Privacy Policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data includes all data that can personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is KRÜGER GmbH, In der Schwarzerde 5-7, 65549 Limburg, Germany, Tel.: +49 6431 91 95-0, Fax: +49 6431 91 95-50, Email: info@kmp360.de. The controller responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer who can be contacted as follows: "Aurélie Baum, In der Schwarzerde 5-7, 65549 Limburg, +49 6431 9195-0, datenschutz@krueger-motoparts.com"

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referral from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for other purposes. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying its content, we use a provider that provides its services exclusively on servers within the European Union, either independently or through selected subcontractors.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, ensuring the protection of our visitors' data and prohibiting unauthorized disclosure to third parties.

4) Cookies

To make our website attractive and enable certain functions, we use cookies—small text files that are stored on your device. Some cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period, allowing us to store settings (so-called "persistent cookies"). The storage duration of persistent cookies can be found in your browser’s cookie settings.

If personal data is processed by individual cookies, processing is carried out either in accordance with Art. 6 (1) lit. b GDPR to execute a contract, based on your consent in accordance with Art. 6 (1) lit. a GDPR, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in providing the best possible functionality of the website and a customer-friendly and effective website experience.

You can configure your browser to inform you about the use of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contact

5.1 WhatsApp Business

We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (e.g., an order you have placed), we will store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) lit. b GDPR to process and respond to your request. Based on the same legal basis, we may also request additional information via WhatsApp (such as order number, customer number, address, or email address) to assign your inquiry to a specific process.

If you use our WhatsApp contact for general inquiries (e.g., regarding our services, product availability, or our website), we will store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in efficiently and promptly providing the requested information.

Your data will only be used to respond to your inquiry via WhatsApp. It will not be shared with third parties.

Please note that WhatsApp Business accesses the address book of the mobile device we use for this purpose and automatically transmits stored phone numbers to a server of its parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device that only stores the WhatsApp contact details of users who have contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from their contacts’ address books by accepting WhatsApp’s terms of use when first using the app on their device, in accordance with Art. 6 (1) lit. a GDPR. Data transmission of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For details on the purpose and scope of data collection, further processing and use of data by WhatsApp, and your rights and privacy settings, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider to protect the data of our website visitors and to prohibit any unauthorized disclosure to third parties.

In the context of the aforementioned processing, data may be transmitted to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

5.2 When you contact us (e.g., via a contact form or email), personal data will be processed solely for the purpose of handling and responding to your request and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your inquiry aims to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once it is evident that the relevant matter has been fully resolved and provided that no statutory retention obligations apply.

6) Comment Function

When using the comment function on this website, in addition to your comment, information on the time of comment creation and the name you have chosen as a commenter will be stored and published on this website. Furthermore, your IP address will be logged and stored. The storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts unlawful content through a comment. We require your email address to contact you if a third party objects to your published content as unlawful.

The legal bases for storing your data are Art. 6 (1) lit. b and f GDPR. We reserve the right to delete comments if they are reported as unlawful by third parties.

7) Data Processing When Creating a Customer Account

In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us for the creation of a customer account. The required data for account creation can be found in the input fields of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the aforementioned contact address of the controller. After the deletion of your customer account, your data will be erased, provided that all contracts concluded in connection with it have been fully processed, no legal retention obligations apply, and there is no legitimate interest on our part in retaining the data.

8) Use of Customer Data for Direct Advertising

8.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. To ensure that you only receive newsletters if you have explicitly agreed to receive them, we use the so-called double opt-in procedure. This means that you will receive a confirmation email requesting you to verify your subscription by clicking on a link.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. In doing so, we store your IP address as recorded by your Internet service provider (ISP) as well as the date and time of your registration, to prevent potential misuse of your email address at a later date. The data collected upon newsletter subscription is used strictly for this purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller mentioned above. Once you unsubscribe, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data, or we reserve the right to use the data in ways that are legally permitted and about which we inform you in this declaration.

8.2 Rapidmail

Our email newsletters are sent via the following provider: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany

Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data you provided during the newsletter registration to this provider in accordance with Art. 6 (1) lit. f GDPR so that they can handle the newsletter distribution on our behalf.

Subject to your express consent in accordance with Art. 6 (1) lit. a GDPR, the provider also conducts a statistical performance evaluation of newsletter campaigns using web beacons or tracking pixels in sent emails, which measure open rates and specific interactions with the newsletter content. This includes device information (e.g., time of access, IP address, browser type, and operating system), which is collected and analyzed but not merged with other data sets.
You can withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider to protect the data of our website visitors and prohibit any unauthorized transfer to third parties.

8.3 WhatsApp Newsletter

If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information required for sending the newsletter is your mobile phone number.

To receive the newsletter, you must save our provided mobile phone number in your phone’s contacts and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you consent to the use of your personal data in accordance with Art. 6 (1) lit. a GDPR for the purpose of newsletter distribution. We will then add you to our newsletter list.

The data collected during newsletter registration is used exclusively for promotional communication via the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your mobile phone number will be immediately deleted from our newsletter list unless you have expressly consented to further use of your data, or we reserve the right to use the data in ways that are legally permitted and about which we inform you in this declaration.

For sending our WhatsApp newsletter, we use a mobile device that only stores the WhatsApp contact details of our newsletter subscribers. This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from their contacts’ address books by accepting WhatsApp’s terms of use when first using the app on their device, in accordance with Art. 6 (1) lit. a GDPR. Data transmission of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

The purpose and scope of data collection, as well as further processing and use of data by WhatsApp, along with your related rights and privacy settings, can be found in WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with WhatsApp to protect the data of our newsletter recipients and to prohibit the transfer of data to third parties.

As part of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

8.4 Product Availability Notification via Email

For temporarily unavailable items, you can sign up to receive email notifications about product availability. In this case, we will send you a one-time notification via email when the item you selected becomes available. The only mandatory information required for this notification is your email address. Providing additional data is optional and may be used to address you personally. We use the so-called double opt-in procedure to ensure that you receive a notification only after explicitly confirming your consent by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. In this process, we store your IP address as recorded by your Internet service provider (ISP), along with the date and time of your registration, to prevent possible misuse of your email address at a later date. The data collected for our email availability notification service is used strictly for this purpose.

You can unsubscribe from availability notifications at any time by sending a corresponding message to the responsible party mentioned above. After unsubscribing, your email address will be immediately removed from our dedicated mailing list, unless you have expressly consented to further use of your data, or we reserve the right to use it in ways permitted by law, as outlined in this privacy policy.

8.5 Advertising by Postal Mail

Based on our legitimate interest in personalized direct advertising, we reserve the right to store and use your first and last name, postal address, and – if provided in the course of a contractual relationship – your title, academic degree, birth year, and professional, industry, or business designation in accordance with Art. 6 (1) lit. f GDPR. This data is used to send you interesting offers and information about our products by postal mail.

You may object to the storage and use of your data for this purpose at any time.

9) Data Processing for Order Fulfillment

9.1 To the extent necessary for contract fulfillment related to delivery and payment, the personal data we collect will be shared with the assigned transport company and payment service provider in accordance with Art. 6 (1) lit. b GDPR.

If we are obligated to provide updates for goods with digital elements or for digital products under a contract, we will process the contact details you provided when placing your order (name, address, email address) to inform you personally about upcoming updates within the legally required period. This processing is carried out in accordance with Art. 6 (1) lit. c GDPR and is strictly limited to the extent necessary for fulfilling our legal obligations.

To fulfill your order, we also work with service providers who assist us in part or in full with contract execution. Certain personal data will be transmitted to these service providers as required.

9.2 Transfer of Personal Data to Shipping Service Providers

- Deutsche Post

We use the following shipping service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will share your email address and/or phone number with the provider in accordance with Art. 6 (1) lit. a GDPR before delivery, for the purpose of coordinating a delivery date or providing a delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, we will only share the recipient’s name and delivery address for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. The data transfer will only take place to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate a delivery date with the provider in advance.

You may revoke your consent at any time with future effect by contacting the responsible party mentioned above or the service provider directly.

- DHL

We use the following shipping service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

You may revoke your consent at any time with future effect by contacting the responsible party mentioned above or the service provider directly.

- Hermes

As a shipping service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany

You may revoke your consent at any time with future effect by contacting the responsible party mentioned above or the provider directly.

9.3 Use of Payment Service Providers

- PayPal

This website offers one or more online payment options from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you choose a payment method from this provider where you make an advance payment, your payment data provided during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about your order will be forwarded to the provider in accordance with Art. 6 (1) lit. b GDPR. This data transfer is solely for the purpose of processing the payment and only to the extent necessary for this purpose.

If you select a payment method where we make an advance payment, you will also be asked to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly alternative payment details) during the order process.

To safeguard our legitimate interest in assessing your ability to pay, we will forward this data to the provider in accordance with Art. 6 (1) lit. f GDPR for a credit check. The provider will evaluate the personal data you provide, along with other data (such as shopping cart contents, invoice amount, order history, and payment history), to determine whether the selected payment method can be granted based on payment and/or default risks.

The credit report may include probability values (so-called score values). If score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical process. The calculation of score values includes, among other factors, address data.

You may object to the processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.

- Stripe

This website offers one or more online payment options from the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

If you choose a payment method from this provider where you make an advance payment (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about your order will be forwarded to the provider in accordance with Art. 6 (1) lit. b GDPR. This data transfer is solely for the purpose of processing the payment and only to the extent necessary for this purpose.

If you choose a payment method where the provider makes an advance payment (e.g., invoice or installment purchase, direct debit), you will also be asked to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly alternative payment details) during the order process.

To safeguard our legitimate interest in assessing our customers’ ability to pay, we will forward this data to the provider in accordance with Art. 6 (1) lit. f GDPR for a credit check. The provider will evaluate the personal data you provide, along with other data (such as shopping cart contents, invoice amount, order history, and payment history), to determine whether the selected payment method can be granted based on payment and/or default risks.

10) Web Analytics Services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website, which are stored as small text files on your device and collect certain information. This includes your IP address, which is truncated by Google to exclude direct personal identification.

The information is transmitted to Google servers and processed there. This may also include transfers to Google LLC servers in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The IP address transmitted by your browser in the context of Google Analytics and truncated will not be merged with other Google data. Data collected through the use of Google Analytics 4 is stored for two months and then deleted.

All processing described above, including the setting of cookies on the device used, is only carried out if you have given your explicit consent in accordance with Art. 6 (1) lit. a GDPR. If you do not provide your consent, Google Analytics 4 will not be used during your visit. You can revoke your consent at any time with future effect by disabling this service in the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found at: https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en&gl=en, and https://policies.google.com/technologies/partner-sites

All of the processing described above, particularly the placement of cookies on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service via the "Cookie Consent Tool" provided on the website.

Demographic Features
Google Analytics 4 uses the special "Demographic Features" function, which can generate statistics about the age, gender, and interests of website visitors. This is done by analyzing advertising and third-party information. This enables the identification of target groups for marketing activities. However, the collected data cannot be assigned to any specific individual and will be deleted after a storage period of two months.

Google Signals
As an extension of Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may analyze your cross-device usage behavior and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) lit. a GDPR. We do not receive any personal data from Google, only aggregated statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Ads" function in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en More information on Google Signals can be found at: https://support.google.com/analytics/answer/7532985?hl=en

UserIDs
As an extension of Google Analytics 4, this website may use the "UserIDs" function. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, created an account on this website, and logged in from different devices, your activities, including conversions, may be analyzed across devices.

10.2 Google Tag Manager

This website uses the “Google Tag Manager,” a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

The Google Tag Manager provides a technical framework to bundle various web applications, including tracking and analytics services, and manage them through a unified user interface. Google Tag Manager itself does not store or read any information on user devices. Additionally, the service does not perform independent data analysis. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. Data transfers to Google LLC servers in the USA are also possible.

This processing will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service via the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy?hl=en&gl=en

11) Retargeting/ Remarketing and Conversion Tracking

11.1 Meta Pixel with Enhanced Data Matching

Within our online offering, we use the “Meta Pixel” service in enhanced data matching mode, provided by: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).

When a user clicks on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is expanded with a parameter using “Meta Pixel.” This URL parameter is then entered into the user's browser through a cookie set by our linked page after redirection. Additionally, this cookie captures specific customer data, such as the email address we collect on our website linked to the Facebook or Instagram ad during transactions like purchases, account logins, or registrations (enhanced data matching). The cookie is then read, allowing the transmission of data, including specific customer information, to Meta.

We use "Meta Pixel" with enhanced data matching to make our advertisements (so-called “Ads”) on Facebook and/or Instagram more effective and to ensure they match user interests or possess specific characteristics (e.g., interests in certain topics or products identified based on visited websites) that we transmit to Meta (so-called “Custom Audiences”).

Furthermore, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of “Meta Pixel,” the enhanced data matching function helps us better measure the effectiveness of our ad campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Meta, allowing it to be associated with a specific user profile. Meta may use the data for its own advertising purposes according to Meta’s Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display ads on and outside of Facebook.

All the processing described above, especially the setting of cookies for reading information on the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with future effect by disabling this service in the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

The information generated by Meta is generally transmitted to a Meta server and stored there. In this context, data transfers to Meta Platforms Inc. servers in the USA may also occur.

11.2 Google Ads Remarketing

This website uses the retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google sets a cookie in your browser, which automatically enables interest-based advertising based on a pseudonymous cookie ID and the pages you have visited. Further data processing will only take place if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website in this case, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. Your personal data will be temporarily linked by Google with Google Analytics data to create target audiences. In the context of using Google Ads Remarketing, personal data may also be transmitted to Google LLC servers in the USA.

All the processing described above, particularly setting cookies for reading information on the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without this consent, retargeting technology will not be used during your visit.

You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service in the "Cookie Consent Tool" provided on the website.

Details about Google’s data processing and its handling of website data can be found here: https://policies.google.com/technologies/partner-sites

Further information about Google's privacy policies can be found here: https://business.safety.google/intl/en/privacy/ and https://www.google.com/policies/privacy/

11.3 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Ads). We can determine how successful individual advertising measures are in relation to the data of the advertising campaigns. Our goal is to show you advertisements that interest you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on a Google Ads advertisement. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.

In the context of using Google Ads, personal data may also be transmitted to Google LLC servers in the USA.

Details about Google Ads Conversion Tracking and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites

All the processing described above, particularly setting cookies for reading information on the device used, will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with future effect by disabling this service in the "Cookie Consent Tool" provided on the website.

You can also permanently opt out of Google Ads Conversion Tracking cookies by downloading and installing the browser plugin available at the following link:
https://www.google.com/settings/ads/plugin?hl=en

To deliver even more relevant advertising to users whose data we have received in business or business-related relationships, we use a customer match function within Google Ads. To do this, we electronically transmit one or more files with aggregated customer data (mainly email addresses and phone numbers) to Google. Google does not gain access to plain data; instead, it automatically encrypts the information in the customer files during transmission using a special algorithm. Google can only use the encrypted information to match it with existing Google accounts that the affected individuals have set up. This allows personalized advertising to be displayed across all Google services associated with the respective Google account.

Customer data is only transmitted to Google if you have given us explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke this consent at any time with future effect. Further information about Google’s privacy measures regarding the customer match function can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182
Google's privacy policies can be found here: https://business.safety.google/intl/en/privacy/ and https://www.google.com/policies/privacy/

12) Website Functionalities

12.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

If embedded videos are played via the plugin, the provider also sets cookies to collect information about user behavior, create playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit, your data will be directly assigned to your account when you click on a video. If you do not want this association with your account, you must log out before clicking the playback button.

All the above-mentioned processing, especially setting cookies to read information on the device used, only takes place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with future effect by disabling this service in the "Cookie Consent Tool" provided on the website.

12.2 Trustami Trust Badge

Our website integrates graphic elements from the following provider to display external customer reviews and/or an externally awarded quality seal: Trustami GmbH, Schröderstraße 5, 10115 Berlin, Germany

When you access a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers to properly load the elements. In this process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, it is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in the optimal marketing of our offer and the appealing design of our website.

12.3 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. Using this service allows you to see our location and facilitates any potential travel arrangements.

When you access pages that include a Google Maps map, information about your use of our website (e.g., your IP address) is transmitted to Google servers and stored there. This may also involve transmission to Google LLC. servers in the USA. This happens regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores user data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage, and evaluation occur in accordance with Art. 6 (1) lit. f GDPR based on Google’s legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, which must be exercised by contacting Google. If you do not agree with the future transmission of your data to Google in connection with the use of Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps and the map display on this website will then not be available.

Where legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, follow the instructions for objecting outlined above.

Further information on Google’s privacy policies can be found here: https://business.safety.google/intl/en/privacy/

12.4 Google reCAPTCHA

We use the CAPTCHA service of the following provider on this website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA. The provider uses "Google Fonts," which are fonts loaded from the internet, for the visual design of the CAPTCHA window. No additional processing beyond the information already transmitted via the reCAPTCHA functionality occurs.

The service checks whether an input is made by a natural person or is being misused by automated processing, blocking spam, DDoS attacks, and similar automated harmful activities. To ensure that an action is performed by a human rather than a bot, the provider collects the IP address of the device used, identification data of the browser and operating system type, as well as the date and duration of the visit, and transmits this data to the provider's servers for evaluation. Cookies may be used, which are small text files stored in the browser of the device.

If the above-described processing is based on cookies, it will only take place if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with future effect by disabling this service in the "Cookie Consent Tool" provided on the website.

If the above-described processing occurs without using cookies, the legal basis is our legitimate interest in establishing individual responsibility online and preventing misuse and spam in accordance with Art. 6 (1) lit. f GDPR.

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.

Further information on Google’s privacy policies can be found here: https://business.safety.google/intl/en/privacy/

12.5 Job Applications via Email

On our website, we list currently vacant positions in a dedicated section, which interested applicants can apply for by sending an email to the provided contact address.

Applicants must provide all personal data required for a thorough assessment, including general information such as name, address, and contact details, as well as performance-related certificates and, if applicable, health-related information. Details about the application process can be found in the job posting.

Upon receipt of an application via email, the data will be stored and evaluated exclusively for the purpose of processing the application. If we have any questions, we will contact the applicant via the provided email address or phone number. The processing is based on Art. 6 (1) lit. b GDPR (or § 26 (1) BDSG in Germany), which considers the application process as a step toward entering into an employment contract.

If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data such as information on disability status) are requested during the application process, the processing is carried out in accordance with Art. 9 (2) lit. b GDPR, allowing us to exercise our rights and fulfill our obligations under employment law and social security and social protection law.

Additionally or alternatively, the processing of special categories of data may be based on Art. 9 (2) lit. h GDPR if it is necessary for purposes of preventive healthcare or occupational medicine, assessing the applicant’s work capacity, medical diagnostics, healthcare or social care provision, or the management of healthcare or social systems and services.

If an applicant is not selected or withdraws their application prematurely, their submitted data, as well as all electronic correspondence, including the application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in answering follow-up questions regarding the application and, if necessary, fulfilling our documentation obligations under equal treatment laws.

In the event of a successful application, the provided data will be processed based on Art. 6 (1) lit. b GDPR (or § 26 (1) BDSG in Germany) for the purpose of carrying out the employment relationship.

12.6 Online Applications via a Form

On our website, we list currently vacant positions in a dedicated section, which interested applicants can apply for via a corresponding form.

When submitting the form, the applicant's data is transmitted to us in an encrypted manner in accordance with current security standards, stored by us, and evaluated exclusively for the purpose of processing the application. The processing is based on Art. 6 (1) lit. b GDPR (or § 26 (1) BDSG in Germany), which considers the application process as a step toward entering into an employment contract.

If an applicant is not selected or withdraws their application prematurely, the data submitted via the form, as well as all electronic correspondence, including the application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in answering follow-up questions regarding the application and, if necessary, fulfilling our documentation obligations under equal treatment laws.

13) Rights of the Data Subject

13.1 Under applicable data protection law, you have the following rights regarding the processing of your personal data by the data controller (rights of access and intervention), with reference to the relevant legal basis for each right:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

14) Duration of Storage of Personal Data

The duration of the storage of personal data depends on the respective legal basis, the processing purpose, and – if applicable – additional statutory retention periods (e.g., commercial and tax retention periods).

If personal data is processed based on explicit consent pursuant to Art. 6 (1) lit. a GDPR, the data will be stored until you revoke your consent.

If statutory retention periods apply to data that is processed as part of legal or quasi-legal obligations pursuant to Art. 6 (1) lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest in continued storage.

If personal data is processed based on Art. 6 (1) lit. f GDPR, it will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If personal data is processed for direct marketing purposes based on Art. 6 (1) lit. f GDPR, it will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 12.02.2025, 03:30:54 AM