Privacy policy - Engel-Kette

Privacy policy

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide data has no consequences. This only applies if no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing any personal information.

Each time you access our website, usage data is transmitted by your internet browser to us or our web host/IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. The processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission is in place, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations that are comparable to the EU Commission's Standard Contractual Clauses.

Contact details

Responsible person
Please contact us on request. The controller responsible for data processing is Sessorium-Commerce GbR, Hauptstraße 36, 74865 Neckarzimmern Germany, support@engel-kette.de, +4915151751150

Proactive contact by the customer by e-mail
If you contact us by e-mail on your own initiative, we will only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data processing serves to process and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of an interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR.
We will only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent that you provide it. The data processing serves the purpose of establishing contact.
If the purpose of the contact is to carry out pre-contractual measures (e.g. advice on an interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR.
We will only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Use of address validation from Google Maps API
We use address validation from the provider Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland "Google") on our website.
The purpose of data processing is to check your entries in our address forms in real time for input and spelling errors and to complete any missing data. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, where it is stored and analyzed.
Among other things, the following information may be transmitted to Google and processed there: postal addresses (country, city, zip code, street, house number), e-mail address, telephone number.
Your data may also be transmitted to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and is therefore committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a correct data basis for the fulfillment of our contractual obligations. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
The data will be processed separately by the provider and will not be merged with other data. They will be deleted by the provider as soon as the status of the data entered has been determined, but at the latest after 30 days.
You can find more information on terms of use and data protection at Google at: https://cloud.google.com/maps-platform/terms or at https://www.google.de/policies/privacy/.

Customer account orders

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.

Collection, Processing, and Sharing of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and to handle your inquiries. Providing the data is necessary for concluding the contract. Failure to provide the data means that no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR and is required for the performance of a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is kept to a minimum.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. The EU Commission has issued an adequacy decision for Canada. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations that are comparable to those of the EU Commission's standard contractual clauses.

Advertising

Use of the email address for sending newsletters
We use your email address independently of the contract processing exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list.

Use of Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") to send the newsletter as part of order processing.
We pass on the information you provide to Klaviyo when you register for the newsletter (email address, first name and surname if applicable). The data processing serves the purpose of sending the newsletter and its statistical evaluation.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device as well as the time. This data can be used to create user profiles under a pseudonym. The data collected will not be used to identify you personally. The data collected is only used for statistical analysis to improve newsletter campaigns.
Your data is generally transmitted to Klaviyo servers in the USA and stored there. An adequacy decision of the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself in accordance with the TADPF and is therefore committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a targeted, effective advertising and user-friendly newsletter system. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.
You can find more information on data protection at Klaviyo at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.

Payment service provider credit rating information

Use of PayPal
We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the PayPal Plus payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Verwendung von PayPal Express
Wir verwenden auf unserer Website den Zahlungsdienst PayPal Express der PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxemburg; "PayPal"). Die Datenverarbeitung dient dem Zweck, Ihnen die Zahlung über den Zahlungsdienst PayPal Express anbieten zu können. Zur Einbindung dieses Zahlungsdienstes ist es erforderlich, dass PayPal beim Aufruf der Website Daten (z.B. IP-Adresse, Gerätetyp, Betriebssystem, Browsertyp, Standort Ihres Geräts) sammelt, speichert und analysiert. Hierzu können auch Cookies eingesetzt werden. Die Cookies ermöglichen die Wiedererkennung Ihres Browsers.
Die Verarbeitung Ihrer personenbezogenen Daten erfolgt auf Grundlage des Art. 6 Abs. 1 lit. f DSGVO aus unserem überwiegenden berechtigten Interesse an einem kundenorientierten Angebot von verschiedenen Zahlarten. Sie haben das Recht aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit dieser Verarbeitung Sie betreffender personenbezogener Daten zu widersprechen.
Mit Auswahl und Nutzung von PayPal Express werden die zur Zahlungsabwicklung erforderlichen Daten an PayPal übermittelt, um den Vertrag mit Ihnen mit der gewählten Zahlart erfüllen zu können. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Nähere Informationen zur Datenverarbeitung bei Verwendung des Zahlungsdienstes PayPal Express finden Sie in der dazugehörigen Datenschutzerklärung unter www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Verwendung von PayPal Check-Out
Wir verwenden auf unserer Website den Zahlungsdienst PayPal Check-Out der PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxemburg; "PayPal"). Die Datenverarbeitung dient dem Zweck, Ihnen die Zahlung über den Zahlungsdienst anbieten zu können. Mit Auswahl und Nutzung von Zahlung via PayPal, Kreditkarte via PayPal, Lastschrift via PayPal oder „Später Bezahlen“ via PayPal werden die zur Zahlungsabwicklung erforderlichen Daten an PayPal übermittelt, um den Vertrag mit Ihnen mit der gewählten Zahlart erfüllen zu können. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO.

Hierbei können Cookies gespeichert werden, die die Wiedererkennung Ihres Browsers ermöglichen. Die dadurch stattfindende Datenverarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. f DSGVO aus unserem überwiegenden berechtigten Interesse an einem kundenorientierten Angebot von verschiedenen Zahlarten. Sie haben das Recht aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit dieser Verarbeitung Sie betreffender personenbezogener Daten zu widersprechen.

Kreditkarte via PayPal, Lastschrift via PayPal & „Später bezahlen“ via PayPal
Bei einzelnen Zahlungsarten wie Kreditkarte via PayPal, Lastschrift via PayPal oder „Später bezahlen“ via PayPal behält sich PayPal das Recht vor, ggf. eine Bonitätsauskunft auf der Basis mathematisch-statistischer Verfahren unter Nutzung von Auskunfteien einzuholen. Hierzu übermittelt PayPal die zu einer Bonitätsprüfung benötigten personenbezogenen Daten an eine Auskunftei und verwendet die erhaltenen Informationen über die statistische Wahrscheinlichkeit eines Zahlungsausfalls für eine abgewogene Entscheidung über die Begründung, Durchführung oder Beendigung des Vertragsverhältnisses. Die Bonitätsauskunft kann Wahrscheinlichkeitswerte (Score-Werte) beinhalten, die auf Basis wissenschaftlich anerkannter mathematisch-statistischer Verfahren berechnet werden und in deren Berechnung unter anderem Anschriftendaten einfließen. Ihre schutzwürdigen Belange werden gemäß den gesetzlichen Bestimmungen berücksichtigt. Die Datenverarbeitung dient dem Zweck der Bonitätsprüfung für eine Vertragsanbahnung. Die Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. f DSGVO aus unserem überwiegenden berechtigten Interesse am Schutz vor Zahlungsausfall, wenn PayPal in Vorleistung geht.
Sie haben das Recht aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen diese auf Art. 6 Abs. 1 lit. f DSGVO beruhende Verarbeitung Sie betreffender personenbezogener Daten durch Mitteilung an PayPal zu widersprechen. Die Bereitstellung der Daten ist für den Vertragsschluss mit der von Ihnen gewünschten Zahlart erforderlich. Eine Nichtbereitstellung hat zur Folge, dass der Vertrag nicht mit der von Ihnen gewählten Zahlart geschlossen werden kann.

Drittanbieter
Bei Bezahlung über die Zahlungsart eines Drittanbieters werden die zur Zahlungsabwicklung erforderlichen Daten an PayPal übermittelt. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Zur Durchführung dieser Zahlungsart werden die Daten ggf. sodann seitens PayPal an den jeweiligen Anbieter weitergegeben. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Lokale Drittanbieter können beispielsweise sein:

Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)

Purchase on account via PayPal
When paying via the payment method purchase on account, the data required for payment processing is first transmitted to PayPal. In order to process this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies in accordance with the procedure described above. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if Ratepay makes advance payments. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. By selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) DSGVO.

Cookies may be stored that enable your browser to be recognized. The resulting data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a customer-oriented offer of different payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.

Pay Later (Invoice), Pay Now (Direct Debit), Financing (Installment Purchase)

For certain payment methods such as “Pay Later” (invoice), “Pay Now” (direct debit), and “Financing” (installment purchase), Klarna reserves the right to obtain a credit report, if necessary, based on mathematical-statistical methods using credit agencies.

For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, and order-related data, to a credit agency for identity and credit verification. Klarna uses the received information about the statistical probability of payment default to make an informed decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, incorporating address data, among other factors. Your legitimate interests are considered in accordance with legal provisions. The data processing serves the purpose of conducting a credit check for contract initiation. The processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment default when Klarna makes advance payments. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR by notifying Klarna. Providing the data is necessary for concluding the contract with your chosen payment method. Failure to provide the data means that the contract cannot be concluded with the payment method you selected.

Further information, particularly regarding which credit agencies Klarna shares your personal data with, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

General information about Klarna is available at: https://www.klarna.com/de/. Your personal data is processed by Klarna in accordance with applicable data protection regulations and as outlined in Klarna’s privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Use of Klarna payment options

Pay Later (Invoice), Pay Now (Direct Debit), Financing (Installment Purchase)

For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address, and data related to the order, to a credit agency for the purpose of identity and credit verification. Klarna uses the received information about the statistical probability of payment default to make an informed decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which incorporate address data, among other factors. Your legitimate interests are considered in accordance with legal provisions. The data processing serves the purpose of conducting a credit check for contract initiation. The processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment default when Klarna makes advance payments. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR by notifying Klarna. Providing the data is necessary for concluding the contract with your chosen payment method. Failure to provide the data means that the contract cannot be concluded with the payment method you selected.

Further information, in particular to which credit agencies Klarna passes on your personal data, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies

General information about Klarna is available for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data is processed by Klarna in accordance with applicable data protection regulations and as outlined in Klarna’s privacy policy for Germany at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Use of SOFORT

We use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; “SOFORT”) for payment processing on our website. SOFORT GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data processing serves the purpose of offering you various payment methods through payment processing via the payment service provider SOFORT. If you have chosen this payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is based on Art. 6(1)(b) GDPR. Further information on data processing when using the payment service provider SOFORT can be found at: https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.

Use of the payment service provider Stripe

We use the payment service Stripe, provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, on our website. The data processing serves the purpose of enabling you to make payments via the payment service. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR.

Stripe reserves the right to obtain a credit report, if necessary, based on mathematical-statistical methods using credit agencies. For this purpose, Stripe transfers the personal data required for a credit check to a credit agency and uses the obtained information on the statistical likelihood of payment default to make an informed decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which incorporate address data, among other factors. Your legitimate interests are considered in accordance with legal provisions. The data processing serves the purpose of conducting a credit check for contract initiation. The processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment default when Stripe makes advance payments.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR by notifying Stripe. The provision of the data is necessary for the conclusion of the contract with your chosen payment method. Failure to provide the data means that the contract cannot be concluded with the payment method you selected.

All Stripe transactions are subject to the Stripe Privacy Policy. This can be found at https://stripe.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide whether to accept them individually and prevent the storage of cookies and transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.

Under the following links, you can find information on how to manage cookies (including how to disable them) in the most common browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=en
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Essential cookies

Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change.

The use of cookies or comparable technologies is based on Section 25 (2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data concerning you.

Verwendung von GDPR Legal Cookie
Wir verwenden auf unserer Website das Consent-Management-Tool GDPR Legal Cookie der beeclever GmbH (Universitätsstraße 3, 56070 Koblenz a. Rh.; „beeclever“). Das Tool ermöglicht es Ihnen, Einwilligungen in Datenverarbeitungen über die Website, insbesondere das Setzen von Cookies, zu erteilen sowie von Ihrem Widerrufsrecht für bereits erteilte Einwilligungen Gebrauch zu machen.
Die Datenverarbeitung dient dem Zweck, erforderliche Einwilligungen in Datenverarbeitungen einzuholen sowie zu dokumentieren und damit gesetzliche Verpflichtungen einzuhalten. Hierzu können Cookies eingesetzt werden. Dabei können u. a. folgende Informationen erhoben und an beeclever übermittelt werden: anonymisierte IP-Adresse, Datum und Uhrzeit der Zustimmung, URL, von der die Zustimmung gesendet wurde, anonymer, zufälliger, verschlüsselter Key, Einwilligungsstatus. Eine Weitergabe dieser Daten an sonstige Dritte erfolgt nicht.
Die Datenverarbeitung erfolgt zur Erfüllung einer rechtlichen Verpflichtung auf Grundlage des Art. 6 Abs. 1 lit. c DSGVO.
Nähere Informationen zu Nutzungsbedingungen und Datenschutz bei beeclever finden Sie unter: https://gdpr-legal-cookie.com/pages/terms-conditions sowie unter https://gdpr-legal-cookie.com/pages/datenschutzerklarung.

Analyse Werbetracking

Verwendung von Google Analytics 4
Wir verwenden auf unserer Website den Webanalysedienst Google Analytics der Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irland; „Google“).
Die Datenverarbeitung dient dem Zweck der Analyse dieser Website und ihrer Besucher sowie für Marketing- und Werbezwecke. Dazu wird Google im Auftrag des Betreibers dieser Website die gewonnenen Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Websiteaktivitäten zusammenzustellen und um weitere, mit der Websitenutzung und der Internetnutzung verbundene Dienstleistungen gegenüber dem Websitebetreiber zu erbringen.
Dabei können u.a. folgende Informationen erhoben werden: IP-Adresse, Datum und Uhrzeit des Seitenaufrufs, Klickpfad, Informationen über den von Ihnen verwendeten Browser und das von Ihnen verwendete Device (Gerät), besuchte Seiten, Referrer-URL (Webseite, über die Sie unsere Webseite aufgerufen haben), Standortdaten, Kaufaktivitäten. Ihre Daten können von Google mit anderen Daten, wie beispielsweise Ihrem Suchverlauf, Ihren persönlichen Accounts, Ihren Nutzungsdaten anderer Geräte und allen anderen Daten, die Google zu Ihnen vorliegen hat, verknüpft werden.

Die IP-Adresse wird von Google innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt.

Google verwendet Technologien wie Cookies, Webspeicher im Browser und Zählpixel, die eine Analyse der Benutzung der Website durch Sie ermöglichen. Die Nutzung von Cookies oder vergleichbarer Technologien erfolgt mit Ihrer Einwilligung auf Grundlage des § 25 Abs. 1 S. 1 TDDDG i.V.m. Art. 6 Abs. 1 lit. a DSGVO.

Die Verarbeitung Ihrer personenbezogenen Daten erfolgt mit Ihrer Einwilligung auf Grundlage des Art. 6 Abs. 1 lit. a DSGVO. Sie können die Einwilligung jederzeit widerrufen, ohne dass die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung berührt wird.

Wir nutzen die erweiterte Implementierung des Einwilligungsmodus (Advanced Consent Mode). Hierbei werden auch bei nicht erteilter Einwilligung Nutzerdaten an Google in Form von “Pings” übermittelt. Diese Pings können u.a. folgende Informationen enthalten: IP-Adresse zum Ableiten des IP-Landes (eine Protokollierung der IP-Adresse findet nicht statt), Datum und Uhrzeit des Seitenaufrufs, URL der besuchten Seiten, User-Agent, Referrer-URL (Website, über die unsere Website aufgerufen wurde) oder Informationen über das Auslösen von Website-Ereignissen wie z.B. einer Conversion. Auf Grundlage dieser Informationen nimmt Google eine Modellierung von Nutzdaten vor, um eine umfassende Nutzungsanalyse trotz der Verweigerung der Einwilligung vornehmen zu können.

Die dadurch erzeugten Informationen über Ihre Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Für die USA ist ein Angemessenheitsbeschluss der EU-Kommission vorhanden, das Trans-Atlantic Data Privacy Framework (TADPF). Google hat sich nach dem TADPF zertifiziert und damit verpflichtet, europäische Datenschutzgrundsätze einzuhalten. Sowohl Google als auch staatliche US-Behörden haben Zugriff auf Ihre Daten.

Nähere Informationen zu Nutzungsbedingungen und Datenschutz finden Sie unter https://policies.google.com/technologies/partner-sites und unter https://policies.google.com/privacy?hl=de&gl=de.

Verwendung von Hotjar
Wir verwenden auf unserer Webseite das Analysetool der Hotjar Ldt. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”).
Die Datenverarbeitung dient dem Zweck der bedarfsgerechten Gestaltung, Optimierung und Analyse unserer Webseite.
Mit dem Tool werden Bewegungen von Seitenbesuchern auf der Webseite stichprobenartig aufgezeichnet. Hierbei entsteht ein Protokoll der Mausbewegungen, des Scrollenverhaltens, der Verweildauer und der Klicks auf der Webseite (sog. Heatmap).
Zu diesem Zweck setzt Hotjar u.a. Cookies ein. Dabei können u.a. folgende Informationen erhoben werden: IP-Adresse (in anonymisierter Form), Informationen über das von Ihnen verwendete Gerät (Bildschirmgröße, Geräte, eindeutige Gerätekennung), Informationen über den von Ihnen verwendeten Browser, Standortdaten (ausschließlich zum Land), bevorzugte Sprache zur Anzeige der Webseite, verwendetes Betriebssystem. Ausführliche Informationen zu den zu den verwendeten Cookies, deren Funktion und die Speicherdauer finden Sie hier: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies.
Aus diesen Daten werden unter einem Pseudonym Nutzerprofile erstellt. Die Daten werden nicht dazu benutzt, den Besucher der Webseite persönlich zu identifizieren und nicht mit personenbezogenen Daten des Trägers des Pseudonyms zusammengeführt. Hotjar ist es vertraglich untersagt, die erhobenen Daten an sonstige Dritte zu verkaufen.
Ihre Daten werden gegebenenfalls in die USA übermittelt. Für die USA ist ein Angemessenheitsbeschluss der EU-Kommission vorhanden, das Trans-Atlantic Data Privacy Framework (TADPF). Hotjar ist nicht nach dem TADPF zertifiziert. Die Datenübermittlung erfolgt u.a. auf Grundlage angemessener Schutzmaßnahmen. Weitere Informationen zu den getroffenen Maßnahmen stellt Ihnen Hotjar auf Anfrage zur Verfügung.
Die Nutzung von Cookies oder vergleichbarer Technologien erfolgt mit Ihrer Einwilligung auf Grundlage des § 25 Abs. 1 S. 1 TDDDG i.V.m. Art. 6 Abs. 1 lit. a DSGVO. Die Verarbeitung Ihrer personenbezogenen Daten erfolgt mit Ihrer Einwilligung auf Grundlage des Art. 6 Abs. 1 lit. a DSGVO. Sie können die Einwilligung jederzeit widerrufen, ohne dass die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung berührt wird.
Weitere Informationen zum Datenschutz bei Verwendung von Hotjar finden Sie hier: https://www.hotjar.com/legal/policies/privacy#enduserenglish.

Verwendung der Shopify-Statistik
Wir verwenden auf unserer Website die Statistik- und Analysefunktionen der Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland; "Shopify") im Rahmen einer Auftragsverarbeitung. Shopify ist ein mit der Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Kanada) verbundenes Unternehmen.
Die Datenverarbeitung dient dem Zweck der Analyse dieser Website und ihrer Besucher. Dazu werden Daten zu Marketing- und Optimierungszwecken gespeichert und in Berichten, Analysen und Statistiken bereitgestellt. Dabei werden u.a. folgende Geräteinformationen erhoben und verarbeitet: Informationen zum Webbrowser, der IP-Adresse, der Zeitzone und einigen der Cookies, die auf Ihrem Gerät installiert sind. Wenn Sie auf der Website navigieren, werden zudem Informationen zu aufgerufenen Webseiten oder Produkten, zur Referrer-URL (Webseite, über die Sie unsere Webseite aufgerufen haben), sowie Informationen darüber, wie Sie mit der Website interagieren, erfasst. Hierfür werden Technologien wie Cookies sowie Web-Beacons, Tags und Pixel (elektronische Dateien zur Erfassung von Informationen dazu, wie Sie auf der Website navigieren) genutzt.
Ihre Daten werden ggf. in Drittstaaten außerhalb der EU, insbesondere nach Kanada und in die USA, übermittelt und dort verarbeitet. Für Kanada existiert ein Angemessenheitsbeschluss der EU-Kommission. Für die USA ist ein Angemessenheitsbeschluss der EU-Kommission vorhanden, das Trans-Atlantic Data Privacy Framework (TADPF). Shopify ist nicht nach dem TADPF zertifiziert. Diese Datenübermittlung erfolgt auf Grundlage vertraglicher Verpflichtungen, die mit denen der Standardvertragsklauseln der EU-Kommission vergleichbar sind.
Die Nutzung von Cookies oder vergleichbarer Technologien erfolgt mit Ihrer Einwilligung auf Grundlage des § 25 Abs. 1 S. 1 TDDDG i.V.m. Art. 6 Abs. 1 lit. a DSGVO. Die Verarbeitung Ihrer personenbezogenen Daten erfolgt mit Ihrer Einwilligung auf Grundlage des Art. 6 Abs. 1 lit. a DSGVO. Sie können die Einwilligung jederzeit widerrufen, ohne dass die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung berührt wird.
Sie finden nähere Informationen zum Datenschutz bei Shopify unter https://www.shopify.com/de/legal/datenschutz, Informationen zum Auftragsverarbeitungsvertrag unter https://www.shopify.com/de/legal/dpa sowie Informationen zu den verwendeten Cookies unter https://www.shopify.com/de/legal/cookies.

Use of the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are jointly responsible for the collection of your data and the transmission of this data to Meta when the service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for compliance with the obligations pursuant to Art. 33, 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the joint processing agreement. Meta is responsible for enabling the rights of data subjects pursuant to Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the Service and the obligations under Art. 33, 34 GDPR to the extent that a personal data breach affects Meta's obligations under the Joint Processing Agreement.

The application aims to target website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta’s servers when you visit the website, transmitting information about which of our pages you have visited to the Meta server. Meta links this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads.

The application also serves the purpose of generating conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag, as well as the actions taken on the website following the redirection. However, we do not receive any information that allows users to be personally identified.

Your data may be transferred to the USA, where applicable. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), exists for the USA. Meta has certified itself under the TADPF, thereby committing to comply with European data protection principles.

The processing of your personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent prior to its revocation. You can deactivate the remarketing function “Custom Audiences” here. Further information about the collection and use of data by Meta, as well as your related rights and options for protecting your privacy, can be found in Meta’s privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads conversion tracking
We use the online advertising program "Google Ads" on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers.
The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

Your data may be transmitted to the servers of Google LLC in the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has therefore undertaken to comply with European data protection principles.

The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent based on Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent prior to its revocation. Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/.

Use of TikTok Pixel
We use TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website. Both companies are the joint controllers for data processing (hereinafter "TikTok").
The purpose of data processing is to identify and analyze our customers' website access and to better address customers by placing targeted advertisements and evaluating the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized. The following information may be collected and transmitted to TikTok: Date and time of the visit, information about the browser and device type you are using, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. The data collected in this way can be used to create user profiles using pseudonyms. However, this does not make it possible to personally identify users.
Your data may be transferred to third countries, such as the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified in accordance with the TADPF. The transfer of data to the USA and to third countries without an adequacy decision is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can find more information on data protection at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Plug-ins and miscellaneous

Use of the Google Tag Manager
We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of designing and optimizing our website to meet your needs.
The Google Tag Manager itself does not store cookies or process personal data. However, it enables the triggering of other tags that can collect and process personal data.
You can find more information on terms of use and data protection here.

Use of Google reCAPTCHA

We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The purpose of this service is to distinguish between input made by a human and automated, machine-based processing. For this purpose, your input is transmitted to Google and processed further there. Additionally, your IP address and, if applicable, other data required by Google for the reCAPTCHA service are transferred to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF, thereby committing to comply with European data protection principles.

Further information about Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This serves the purpose of distinguishing between human input and automated, machine processing. In the background, Google collects and analyzes usage data that is used by Invisible reCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the Invisible reCAPTCHA service will be transmitted to Google.
This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of the uniform presentation of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transmitted to the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can find more information on data processing and data protection at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

**Klar Attribution** We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes and stores data on this website and its subpages for reach measurement and statistical analysis on our behalf. This collection takes place on the following legal basis: If the user has given consent in accordance with Article 6 (1) sentence 1 a GDPR and Section 25 (1) sentence 1 TTDSG, the data to be processed is collected on a user-related basis. Different cookies are used for the aforementioned different types of data collection in order to guarantee the respective type of data collection. **Cookie** - **Objection** To object to the use of Klar in principle, please use this [link](https://1847071198.engel-kette.de/donottrack/me). This will set a cookie with the name "do_not_track" from the domain "engel-kette.de". Please do not delete this, as otherwise it cannot be guaranteed that you will not be tracked by Klar. Information on data protection and data use by Klar can be found on the following website: [https://www.getklar.com/data-protection](https://www.getklar.com/data-protection)

Rights of data subjects and storage duration

Duration of storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular under tax and commercial law, and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
You also have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing in accordance with Art. 21(1) GDPR.

Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Phone: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de

Right to object
If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
Once you have objected, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

last update: 29.11.2023