Privacy Statement

Data protection declaration

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

1 DATA CONTROLLER RESPONSIBLE FOR DATA PROCESSING
The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is INFORM DataLab GmbH, Pascalstraße 51, 52076 Aachen, Germany (see our imprint)

2 HOW TO CONTACT THE DATA PROTECTION OFFICER AND QUESTIONS ABOUT DATA PROTECTION
You can contact our data protection officer at om@v-formation.gmbh or at our postal address with the addition “the data protection officer”.
If you have any questions about data protection and the handling of your data and if you would like to exercise your rights as a data subject, please contact us directly: hello@inform-datalab.com

3 Your rights
You have the following rights vis-à-vis us with regard to your personal data:

3.1 General rights
You have the right to information, rectification, erasure, restriction of processing, objection to processing and data portability. If processing is based on your consent, you have the right to withdraw this consent with effect for the future.

3.2 RIGHTS IN DATA PROCESSING BASED ON LEGITIMATE INTEREST
In accordance with Art. 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 e GDPR (data processing in the public interest) or on Art. 6 para. 1 f GDPR (data processing to protect a legitimate interest); this also applies to profiling based on this provision. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

3.3 RIGHTS IN DIRECT ADVERTISING
If we process your personal data for direct marketing purposes, you have the right under Art. 21 (2) GDPR to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes

3.4 Right of appeal to a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us.

4 COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system, and its interface, language and version of the browser software.
The legal basis for this is Art. 6 para. 1 f GDPR.

5 Contact via e-mail or contact form
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. If we request information via our contact form that is not required to contact you, we have always marked this as optional. We use this information to specify your inquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 a GDPR. If this involves information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel in order to respond to your request. You can of course revoke this consent at any time for the future.
We delete the data collected in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.

6 Comment function in the blog on the website
We offer users the opportunity to leave individual comments on individual blog posts on blogs located on our website. A blog is a portal on a website, usually open to the public, in which one or more people, known as bloggers or web bloggers, can post articles or write down thoughts in so-called blog posts. The blog posts can usually be commented on by third parties.

If a data subject leaves a comment on the blog published on this website, information about the time the comment was entered and the user name (pseudonym) chosen by the data subject are stored and published in addition to the comments left by the data subject. Furthermore, the IP address assigned by the data subject's Internet service provider (ISP) is also logged. This data is stored for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content by posting a comment. This personal data is stored in accordance with Art. 6 para. 1 f GDPR so that the data subject can exculpate himself in the event of an infringement. This collected personal data will not be passed on to third parties unless such a transfer is required by law or is necessary for the legal defense of the controller.

7 Participation in sweepstakes
When you take part in sweepstakes, we collect data that is required to carry out the sweepstakes. This is usually an individual competition entry (e.g. a comment or a photo), as well as your name and contact details. We may pass on your data to our competition partners, e.g. to send you the prize. Data processing and data transfer may vary depending on the competition and is therefore specifically described in the respective conditions of participation. Participation in the competition and the associated data collection is, of course, voluntary. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 a GDPR. Your data will be deleted after the end of the competition.

8 APPLICATIONS
You can apply to our company online via our application portal. Your online application will be forwarded directly to the HR department via an encrypted connection and will of course be treated confidentially. We will of course only use your details to process your application and will not pass them on to third parties. Here you will find further information about the processing of your personal data in the application process.https://www.inform-software.com/de/datenschutz/informationen-bewerber

9 REGISTRATION FOR PARTICIPATION IN EVENTS
If you register online for an event organized by us, we process personal data that is required for the implementation and planning of the event (e.g. company name, first name, surname, e-mail address, etc.). Further information may be available in the form of preferred hotel, day of arrival and day of departure if you obtain accommodation via our pre-booked partner hotels. For this purpose, information about the type of arrival is also required in order to provide parking spaces if necessary. Your personal data will be transmitted to the hotels you have selected Your personal data will be processed for the fulfillment of the contract. The legal basis for this is Art. 6 para. 1 b GDPR.

10 PARTICIPATION IN ONLINE TRAINING COURSES
If you take part in our online training courses, we process personal data that is required to carry out and process the online training courses (name, address, contact details). If a chat is set up as part of the online training, you have the opportunity to exchange information with the trainer and other participants and to post questions and contributions. The questions and contributions posted in the chat can be viewed by all participants and can be commented on. The legal basis for this is Art. 6 para. 1 b GDPR.

Questions and contributions are saved with details of the time and user name and published as part of the online training. In addition, the IP address assigned by the data subject's internet service provider (ISP) is also logged. This data is stored for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content. This personal data is stored in accordance with Art. 6 para. 1 f GDPR so that the data subject can exculpate himself in the event of an infringement. This collected personal data is passed on to third parties, in particular to the provider of the software with which the online training courses are conducted (e.g. GoTo Webinar, Microsoft Teams). In addition, personal data may be disclosed if such disclosure is required by law or serves the legal defense and prosecution of the controller.

11 USE OF COOKIES

12 Website analysis

We use various services for the purpose of analyzing and optimizing our websites, which are described below. For example, we can analyze how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our services in a user-friendly way. The data collected is not used to personally identify individual users. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 para. 1 f GDPR.

12.1 Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) The use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.

Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Section 15 (3) TMG and Art. 6 (1) f GDPR. The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 50 months. Data that has reached the end of its retention period is automatically deleted once a month. You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing https://tools.google.com/dlpage/gaoptout?hl=de. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used. If you click here, the opt-out cookie will be set: Deactivate Google Analytics

13 GOOGLE MAPS
This website uses Google Maps API to display geographical information visually. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google privacy policy. You can also change your personal data protection settings there in the data protection center.
Detailed instructions on managing your own data in connection with Google products can be found here.
The legal basis for the use of this service is Art. 6 para. 1 f GDPR

14 GOOGLE RECAPTCHA
In order to ensure sufficient data security when submitting forms, we use the reCAPTCHA service from Google Inc. in certain cases. This is primarily used to distinguish whether the input is made by a natural person or abusively by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. The deviating data protection provisions of Google Inc. apply here. Further information on the data protection guidelines of Google Inc. can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/
The legal basis for the use of this service is Art. 6 para. 1 f GDPR

15 YOUTUBE
We use the provider YouTube, among others, for the integration of videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use plugins from the provider YouTube on some of our websites. When you access the web pages of our website that have such a plugin - for example our media library - a connection to the YouTube servers is established and the plugin is displayed. This tells the YouTube server which of our web pages you have visited. If you are logged in to YouTube as a member, YouTube assigns this information to your personal user account. When you use the plugin, e.g. by clicking the start button of a video, this information is also assigned to your user account.
You can prevent this assignment by logging out of your YouTube user account and other user accounts of YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of the companies.
Further information on data processing and notes on data protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/.
The legal basis for this is Art. 6 para. 1 f GDPR

16 VIMEO
We use the provider Vimeo, among others, for the integration of videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011.
We use plugins from the provider Vimeo on some of our web pages. When you access the web pages of our website that have such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our web pages you have visited. If you are logged in to Vimeo as a member, Vimeo assigns this information to your personal user account. When you use the plugin, e.g. by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
Further information on data processing and notes on data protection by Vimeo can be found at https://vimeo.com/privacy.

17 Advertising
We use cookies for marketing purposes in order to address our users with interest-based advertising. In addition, we use cookies to limit the likelihood of an advertisement being displayed and to measure the effectiveness of our advertising measures. This information may also be shared with third parties, such as ad networks. The legal basis for this is Art. 6 para. 1 a and f GDPR. There is a legitimate interest in direct marketing for the purposes pursued with the data processing. You have the right to object at any time to the processing of your data for the purpose of such advertising. For this purpose, we provide you with opt-out options for the respective services below. Alternatively, you can prevent the setting of cookies in your browser settings.

17.1 Google AdWords
In order to draw attention to our services, we place Google AdWords ads and use Google Conversion Tracking for the purpose of personalized, interest-based and location-based online advertising. The option to anonymize IP addresses is controlled by Google Tag Manager via an internal setting that is not visible in the source of this page. This internal setting is set in such a way that the anonymization of IP addresses required by the Federal Data Protection Act is achieved.
The ads are displayed after search queries on websites of the Google advertising network. We have the option of combining our ads with specific search terms. With the help of cookies, we can display ads based on a user's previous visits to our website.

When a user clicks on an ad, Google places a cookie on the user's computer. Further information about the cookie technology used can also be found in Google's notes on website statistics and in their privacy policy. Using this technology, Google and we as their customer receive information that a user has clicked on an ad and was redirected to our website. The information obtained is used exclusively for statistical analysis to optimize advertisements. We do not receive any information that would allow us to personally identify visitors.
The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page of our website marked with a conversion tag. Based on these statistics, we can determine which search terms most frequently led to clicks on our ads and which ads resulted in users contacting us via the contact form.

If you do not wish this, you can prevent the storage of the cookies required for these technologies, for example, via your browser settings. In this case, your visit will not be included in the user statistics.
You also have the option to select the types of Google ads or deactivate interest-based ads on Google through the ad settings. Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative’s opt-out tool. However, we and Google will continue to receive statistical information about how many users visited this page and when. If you do not wish to be included in this statistic either, you can prevent this with the help of additional programs for your browser (for example, the Ghostery add-on).

17.2 Facebook Conversion Tracking Pixel
We use the Facebook Conversion Tracking Pixel service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA:
This tool allows us to track user actions after they are redirected to a provider's website following a click on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The collected data remains anonymous, meaning we cannot view personal data of individual users.
However, the data collected is stored and processed by Facebook. We provide this information in accordance with our own disclosures. Facebook can link the data to your Facebook account and use it for its own advertising purposes, as outlined in Facebook's privacy policy at: www.facebook.com/about/privacy/.
Facebook Conversion Tracking also enables Facebook and its partners to display advertisements to you both on and off Facebook. Additionally, a cookie is stored on your computer for this purpose.

17.3 Twitter

Twitter Remarketing: With the Twitter remarketing function we can address the visitors of our website with advertising based on their interests on the Twitter platform. Twitter uses so-called “tags” for this purpose. This tag is used to record visits to the website and data on the use of the website in a pseudonymous, non-personal form. If you visit Twitter below, advertisements based on your interests will be displayed.

Conversion cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and advertising efforts.

If you do not want Twitter to address you with targeted advertising, you can deactivate this function on Twitter at https://support.twitter.com/articles/20171528. Twitter also supports the “Do Not Track (DNT)” option. You can activate them at: https://support.twitter.com/articles/20171372. Further information on data protection on Twitter and on Twitter advertisements can be found here: https://business.twitter.com/de/help/troubleshooting/how-twitter-ads-work.html.

17.4 LinkedIn Conversion Tracking
We use the analysis and conversion tracking technology of the LinkedIn platform on our website. This technology allows LinkedIn to display more relevant, interest-based advertisements to you.
The storage of "conversion cookies" is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its online offerings and its advertising.
Additionally, we receive aggregated and anonymous reports from LinkedIn regarding ad activities and information on how users interact with our website. For more information about LinkedIn's privacy policy, please visit: https://www.linkedin.com/legal/privacy-policy#choices-oblig.
You can opt out of the analysis of your usage behavior by LinkedIn and the display of interest-based recommendations ("Opt-Out") by clicking on the "Decline on LinkedIn" button (for LinkedIn members) or "Decline" (for other users) at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

18 Social Media
On our website, we link to our social media pages on platforms such as YouTube, LinkedIn, Facebook, and Instagram.
When you click on the respective icon, your user information is transmitted to the respective provider. If you are logged into your user account on the provider's social network and the provider's cookies are stored on your device, the visit to our website is associated with your personal user account.

We are active on the following social networks and process personal data in this context to publish information about our company and communicate with active users of the social media platforms:

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
- Joint Controller Agreement: https://legal.linkedin.com/pages-joint-controller-addendum
- Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Facebook: Meta Platforms Ireland Ltd., 4 Merrion Road, Dublin 4, D04 X2K5, Ireland.
- Joint Controller Agreement: https://www.facebook.com/legal/terms/page_controller_addendum
- Privacy Policy: https://www.facebook.com/about/privacy
Instagram: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland.
- Joint Controller Agreement: https://www.facebook.com/legal/terms/page_controller_addendum
- Privacy Policy: https://instagram.com/about/legal/privacy
YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Privacy Policy: https://policies.google.com/privacy

We have no control over the collection and processing of personal data by the respective providers. User data may also be processed by the providers outside the EU/EEA. Please refer to the links above for information from the respective providers about how they process your personal data.

We process personal data collected through our social media pages, particularly for the following purposes:

Presenting our company and culture, including career and training opportunities at INFORM DataLab.
Announcing and showcasing current events and activities, including online seminars.
Collecting statistical information about the reach of our social media channels.
Conducting customer surveys, marketing campaigns, competitions, or similar activities.
Matching and storing data in our Customer Relationship Management (CRM) system, if applicable.
Resolving disputes and legal conflicts, establishing, exercising, or defending legal claims, and enforcing existing contracts.

We process your data based on our legitimate interest under Article 6(1)(f) GDPR, unless explicitly stated otherwise, to present our company and the services you seek on your preferred channels and to respond promptly to your messages and inquiries. Additionally, we have a legitimate interest in analyzing the reach and usage of our social media pages to achieve an appropriate design and continuous improvement. If your inquiry seeks to establish a contractual relationship with INFORM DataLab, the legal basis for processing is Article 6(1)(b) GDPR. Should we intend to process your personal data for purposes other than those mentioned above, we will inform you before processing.

We process the following personal data through our social media pages:

Usernames on the respective platform, as well as your comments and messages posted on our respective social media page.
Your activity on our social media pages through the respective platform provider, e.g., (generally anonymized or aggregated) analyses of visits, interactions, video views, geolocation data (origin of visitors), and statistics about relationships with our visitors.
Other information necessary to respond to your inquiries or to uniquely identify you in our systems, as required.

When you visit one of our social media pages, the respective platform providers may also process additional data about you and create user profiles to display interest-based advertising.

You can exercise your rights (access, rectification, erasure, restriction of processing, data portability, and complaints) both with us and the respective social media platform operator. However, we recommend asserting these rights directly with the respective provider, as they have access to user data and can take direct action or provide information.

The data we collect directly via our social media pages will be deleted from our systems as soon as the purpose for their storage ceases, you request their deletion, or you withdraw your consent for storage. Mandatory legal provisions, especially retention periods, remain unaffected.
We have no influence over the retention period of your data stored by social media platform operators for their own purposes.

19 ONLINE MARKETING
HubSpot
We use the HubSpot service to carry out our online marketing activities. The provider is HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141. HubSpot is also accessible within the European Union, and the relevant contact details can currently be found here: https://www.hubspot.com/company/contact. For more information about data protection at this provider, please visit https://www.hubspot.de/data-privacy/gdpr and https://legal.hubspot.com/de/privacy-policy.

Using this tool, we implement various online marketing measures as described in this privacy policy, including but not limited to:

Email Marketing: Newsletters and automated mailings (e.g., to provide informational material).
Contact Management: Storage of contact details in our CRM for communication purposes.
Provision of Online Forms for purposes such as:
- Event registrations (e.g., webinars or on-site events).
- Appointment scheduling via online forms.
- Provision of informational materials.
- Newsletter sign-ups.
- Inquiries and callback services.

We refer to the relevant sections of this privacy policy for more detailed information about these online marketing measures and provide the following additional details:

We send newsletters and automated mailings ("mailings") only after registration and with your consent, as per Article 6(1)(a) GDPR. If the contents of the mailings (i.e., the advertised products and services) are explicitly specified during registration, they are decisive for the scope of consent. Otherwise, our mailings include information about our products, offers, promotions, and/or our company.

The registration process uses the double opt-in method, meaning you receive an email after registration asking you to confirm your subscription to prevent misuse of your email address. The registration for our mailings is logged to demonstrate compliance with legal requirements and to prevent or investigate potential misuse of your personal data. The logging of the registration process is based on our legitimate interest, as per Article 6(1)(f) GDPR, in operating a user-friendly and secure mailing system and in being able to prove the registration process and granted consent.

You may revoke your consent to receive our mailings at any time, particularly by unsubscribing. An unsubscribe link is included at the end of every email.

Our mailings contain tracking pixels (web bugs), which allow us to determine whether and when an email was opened and which links in the email were clicked by the recipient. This information is used to improve our newsletter based on technical data or audience behaviors, including their reading habits derived from locations (detected using IP addresses) or access times. These analyses help us adapt our content to user preferences or send targeted content based on users' interests. The collected data is used to send personalized marketing emails to recipients.

For specific email campaigns, we also segment recipients based on collected and qualified data (e.g., expressed interest in specific topics, address/region, etc.) to offer you goods and services tailored to your interests. You will only receive advertisements that are potentially relevant and of interest to you.

The data collected and processed in this context is stored and further processed on this provider's servers. HubSpot acts as our data processor and processes the data exclusively according to our instructions. More information about the various applications can be found here: https://www.hubspot.de/.

If we obtain your consent for specific online marketing measures, the legal basis for data processing is Article 6(1)(a) GDPR. Where data processing is required to fulfill a contract with you, the legal basis is Article 6(1)(b) GDPR. Otherwise, data processing is based on Article 6(1)(f) GDPR, which permits the processing of personal data without the data subject’s consent if processing is necessary to safeguard the legitimate interests of the controller or a third party, provided these do not override the interests or fundamental rights and freedoms of the data subject.

In this context, our legitimate interest lies in direct advertising under Recital 47 of the GDPR. Our legitimate interest arises from our need to ensure the effectiveness of the campaigns we create and the efficient use of resources allocated for this purpose. Additionally, you will only receive advertisements that are potentially relevant and of interest to you. Your rights are safeguarded by the transparency of this process and your ability to object to HubSpot's processing. If you do not want HubSpot to collect your data, you can prevent the storage of cookies at any time through your browser settings or use the following opt-out link: HubSpot Opt-out Link.

We have carefully selected this provider and entered into appropriate contractual agreements. The fact that the provider processes data outside the European Union and is based there does not prevent the contractual relationship. The contractual documents relevant to HubSpot’s engagement include EU standard contractual clauses, allowing for the relationship under Article 46 GDPR. The contractual document can be accessed here: https://legal.hubspot.com/de/dpa.

20 DATA TRANSFER
Your data is generally not transferred to third parties unless we are legally obligated to do so, the data transfer is required to fulfill the contractual relationship, or you have expressly consented to the transfer of your data.

Data sharing within the INFORM corporate group may occur to fulfill the contract concluded with you and for sales and marketing purposes based on our legitimate interests. Our legitimate interest under Article 6(1)(f) GDPR is particularly in the unification and optimization of our internal administrative and sales processes, ultimately enabling us to better serve our prospects and business partners.

External service providers and partner companies, such as online payment providers or shipping companies tasked with delivery, receive your data only to the extent necessary to process your order. In these cases, the scope of the data transferred is limited to the minimum required. When our service providers come into contact with your personal data, we ensure, within the framework of data processing agreements under Article 28 GDPR, that they comply with data protection regulations in the same way. Please also review the respective privacy notices of these providers. The service provider is responsible for the content of external services, but we verify compliance with legal requirements to the extent reasonable.

We prioritize processing your data within the EU/EEA. However, it may occur that we engage service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection is established with the recipient before transferring your personal data. This means that an adequate level of data protection is achieved through EU standard contractual clauses or an adequacy decision, such as the EU-Privacy Shield, comparable to the standards within the EU.

21 DATA SECURITY
We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security procedures are regularly reviewed and updated in line with technological advancements.

Last updated: December 2024

Consent to the use of cookies.

Data processing agreement

Server log files