¡TODO! Mallorca – So geht Auswandern heute

NIE-Nummer beantragen und andere Behördengänge auf Mallorca.

¡TODO! Mallorca – So geht Auswandern heute

NIE-Nummer beantragen und andere Behördengänge auf Mallorca.

Privacy Policy

1) Introduction and Contact Details of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when using our website. Personal data is any data by which you can be identified personally.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is TODO MALLORCA CB, Ronda Migjorn, 145B, 07620 Llucmajor, Spain, Tel.: +34634366233, E-Mail: info@todo-mallorca.es. The controller responsible for the processing of personal data is the natural or legal person who decides, alone or jointly with others, on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website
2.1 If you use our website for informational purposes only, that is, if you do not register or provide us with information in any other way, we only collect data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data that is technically required to display the website to you:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)
    Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No transfer or other use of the data takes place. However, we reserve the right to review the server log files afterwards if there are concrete indications of unlawful use.
    2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the “https://” string and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network
3.1 For the hosting of our website and the display of page content, we use a provider that provides its services either itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits any unauthorized transfer to third parties.
3.2 Bunny
We use a Content Delivery Network from the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
This service allows us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits any unauthorized transfer to third parties.

4) Cookies
To make your visit to our website enjoyable and to enable the use of certain functions, we use cookies, small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), while others remain on your device for longer and allow the storage of page settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If any cookies we use also process personal data, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of a contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of your page visit.
You can set your browser so that you are informed when cookies are set and decide individually on their acceptance, or exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact
5.1 Google Calendar
To provide an online appointment booking function, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA
For the purpose of appointment scheduling, your first and last name as well as email address (and if applicable, your phone number if a telephone appointment is desired) are collected in accordance with Art. 6 Para. 1 lit. b GDPR and transmitted in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment administration to the provider and stored there for appointment organization.
After the appointment is held or after the agreed appointment period expires, the provider deletes your data.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits any unauthorized transfer to third parties.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
5.2 WhatsApp Business
We offer you the possibility to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this we use the so-called “Business” version of WhatsApp.
If you contact us via WhatsApp in connection with a specific business transaction (for example, a purchase you have made), we store and use the mobile phone number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6 Para. 1 lit. b GDPR to process and respond to your request. On the basis of the same legal ground, we may ask you via WhatsApp to provide additional data (order number, customer number, address or email address) in order to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (such as about our service offerings, availability or our website), we store and use the mobile phone number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.
Your data is used solely to respond to your inquiry via WhatsApp. No transfer to third parties takes place.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact details of those users who have contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR by accepting WhatsApp’s terms of use when using the app for the first time on their device. Accordingly, the transmission of data from those users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.
Please find the purpose and scope of data collection and the further processing and use of data by WhatsApp as well as your rights and setting options to protect your privacy in WhatsApp’s privacy statement: https://www.whatsapp.com/legal/?eea=1#privacy-policy
In the context of the above processing, data transfers to Meta Platforms Inc. servers in the USA may occur.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
5.3 In the context of contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been definitively clarified and provided no statutory retention obligations apply.

6) Use of Customer Data for Direct Marketing
6.1 Registration for our Email Newsletter
If you register for our email newsletter, we send you regular information about our offers. The only mandatory information for the newsletter transmission is your email address. The provision of additional data is voluntary and is used to address you personally. For newsletter distribution, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have explicitly confirmed your consent to receive newsletters by clicking a verification link sent to your email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. For this purpose, we store the IP address registered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect during newsletter registration is used strictly for the stated purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the responsible party mentioned at the beginning. After successful unsubscription, your email address will be deleted from our newsletter distribution list immediately, unless you have explicitly consented to further use of your data or we have reserved the right to further data use that is permitted by law and about which we inform you in this policy.
6.2 Sending Email Newsletter to Existing Customers
If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services similar to those already purchased from our range by email. For this, we do not need to obtain separate consent from you in accordance with § 7 Para. 3 UWG. Data processing is carried out on the basis of our legitimate interest in personalized direct marketing in accordance with Art. 6 Para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send emails on our part.
You have the right to object at any time to the use of your email address for the stated advertising purpose with effect for the future by sending a message to the responsible party mentioned at the beginning. For this, you only incur transmission costs according to the basic rates. After receipt of your objection, we will immediately stop using your email address for marketing purposes.

7) Data Processing for Order Processing
7.1 To the extent necessary for contract execution for delivery and payment purposes, the personal data we collect is transferred in accordance with Art. 6 Para. 1 lit. b GDPR to the contracted transport company and the contracted credit institution.
If we owe you updates for goods with digital elements or digital products on the basis of a corresponding contract, we process the contact data you provided when ordering (name, address, email address) in order to inform you personally in the context of our legal information obligations in accordance with Art. 6 Para. 1 lit. c GDPR about forthcoming updates via an appropriate communication channel (e.g., postal or email) within the legally prescribed period. Your contact data is used strictly for the stated purpose for notifications about updates we owe you and is only processed by us to the extent necessary for the respective notification.
To process your order, we also work with the following service provider(s) who assist us fully or partially in the performance of concluded contracts. Certain personal data is transmitted to these service providers according to the following information.
7.2 – Anthropic Claude
To provide our services, we use artificial intelligence software from the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland.
Information provided by you in the context of a contractual relationship may be input into the provider’s software in order to organize, analyze, aggregate, modify, evaluate or process it to provide our service.
Information may also be transmitted to: Anthropic PBC, USA.
The collection and further processing of this information is carried out strictly for the purpose of contract fulfillment. Processing for the purposes of training and further development of the provider’s AI language models is expressly prohibited.
Insofar as the processing also concerns personal data, this is carried out on the basis of our legitimate interest in the efficient implementation of our services and the optimal use of available resources and technologies in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider on our part, which ensures the protection of personal data processed by the provider and prohibits any unauthorized transfer to third parties.
For data transmission to the USA, the provider relies on Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

  • To provide our services, we use artificial intelligence software from the following provider: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.
    Information provided by you in the context of a contractual relationship may be input into the provider’s software in order to organize, analyze, aggregate, modify, evaluate or process it to provide our service. Information may also be transmitted to: OpenAI OpCo, LLC, USA.
    The collection and further processing of this information is carried out strictly for the purpose of contract fulfillment. Processing for the purposes of training and further development of the provider’s AI language models is expressly prohibited.
    Insofar as the processing also concerns personal data, this is carried out on the basis of our legitimate interest in the efficient implementation of our services and the optimal use of available resources and technologies in accordance with Art. 6 Para. 1 lit. f GDPR.
    We have concluded a data processing agreement with the provider on our part, which ensures the protection of personal data processed by the provider and prohibits any unauthorized transfer to third parties.
    For data transmission to the USA, the provider relies on Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
    7.3 Use of Payment Service Providers
  • Amazon Pay
    On this website, one or more online payment methods from the following provider are available: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg
    When you select a payment method from the provider in which you make an advance payment (e.g., credit card payment), your payment data communicated in the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order are transmitted in accordance with Art. 6 Para. 1 lit. b GDPR to this provider. Your data is transferred solely for the purpose of processing payment with the provider and only to the extent necessary.
  • Apple Pay
    If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the “Apple Pay” function on your device running iOS, watchOS or macOS by charging a payment card stored in “Apple Pay”. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, entry of a code previously set by you and verification via the “Face ID” or “Touch ID” function of your device is required.
    For payment processing, the information you communicated in the order process along with information about your order is transmitted in encrypted form to Apple. Apple then encrypts this data again with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay to complete the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm payment success.
    Insofar as the processing described includes personal data, this is carried out solely for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
    Apple retains anonymized transaction data, including approximate purchase amount, approximate date and time, and information on whether the transaction was completed successfully. Anonymization completely excludes personal reference. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.
    If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, your Mac and the authorization device communicate via an encrypted channel on Apple servers. Apple does not process or store any of this information in a format by which your person can be identified. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
    You can find more information on data protection with Apple Pay at the following internet address: https://support.apple.com/en-us/HT203027
  • PayPal
    On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
    When you select a payment method from the provider in which you make an advance payment, your payment data communicated in the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order are transmitted in accordance with Art. 6 Para. 1 lit. b GDPR to this provider. Your data is transferred solely for the purpose of processing payment with the provider and only to the extent necessary.
    When you select a payment method in which we make an advance payment, you will also be asked in the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, if applicable data on an alternative payment method).
    To protect our legitimate interest in determining your creditworthiness in such cases, this data is forwarded by us in accordance with Art. 6 Para. 1 lit. f GDPR to the provider for the purpose of a credit check. The provider verifies on the basis of the personal data you provided as well as additional data (such as shopping cart, invoice amount, order history, payment experience) whether the payment method selected by you can be granted in view of payment and/or receivable default risks.
    The credit information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit information, they are based on a scientifically recognized mathematical-statistical procedure. In the calculation of the score values, address data is included among other things, but not exclusively.
    You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to process your personal data if this is necessary for payment processing in accordance with the contract.
  • Sofortüberweisung
    On this website, one or more online payment methods from the following provider are available to you: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden
    When you select a payment method from the provider in which you make an advance payment (e.g., credit card payment), your payment data communicated in the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order are transmitted in accordance with Art. 6 Para. 1 lit. b GDPR to this provider. Your data is transferred solely for the purpose of processing payment with the provider and only to the extent necessary.

8) Web Analytics Services
8.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, when you visit the website, Google (Universal) Analytics sets cookies, which are stored as small text components on your device and collect certain information. The information includes your IP address, although Google shortens it by removing the last digits to exclude direct personal identification.
The information is transmitted to Google servers where it is processed further. Data transmissions to Google LLC located in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide additional services related to website use and internet usage. The shortened IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. Data collected in the context of using Google (Universal) Analytics is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google (Universal) Analytics will not be used during your page visit. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please disable this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
You can find more legal information about Google (Universal) Analytics at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites
Demographic Characteristics
Google (Universal) Analytics uses the special function “Demographic Characteristics” and can create statistics that provide information about the age, gender and interests of website visitors. This is achieved by analyzing advertising and third-party information. This allows identification of target audiences for marketing activities. However, the data collected cannot be assigned to any specific person and is deleted after storage for two months.
Google Signals
As an extension of Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can, subject to your consent to use Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized advertising” function in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en. You can find more information about Google Signals at the following link: https://support.google.com/analytics/answer/7532985?hl=en.
UserIDs
As an extension of Google (Universal) Analytics, the “UserIDs” function can be used on this website. If you consent to the use of Google (Universal) Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
8.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, Google Analytics 4 does not use cookies when you visit the website unless you explicitly consent to cookies. Instead, information about your usage behavior is collected and processed through so-called pings (small data packets sent to the host of a device). The information includes your IP address, although Google shortens it by removing the last digits to exclude direct personal identification.
The information is transmitted to Google servers where it is processed further. Data transmissions to Google LLC located in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide additional services related to website use and internet usage. The shortened IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. Data collected in the context of using Google Analytics 4 is stored for two months and then deleted.
All processing described above, including data transmission via “pings” and the possible setting of Google Analytics cookies, is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your page visit. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please disable this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
You can find more legal information about Google Analytics 4 at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites
Demographic Characteristics
Google Analytics 4 uses the special function “Demographic Characteristics” and can create statistics that provide information about the age, gender and interests of website visitors. This is achieved by analyzing advertising and third-party information. This allows identification of target audiences for marketing activities. However, the data collected cannot be assigned to any specific person and is deleted after storage for two months.
Google Signals
As an extension of Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can, subject to your consent to use Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized advertising” function in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en You can find more information about Google Signals at the following link: https://support.google.com/analytics/answer/7532985?hl=en
UserIDs
As an extension of Google Analytics 4, the “UserIDs” function can be used on this website. If you consent to the use of Google Analytics 4 in accordance with Art. 6 Para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
8.3 Google Tag Manager
This website uses the “Google Tag Manager”, a service from the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and calibrating, controlling, and conditioning them through a single user interface. Google Tag Manager itself does not store information on or read from user devices. Nor does it perform independent data analysis. However, when a page is loaded, Google Tag Manager transmits your IP address to Google and it may be stored there. Transmission to servers of Google LLC in the USA is also possible.
This processing is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your page visit. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please disable this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
You can find more legal information about Google Tag Manager at https://policies.google.com/privacy?hl=en&gl=en.

9) Retargeting/Remarketing and Conversion Tracking
Meta Pixel
Within our online offerings, we use the “Meta Pixel” service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Meta”).
When you click on an advertisement we have placed on Facebook and/or Instagram, the URL of our linked page is expanded with a parameter via “Meta Pixel”. This URL parameter is then entered into the browser of the user after redirection via a cookie that our linked page sets itself.
This enables Meta to determine visitors to our online offerings as a target audience for the display of advertisements (so-called “Ads”). Accordingly, we use the service to display the Facebook and/or Instagram ads we have placed only to those users who have shown interest in our online offerings or who have certain characteristics (e.g., interest in certain topics or products, which are determined based on visited web pages) that we transmit to Meta (so-called “Custom Audiences”).
On the other hand, with “Meta Pixel” it can be tracked whether users were redirected to our website after clicking on an advertisement and what execution actions they take there (so-called “Conversion Tracking”).
The data collected is anonymous for us, so it does not give us conclusions about the identity of users. However, Meta stores and processes the data, which makes it possible to connect to the respective user profile and Meta can use the data for its own advertising purposes.
All processing described above, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
The information generated by Meta is normally transmitted to a Meta server and stored there; in this context, transmission to Meta Platforms Inc. servers in the USA may also occur.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.

10) Page Functionalities
10.1 Facebook Plugins
Plugins from the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interaction with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially disabled and embedded in the page via a so-called “2-click” or “Shariff” solution.
This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the provider’s servers.
Only when you activate the plugins and thus give your consent in accordance with Art. 6 Para. 1 lit. a GDPR for data transmission does your browser establish a direct connection to the provider’s servers. In this case, information about your used device (including your IP address), your browser and your page history is transmitted to the provider, regardless of whether you are logged in to an existing user profile, and is possibly further processed.
If you are logged in to an existing user profile on the provider’s social network, information about interactions performed via the plugins is also published there and displayed to your contacts. You can revoke your consent at any time by disabling the activated plugin by clicking it again. However, revocation does not affect data already transmitted to the provider.
Data may also be transmitted to: Meta Platforms Inc., USA.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
10.2 – Google reCAPTCHA
On this website, we use the CAPTCHA service from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transmitted to: Google LLC, USA. For the visual design of the captcha window, Google uses fonts loaded from the internet. No processing of additional information takes place beyond that already mentioned, which is already transmitted to Google through the ReCaptcha functionality.
The service checks whether input is made by a natural person or misused through automated and mechanical processing, and blocks spam, DDoS attacks and similar automated attacks. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, detection data of the browser type and operating system used, as well as the date and duration of the visit, and transmits this to the provider’s servers for evaluation. Cookies, small text files stored in the device’s browser, may be used.
If the processing described above is based on cookies, these are only set if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
10.3 Google Customer Reviews (formerly Google Certified Merchant Program)
We work with Google in the framework of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the ability to obtain customer reviews from users of our website. After a purchase on our website, you are asked whether you would like to participate in a Google email survey.
If you give your consent in accordance with Art. 6 Para. 1 lit. a GDPR, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. The rating you provide is subsequently aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Additionally, your rating is used for Google Seller Ratings. In the context of using Google Customer Reviews, personal data may also be transmitted to Google LLC servers in the USA.
You can revoke your consent at any time by sending a message to the data controller or to Google.
For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which based on an adequacy decision by the European Commission ensures compliance with the European level of data protection.
You can find more information about Google’s privacy provisions here: https://business.safety.google/intl/en/privacy/

11) Tools and Other Matters
Cookie Consent Tool
This website uses a “Cookie Consent Tool” to obtain effective user consents for consent-required cookies and cookie-based applications. The “Cookie Consent Tool” is displayed to you when you load the page in the form of an interactive user interface on which you can grant consents for certain cookies and/or cookie-based applications by checking boxes. In this case, all cookies/services that require consent are only loaded if you provide appropriate consents by checking the boxes. This ensures that such cookies are only set on your respective device if you have given consent.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as IP address) is processed for the purpose of storing, assigning or logging cookie settings, this processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in the legal design of our website.
The other legal basis for processing is furthermore Art. 6 Para. 1 lit. c GDPR. As responsible parties, we are subject to the legal obligation to make the use of technically non-necessary cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
You can find more information about the operator and the setting options of the Cookie Consent Tool directly in the corresponding user interface on our website.

12) Rights of the Data Subject
12.1 The applicable data protection law grants you, as a responsible party, the following rights of the data subject (information and intervention rights) with respect to the processing of your personal data, referring to the legal basis mentioned for the respective exercise prerequisites:

  • Right of access in accordance with Art. 15 GDPR;
  • Right of rectification in accordance with Art. 16 GDPR;
  • Right of erasure in accordance with Art. 17 GDPR;
  • Right to restrict processing in accordance with Art. 18 GDPR;
  • Right to notification in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to withdraw given consent in accordance with Art. 7 Para. 3 GDPR;
  • Right to lodge a complaint in accordance with Art. 77 GDPR.
    12.2 RIGHT OF OBJECTION
    IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF AN INTEREST WEIGHING ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.
    IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING OF THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
    IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
    IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING OF THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

13) Duration of Storage of Personal Data
The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing and, where applicable, additionally based on the respective statutory retention period (e.g., commercial and tax retention periods).
In the case of processing of personal data on the basis of explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR, the affected data is stored until you revoke your consent.
If there are statutory retention periods for data processed in the context of legal or legal-like obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer necessary for the performance or initiation of the contract and/or there is no legitimate interest on our part in further retention.
In the case of processing of personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for processing that override your interests, rights and freedoms, or processing serves to assert, exercise or defend legal claims.
In the case of processing of personal data for direct marketing purposes on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right of objection in accordance with Art. 21 Para. 2 GDPR.
Unless the remaining information in this policy on specific processing situations establishes otherwise, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Version: 25.06.2026, 15:41:10 CET

Scroll to top