Further Information on Processing Procedures, Methods, and Services:

· Contact Form: When users contact us via our contact form, email, or other communication channels, we process the data provided to us in this context to handle the stated inquiry. For this purpose, we process personal data in the context of pre-contractual and contractual business relationships, to the extent necessary for their fulfillment, and otherwise based on our legitimate interests as well as the interests of the communication partners in addressing inquiries and our legal retention obligations; Legal Basis: Contractual performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) GDPR), Legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR).

Web Analysis, Monitoring, and Optimization:

Web analysis (also referred to as "reach measurement") serves to evaluate the visitor flows of our online offering and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, determine at what time our online offering or its functions or content are most frequently used or invite for reuse. Likewise, we can understand which areas require optimization. In addition to web analysis, we may also use testing procedures to test and optimize different versions of our online offering or its components.

Unless otherwise stated below, profiles, i.e., data summarized for a usage process, may be created for these purposes, and information may be stored in a browser or an end device and read from it. The collected information includes, in particular, visited websites and elements used there, as well as technical information such as the browser used, the computer system used, and information about usage times. If users have consented to the collection of their location data to us or to the providers of the services we use, location data may also be processed.

The IP addresses of the users are also stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect the users. Generally, no clear data of the users (such as email addresses or names) are stored within the scope of web analysis, A/B testing, and optimization, but pseudonyms. This means that neither we nor the providers of the software used know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.

Processed Data Types: Usage Data (e.g., visited websites, interest in content, access times); Meta/Communication Data (e.g., device information, IP addresses).

Affected Persons: Users (e.g., website visitors, users of online services).

Purposes of Processing: Reach measurement (e.g., access statistics, recognition of returning visitors); Profiles with user-related information (creation of user profiles); Tracking (e.g., interest-/behavior-based profiling, use of cookies); Provision of our online offering and user-friendliness.

Security Measures: IP masking (pseudonymization of the IP address).

Legal Basis: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR).

Additional Information on Processing Procedures, Methods, and Services:

Google Analytics: Web analysis, reach measurement, and measurement of user flows; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR); Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Data Processing Agreement: https://business.safety.google/adsprocessorterms; Standard Contractual Clauses (Ensuring level of data protection when processing in third countries): https://business.safety.google/adsprocessorterms; Opt-Out Option: Opt-Out Plug-in: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for displaying advertisements: https://adssettings.google.com/authenticated; Further Information: https://privacy.google.com/businesses/adsservices (Types of processing and processed data).

IP Anonymization:

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin:

You can prevent cookies from being set by your web browser. However, this may restrict some functions of our website. You can also prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to Data Collection:

You can prevent Google Analytics from collecting your data by clicking the following switch to off. An opt-out cookie will be set to prevent your data from being collected on future visits to our website:

Details on the handling of user data at Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract Data Processing:

To fully comply with legal data protection requirements, we have concluded a contract data processing agreement with Google.

Demographic Features in Google Analytics:

Our website uses the "demographic features" of Google Analytics. With it, reports can be created that contain statements about the age, gender, and interests of site visitors. This data comes from Google's interest-based advertising and visitor data from third-party providers. Assignment of the data to a specific person is not possible. You can deactivate this function at any time. This is possible via the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained in the "Objection to Data Collection" section.

Online Marketing:

We process personal data for the purpose of online marketing, which includes, in particular, the marketing of advertising space or the display of advertising and other content (collectively referred to as "content") based on potential user interests, as well as the measurement of their effectiveness.

For these purposes, so-called user profiles are created and stored in a file (so-called "cookie") or similar methods are used, by means of which the information relevant to the user for the display of the aforementioned content is stored. This information may include, for example, viewed content, visited websites, used online networks, but also communication partners and technical information such as the browser used, the operating system used, and information about usage times and functions used. If users have consented to the collection of their location data, this may also be processed.

The IP addresses of the users are also stored. However, we use available IP masking procedures (i.e., pseudonymization by shortening the IP address) to protect the users. In general, no clear data of the users (such as email addresses or names) are stored within the scope of online marketing procedures, but pseudonyms. This means that neither we nor the providers of the online marketing procedures know the actual identity of the users, but only the information stored in their profiles.

The information in the profiles is usually stored in cookies or similar methods. These cookies can also be read and analyzed for the purpose of displaying content on other websites that use the same online marketing procedure and can be supplemented with additional data and stored on the server of the online marketing procedure provider.

Exceptions may occur if clear data is assigned to the profiles. This is the case, for example, if users are members of a social network whose online marketing procedures we use and the network associates the user profiles with the information mentioned above. Please note that users can make additional agreements with the providers, for example by giving consent as part of registration.

We generally only have access to summarized information about the success of our advertisements. However, we can analyze which of our online marketing procedures have led to a so-called conversion, i.e., for example, to a contract with us, as part of so-called conversion tracking. Conversion tracking is used solely to analyze the success of our marketing measures.

Unless otherwise stated, please assume that cookies used are stored for a period of two years.

Processed Data Types: Content Data (e.g., entries in online forms); Usage Data (e.g., visited websites, interest in content, access times); Meta/Communication Data (e.g., device information, IP addresses); Event Data (Facebook) ("Event Data" refers to data that can be transmitted to Facebook, for example, via the Facebook Pixel (via apps or other means) by us and relate to individuals or their actions. The data includes, for example, information about visits to websites, interactions with content, functions, installations of apps, purchases of products, etc. The event data is processed for the purpose of creating target groups for content and advertising information (custom audiences). Event data does not include the actual content (such as comments written), login information, or contact information (i.e., no names, email addresses, and phone numbers). Event data is deleted by Facebook after a maximum of two years, and the target groups formed from it with the deletion of our Facebook account).

Affected Persons: Users (e.g., website visitors, users of online services).

Purposes of Processing: Reach measurement (e.g., access statistics, recognition of returning visitors); Tracking (e.g., interest-/behavior-based profiling, use of cookies); Conversion measurement (measurement of the effectiveness of marketing measures); Target group formation; Marketing; Profiles with user-related information (creation of user profiles); Target group formation (determination of target groups relevant for marketing purposes or other output of content); Provision of our online offering and user-friendliness.

Security Measures: IP masking (pseudonymization of the IP address).

Legal Basis: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR).

Objection Option (Opt-Out):

We refer to the data protection notices of the respective providers and the objection options indicated for the providers (so-called "Opt-Out"). If no explicit opt-out option has been indicated, there is the possibility, on the one hand, that you can deactivate cookies in the settings of your browser. However, this may restrict functions of our online offering. We therefore recommend the following opt-out options, which are summarized for each respective area:

a) Europe: https://www.youronlinechoices.eu. b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Cross-border: https://optout.aboutads.info.

Additional Information on Processing Procedures, Methods, and Services:

Facebook Pixel and Audience Building (Custom Audiences):

With the help of the Facebook Pixel (or comparable functions for transmitting event data or contact information through interfaces in apps), Facebook is able to determine the visitors of our online offering as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads we have placed only to those users on Facebook and within the services of Facebook's cooperating partners (the so-called "Audience Network" https://www.facebook.com/audiencenetwork/) who have shown an interest in our online offering or who exhibit certain characteristics (e.g., interest in specific topics or products that can be deduced from visited websites) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interests of users and do not appear intrusive. Additionally, the Facebook Pixel allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion tracking"); Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR); Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Additional Information: Event data of users, i.e., behavioral and interest data, are processed for the purposes of targeted advertising and audience building based on the Agreement on Joint Controllership ("Addendum for Controllers," https://www.facebook.com/legal/controller_addendum). Joint controllership is limited to the collection and transmission of data to Meta Platforms Ireland Limited, a company based in the EU. Further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, especially concerning the transmission of the data to the parent company Meta Platforms, Inc. in the USA (based on the standard contractual clauses concluded between Meta Platforms Ireland Limited and Meta Platforms, Inc.).

Google Ads and Conversion Tracking:

We use the online marketing method "Google Ads" to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the ads (so-called "conversion"). Furthermore, we measure the conversion of the ads. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a so-called "conversion tracking tag." We do not receive any information that would allow us to identify users; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR); Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Additional Information: Types of processing and processed data: https://privacy.google.com/businesses/adsservices; Data processing terms between controllers and standard contractual clauses for third-country transfers of data: https://business.safety.google/adscontrollerterms.

Pinterest Tag Conversion Tracking:

This website uses the conversion tracking technology "Pinterest Tag" from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").

If you have arrived at our website from a pin on Pinterest, we set a cookie on your computer that interacts with a "tag" in the form of JavaScript code from Pinterest, which is also implemented. Cookies are small text files that are stored on your end device. These cookies expire after 180 days and are not used for personal identification.

If the user is redirected from a pin on Pinterest to pages of this website and the cookie has not yet expired, the tag captures certain user actions predefined by us and can track them (e.g., completed transactions, leads, website search queries, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie via the Pinterest tag to the Pinterest server, transmitting certain information about the action (e.g., type of action, time, browser type of the end device).

Through this transmission, Pinterest can create statistics about user behavior on our website after redirection from a Pinterest pin, which helps us optimize our offering.

If personal user data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. a GDPR or § 25 para. 1 TTDSG based on your consent.

If you do not wish to participate in tracking, you can revoke your consent at any time with effect for the future. You can also deactivate the Pinterest Tag Conversion Tracking cookie via your internet browser settings. You will then not be included in the conversion tracking statistics. Alternatively, you can check whether Microsoft advertising cookies are set in your browser and deactivate them using the EU Consumer Deactivation Page http://www.youronlinechoices.com/de/praferenzmanagement/.

Pinterest is a globally operating company, so data transfer to the USA may occur. According to Pinterest, this data transfer is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policy.pinterest.com/de/privacy-policy.

Further information on Pinterest Tag can be found here: https://help.pinterest.com/de/business/article/track-conversions-with-pinterest-tag.

You can find further information about Pinterest's privacy policy at the following internet address: https://policy.pinterest.com/de/privacy-policy.

Customer Reviews and Rating Procedures:

We participate in review and rating procedures to evaluate, optimize, and promote our services. If users rate us or provide feedback through the participating review platforms or procedures, the general terms and conditions of business or use and the data protection notices of the providers also apply. In most cases, registration with the respective providers is required for rating.

To ensure that the reviewing individuals have actually used our services, we transmit the data required for this purpose regarding the customer and the service used to the respective review platform with the consent of the customers (including name, email address, and order number or item number). This data is used solely to verify the authenticity of the user.

Processed Data Types: Contract Data (e.g., subject matter of the contract, term, customer category); Usage Data (e.g., visited websites, interest in content, access times); Meta/Communication Data (e.g., device information, IP addresses).

Affected Persons: Customers; Users (e.g., website visitors, users of online services).

Purposes of Processing: Feedback (e.g., collecting feedback via online form); Marketing.

Legal Basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR or § 25 para. 1 TTDSG.

Plug-Ins and Embedded Functions, as well as Content:

We integrate functional and content elements into our online offering, which are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These may include, for example, graphics, videos, or maps (hereinafter collectively referred to as "content").

The integration always requires that the third-party providers of this content process the IP address of the users, as they could not send the content to their browser without the IP address. The IP address is therefore necessary for the display of this content or functions. We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Through the "pixel tags," information such as visitor traffic on the pages of this website can be evaluated. The pseudonymous information may also be stored in cookies on the users' devices and may contain technical information about the browser and operating system, referring websites, visit time, as well as further information about the use of our online offering, as well as being linked to such information from other sources.

Processed Data Types: Usage Data (e.g., visited websites, interest in content, access times); Meta/Communication Data (e.g., device information, IP addresses).

Affected Persons: Users (e.g., website visitors, users of online services).

Purposes of Processing: Provision of our online offering and user-friendliness; Provision of contractual services and customer service.

Legal Basis: Consent pursuant to Art. 6 (1) lit. a GDPR or § 25 (1) TTDSG.

Further Information on Processing Procedures, Methods, and Services:

Google Fonts (Access from Google Server): Access to fonts (and symbols) for the purpose of technically secure, maintenance-free, and efficient use of fonts and symbols in terms of currentness and loading times, their uniform representation, and consideration of possible licensing restrictions. The provider of the fonts is informed of the user's IP address so that the fonts can be made available in the user's browser. In addition, technical data (language settings, screen resolution, operating system, hardware used) are transmitted, which are necessary for the provision of fonts depending on the devices used and the technical environment; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Consent pursuant to Art. 6 (1) lit. a GDPR or § 25 (1) TTDSG; Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Google Maps: We integrate the maps of the "Google Maps" service provided by Google. The processed data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually within the settings of their mobile devices); Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Consent pursuant to Art. 6 (1) lit. a GDPR or § 25 (1) TTDSG necessary. Legitimate interests (Art. 6 (1) sentence 1 lit. f GDPR); Website: https://cloud.google.com/maps-platform; Privacy Policy: https://policies.google.com/privacy; Opt-Out Option: Opt-Out Plug-in: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for displaying advertisements: https://adssettings.google.com/authenticated.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

YouTube: For the integration and display of video content, our website uses plugins from YouTube. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When a page with an integrated YouTube plugin is accessed, a connection is established to the servers of YouTube. YouTube thereby learns which of our pages you have visited. YouTube can directly assign your surfing behavior to your personal profile if you are logged into your YouTube account. You have the option to prevent this by logging out before visiting our website. The use of YouTube is in the interest of an appealing presentation of our online offers. The legal basis for processing is consent pursuant to Art. 6 (1) lit. a GDPR or § 25 (1) TTDSG. You have the possibility to revoke this consent at any time by adjusting your preferences in our cookie settings. Details on the handling of user data can be found in YouTube's privacy policy at: https://www.google.com/intl/en/policies/privacy. Standard contractual clauses (ensuring the level of data protection when processing in third countries): https://business.safety.google/adsprocessorterms; Further information: https://privacy.google.com/businesses/adsservices (Types of processing and processed data).

Google Tag Manager: Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate other services into our online offering (reference is made to further information in this privacy policy). With the tag manager itself (which implements the tags), no user profiles are created or cookies are stored. Google only learns the user's IP address, which is necessary to execute Google Tag Manager; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Consent (Art. 6 (1) sentence 1 lit. a) GDPR); Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Data Processing Agreement: https://business.safety.google/adsprocessorterms; Standard Contractual Clauses (Ensuring the Level of Data Protection When Processing in Third Countries): https://business.safety.google/adsprocessorterms; Further Information: https://privacy.google.com/businesses/adsservices (Types of Processing and Processed Data).

Registration, Sign-Up (Login):

You can create an account within our online offering. For this purpose, we process the information required for registration. The processed data include, in particular, the login information (username, password, and an email address).

In the course of registration, as well as subsequent logins and uses of the customer account, we store the IP addresses of the customers together with the access times in order to be able to prove the registration and to prevent any misuse of the customer account. Storage is based on our legitimate interests as well as those of the users in protecting against misuse and other unauthorized use pursuant to Art. 6 (1) lit. f GDPR.

In principle, this data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so.

Newsletter Data:

If you would like to receive the newsletter offered on the website, we require an email address from you, as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form is based exclusively on your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent to the storage of data, the email address, and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from our servers and the servers of Sendinblue after unsubscribing from the newsletter. Data stored by us for other purposes (e.g., email addresses for the members' area) remains unaffected by this.

Sendinblue:

This website uses Sendinblue for sending newsletters. The provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

Sendinblue is a service with which, among other things, the sending of newsletters can be organized and analyzed. The data entered by you for the purpose of subscribing to the newsletter is stored on Sendinblue's servers in Germany.

If you do not wish an analysis by Sendinblue, unsubscribing from the newsletter is required. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

You can revoke your consent at any time. You can also prevent the processing at any time by unsubscribing from the newsletter. You can also prevent the storage of cookies by adjusting your browser settings accordingly. Also, by deactivating JavaScript in your web browser or installing a JavaScript blocker (e.g., https://noscript.net or https://www.ghostery.com), you can prevent the storage and transmission of personal data. We point out that by taking these measures, you may not be able to use all functions of our website to their full extent.

With the help of Sendinblue, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked. In this way, we can determine, among other things, which links are clicked on particularly often.

Furthermore, we can recognize whether certain predefined actions were taken after opening/clicking (conversion rate). For example, we can see whether you made a purchase after clicking on the newsletter.

Sendinblue also allows us to divide the newsletter recipients into different categories (so-called "clusters"). For example, the newsletter recipients can be divided according to age, gender, or place of residence. This way, the newsletters can be better adapted to the respective target groups.

You can find detailed information on the functions of Sendinblue at the following link: https://www.newsletter2go.com/features/newsletter-software/.

The data processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR or § 25 (1) TTDSG. You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from our servers and the servers of Sendinblue after unsubscribing from the newsletter. Data stored by us for other purposes (e.g., email addresses for the members' area) remains unaffected by this.

You can view Sendinblue's privacy policy at: https://www.newsletter2go.com/features/datenschutz-2/.

Payment Providers:

PayPal:

We have integrated components from PayPal on this website. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if a user does not maintain a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal enables online payments to be made to third parties or payments to be received. PayPal also assumes trustee functions and offers buyer protection services.

If you select "PayPal" as the payment option during the ordering process in our online shop, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transmission of personal data required for payment processing.

The personal data transmitted to PayPal usually consists of first and last name, address, email address, IP address, telephone number, mobile phone number, or other data required for payment processing. The data necessary for the processing of the purchase contract are also those personal data that are related to the respective order.

The transmission of data is for payment processing and fraud prevention. We will transmit personal data to PayPal, especially if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit reporting agencies. This transmission is for identity and credit check purposes.

PayPal may pass on personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or the data is to be processed on behalf.

You have the option to revoke your consent to the handling of personal data at any time vis-à-vis PayPal. Revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The use of PayPal is in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The transmission of your personal data takes place exclusively with your express consent pursuant to Art. 6 (1) lit. a GDPR or § 25 (1) TTDSG.

You can access the current privacy policy of PayPal at: https://www.paypal.com/en/webapps/mpp/ua/privacy-full.

Other Data Use, Automated Decision-Making, Profiling:

Further processing of your personal data generally only takes place if a legal provision allows this or if you have consented to the data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you about these other purposes before further processing and provide you with any other relevant information. In these cases, you are neither legally nor contractually obliged to provide data.

Automated decision-making, including profiling in accordance with Article 22 (1), 4 GDPR, does not take place during your visit to this website.