PRIVACY POLICY
Data protection notice pursuant to Art. 13 GDPR
Name and address of the responsible
The responsible body within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
LIVION Dr. Bülent Ugurlu GmbH
Neuer Wall 38
20354 Hamburg
Germany
Telephone: 040 – 300684770
Email: info@livion.de
General information on data processing
Legal basis for the processing of personal data
In accordance with Art. 13 GDPR, we hereby inform you of the legal basis for our data processing. If the legal basis is not specified in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 (1) (a) in conjunction with Art. 7 GDPR. The legal basis for processing for the performance of our services and the implementation of contractual measures as well as for responding to inquiries is Art. 6 (1) lit. b GDPR. The legal basis for processing to fulfill our legal obligations is Art. 6 (1) (c) GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
Data deletion and storage period
We adhere to the principles of data minimization pursuant to Art. 5 (1) (c) GDPR and storage limitation pursuant to Art. 5 (1) (e) GDPR. We only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the retention periods stipulated by law. Once the respective purpose no longer applies or once these retention periods have expired, the corresponding data will be deleted as quickly as possible.
Note regarding data transfer to Third countries
Our website also incorporates tools from companies based in third countries. If these tools are active, your personal data may be transferred to the servers of the respective companies. The level of data protection in third countries does not generally comply with EU data protection law. This means there is a risk that your data may be passed on to authorities in these countries. We have no influence over these processing activities.
External links
This website may contain links to third-party websites or other websites for which we are responsible. If you follow a link to one of the websites outside our responsibility, please note that these websites have their own privacy policies. We accept no responsibility or liability for these external websites and their privacy policies. Therefore, before using these websites, please check whether you agree with their privacy policies.
External links can be recognized either by the fact that they are slightly different in color from the rest of the text or by the fact that they are underlined. Your cursor will indicate external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. In doing so, the operator of the other website receives, in particular, your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and other information that you can find in the privacy policy of the respective provider.
Please also note that individual links may lead to data being transferred outside the European Economic Area. This could give foreign authorities access to your data. You may have no legal recourse against such data access. If you do not want your personal data to be transferred to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.
Rights of the data subject
As a data subject within the meaning of the GDPR, you have the option of asserting various rights. The rights of data subjects arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).
Right of revocation:
Some data processing can only be carried out with your express consent. You have the option to revoke your consent at any time. However, this does not affect the legality of data processing up to the point of revocation.
Right to object:
If the processing is based on Art. 6 para. 1 lit. e or f GDPR, you as the data subject may object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Art. 4 para. 4 GDPR. If we cannot demonstrate a legitimate interest in the processing that outweighs your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims, we will refrain from processing your data after you have objected.
If the processing of personal data serves the purpose of direct marketing, you also have the right to object at any time. The same applies to profiling related to direct marketing. Here too, we will no longer process personal data once you have objected.
Right to lodge a complaint with a supervisory authority:
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
Right to data portability:
If your data is processed automatically on the basis of consent or the performance of a contract, you have the right to receive this data in a structured, commonly used, and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, provided this is technically feasible.
Right to information, correction, and deletion:
You have the right to obtain information about your processed personal data regarding the purpose of data processing, the categories, the recipients, and the duration of storage. If you have any questions on this topic or on other topics relating to personal data, you can of course contact us using the contact details provided in the legal notice.
Right to restriction of processing:
You may request the restriction of the processing of your personal data at any time. To do so, you must meet one of the following conditions:
Restriction of processing means that, apart from storage, personal data may only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
Provision of the website (Web hoster)
Our website is hosted by:
Shopify International Ltd.
2nd Floor 1â2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32
Ireland
The server location is Canada.
When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.
These are:
This data will not be shared with other data sources merged.
Instead of operating this website on our own server, we can also have it operated on the server of an external service provider (hosting company), which we have mentioned above in this case. The personal data collected by this website is then stored on the servers of the hosting company. In addition to the above-mentioned data, the web host also stores contact requests, contact details, names, website access data, meta and communication data, contract data, and other data generated via a website for us.
The legal basis for processing this data is Art. 6 (1) (f) GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website. If the website is accessed in order to enter into contract negotiations with us or to conclude a contract, this serves as a further legal basis (Art. 6 (1) (b) GDPR). In the event that we have commissioned a hosting company, a contract for order processing exists with this service provider.
Use of local storage items, session storage items and cookies
Our website uses local storage items, session storage items, and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your device. This data usually includes user preferences, such as the “day” or “night mode” of a website, and remains stored until you manually delete it. Session storage is very similar to local storage, except that the storage period only lasts for the current session, i.e., until the current tab is closed. After that, the session storage items are deleted from your device. Cookies are pieces of information that a web server (server that provides web content) stores on your device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after you leave a website, or stored permanently (permanent cookies) on your device until you delete them yourself or your web browser automatically deletes them.
These objects may also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us as the operator and you as a visitor to this website to use certain services from third parties that are installed on this website. Examples of this include the processing of payment services or the display of videos.
These mechanisms have a wide range of applications. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and perform analyses of visitor flows and behavior. Depending on the individual functions, these are classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website (e.g., cookies to measure visitor behavior), then their use is based on Art. 6 (1) lit. f GDPR. As a website operator, we have a legitimate interest in storing local storage items, session storage items, and cookies for the technically error-free and optimized provision of our services. In all other cases, local storage items, session storage items, and cookies are only stored with your express consent (Art. 6 (1) (a) GDPR).
If local storage items, session storage, or cookies from third-party companies or for analysis purposes are used, we will inform you separately in this privacy policy. Your required consent will be requested and can be revoked at any time.
Use of external services
External services are used on our website. External services are services provided by third parties that are used on our website. This may be done for various reasons, such as embedding videos or ensuring the security of the website. When using these services, personal data is also passed on to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website, which you can revoke at any time, before using them (Art. 6 (1) (a) GDPR).
Analytics
We process personal data of website visitors to analyze user behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This enables us to increase the user-friendliness of our website. Using the analysis tools employed, it is possible, for example, to create user profiles for the display of targeted or interest-based advertising messages, to recognize our website visitors the next time they visit our website, to measure their click/scroll behavior and downloads, to create heat maps, recognize page views, measure the duration of visits or bounce rates, and trace the origin of website visitors (city, country, which page the visitor comes from). With the help of the analysis tools, we can improve our market research and marketing activities. Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The lawfulness of the processing carried out until revocation remains unaffected.
Google Analytics
We use Google Analytics on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
ipify
We use the ipify service on our website. The provider of this service is Ipify.org, USA. Using this service may result in data being transferred to a third country (USA).
Meta Pixel
We use the Meta Pixel service on our website.The provider of the service is Meta Plattform Ireland Limited (Marketplace), 4Grand Canal Square Grand Canal Harbour Dublin 2, Ireland. The use of the service may result in databeing transferred to a third country (USA). The provider is certified inaccordance with the EU-U.S. Data Privacy Framework and therefore offers anappropriate level of data protection. Further information can be found in theprovider's data protection information at the following URL: https://facebook.com/policy.php .
MailChimp tracking
We use the MailChimp Tracking service on our website. The provider of this service is Intuit France SAS, 7 rue dela Paix 75002 Paris, France. Using this service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://www.intuit.com/privacy/statement/ .
Shopify Analytics
We use the Shopify Analytics service on our website. The provider of this service is Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Using this service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for the country by means of an adequacy decision. Further information can be found in the provider's privacy policy at the following URL: https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0 .
Consent Management
In order to comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for setting cookies or using external services. The consents are stored. The processing is necessary for the fulfillment of a legal obligation to which the controller (website operator) is subject. Art. 6 (1) (c) GDPR is therefore used as the legal basis for the processing.
GDPR Legal Cookie
We use the GDPR Legal Cookie service on our website. The provider of this service is beeclever GmbH, Universitätsstraße 3, 56070 Koblenz, Germany. Further information can be found in the provider's privacy policy at the following URL: https://gdpr-legal-cookie.myshopify.com/pages/datenschutzerklarung .
Content Delivery Network (CDN)
We use a content delivery network (CDN) to optimize the performance and availability of our website. To do this, the service provider that provides this network processes your IP address and information about when you visited our website. All further information on data processing by this service provider can be found in its privacy policy. We base this processing on a legitimate interest (Art. 6 (1) (f) GDPR). Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely, and reliably as possible
Display optimization
We use tools that serve to optimize the presentation of our website. Among other things, these tools help to display the website in other languages or in a more accessible manner. We base this processing on a legitimate interest (Art. 6 (1) (f) GDPR). This consists of creating a website that is as visually appealing as possible and using design options to present information in the best possible way.
Iconify.design
We use the Iconify.design service on our website. The provider of this service is Iconify OÜ, Estonia. As this service is hosted locally on the web server, no data is transferred to third parties.
Hosting
Hosting refers to the provision of web space and the files located on it by a web host. This involves the transfer and storage of personal data on the web host's servers. In particular, the IP addresses, meta and communication data of users, as well as data about website access, are processed. When a website visitor accesses the site, a connection to the web host's servers is established. This involves the processing of the website visitor's personal data. We base this processing on a legitimate interest (Art. 6 (1) (f) GDPR). Our legitimate interest is to be able to display our website and make it available on the internet.
Amazon Web Services
We use Amazon Web Services on our website. The provider of this service is Amazon Web Services EMEA S.àr.l., 38 Avenue John F. Kennedy L-1855, Luxembourg. Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://aws.amazon.com/de/privacy/ .
Map service
We use a map service on this website. In order for the map to be used and displayed on the website, it must be loaded from the provider's server. This involves the transfer of your IP address to the provider's server. Depending on the provider, cookies and other technologies, including fonts, may be loaded. You can find more details in the provider's privacy policy. Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.
Google Maps
We use the Google Maps service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Marketing
Our website uses tools that offer services related to campaigns, web analysis, and personalization. This enables the central and comprehensive collection of all data, which in turn is necessary for the optimization and planning of digital campaigns. These services can be set and used by our advertising partners via our website to create a profile of your interests and show you relevant ads on other websites. Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g., via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
Seal Subscriptions
We use the Seal Subscriptions service on our website. The provider of this service is Seal Subscriptions, Canada. Using this service may result in data being transferred to a third country (Canada). The European Commission has confirmed that this country has an adequate level of data protection in its adequacy decision. Further information can be found in the provider's privacy policy at the following URL: https://www.sealsubscriptions.com/legal/privacy-policy .
Newsletter tools
As part of our marketing activities, we offer you the opportunity to subscribe to our newsletter via our website. To subscribe to the newsletter, you must complete a registration process during which we verify that you are the owner of the email address provided and that you agree to receive our newsletter. The data remains with us or with the newsletter service commissioned by us for the duration of your voluntary registration until you unsubscribe from the newsletter. If you unsubscribe from the newsletter, you will be removed from the distribution list. This list is not merged with other data. However, unsubscribing from the newsletter does not result in data stored for other purposes (e.g., customer accounts) also being deleted. Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.
Mailchimp Newsletter Tool
We use the Mailchimp newsletter tool on our website. The provider of this service is Intuit France SAS, 7 rue de la Paix, 75002 Paris, France. Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://www.intuit.com/privacy/statement/ .
MailMunch
We use the MailMunch service on our website. The provider of this service is SixMix LLC, 388 MARKET ST #1300, SAN FRANCISCO, 94111, USA. Using this service may result in data being transferred to a third country (USA). Further information can be found in the provider's privacy policy at the following URL: https://legal.mailmunch.com/privacy/ .
Interface software
Business processes run more cost-effectively, faster, and with fewer errors when they are automated using software via interfaces. This allows them to be efficiently integrated into company processes via the company's own website or social networks. We use interface software on our website to link different applications and to transfer personal data securely from one application to another. Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.
Google Tag Manager
We use the Google Tag Manager service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Social media
We use social media plugins to connect our website to our social media channels. The integration of these plugins is intended to make it easier for visitors to our website to follow our channels on social networks, share content, like it, or comment on it. Some social media plugins enable the analysis of the user behavior of website visitors with regard to their behavior on social networks. The use of plugins is intended to increase the awareness and number of followers of our channels. The plugins also process personal data and transfer data to these social networks. This transfer takes place as soon as the website is accessed. Processed data includes, for example: name, address, email address, telephone number, access time, device information, IP address. Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.
We use the Facebook service on our website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, D02x525, Ireland. Using the service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://www.facebook.com/privacy/policy
Facebook Connect
We use the Facebook Connect service on our website. The provider of this service is Meta Platforms Ireland Limited (Marketplace), 4 Grand Canal Square Grand Canal Harbour Dublin 2, Ireland. Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://de-de.facebook.com/policy.php
Appointment booking
You can make appointments with us directly on our website. If you enter the requested data and your preferred appointment date in the form provided, our system will suggest available appointments. The data you enter (name, email address, and optional telephone number) will be used by us for planning, carrying out, and, if necessary, following up on the appointment. Processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.
Calendly
We use the Calendly service on our website. The provider of this service is Calendly, Inc., 115 E Main St., SteA1BBuford, GA 30518, USA. Using this service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider's privacy policy at the following URL: https://calendly.com/privacy
Shipping service provider
As part of contract processing, we transfer personal data to the companies entrusted with the delivery of goods so that you receive your orders from our web shop in a timely manner. When implementing elements from shipping service providers, personal data such as your IP address and, under certain circumstances, other data that you provide may be transferred to them. Processing will only take place if you consent to this data processing (via our consent banner on the website).
The legal basis for this processing is consent (Art. 6 (1) (a) GDPR). Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.
Amai
We use the Amai service on our website. The provider of this service is AMAI Digital, 20 Cecil St, #05-03 Plus, Singapore 049705, Singapore.
Using this service may result in data being transferred to a third country (Singapore).
Further information can be found in the provider's privacy policy at the following URL: https://amai.com/privacy-policy/ .
Webfonts
This site uses web fonts provided by an external provider for the uniform display of fonts, which are loaded by the browser when the website is accessed.
The provider of the web fonts becomes aware that our website has been accessed from your IP address, as your browser establishes a direct connection to the provider of the web fonts.
The legal basis for this processing is our legitimate interest in a visually appealing website (Art. 6(1)(f) GDPR).
Google Fonts
We use the Google Fonts service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Webshop
We offer our products and/or services via our online store. In the context of selling products and/or services, we collect, process, and use your personal data (e.g., your name, contact details, but also access times, device information, or your IP address) for the purpose of processing the purchase and payment process. We base this processing on a legitimate interest (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the error-free presentation and optimization of our web shop.
Shopify
We use the Shopify service on our website. The provider of this service is Shopify International Ltd., 2nd Floor1â2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Using this service may result in data being transferred to a third country (Canada). The European Commission has confirmed an adequate level of data protection for the country by means of an adequacy decision.
Further information can be found in the provider's privacy policy at the following URL:https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0 .
Advertising
Our website uses tools that facilitate or enable the placement of advertisements and the evaluation of the success of placed advertisements. For this purpose, personal data is processed, in particular the IP address, access times, and device information. Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 (1) (a) GDPR).
Without your consent, data processing in the manner described above will not take place. If you revoke your consent (e.g., via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.
Google Ads
We use the Google Ads service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Google AdSense
We use the Google AdSense service on our website. The provider of this service is Google Ireland Limited (GV), Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Google Double Click
We use the Google Double Click service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Contact form
Our website offers the option of contacting us via a contact form. Your contact details are required in particular for contacting us via this form.
The legal basis for this is processing for the purpose of fulfilling a contract or taking pre-contractual measures in accordance with Art. 6 (1) (b) GDPR. In addition, there may be a legitimate interest in maintaining business relationships or responding to your inquiry for other reasons.
In this case, the legal basis for the processing of your data would be Art. 6 (1) lit. f GDPR. The data will be deleted once we have responded to your inquiry and there are no other retention obligations that prevent this.
Contact by phone or Email contact
In accordance with legal requirements, we have provided a telephone number and email address on our website. We automatically store the data transmitted via these channels so that we can process corresponding inquiries or contact the person making the inquiry. We do not pass this data on to third parties without consent.
If contact is made by telephone or via our email address for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6 (1) lit. b GDPR. For all other contacts made by you, the processing of personal data by us is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR.
Presence on Facebook
Social networks process their users' personal data extensively. When you visit our profiles, your IP address and other information about the devices you use are processed, which enables IP addresses to be assigned to individual users.
We have no influence over this data processing. We would like to point out that you use our profiles on social networks and their functions at your own responsibility. Details on data processing can be found in the operator's privacy policy.
We have a profile on Facebook. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
For details, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/ .
The purpose of our profiles on social media platforms is to increase our internet presence and thereby raise awareness of our company. Therefore, the legal basis for this is legitimate interest pursuant to Art. 6 (1) (f) GDPR. Furthermore, with regard to the processing activities carried out by these social networks, reference should be made to their own legal bases (e.g., consent pursuant to Art. 6 (1) (a) GDPR), which can be found in the respective privacy policy. In principle, we are jointly responsible with the social media platform for the data processing operations triggered when you visit our profile. You can therefore assert your rights as a data subject pursuant to Art. 15 et seq. GDPR against the social media platform as well as against us.
However, we would like to point out that we have no influence on the data processing carried out by the social media platform.
Presence on Instagram
Social networks process their users' personal data extensively. When you visit our profiles, your IP address and other information about the devices you use are processed, which enables IP addresses to be assigned to individual users. We have no influence over this data processing.
Please note that you use our profiles on social networks and their functions at your own risk. Details on data processing can be found in the operator's privacy policy. We have a profile on Instagram. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Detailed information on the handling of personal data can be found in the following Instagram privacy policy: https://help.instagram.com/519522125107875 .
The purpose of our profiles on social media platforms is to increase our internet presence and thereby raise awareness of our company. Therefore, the legal basis for this is legitimate interest pursuant to Art. 6 (1) (f) GDPR. Furthermore, with regard to the processing activities carried out by social networks, reference should be made to their own legal bases (e.g., consent pursuant to Art. 6 (1) (a) GDPR), which can be found in the respective privacy policy. In principle, we are jointly responsible with the social media platform for the data processing operations triggered when you visit our profile. You can therefore assert your rights as a data subject pursuant to Art. 15 et seq. GDPR against the social media platform as well as against us.
However, we would like to point out that we have no influence on the data processing carried out by the social media platform.
Presence on WhatsApp
Social networks process their users' personal data extensively. When you visit our profiles, your IP address and other information about the devices you use are processed, which enables IP addresses to be assigned to individual users.
We have no influence over this data processing. We would like to point out that you use our profiles on social networks and their functions at your own risk. Details on data processing can be found in the operator's privacy policy.
We have a profile on WhatsApp. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Detailed information on the handling of personal data can be found in the following WhatsApp privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea?lang=de
The purpose of our profiles on social media platforms is to increase our internet presence and thereby raise awareness of our company. Therefore, the legal basis for this is legitimate interest pursuant to Art. 6 (1) (f) GDPR. Furthermore, with regard to the processing activities carried out by social networks, reference should be made to their own legal bases (e.g., consent pursuant to Art. 6 (1) (a) GDPR), which can be found in the respective privacy policy. In principle, we are jointly responsible with the social media platform for the data processing operations triggered when you visit our profile. You can therefore assert your rights as a data subject pursuant to Art. 15 et seq. GDPR against the social media platform as well as against us. However, we would like to point out that we have no influence on the data processing carried out by the social media platform.
WhatsApp also transfers and processes data in the USA. Currently, there is no adequate level of protection for data transfers to the USA. For this reason, there are risks involved in the processing of data.
WhatsApp uses standard contractual clauses and is part of the Data Privacy Framework, whereby WhatsApp undertakes to ensure an adequate level of data protection.
Registration on the website
Visitors have the option of registering on our website. This requires the provision of personal data. Registration enables us to offer services or content that require specific information about you. This personal data is processed and stored exclusively for the purpose of using the corresponding service or offer. The purpose of processing is to fulfill pre-contractual obligations, fulfill the contract, or provide customer service.
This data is generally stored for the period during which you are registered on our website. It may be stored for longer if this is necessary due to legal requirements.
The processing described above in this sub-section is based on the legal basis of consent (Art. 6 (1) (a) GDPR). The data subject has consented to the processing of their personal data with their voluntary, explicit, and prior consent.
We proceed in the same way if data subjects withdraw their consent. If registration on the website is necessary to process contract-related content, we rely on the legal basis for the performance of a contract pursuant to Art. 6 (1) lit. b GDPR.
GoHighLevel (CRM and Online marketing platform
We use GoHighLevel on this website.
The provider is HighLevel Inc., 400 North Saint Paul St., Suite 920, Dallas, Texas 75201, USA (hereinafter referred to as GHL). Among other things, GHL enables us to manage existing and potential customers as well as customer contacts. With the help of GHL, we are able to record, sort, and analyze customer interactions via email, social media, or telephone across various channels.
The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g., newsletter mailings). With GHL, we are also able to record and analyze the user behavior of our contacts on our website.
The use of GHL is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in customer management and customer communication that is as efficient as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR.
Consent can be revoked at any time.
Further information on data processing by HIghLevel Inc can be found here: Use of the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Use of chatbots
We use chatbots to communicate with you.
Chatbots are able to respond to your questions and other input without human assistance. To do this, the chatbots analyze your input as well as other data in order to provide appropriate responses (e.g., names, email addresses and other contact details, customer numbers and other identifiers, orders, and chat histories). Furthermore, your IP address, log files, location information, and other metadata may be collected via the chatbot. This data is stored on the chatbot provider's servers.
User profiles can be created based on the data collected. In addition, the data can be used to display interest-based advertising, provided that the other legal requirements (in particular consent) for this are met. For this purpose, the chatbots can be linked to analysis and advertising tools.
The data collected can also be used to improve our chatbots and their response behavior (machine learning).
The data you enter during communication will remain with us or the chatbot operator until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.
The legal basis for the use of chatbots is Art. 6 (1) (b) GDPR, provided that the chatbot is used for the purpose of initiating a contract or within the framework of contract fulfillment. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG.
Consent can be revoked at any time. In all other cases, the use is based on our legitimate interest in the most effective customer communication possible (Art. 6 (1) (f) GDPR).
We use the chatbot from GHL.
Payment service provider
We integrate payment services from a company specializing in these services on our website. When you make a purchase from us, your payment details (e.g., name, payment amount, account details, credit card number) are transmitted to our payment service provider and processed by them for the purpose of payment processing.
The contractual and data protection provisions of the provider selected by us apply to these transactions. The respective contractual and data protection provisions of the respective providers apply to this processing. The use of payment service providers is based on Art. 6 (1) lit. b GDPR (contract processing) and in the interest of a smooth, convenient, and secure payment process (Art. 6 (1) lit. f GDPR).
We use the following payment providers: