects to servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”). Through this connection, Instagram receives certain browser information, including your IP address. In certain cases, data may also be transmitted to Meta Platforms Inc. servers located in the USA.

All processing described above, particularly the setting of cookies for reading information on the device used, is carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by deactivating this service via the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider relies on the European Commission’s standard contractual clauses, which aim to ensure compliance with the European data protection level.

13.4 Facebook Plugins

Our website uses plugins from the social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To protect your data when you visit our website, the plugins are initially disabled and embedded in the page using the “2-click” or “Shariff” solution.

This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers.

Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you have logged into an existing user profile, certain information about your device (including your IP address), browser, and browsing history is transmitted to the provider and may be processed.

If you are logged into an existing user profile on the provider’s social network, interactions made via the plugins will also be published there and displayed to your contacts.
You may withdraw your consent at any time by deactivating the activated plugin by clicking it again. However, withdrawal has no effect on data already transferred to the provider.

Data may also be transferred to Meta Platforms Inc., USA.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

For data transfers to the USA, the provider is part of the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

13.5 Instagram Plugins

Our website uses plugins from the social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To protect your data when you visit our website, the plugins are initially disabled and embedded in the page using the “2-click” or “Shariff” solution.

This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers.

Data may also be transferred to Meta Platforms Inc., USA.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

13.6 LinkedIn Plugins

Our website uses plugins from the social network provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To protect your data when you visit our website, the plugins are initially disabled and embedded in the page using the “2-click” or “Shariff” solution.

This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers.

Data may also be transferred to LinkedIn Inc., USA.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on the European Commission’s standard contractual clauses, which aim to ensure compliance with the European data protection level.

I apologize for the interruption. Here is the continuation:

13.7 Pinterest Plugins

Our website uses plugins from the social network provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To protect your data when you visit our website, the plugins are initially disabled and embedded in the page using the “2-click” or “Shariff” solution.

This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers.

Data may also be transferred to Pinterest Inc., USA.

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and preventing unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on the European Commission’s standard contractual clauses, which aim to ensure compliance with the European data protection level.

13.8 Xing Plugins

Our website uses the “XING Share Button” provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

When you access this website, your browser briefly establishes a connection to the provider’s servers to perform the “XING Share Button” functionalities (e.g., calculating/displaying the counter value). The provider does not store personal data, particularly IP addresses. The use of cookies to analyze user behavior does not occur in connection with the “XING Share Button.”

13.9 Vimeo

Our website uses plugins to display and play videos from Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

When you access a page on our site that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. This process transmits certain information, including your IP address, to the provider.

If video playback is started via the plugin, the provider uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not wish for this data to be associated with your account, you should log out before activating the play button.

All the above-mentioned processing activities, including setting cookies for retrieving information on the device used, are carried out only with your explicit consent according to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.

13.10 Wistia

Our website uses plugins to display and play videos from Wistia, Inc., 17 Tudor Street, Cambridge, Massachusetts, 02139, USA.

If video playback is started via the plugin, the provider uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

13.11 YouTube

Our website uses plugins to display and play videos from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to Google LLC., USA.

If video playback is started via the plugin, the provider uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

Further details regarding Google’s privacy policies can be found here: https://business.safety.google/intl/de/privacy/

14. Tools and Miscellaneous

Cookie Consent Tool

Our website uses a “cookie consent tool” to obtain valid user consents for cookies and cookie-based applications. The “cookie consent tool” is displayed to users upon accessing the page in the form of an interactive interface, allowing users to consent to the use of specific cookies and/or cookie-based applications by checking a box. By utilizing this tool, only cookies/services that require consent are loaded, ensuring that such cookies are set only if the user consents.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.

If personal data is processed for the storage, assignment, or logging of cookie settings, this is done in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Further information about the operator and settings of the cookie consent tool can be found directly in the user interface on our website.

Certainly, here is the continuation:

15) Rights of the Data Subject

15.1 Under applicable data protection law, you are entitled to the following data subject rights vis-à-vis the data controller regarding the processing of your personal data, subject to the legal requirements for each right as indicated:

Right to information according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to erasure according to Art. 17 GDPR;
Right to restriction of processing according to Art. 18 GDPR;
Right to notification according to Art. 19 GDPR;
Right to data portability according to Art. 20 GDPR;
Right to withdraw consent according to Art. 7(3) GDPR;
Right to lodge a complaint according to Art. 77 GDPR.

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREDOMINANT LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THIS PROCESSING WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal basis, the purpose of processing, and – where relevant – the respective statutory retention period (e.g., commercial and tax retention periods).

If personal data is processed based on explicit consent according to Art. 6(1)(a) GDPR, this data is stored until you revoke your consent.

If statutory retention periods apply to data processed within the framework of legal or quasi-legal obligations based on Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for contract fulfillment or contract initiation and/or we do not have a legitimate interest in its further storage.

If personal data is processed based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

If personal data is processed for direct marketing purposes based on Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise stated in the other information of this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.