Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other indication is given for the following processing operations.

"Personal data" refers to all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing personal data. Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

The processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.

Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, where it will be processed. For Canada, there is an adequacy decision by the EU Commission. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.

Contact

Data Controller

If you wish to contact us, the data controller for data processing is:
Julian Helbig,
Im Delmegrund 8,
27243 Harpstedt,
Germany,
+49 4244 9687037,
support@magicmic.eu

Customer-Initiated Contact via Email

If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.

If the contact is related to pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of your personal data under Art. 6(1)(f) GDPR for reasons arising from your particular situation.

We use your email address solely to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.

Customer Account & Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified. The data processing serves to improve your shopping experience and simplify order processing. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data for Orders

When placing an order, we collect and process your personal data only insofar as it is necessary for the fulfillment and processing of your order and handling your inquiries. Providing the data is required for contract conclusion. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed to, for example, the shipping companies and dropshipping providers you select, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transfer is limited to the minimum necessary.

Reviews & Advertising

Data Collection When Writing a Comment or Review

When commenting on or reviewing an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves to enable and display comments/reviews.

By submitting the comment/review, you consent to the processing of the transmitted data. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your personal data will then be deleted.

When publishing your comment/review, the name and email address you provided will be published.

Use of Your Personal Data for Postal Advertising

We use your personal data (name, address) obtained in the context of selling goods or services to send you postal advertising, provided you have not objected to this use. Providing this data is required for contract conclusion. Failure to provide it means that no contract can be concluded.

The processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in direct marketing. You can object to the use of your address data at any time by notifying us. The contact details for exercising your objection can be found in the imprint.

Use of Email Address for Newsletter Delivery

We use your email address, irrespective of contract processing, solely for our own advertising purposes to send newsletters, provided you have expressly consented. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Payment Service Providers & Credit Checks

Use of PayPal Express

We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. The data processing serves to offer you payment via PayPal Express.

To integrate this payment service, PayPal collects, stores, and analyzes data (e.g., IP address, device type, operating system, browser type, device location) when you visit the website. Cookies may also be used for this purpose.

The processing of your personal data is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

When selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Further information on data processing when using PayPal Express can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Checkout

We use the PayPal Checkout payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. The data processing serves to offer you payment via this service.

When selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

Cookies may be stored to recognize your browser. The resulting data processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal

For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the received information on the statistical probability of a payment default to make a balanced decision on establishing, implementing, or terminating the contractual relationship.

The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which may include address data. Your legitimate interests are considered in accordance with legal requirements. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in protection against payment default when PayPal advances payment.

You have the right to object at any time to this processing of your personal data under Art. 6(1)(f) GDPR for reasons arising from your particular situation by notifying PayPal. Providing the data is required for contract conclusion with your chosen payment method. Failure to provide it means that the contract cannot be concluded with your chosen payment method.

Third-Party Providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. To execute this payment method, PayPal may forward the data to the respective provider. This processing is also based on Art. 6(1)(b) GDPR. Local third-party providers may include:

- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)

- Giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Invoice Payment via PayPal

When paying via invoice, the data required for payment processing is first transmitted to PayPal. To execute this payment method, PayPal forwards the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

Ratepay may conduct a credit assessment based on mathematical-statistical methods (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in protection against payment default when Ratepay advances payment. Further information on data protection and the credit agencies used by Ratepay can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna Payment Options

We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website.

When selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

"Pay Later" (Invoice), "Pay Now" (Direct Debit), "Financing" (Installment Purchase)

For certain payment methods, such as "Pay Later" (invoice), "Pay Now" (direct debit), or "Financing" (installment purchase), Klarna reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies.

For this purpose, Klarna transmits the personal data required for a credit check (e.g., first and last name, address, gender, email address, IP address, and data related to the order) to a credit agency for identity and credit assessment. The received information on the statistical probability of a payment default is used for a balanced decision on establishing, implementing, or terminating the contractual relationship.

You have the right to object at any time to this processing of your personal data under Art. 6(1)(f) GDPR for reasons arising from your particular situation by notifying Klarna. Providing the data is required for contract conclusion with your chosen payment method. Failure to provide it means that the contract cannot be concluded with your chosen payment method.

Further information, particularly regarding the credit agencies to which Klarna transmits your personal data, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data will be processed by Klarna in accordance with applicable data protection laws and as specified in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Use of SOFORT

We use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. SOFORT GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).

The data processing serves to offer you various payment methods by processing payments via SOFORT. If you choose this payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is based on Art. 6(1)(b) GDPR.

Further information on data processing when using SOFORT can be found at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.

Cookies

Our website uses cookies. Cookies are small text files stored in or by your internet browser on your computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a unique string of characters that enables the browser to be uniquely identified when the website is revisited.

Cookies are stored on your computer, giving you full control over their use. By adjusting your browser settings, you can choose to be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and transmission of the data they contain. Already stored cookies can be deleted at any time. However, we point out that you may not be able to use all functions of this website to their full extent if you do so.

Below are links to instructions on managing (including disabling) cookies in the most common browsers:

- Chrome: https://support.google.com/accounts/answer/61416?hl=en

- Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

- Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

- Safari: https://support.apple.com/en-us/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated in this privacy policy, we use only technically necessary cookies to make our offering more user-friendly, effective, and secure. Additionally, cookies allow our systems to recognize your browser even after a page change and offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or similar technologies is based on § 25(2) TTDSG. The processing of your personal data is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering.

You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Analytics, Advertising Tracking & Communication

Use of Google Analytics 4

We use the web analytics service Google Analytics 4 of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves to analyze this website and its visitors, as well as for marketing and advertising purposes. Google will use the collected information on behalf of the website operator to evaluate website usage, compile reports on website activity, and provide other services related to website and internet usage.

The following information may be collected: IP address, date and time of page access, click path, information about the browser and device used, pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. Your data may be linked by Google with other data, such as your search history, personal accounts, usage data from other devices, and all other data available to Google.

The IP address is truncated by Google within EU member states or other contracting states of the Agreement on the European Economic Area before transmission.

The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

The information generated about your use of this website is usually transmitted to and stored on a Google server in the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under TADPF and committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=en&gl=de.

Use of Shopify Analytics

We use the analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website under a data processing agreement. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The data processing serves to analyze this website and its visitors. Data is stored and used in reports, analyses, and statistics for marketing and optimization purposes. The following device information may be collected and processed: web browser information, IP address, time zone, and some cookies installed on your device. When navigating the website, information about accessed pages or products, the referrer URL (website from which you accessed our website), and how you interact with the website is recorded. Technologies such as cookies, web beacons, tags, and pixels (electronic files to track website navigation) are used for this purpose.

The use of cookies or similar technologies is based on your consent under § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data protection at Shopify can be found at https://www.shopify.com/legal/privacy, information on the data processing agreement at https://www.shopify.com/legal/dpa, and information on cookies used at https://www.shopify.com/legal/cookies.

Use of Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are joint controllers for the collection of your data and its transmission to Meta when the service is integrated. This is based on an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement can be viewed at https://de-de.facebook.com/legal/terms/businesstools.

According to this agreement, we are responsible in particular for fulfilling the information obligations under Art. 13, 14 GDPR, complying with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, and meeting the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects our obligations under the joint processing agreement.

Meta is responsible for enabling the data subject rights under Art. 15-20 GDPR, complying with the security requirements of Art. 32 GDPR regarding the security of the service, and meeting the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects Meta's obligations under the joint processing agreement.

The application serves the purpose of targeting visitors to the website with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta's servers when you visit the website. This transmits to Meta's server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit Facebook or Instagram, you will then be shown personalized, interest-based ads.

The application also serves to create conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag, as well as the actions taken after being redirected to this website. However, we do not receive any information that can personally identify users.

Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under TADPF and committed to complying with European data protection principles.

You can disable the "Custom Audiences" remarketing function here. Further information on the collection and use of data by Meta, your rights in this regard, and options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking

We use the online advertising program "Google Ads" and, within this framework, conversion tracking (visit action evaluation) on our website. Google Conversion Tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").

When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity, contain no personal data, and thus do not serve personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across the websites of Ads customers.

The information collected using the conversion cookie is used to create conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can personally identify users.

Your data may be transferred to servers of Google LLC in the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under TADPF and committed to complying with European data protection principles.

Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/.

Use of Google Remarketing or "Similar Audiences" Function

We use the remarketing or "Similar Audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The application serves the purpose of analyzing visitor behavior and interests. To conduct the analysis of website usage, which forms the basis for creating interest-based ads, Google uses cookies. The cookies record visits to the website and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown ads that are highly likely to take into account previously accessed product and information areas.

Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/.

Use of TikTok Pixel

We use the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website. Both companies are joint controllers for data processing (hereinafter "TikTok").

The data processing serves the purpose of identifying and analyzing website visits by our customers, better targeting customers through targeted ads, and evaluating the effectiveness of ads on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels that enable browser recognition. The following information may be collected and transmitted to TikTok: date and time of visit, information about the browser and device type used, screen resolution, IP address. TikTok may assign this information to your personal TikTok user account. Usage profiles may be created from the collected data using pseudonyms. However, personal identification of users is not possible.

Your data may be transferred to third countries, such as the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under TADPF. The data transfer to the USA and other third countries without an adequacy decision is based, among other things, on Standard Contractual Clauses as appropriate safeguards for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Use of Tidio Live Chat System

We use the live chat system of Tidio Poland Sp. z oo (Wojska Polskiego 81, 70-481 Szczecin, Poland; "Tidio") on our website under a data processing agreement.

The data processing serves the purpose of immediate and efficient communication between you and us as the provider. To operate the live chat system, cookies are also used to recognize the browser. The following information may be collected and processed: date and time of access, IP address, and other information you provide during the chat.

Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Tidio is not certified under TADPF. The data transfer is based, among other things, on Standard Contractual Clauses as appropriate safeguards for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Further information on the collection and use of your data by Tidio can be found at: https://www.tidio.com/privacy-policy/.

Plugins & Other Services

Use of Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools, among others. The data processing serves the purpose of tailoring and optimizing our website as needed.

The Google Tag Manager itself does not store cookies and does not process personal data. However, it can trigger additional tags that may collect and process personal data.

Further information on terms of use and data protection can be found here.

Use of Google reCAPTCHA

We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The query serves the purpose of distinguishing input by a human or automated, machine processing. For this purpose, your input is transmitted to Google and further used there. Additionally, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google.

This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under TADPF and committed to complying with European data protection principles.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Google Invisible reCAPTCHA

We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This serves the purpose of distinguishing input by a human or automated, machine processing. In the background, Google collects and analyzes usage data, which Invisible reCAPTCHA uses to distinguish regular users from bots. For this purpose, your input is transmitted to Google and further used there. Additionally, the IP address and any other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of YouTube

We use the YouTube video embedding function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

The function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is activated. As a result, YouTube does not store information about visitors to the website. Only when you watch a video is information transmitted to YouTube and stored there.

Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified under TADPF and committed to complying with European data protection principles.

Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Use of Vimeo

We use plug-ins from Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA; "Vimeo") on our website to embed videos from the “Vimeo” platform.

When you access pages on our website that contain such plug-ins, a connection to Vimeo’s servers is established and the plug-in is displayed on the page by notifying your browser. This transmits your IP address and the information about which of our pages you have visited to the Vimeo servers.

If you are logged into Vimeo at the same time, Vimeo assigns this information to your personal user account. When using plug-in functions (e.g., by starting a video by pressing the corresponding button), this information is also associated with your Vimeo account.

Your data may be transmitted to the USA. For the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo is certified under the TADPF and is therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent pursuant to Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.

For more information on the purpose and scope of data collection and the further processing and use of data by Vimeo as well as your rights and options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy

Rights of Data Subjects and Retention Period

Duration of Storage After full completion of the contract, the data will be stored for the duration of the warranty period, and then retained in accordance with legal, particularly tax and commercial, retention periods. After expiry of these periods, the data will be deleted unless you have consented to further processing and use.

Rights of the Data Subject If the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: right of access, rectification, deletion, restriction of processing, and data portability.

Furthermore, under Article 21 (1) GDPR, you have the right to object to processing based on Article 6 (1) lit. f GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint with the Supervisory Authority Under Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.

Right to Object If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6 (1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

Following your objection, the processing of the affected data will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If the processing of personal data is for the purpose of direct marketing, you may object to this processing at any time by notifying us. Once you have objected, we will stop processing the data for the purpose of direct marketing.

Last updated: November 29, 2023