Privacy Policy
Privacy Policy
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation, GDPR, is: Veloria Health GmbH, Fährstraße 217, 40221 Düsseldorf, Deutschland. E-Mail: support@veloria-health.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content, such as orders or inquiries sent to the controller, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.
2) Data Collection When Visiting Our Website
When you use our website for informational purposes only, meaning if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server, known as server log files. When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used, possibly in anonymized form
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
3) Hosting & Content Delivery Network
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, “Shopify”, for the purpose of hosting and displaying the online shop on the basis of processing on our behalf.
All data collected on our website is processed on Shopify’s servers. As part of the aforementioned Shopify services, data may also be transferred as part of further processing on our behalf to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc.
In the event that data is transferred to Shopify Inc. in Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify’s privacy policy can be found at:
https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify only takes place within the framework described below.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser, known as session cookies, while others remain on your device for longer and allow page settings to be saved, known as persistent cookies. In the latter case, you can find the storage period in the overview of your web browser’s cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting Us
When you contact us, for example via contact form or email, personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided that there are no statutory retention obligations to the contrary.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account.
The data required for opening an account can be seen from the input form of the corresponding form on our website. You can delete your customer account at any time by sending a message to the controller’s address stated above.
After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods prevent deletion, and we have no legitimate interest in continued storage.
7) Use of Customer Data for Direct Marketing
7.1 Registration for Our Email Newsletter
If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally.
We use the double opt-in procedure for sending newsletters, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store the IP address entered by your internet service provider, ISP, as well as the date and time of registration in order to trace any possible misuse of your email address at a later date.
The data collected by us when registering for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named above.
After unsubscribing, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this in a legally permitted manner, about which we inform you in this statement.
7.2 Newsletter Delivery via Klaviyo
Our email newsletters are sent via the technical service provider Klaviyo, 225 Franklin St, Boston, MA 02110, USA, http://www.klaviyo.com/, to whom we pass on the data you provided when registering for the newsletter.
This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the USA and stored there.
Klaviyo uses this information to send newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them itself or to pass it on to third parties.
To protect your data in the USA, we have concluded a data processing agreement with Klaviyo, in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its privacy policy, and in particular not to pass it on to third parties.
Klaviyo’s privacy policy can be viewed here:
https://www.klaviyo.com/privacy
8) Data Processing for Order Handling
8.1
Where necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when ordering, such as name, address, and email address, in order to personally inform you of upcoming updates within the legally prescribed period via a suitable communication channel, such as by post or email, as part of our statutory information obligations in accordance with Art. 6 para. 1 lit. c GDPR.
Your contact details will be used strictly for the purpose of notifying you about updates owed by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the service providers listed below, who support us in whole or in part in carrying out concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8.2 Use of Payment Service Providers
- Amazon Pay
If you select the payment method “Amazon Pay”, payment processing is carried out via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg, hereinafter “Amazon Payments”.
We pass on the information you provided during the ordering process together with information about your order to Amazon Payments in accordance with Art. 6 para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with Amazon Payments and only to the extent necessary for this purpose.
If cookies, i.e. small text files stored on your device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time via the cookie consent tool implemented on the website.
Further information on Amazon Payments’ privacy policy can be found at:
https://pay.amazon.de/help/82974
- Klarna
If you select a Klarna payment service, payment processing is carried out via Klarna Bank AB (publ), https://www.klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter “Klarna”.
To enable payment processing, your personal data, such as first and last name, street, house number, postal code, city, gender, email address, telephone number, IP address, and, if applicable, date of birth and bank details, as well as data related to the order, such as invoice amount, items, and delivery method, will be passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this during the ordering process in accordance with Art. 6 para. 1 lit. a GDPR.
You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values, known as score values. If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of score values.
Klarna uses the information received on the statistical probability of non-payment to make a balanced decision on the establishment, implementation, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal information will be treated in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s privacy policy for data subjects based in Germany:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or, if offered, purchase on account or installment payment via PayPal, we pass on your payment data as part of payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, hereinafter “PayPal”.
The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or, if offered, purchase on account or installment payment via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your solvency.
PayPal uses the result of the credit check regarding the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values, known as score values. If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of score values.
Further information on data protection law, including the credit agencies used, can be found in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider Shopify Payments, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2.
If you choose a payment method offered via Shopify Payments, payment processing is carried out via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
We pass on the information you provided during the ordering process, together with information about your order, such as name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number, to Stripe Payments Europe Ltd. in accordance with Art. 6 para. 1 lit. b GDPR.
Your data is passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose.
Further information on data protection at Shopify Payments can be found here:
https://www.shopify.com/legal/privacy
Data protection information for Stripe Payments Europe Ltd. can be found here:
https://stripe.com/de/privacy
- SOFORT
If you select the payment method “SOFORT”, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, hereinafter “SOFORT”.
We pass on the information you provided during the ordering process together with information about your order to SOFORT in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group, Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.
Your data is passed on exclusively for the purpose of payment processing with SOFORT and only to the extent necessary for this purpose.
Further information on SOFORT’s privacy policy can be found at:
https://www.klarna.com/sofort/datenschutz
9) Online Marketing
9.1 Facebook Pixel & Meta CAPI (Server-Side Tracking)
Within our online offering, the so-called Facebook Pixel of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, “Facebook”.
If a user clicks on an advertisement placed by us that is displayed on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. If our page allows data to be shared with Facebook via Pixel, this URL parameter is written into the user’s browser by cookie, which our linked page itself sets. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook Pixel, Facebook is able to determine visitors to our online offering as a target group for displaying advertisements, known as Facebook Ads. Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to Facebook users who have also shown an interest in our online offering or who have certain characteristics, such as interests in certain topics or products determined on the basis of the websites visited, which we transmit to Facebook, known as Custom Audiences.
With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear annoying. This also allows us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement, known as conversion.
In addition, we use the Meta Conversions API, CAPI. Interactions are not only recorded via the pixel, but are also transmitted server-side directly from our server to Meta. This enables even more accurate measurement of events, such as purchases or leads, and better attribution to advertising campaigns.
The data collected via the Conversions API may include information such as name, email address, telephone number, IP address, and other system-generated parameters, insofar as you have provided us with this information as part of the ordering or contact process. The transmission serves the same purposes as the Facebook Pixel, namely Custom Audiences and conversion tracking.
The data collected is anonymous to us and does not allow us to draw conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook’s data usage policy:
https://www.facebook.com/about/privacy/
The data may enable Facebook and its partners to place advertisements on and outside Facebook.
The data processing associated with the use of the Facebook Pixel and the Meta Conversions API takes place exclusively if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.
9.2 Google Ads Conversion-Tracking
This website uses the online advertising program Google Ads and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, “Google”.
We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials, known as Google AdWords. In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are.
Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification.
If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers.
The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page equipped with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
As part of the use of Google Ads, personal data may also be transferred to the servers of Google LLC in the USA.
Details on the processing triggered by Google Ads conversion tracking and Google’s handling of data from websites can be found here:
https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In order to address users whose data we have received in the context of business or business-like relationships with even more interest-based advertising, we use a customer match function as part of Google Ads. For this purpose, we electronically transmit one or more files with aggregated customer data, primarily email addresses and telephone numbers, to Google.
Google does not receive access to plain data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then only use the encrypted information to assign it to existing Google accounts that the data subjects have created. This enables personalized advertising to be displayed across all Google services linked to the respective Google account.
Customer data is transferred to Google exclusively if you have given us express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future.
Further information on Google’s data protection measures in relation to the customer match function can be found here:
https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s privacy policy can be viewed here:
https://www.google.de/policies/privacy
9.3 Pinterest Conversion-Tag / Server-Side Tracking
Our website uses the Pinterest Tag of the social network Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
The Pinterest Tag is used to track the behavior of visitors after they click on a Pinterest advertisement. This allows the effectiveness of Pinterest advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
In addition, we use the Pinterest Conversion API, server-side tracking. This means that events, such as purchases, leads, or other interactions, can be transmitted not only client-side via the Pinterest Tag but also server-side directly from our server to Pinterest. This enables more accurate recording of conversions and better attribution to campaigns.
The data collected via the Conversion API may include information such as name, email address, telephone number, IP address, and other parameters provided during the ordering process, insofar as you have transmitted this information to us.
The data collected is anonymous to us and does not allow us to draw conclusions about the identity of users. However, Pinterest itself may store and process this data in order to establish a connection to the respective user profile and use the data for its own advertising purposes in accordance with Pinterest’s privacy policy:
https://policy.pinterest.com/de/privacy-policy
This may enable Pinterest and its partners to place advertisements on and outside Pinterest.
The data processing associated with the use of the Pinterest Tag and the Conversion API takes place exclusively if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.
10) Web Analytics Services
Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, “Google”, which enables the analysis of website usage.
When using Google Analytics 4, so-called cookies are used by default. Cookies are text files stored on your device that allow an analysis of your use of a website. The information collected by cookies about your use of the website, including the IP address transmitted by your device, shortened by the last digits, is usually transmitted to a Google server and stored and processed there. This may also involve the transmission of information to servers of Google LLC based in the USA and further processing of the information there.
When using Google Analytics 4, the IP address transmitted by your device when you use the website is automatically and always collected and processed only in anonymized form, so that a direct personal reference to the collected information is excluded. This automatic anonymization is carried out by Google shortening the IP address transmitted by your device within member states of the European Union, EU, or other contracting states of the Agreement on the European Economic Area, EEA.
On our behalf, Google uses this and other information to evaluate your use of the website, compile reports on your website activities and usage behavior, and provide us with other services related to website and internet use.
The shortened IP address transmitted by your device as part of Google Analytics 4 is not merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics using a special function known as demographic characteristics, with statements about the age, gender, and interests of website users based on an evaluation of interest-based advertising and the use of third-party information. This makes it possible to determine and distinguish user groups of the website for the purpose of target-group-optimized marketing measures.
However, data collected via demographic characteristics cannot be assigned to a specific person and therefore not to you personally. This data collected via the demographic characteristics function is stored for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for storing and reading information on the device you use to access the website, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the cookie consent tool provided on the website.
In connection with this website, the User IDs function is also used as an extension of Google Analytics 4. By assigning individual User IDs, we can have Google create cross-device reports, known as cross-device tracking. This means that, if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, your usage behavior can also be analyzed across devices if you have created a personal account by registering on this website and are logged into your personal account on different devices with your login details.
The data collected in this way shows, among other things, on which device you first clicked on an advertisement and on which device the corresponding conversion took place.
In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports, known as cross-device tracking.
If you have activated personalized ads in the settings of your Google account and linked your internet-enabled devices to your Google account, Google can analyze usage behavior across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR.
This takes into account the logins and device types of all website users who were logged into a Google account and completed a conversion. The data shows, among other things, on which device you first clicked on an advertisement and on which device the corresponding conversion took place.
We do not receive any personal data from Google in this context, but only statistics created on the basis of Google Signals. You have the option of deactivating the personalized ads function in the settings of your Google account and thus disabling cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page:
https://support.google.com/ads/answer/2662922?hl=de
Further information on Google Signals can be found at:
https://support.google.com/analytics/answer/7532985?hl=de
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with the European level of data protection even in the event of data being transferred from the EU or EEA to the USA and possible further processing there, Google relies on the European Commission’s standard contractual clauses, which we have contractually agreed with Google.
Further legal information on Google Analytics 4, including a copy of the standard contractual clauses mentioned, can be found at:
https://policies.google.com/privacy?hl=de&gl=de
and
https://policies.google.com/technologies/partner-sites
11) Retargeting / Remarketing
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing. We use this to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, “Google”.
For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited.
Further data processing only takes place if you have agreed to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads that you view on the web.
If you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to create target groups.
As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.
Details on the processing triggered by Google Ads Remarketing and Google’s handling of data from websites can be found here:
https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/ads/answer/7395996?
Further information and Google’s privacy policy regarding advertising can be viewed here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.
TikTok Pixel
This website uses the TikTok Pixel, a tracking technology of the social network TikTok by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, “TikTok”.
Using cookies, small text files stored on the device used, information about browsing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored there, and evaluated in order to subsequently enable the display of interest-based and personalized product recommendations on TikTok.
The information collected and processed in pseudonymized form generally includes the device ID, device type, timestamp, operating system used, and IP address. The information can be assigned to the user with the help of additional information that TikTok has stored about the user, for example due to the user having an account on the TikTok social network.
TikTok can also combine the information collected via the pixel with other information that TikTok has collected via other websites and/or in connection with the use of the TikTok social network, and thus create pseudonymized usage profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok Pixel also enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from an advertisement on TikTok to pages of this website and the cookies have not yet expired, the pixel records certain user actions defined by us and can track them, such as completed transactions, leads, searches on the website, or views of product pages.
When such an action is carried out, your browser sends an HTTP request via the TikTok Pixel from the cookie to TikTok’s server, transmitting certain information about the action. Through this transmission, TikTok can create statistics about usage behavior on our website after redirection from a TikTok advertisement, which we use to optimize our offering.
All processing described above, in particular the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.
We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our site visitors and not to pass it on to third parties. TikTok generally transfers collected information outside the European Economic Area and relies on the European Commission’s standard data protection clauses, which are intended to ensure compliance with the European level of data protection.
12) Website Functionalities
YouTube Embeds
This website uses the YouTube embedding function to display and play videos from the provider YouTube, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, “Google”.
The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video or videos are played. If playback of embedded YouTube videos is started, the provider YouTube uses cookies to collect information about user behavior.
According to information from YouTube, these are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior.
If you are logged into Google, your data will be directly assigned to your account when you click on a video. If you do not want the assignment to your YouTube profile, you must log out before activating the button.
You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. As part of the use of YouTube, personal data may also be transferred to servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which may trigger further data processing operations beyond our control.
All processing described above, in particular the reading of information on the device used via the tracking pixel, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without this consent, YouTube videos will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie consent tool provided on the website or via alternative options communicated to you on the website.
Further information on data protection at YouTube can be found in YouTube’s terms of use at:
https://www.youtube.com/static?template=terms
and in Google’s privacy policy at:
https://www.google.de/intl/de/policies/privacy
13) Rights of the Data Subject
13.1
Applicable data protection law grants you the following data subject rights, rights of access and intervention, vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to notification pursuant to Art. 19 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to revoke consent granted pursuant to Art. 7 para. 3 GDPR
- Right to lodge a complaint pursuant to Art. 77 GDPR
13.2 Right to Object
If we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right at any time, for reasons arising from your particular situation, to object to this processing with effect for the future.
If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
If your personal data is processed by us for the purpose of direct marketing, you have the right at any time to object to the processing of personal data concerning you for the purpose of such marketing. You may exercise the objection as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
14) Duration of Storage of Personal Data
The duration of storage of personal data is determined by the respective legal basis, the processing purpose, and, where applicable, additionally by the respective statutory retention period, such as commercial and tax law retention periods.
When personal data is processed on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject revokes their consent.
If there are statutory retention periods for data that is processed within the scope of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in continued storage.
When personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.