Data protection statement & cookies

The protection of your privacy is important to us. We process your personal data only in accordance with the provisions of the EU General Data Protection Regulation (DSGVO) and other statutory data protection provisions, in particular the Federal Data Protection Act (BDSG). Of course, all data will be treated confidentially. With the following data protection information, we would like to explain to you in more detail how your data is handled when using our websites.

1 General information on the collection of personal data

In principle, the collection, processing and use of personal data for the use of our website is limited to the necessary extent and the necessary data. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In addition, we use the widespread SSL (Secure Socket Layer) procedure within our website in conjunction with the highest encryption level supported by your web browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

1.1 Responsible party

The responsible party for the collection, processing and use of your personal data pursuant to Art. 4 (7) DSGVO is:

LD13 GmbH

represented by the managing director Lisa Deurer

T +49 (0)151 419 573 74

E-Mail: community@ld13.de

2. purposes and legal basis of the processing of your personal data as well as further information on the specific data processing

2.1 General processing of our business partners' data

2.1.1 Description and scope of data processing

For the processing of business relations with our business partners (customers, suppliers, other business partners), we also store personal data from you (e.g. e-mail address, postal address, telephone number, ...). The personal data that we collect for this purpose is used internally by the departments that are involved in the processing of the business relationship.

If necessary, this data will be merged with the data of other orders, inquiries and business correspondence that you send us by other means (fax, mail, telephone, ...) and stored.

2.1.2 Purposes of data processing

We process your personal data for the purposes that are necessary for the fulfillment of the business relationship between you and us in each case, such as for the following purposes:

- Preparation of offers to customers for deliveries and services

- determination of your individual prices

- internal processing of your order

- delivery of the ordered goods

- inquiries to our suppliers

- contract negotiations

- clarification of all technical aspects of products and services from the business relationship

- payment transactions

- General business correspondence with you

If necessary, we also use the help of service providers, (e.g. logistics service providers for the shipment of products, banks for payment processing). We will only pass on your data to such third parties to the extent necessary for the performance of these tasks.

Our legitimate interest in using external service providers, such as logistics service providers for the shipment of your ordered goods, is to provide our services as efficiently and effectively and thus as quickly and cost-effectively as possible for you. Third parties who receive personal data from our business partners are obliged to comply with data protection regulations.

We reserve the right to pass on your personal data to external service providers for the purpose of carrying out a credit check in order to safeguard our legitimate interest in securing our receivables. We receive information from these credit agencies about your previous payment history and credit ratings. This data enables us to evaluate our business relationship and is used by us to decide on a delivery and for our protection against payment defaults.

2.1.3 Legal basis for data processing

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a as well as f DS-GVO. The processing is based on an implied consent as well as on our legitimate interests. Our legitimate interests follow from the purposes for data collection described above. If the business relationship is specifically aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) p. 1 lit. b DS-GVO.

2.1.4 Duration of storage

We store your personal data for the duration of our business relationship, or in accordance with the statutory retention periods.

2.2 Visiting our websites

2.2.1 Description and scope of data processing

Each time you visit our websites, our systems automatically collect data and information from the computer system of the calling computer (personal data that your browser transmits to our server). This also occurs if you do not register or otherwise transmit information to us, for example by actively entering it. The following data is collected in any case when visiting our websites:

- IP address of the user

- Date and time of the request or access

- Time zone difference to Greenwich Mean Time (GMT)

- Content of the request (specific page)

- Access status/HTTP status code

- Amount of data transferred in each case

- Website from which the request comes (from which the user's system accesses our website)

- Website that is accessed by the user's system via our website

- Information about the type of browser and the version used

- Operating system and its interface

- Language and version of the browser software

This data is stored in the log files of our system. Storage together with other of your personal data does not take place on a regular basis.

2.2.2 Purposes of data processing

The storage of the aforementioned data, in particular the IP address by our systems, is generally only carried out temporarily for the duration of the session and is necessary to enable the proper operation and presentation of the website. This processing of your data also serves the purposes of evaluating and continuing to ensure system security and stability, as well as other administrative purposes.

Insofar as your data is stored in our log files, this is also only done for the reasons of ensuring the functionality of our websites. In addition, we use the data to optimize and ensure the security of our information technology systems.

An evaluation of the data for marketing purposes does not take place in this context.

2.2.3 Legal basis for data processing

The legal basis for the processing and temporary storage of your personal data is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interests follow from the purposes for data collection outlined.

2.2.4 Duration of storage

Your data will be deleted as soon as they are no longer required to achieve the purpose. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of your data in log files, this is the case after seven days at the latest. Storage beyond this is only provided for in exceptional cases, for example if this is necessary for technical reasons or to improve our systems. In this case, the IP addresses of the users are deleted or alienated so that an assignment is no longer possible.

2.2.5 Possibility of objection and elimination

The collection of your data for the provision of the website and the possible storage in log files is absolutely necessary for the operation of the website.

Therefore, there is no possibility to object.

2.3 E-mail contact

2.3.1 Description and scope of data processing

It is possible to contact us via e-mail addresses provided by us. In this case, your personal data transmitted with the e-mail will be stored and further processed by us, in particular in order to process your inquiry or the reason for your contacting us.

The data will not be passed on to third parties. The data is used exclusively for processing the conversation.

2.3.2 Legal basis for data processing

The legal basis for the processing of your data when sending an e-mail to us is Art. 6 para. 1 p. 1 lit. a as well as f DSGVO. The processing is based on an implied consent as well as on our legitimate interests. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.

2.3.3 Purposes of data processing

The processing of the personal data of the e-mail sent to us only serves to process your contact with us. In the case of contacting us by e-mail, this constitutes the necessary legitimate interest for us to process the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

2.3.4 Duration of storage

We will delete your data as soon as we no longer need them to achieve the purposes described. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is usually ended when the circumstances indicate that the reason for your contacting us has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.

2.3.5 Possibility of objection and removal

You have the option to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, however, the conversation with you may not be continued. All personal data stored in the course of contacting you will be deleted in this case.

2.4 Orders via our online store (e-shop)

2.4.1 Description and scope of data processing

Ordering our products via our online sales is only possible for consumers. For this purpose, we also request personal data from you (name, e-mail address, postal address, telephone number, ...). The personal data you provide us with here will be used internally by the departments involved in processing your inquiries and orders.

Your data may be merged with the data of other orders that you send us by other means (fax, mail, telephone, ...) and stored.

2.4.2 Purposes of data processing

We process your personal data for the purposes that are necessary in each case for the fulfillment of the business relationship between you and us.

We process your personal data, which you provide to us for the use of our e-shop offer, for the processing of your individual inquiries and orders, such as for the following purposes:

- Checking your access authorization

- Your use of the shopping cart

- determination of your individual prices

- internal processing of your order

- delivery of the ordered goods

- payment transactions

- marketing activities

If necessary, we also use the help of service providers, (e.g. logistics service providers for the shipment of your ordered products, banks for payment processing). We will only pass on your data to such third parties to the extent necessary for the performance of these tasks. Third parties who receive data from our customers are obliged to comply with data protection regulations. Our legitimate interest in using external service providers, such as our logistics service provider for the shipment of your ordered goods, is to provide our services as efficiently and effectively and thus as quickly and cost-effectively as possible for you.

We reserve the right to pass on your personal data to external service providers for the purpose of carrying out a credit check. We receive information from these credit agencies about your previous payment history and credit ratings. This data enables us to evaluate our customer relationship and is used by us to decide on a delivery and for our protection against payment defaults. This is also our legitimate interest.

2.4.3 Legal basis for data processing

The legal basis for processing is the conclusion and fulfillment of the purchase contract for the ordered goods, Art. 6 para. 1 lit. b as well as lit. f. DS-GVO.

2.4.4 Duration of storage

This data is deleted when it is no longer required for the performance of the contract (including customer service and warranty), unless we are legally obliged to store it, e.g. due to retention obligations under commercial or tax law.

2.5 General information on the use of cookies

When you visit and use our website, cookies are stored on your computer. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.

Some of them are essential, i.e. they are technically necessary for the operation of our website. Other cookies are used for statistical purposes or to analyze access to our website, or for marketing purposes or to offer you the use of external media. Both temporary/session cookies and longer stored cookies (so-called permanent cookies) are used. Temporary cookies are deleted again as soon as you close your browser. Permanent cookies remain for a longer period of time, but can be deleted manually at any time. Some of the cookies are placed by third parties.

The legal basis for data processing when using essential cookies is Art. 6 para. 1 p. 1 lit. f DS-GVO, when using all other cookies the legal basis is your consent according to Art. 6 para. 1 p. 1 lit. a DS-GVO. Insofar as we do not process your data on the basis of your explicit consent, your personal data will only be processed to the extent that this is necessary to protect our legitimate interests or the legitimate interests of a third party and does not override your interests or fundamental rights and freedoms that require the protection of personal data.

Detailed information about the use of the respective cookies, in particular about their purpose, the respective function duration and to what extent they are placed by third parties or third parties have access to the data collected via the cookies, can be found in our "Cookie settings" in addition to the present information of our privacy policy. Here you will also find, depending on the category of cookies used, detailed information on the legal basis for the respective data processing.

You can individually consent to the use of the respective categories of cookies; you can also change your consent given in each case at any time under the "Cookie Settings" subpage or revoke it from us.

2.6 External links

Insofar as our web pages link to the pages of other providers or partners, our data protection declaration does not apply to their content. We have no influence on the compliance of these third-party providers with the legal data protection provisions. Information about the data protection of the operators of these sites can be found on the respective websites.

3. transfer of your data to third parties

We do not share personal information with companies, organizations or individuals outside of our company except in one of the following circumstances:

3.1. with your consent

We may provide your personal data to our third party business partners, other trusted companies or individuals who process it on our behalf. This will always be based on our instructions and in accordance with our Privacy Policy and other appropriate confidentiality and security measures.

3.2 Processing by other entities

Insofar as our websites link to the sites of other providers or partners, our data protection declaration does not apply to their content. We have no influence on the compliance with legal data protection regulations by these third-party providers. Information about the data protection of the operators of these sites can be found on the respective websites.

3.3 For legal reasons

We will disclose your personal data to companies, organizations or persons outside our company if we have a good faith belief that access to or use, preservation or disclosure of such data is reasonably necessary to comply with, in particular, any applicable law, regulation or legal process, or to comply with an enforceable governmental request.

4. transfer of your data to a third country or an international organization

Unless explicitly shown in the context of this privacy policy, a transfer of your personal data to third countries or international organizations does not take place.

5. automated decision making

Automated decision-making does not take place.

6. integration of social media plug-ins

6.1 Integration of LinkedIn

6.1.1 Description and scope of data processing

Our website uses a social media plug-in from LinkedIn. You can recognize the plug-in and its provider by the mark on the box above its initial letter or logo.

We use the so-called two-click solution. When you visit our site, no personal data is initially passed on to the provider of the plug-ins or third parties. Only when you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In this case, the information collected when you visit our website is transmitted to the third-party provider. Since the plug-in provider collects the data via cookies, we recommend that you check the cookie settings via your browser's security settings and delete all cookies before clicking on the provider button.

We would like to point out that, according to our information, the data transfer to the plug-in provider takes place regardless of whether you have an account with the plug-in provider and/or are logged in there. If you are logged in to the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and, if applicable, shares it publicly with your contacts.

6.1.2 Purposes of data processing

The data transfer to the plug-in provider takes place in order to simplify the use of the plug-in provider's websites. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.

6.1.3 Consent to the transfer of personal data to a third country

Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special requirements of Art. 44 et seq. DS-GVO are met. Accordingly, the data transfer may be carried out if the European Commission has determined by way of a decision within the meaning of Article 45 (1), (3) of the GDPR that an adequate level of protection is provided under data protection law in the third country concerned. By means of such so-called adequacy decisions, the European Commission certifies to third countries a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection_de).

To the extent that data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately ensured in the USA. This would generally be possible via binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.

Although LinkedIn has submitted to corresponding standard contractual clauses of the European Commission, U.S. companies are nevertheless obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to sustainably assert or enforce your rights to information against LinkedIn. Furthermore, the technical and organizational measures for the protection of personal data at LinkedIn may not fully meet the requirements of the GDPR in terms of quantity and quality.

There is thus the possibility that the standard contractual clauses of the European Commission used by LinkedIn do not constitute sufficient guarantees within the meaning of Art. 46 (2) a) DS-GVO.

By consenting to the collection of data by LinkedIn, you expressly agree to the transfer of data as set forth herein, and you have been informed above of the potential risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.

This consent can be revoked at any time. A revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

6.1.4 Legal basis for data processing

The legal basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) DSGVO to the processing of your personal data for presentation and advertising purposes.

6.1.5 Duration of storage; possibility of objection and removal

The cookies we use are stored on your computer and transmitted from it to our site. Therefore, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted by you at any time. If you deactivate the use of cookies for our website or delete cookies that have been set, it may no longer be possible to fully use all the functions of the website.

6.1.6 Purposes and legal bases of data processing, duration of storage, possibility of objection and removal from the plug-in provider.

We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider. However, if applicable, the plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the respective plug-in provider. For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy.

6.1.7 Further information

Further information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy, can be obtained from: LinkedIn Corporation, 1000 W. Maude Avenue,Sunnyvale, CA 94085,USA / LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, as well as at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

6.2 Integration of Instagram

6.2.1 Description and scope of data processing

Our website uses a social media plug-in from Instagram. You can recognize the plug-in and its provider by the mark on the box above its initial letter or logo.

We use the so-called two-click solution. When you visit our site, no personal data is initially passed on to the provider of the plug-ins or third parties. Only when you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In this case, the information collected when you visit our website is transmitted to the third-party provider. Since the plug-in provider collects the data via cookies, we recommend that you check the cookie settings via your browser's security settings and delete all cookies before clicking on the provider button.

We would like to point out that, according to our information, the data transfer to the plug-in provider takes place regardless of whether you have an account with the plug-in provider and/or are logged in there. If you are logged in to the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider will also store this information in your user account and, if applicable, share it publicly with your contacts.

6.2.2 Purposes of data processing

The data transfer to the plug-in provider takes place in order to simplify the use of the plug-in provider's websites. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.

6.2.2 Purposes of data processing

The data transfer to the plug-in provider takes place in order to simplify the use of the plug-in provider's websites. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.

6.2.3 Consent to the transfer of personal data to a third country

Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special requirements of Art. 44 et seq. DS-GVO are met. Accordingly, the data transfer may be carried out if the European Commission has determined by way of a decision within the meaning of Article 45 (1), (3) of the GDPR that an adequate level of protection is provided under data protection law in the third country concerned. By means of such so-called adequacy decisions, the European Commission certifies to third countries a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection_de).

To the extent that data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately ensured in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.

Although Instagram has submitted to corresponding standard contractual clauses of the European Commission, U.S. companies are nevertheless obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to sustainably assert or enforce your rights to information against Instagram. Furthermore, the technical and organizational measures for the protection of personal data at Instagram may not fully meet the requirements of the GDPR in terms of quantity and quality.

There is thus the possibility that the standard contractual clauses of the European Commission used by Instagram do not constitute sufficient guarantees within the meaning of Art. 46 (2) a) DS-GVO.

By consenting to the collection of data by Instagram, you expressly agree to the transfer of data as set forth herein, and you have been informed above of the potential risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.

This consent can be revoked at any time. A revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

6.2.4 Legal basis for data processing

The legal basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) DSGVO to the processing of your personal data for presentation and advertising purposes.

6.2.5 Duration of storage; possibility of objection and removal

The cookies we use are stored on your computer and transmitted from it to our site. Therefore, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted by you at any time. If you deactivate the use of cookies for our website or delete cookies that have been set, it may no longer be possible to fully use all the functions of the website.

6.2.6 Purposes and legal bases of data processing, duration of storage, possibility of objection and removal from the plug-in provider.

We have no influence on the data collected and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider. However, if applicable, the plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the respective plug-in provider. For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy.

6.2.7 Further information

Further information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy, can be obtained from: Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Further information on Instagram's social plug-ins is available at the following Internet address: https://help.instagram.com

6.3 Integration of Spotify

6.3.1 Description and scope of data processing

Our website uses a social media plug-in from Spotfiy. You can recognize the plug-in and its provider by the mark on the box above its initial letter or logo.

We use the so-called two-click solution. When you visit our site, no personal data is initially passed on to the provider of the plug-ins or third parties. Only when you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In this case, the information collected when you visit our website is transmitted to the third-party provider. Since the plug-in provider collects the data via cookies, we recommend that you check the cookie settings via your browser's security settings and delete all cookies before clicking on the provider button.

We would like to point out that, according to our information, the data transfer to the plug-in provider takes place regardless of whether you have an account with the plug-in provider and/or are logged in there. If you are logged in to the plug-In provider's existing account. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts, if applicable.

6.3.3 Consent to the transfer of personal data to a third country

Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special requirements of Art. 44 et seq. DS-GVO are met. Accordingly, the data transfer may be carried out if the European Commission has determined by way of a decision within the meaning of Article 45 (1), (3) of the GDPR that an adequate level of protection is provided under data protection law in the third country concerned. By means of such so-called adequacy decisions, the European Commission certifies to third countries a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html).

To the extent that data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, other suitable guarantees would have to exist in principle to ensure that data protection is sufficiently guaranteed in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.

Although Spotify has submitted to corresponding standard contractual clauses of the European Commission, U.S. companies are nevertheless obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to sustainably assert or enforce your rights to information against Spotify. Furthermore, the technical and organizational measures for the protection of personal data at Spotify may not fully meet the requirements of the GDPR in terms of quantity and quality.

There is thus the possibility that the standard contractual clauses of the European Commission used by Spotify do not constitute sufficient safeguards within the meaning of Art. 46(2)(a) DS-GVO.

By consenting to the collection of data by Spotify, you expressly consent to the transfer of data as set forth herein, and you have been informed above of the potential risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.

This consent may be revoked at any time. A revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

6.3.4 Legal basis for data processing

The legal basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) DSGVO to the processing of your personal data for presentation and advertising purposes.

6.3.5 Duration of storage; possibility of objection and removal

The cookies we use are stored on your computer and transmitted from it to our site. Therefore, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted by you at any time. If you deactivate the use of cookies for our website or delete cookies that have been set, it may no longer be possible to fully use all the functions of the website.

6.3.6 Purposes and legal bases of data processing, duration of storage, possibility of objection and removal from the plug-in provider.

We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider. However, if applicable, the plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the respective plug-in provider. For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy.

6.3.7 Further information

Further information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy, can be obtained from: Spotify Spotify AB, Regeringsgatan 19,111 53 Stockholm, Sweden, as well as at https://www.spotify.com/de/legal/privacy-policy/

7. integration of marketing and statistics tools

7.1 Integration of Google Analytics

7.1.1 Description and scope of data processing

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4 (hereinafter: Google). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the case of activation of IP anonymization on this website (see below), however, your IP address will be truncated beforehand by Google within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and then shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Google Analytics is used on this website with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted.

7.1.2 Purposes of data processing

We use Google Analytics to analyze and regularly improve our website. The statistics obtained allow us to improve our offer and make it more interesting for you.

7.1.3 Consent to the transfer of personal data to a third country

Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special requirements of Art. 44 et seq. DS-GVO are met. Accordingly, the data transfer may be carried out if the European Commission has determined by way of a decision within the meaning of Art. 45 (1), (3) DS-GVO that an adequate level of protection is provided under data protection law in the third country concerned. By means of such so-called adequacy decisions, the European Commission certifies to third countries a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection_de).

To the extent that data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately ensured in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.

Although Google has submitted to corresponding standard contractual clauses of the European Commission, U.S. companies are nevertheless obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to assert or enforce your rights to information against Google in the long term. Furthermore, the technical and organizational measures for the protection of personal data at Google may not fully meet the requirements of the GDPR in terms of quantity and quality.

There is thus the possibility that the standard contractual clauses of the European Commission used by Google do not constitute sufficient guarantees within the meaning of Article 46 (2) a) of the GDPR.

By consenting to the collection of data by Google Analytics, you expressly agree to the data transfer presented here, whereby you have been informed above about the possible risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.

This consent can be revoked at any time. A revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

7.1.4 Legal basis for data processing

The legal basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) DS-GVO to the processing of your personal data for purposes of analysis and statistics on user behavior using Google Analytics.

7.1.5 Further information

Further information on the purpose and scope of the data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy, can be obtained from: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions: https://marketingplatform.google.com/about/analytics/terms/de/, as well as the privacy policy: https://policies.google.com/privacy?hl=de&gl=de

8. use of Google Web Fonts

8.1 Description, scope and purpose of data processing

This site uses so-called web fonts, which are provided by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers.

If your browser does not support web fonts, a standard font will be used by your computer.

8.2 Consent to the transfer of personal data to a third country

Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special requirements of Art. 44 et seq. DS-GVO are met. Accordingly, the data transfer may be carried out if the European Commission has determined by way of a decision within the meaning of Art. 45 (1), (3) DS-GVO that an adequate level of protection is provided under data protection law in the third country concerned. By means of such so-called adequacy decisions, the European Commission certifies to third countries a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection_de).

To the extent that data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately ensured in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.

Although Google has submitted to corresponding standard contractual clauses of the European Commission, U.S. companies are nevertheless obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to assert or enforce your rights to information against Google in the long term. Furthermore, the technical and organizational measures for the protection of personal data at Google may not fully meet the requirements of the GDPR in terms of quantity and quality.

There is thus the possibility that the standard contractual clauses of the European Commission used by Google do not constitute sufficient guarantees within the meaning of Article 46 (2) a) of the GDPR.

By consenting to the collection of data by Google, you expressly agree to the transfer of data as set out here, and you have been informed above of the potential risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.

This consent can be revoked at any time. A revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

8.3 Legal basis for data processing

The legal basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) DS-GVO to the processing of your personal data for the uniform display of fonts using Google Web Fonts.

8.4 Further information

Further information on Google Web Fonts can be found at Google Ireland Limited Gordon House, Barrow Street Dublin 4 as well as at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de

9. integration Adobe Typekit

9.1 Description, scope and purpose of data processing

On this website, the script code "Adobe Typekit" of the company Adobe Systems Software Ireland, 4-6, Riverwalk Drive, Citywest Business Campus, Cooldown Commons, Dublin 24, D24 DCW0, Ireland (hereinafter: Adobe) is integrated. In this context, a connection is established between the browser you are using and Adobe's servers. This enables Adobe to know that our website has been accessed via your IP address.

9.2 Consent to the transfer of personal data to a third country

Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special requirements of Art. 44 et seq. DS-GVO are met. Accordingly, the data transfer may be carried out if the European Commission has determined by way of a decision within the meaning of Article 45 (1), (3) of the GDPR that an adequate level of protection is provided under data protection law in the third country concerned. By means of such so-called adequacy decisions, the European Commission certifies to third countries a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection_de).

To the extent that data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately ensured in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.

Adobe has signed up to the European Commission's standard contractual clauses, but U.S. companies are still required to disclose personal data to security authorities without any legal recourse for you as a data subject. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to assert or enforce your rights to information against Adobe on a sustained basis. Furthermore, the technical and organizational measures for the protection of personal data at Adobe may not fully comply with the requirements of the GDPR in terms of quantity and quality.

It is therefore possible that the standard contractual clauses of the European Commission used by Adobe do not constitute sufficient guarantees within the meaning of Article 46 (2) a) of the GDPR.

By consenting to the collection of data by Adobe, you expressly consent to the transfer of data as set forth herein, and you have been informed above of the potential risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.

This consent may be revoked at any time. A revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9.3 Legal basis for data processing

The legal basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) DS-GVO to the processing of your personal data for the uniform display of fonts using Adobe.

9.4 Further information

For more information about Adobe, please contact Adobe Systems Software Ireland, 4-6, Riverwalk Drive, Citywest Business Campus, Cooldown Commons, Dublin 24, D24 DCW0, Ireland and Adobe Systems Incorporated 345 Park Avenue San Jose, CA 95110-2704, USA and https://www.adobe.com/de/privacy.html.

10. your rights

You have the right:

- In accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;

- pursuant to Art. 16 DSGVO, to request the correction of incorrect or incomplete personal data stored by us without undue delay;

- pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

- pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;

- pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;

- in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time (see also section 7.1). This has the consequence that we may no longer continue the data processing based on this consent for the future; and

- to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

11. objection or revocation against the processing of your data.

If you have given your consent to the processing of your data, you may revoke this consent at any time in accordance with Article 7 (3) DSGVO. Such revocation affects the permissibility of the processing of your personal data after you have expressed it to us.

Insofar as the processing of your personal data is based on our legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing pursuant to Art. 21 DSGVO. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is presented by us in each case in the description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the contact details above.