▼ Table of Contents

1 Responsible Authority

We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:

Nathanael-Osirius Woggon
Esmarchstraße 67
DE - 24118 Kiel (Ravensberg)
Phone: +49 431 55695403
E-mail: info@ow-commerce.com

2 General Information

Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.

When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.

All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.

On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.

The GDPR allows data processing in three cases in particular:

2.1 Inventory Data

We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user. This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment). Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.

2.2 Usage Data

We also collect usage data to allow users to use the services on our website. These may consist of: usage information (for example visited websites or parts, duration of visit, interest in services), content data (for example data, text, images, sounds, videos entered or uploaded by you), meta data (for example identity of your device, location, IP address).

We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.

The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.

3 Hoster

3.1 webgo GmbH

Our Website is presented in the Internet by a service provider. We use the service webgo GmbH, Heidenkampsweg 81, 20097 Hamburg. We have concluded a data processing agreement with our provider. With this contract, our provider is obliged to process the data according to our instructions. You can find more information on data processing at our provider in his privacy policy at https://www.webgo.de/datenschutz/. The legal basis for this data processing is on the one hand our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, and, on the other hand, our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 (b) GDPR.

Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:

This data will only be used for statistical purposes and do not allow us to identify you as a user.

4 Advertisements

Before sending you advertisements, we will ask for your explicit consent pursuant to Art. 4 no. 11 GDPR, except in cases of advertisements for similar products to the one you already acquired. This will happen in particular when you grant us consent to mail our newsletter or when you fill out a contact form. You may withdraw your consent at any time in accordance with the subsequent section “Consent”.
INSOFAR AS WE USE YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU MAY ALSO OBJECT TO THE USE OF YOUR DATA FOR THAT PURPOSE AT ANY TIME. THIS MAY BE DONE THROUGH ANY OF OUR MEANS OF CONTACT, PARTICULARLY BY E-MAIL TO THE E-MAIL ADDRESS LISTED IN THE “LEGAL NOTICE” SECTION WITHOUT ANY FORMAL REQUIREMENTS. WE WILL THEN NO LONGER USE YOUR DATA FOR DIRECT MARKETING.

5 First Contact through Electronic Request

If you contact us in electronic form (for example by mail, fax, phone, messenger, etc.), we store and process the data which you have given us (for example name, contact information, content of the request). This is based on our legitimate interest in an effective communication with customers in accordance with Article 6 para. 1 (a) GDPR and, as far as it concerns a request to enter into or to perform a contract, also with Article 6 para. 1 (b) GDPR.
We will only pass on this data to third parties as far as required for the performance of the contract (in accordance with Article 6 para. 1 (b) GDPR), by the overwhelming interest in effective services (in accordance with Article 6 para. 1 (f) GDPR) or based on your consent (in accordance with Article 6 para. 1 (a) GDPR) or if there is another legal permission or obligation.
You may ask us at any time and without any cost to provide information about the purpose of the processing, the origin and the recipient, if any, of your data. You may also request that we correct, delete or limit the processing of your personal data. You may object against the (further) processing of your data at any time and you have a right for the data to be made transferable as well as the right to file a complaint with the competent supervisory agency.
In general, your data will only remain stored as long as required by the purpose of the respective data processing. A longer storage is an option, in particular when required in order to pursue our rights, for other legitimate interests of ours or when there is a statutory duty to keep the data longer (for example record-keeping under tax law, statute of limitations).

6 Consent

Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

7 Storage Period

Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.
For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus an adequate extra time for potential interruptions of the limitation period.
For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.
Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular the tax-law requirements to keep records, usually for 6 or even 10 years.

Upon opening the website, we have asked you to consent to the storing of certain cookies which will be placed while you visit our website. Based on your consent pursuant to Art 6 para. 1 (a) GDPR, our website thus uses cookies, so that our offer can be used in a better, more effective and more secure way.
A cookie is a record of information that is stored on your terminal device (computer, tablet, smartphone, etc.). These can be “session cookies”, which are automatically deleted when you leave our website. Other cookies are stored on your computer permanently until you delete them. That allows us to recognize your browser when you visit our website again and to provide you with features or offers according to your previous usage.

Your browser allows you to prevent the use of cookies in general or in specific cases. Please check the instructions for your browser to find out more about this. You can also delete cookies following these instructions which we have listed for you:

for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
for Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
for Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
for Edge: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
for Internet Explorer: https://support.microsoft.com/en-gb/help/278835/how-to-delete-cookie-files-in-internet-explorer

Blocking cookies may limit the functionality of our website and of other websites visited by you.
More information on this topic, in particular how you can administer, limit or completely disable third-party cookies and technologies with a similar purpose, can be found at:
https://www.aboutads.info/choices
https://www.youronlinechoices.eu
https://www.networkadvertising.org/choices

In order to obtain your consent to store certain cookies on your device and to document this in line with data protection law, and in line with our legal obligations under Art. 6 para. 1 sentence 1 (c) GDPR and our legitimate interest in accordance with Art. 6 para. 1 (f) GDPR, we use the Cookie Consent Manager “Borlabs Cookie“ provided by Borlabs - Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany.
Borlabs Cookie only places cookies that are technologically necessary. When you open our website, the following data will be sent to Borlabs Cookie: your consent or the withdrawal of your consent for placing cookies, a cookie placed on your browser by Borlabs Cookie, the duration and version of the cookie, domain and path of the WordPress website and the UID. The UID is a randomly generated ID and no personal information.
Borlabs Cookie processes no personal data. If you want to withdraw the consent to place certain cookies, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your consent to place cookies again.
You can find detailed information about the privacy policy of Borlabs Cookies at: https://de.borlabs.io/datenschutz/

For the Cookie Opt In we use the Wordpress plugin from Borlabs (https://borlabs.io/borlabs-cookie/) and you can adapt here your settings.
[borlabs-cookie type="btn-cookie-preference" title="Borlabs Cookie Settings"/]

9 Transfer of data

9.1 Transfer to Third Parties

We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law.

Transfer of customer data may either


If your data are transferred to third parties, this is mentioned in this privacy policy.

9.2 Transfer to other countries, particularly USA

Our website uses external providers located outside of the EU for different features. In particular, the use of cookies, active Java scripts and other technology can lead to processing and storage of your data outside of the EU. But we will not transfer your data to a third country, unless the EU Commission has determined that there is a similar level of data protection as in the EU or unless you have provided us with your informed consent or we have agreed on the standard contractual clauses for the protection of your data with the provider.

10 Users‘ Rights

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

10.1 Deletion, Correction, Limitation

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

10.2 Objection

The right to object to advertisement is governed by our text regarding consent:
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

10.3 Data Transfer

You may request us to transfer the data stored about you in machine-readable form.

10.4 Complaint

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).

11 Changes to the Privacy Policy

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

12 Data Entry

12.1 Encryption of Data Entry

When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.

12.2 Contact Forms

12.2.1 General contact form

When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.

Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.

Basis for this storage is the safeguarding of our legitimate interests in regard to communication with interested users pursuant to Art. 6 para. 1 (f) GDPR and in the case of inquiries prior to entering into a contract also the performance of a contract pursuant to Art. 6 para (b) GDPR.

Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).

12.2.2 Offer

On our website, you find a contact form, through which you may request a specific offer for our goods and services. We will ask for for the necessary data as in the form, so we can prepare the offer.
Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.
The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and in case of contractual requests also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR.
These data remain saved until you will terminate your access by sending an e-mail to the e-mail address listed in the "About Us" section. After that, they will remain stored in connection with the necessary performance of the contract (see the section on user/contract data).

12.2.3 Job Applications

If you send us a job application, we will process the personal data from your application. This includes all of your application documents. We will in particular store your contact information, the information about your schooling and training, internships, work experience as well as certificates.
We ask you not to send any information which tells us about race, ethnic origin, gender, religion or worldview, disability, age, illnesses, physical or mental health, pregnancy, political views, philosophical or religious convictions, membership in a union, sexual identity or sexual life, because we evaluate applications independent of such information.
Applications are subject to our strict internal rights management. Only employees who are part of the application process will receive access to the application, usually only the HR department as well as the management, if applicable. All of our employees are ordered to maintain confidentiality.
The processing of your application information is based on Art. 88 GDPR in connection with § 26 BDSG, according to which employees' personal data may be processed for the purpose of the employment if this serves to establish an employment contract.
If you will be hired based on the application, your information will be stored in your personnel file in accordance with the separate privacy policy for employees' data. If your application will not be successful, we will delete your information completely within 3 months from the rejection, unless you have declared your specific consent to use your information for future applications. You may revoke this consent at any time, upon which we will immediately delete your application information.

12.3 Registration

If you register on our website, we will ask for compulsory and potentially also non-compulsory data in accordance with our registration form for the purposes listed hereinafter.
Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.
The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR in case of contracts, including non-remunerated ones.
Your data will remain stored for as long as you remain registered, particularly as long as the storage is still required to perform the contract, to pursue our rights or for our other legitimate interests or for as long as we are required by law to store your data (for example pursuant to tax-law requirements to store documents).

12.3.1 Webinar

If you register for a webinar, we will ask for your data according to our registration form, because we like to address you personally. We will only use your data to inform you about the implementation of the webinar as well as possibly about information which is necessary for the webinar to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information).

When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “legal notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.

12.3.2 Membership Area

If you register for our membership area, we will ask for data in accordance with our registration form, because we do not permit the anonymous use of our services. We will only use your data to provide you with the information necessary for using the membership area (news, news in the membership area and technical information).

When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “Legal Notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.

12.3.3 Course Registration

If you register for a course, we will ask for your data according to the registration form, because we like to address you personally. We will only use your data to inform you about the implementation of the course as well as possibly about information which is necessary for the course to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information).

When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “Legal Notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.

12.3.4 Registration Shop

If you register in our shop, we will ask for data in accordance with our registration form in order to ship future orders. We will use your data to make future orders easier for you and to provide you with information required for the use (technical information).

When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “Legal Notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.

13 Blog / Comments

13.1 Comments

If you comment something on our page, we will save your IP address to make sure that only lawful comments will be published. After reviewing and allowing the comment by us, this data will be deleted. We will also save your comment as well as the information entered together with it (for example user name or e-mail address).

Basis for this storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you provide to us by filling in the comment field. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example by unsubscribing, contact form or e-mail). This withdrawal has no effect on the legality of the data processing that has occurred up to that point.

Your data remains stored for as long as the comment is saved, for as long as required for us to pursue our rights or for our other legitimate interests or for as long as we are required by law to keep your data.

14 Social Media

We refer with links to our social media presences. When you follow any such link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information.

Our website uses links to our presence in the social network of Facebook by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. It is just a normal link. Thus, when you open our site, Facebook will not learn of your visit to our website. But once you click on the link, you will be led to Facebook, allowing Facebook to learn that you have visited out site.
Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

The collection and use of your data which is possibly carried out by Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Facebook’s privacy policy at https://en-gb.facebook.com/policy.php.

Our website uses links to our presence in the social network of Instagram by Instagram LLC, now Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

It is just a normal link. Thus, when you open our site, Instagram will not learn of your visit to our website. But once you click on the link, you will be led to Instagram, allowing Instagram / Facebook to learn that you have visited out site.
Your data will be forwarded by Meta Platforms Ireland on the base of the standard contractual clauses to Meta Platforms USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

The collection and use of your data which is possibly carried out by Instagram/Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Instagram’s privacy policy at
https://privacycenter.instagram.com/policy.

Our page uses links to our presence on the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.

It is just a normal link, which means that upon opening our page, LinkedIn won't learn anything of your visit to our website. But when you click on the link, you will be taken to LinkedIn, and then LinkedIn will also learn that you visited our page.

Thus, your data may be forwarded to the USA.

We have neither knowledge of, nor any influence on the possible collection and processing of your data by LinkedIn after clicking on the link. Further information can be found in LinkedIn's privacy policy at https://www.LinkedIn.com/legal/privacy-policy?_l=de_DE.

Our page uses links to our presence on the social network Pinterest, provided by Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA.

It is just a normal link, which means that upon opening our page, Pinterest won't learn anything of your visit to our website. But when you click on the link, you will be taken to Pinterest, and then Pinterest will also learn that you visited our page.

Thus, your data will be forwarded to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. Further information can be found in Pinterest' privacy policy at https://policy.pinterest.com/en/privacy-policy.

Our page uses links to our presence on the social network Twitter, provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND
It is just a normal link, which means that upon opening our page, Twitter won't learn anything of your visit to our website. But when you click on the link, you will be taken to Twitter, and then Twitter will also learn that you visited our page.

Thus, your data may be forwarded to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. Further information can be found in the privacy policy of Twitter at https://twitter.com/privacy?lang=en.

Our page uses links to our presence in the social network Xing by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

It is just a normal link, which means that upon opening our page, Xing won't learn anything of your visit to our website. But when you click on the link, you will be taken to Xing, and then Xing will also learn that you visited our page.

We have neither knowledge of, nor any influence on the possible collection and processing of your data by Xing after clicking on the link. Further information can be found in Xing's privacy policy at https://www.xing.com/privacy

Our website uses links to our presence in the social network of YouTube by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. It is just a normal link. Thus, when you open our site, YouTube will not learn of your visit to our website. But once you click on the link, you will be led to YouTube, allowing YouTube to learn that you have visited out site.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.


You may find further information in YouTube’s privacy policy at
https://www.google.de/intl/de/policies/privacy/.

14.2 Social Media Videos

14.2.1 Youtube (Two Click)

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR we use YouTube, a service provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland in order to embed videos.
To protect your data, we have installed a two-click solution. That way, Google won't learn about your visit once you access our website, but only once you actually click the button. If you confirm the plugin while being logged in at YouTube, Google may attribute your use to your user account.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
You may find further information in YouTube’s privacy policy at
https://www.google.de/intl/de/policies/privacy/.

Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.

15 Website Analysis

15.1 Matomo

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the open-source programme Matomo, a web analysis tool.

15.1.1 with Cookies

To optimise the offered website, Matomo will place cookies. Cookies are text files which are stored on your computer and which transmit information about the use of the page, including the user's shortened IP address, to the provider. The user's IP address will immediately be anonymised, so that the user cannot be identified by the provider. The data collected in that way will not be passed on to third parties by the operator of this website.

You may prevent the use of cookies by changing the preferences in the browser. Here you find instructions in German: http://www.akademie.de/wissen/do-not-track-datenschutz. This may however impede the use of this and of other websites.

If you do not agree with the storing and analysis of your data, you subsequently have the opportunity to object to the analysis by Matomo.

16 Online calendar

16.1 Calendly

Based on our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the calendar of Calendly https://calendly.com/de, a service offered by Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA, to make appointments.

Thus, the data you enter while making an appointment will be passed to Calendly. Your data will be transmitted to the USA in that process.
You can find more information about the privacy policy of Calendly at https://calendly.com/de/pages/privacy. We have entered into a contract on data processing with Calendly, according to which Calendly will only process your data according to our instructions.

In order to arrange an appointment, we ask for the data requested in the Calendly form and we collect your IP address at the time of entry. This data will not be passed to third parties by us or by Calendly and only serves statistical purposes and for arranging appointments. Data entry will be encrypted, preventing third parties from reading your data while you enter it. You will find more information about the data collected by Calendly and how they process your data in the privacy policy of Calendly .

Your data will remain stored as long as the reason for the appointment is still relevant, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for other legitimate interests of ours or as long as we are required by law to keep your data stored (for example by tax-law requirements on the keeping of records). If the appointment passes without any consequences, your data will be deleted.

17 E-Commerce Platforms

17.1 Amazon affiliate programme

Based on our legitimate interest in an economical online offering pursuant to Art. 6 para. 1 (f) GDPR, we take part in the Amazon EU affiliate programmes of Amazon Europe Core S.à.r.l., of Amazon EU S.à.r.l, of Amazon Services Europe S.à.r.l. and of Amazon Media EU S.à.r.l., all four registered at 5, Rue Plaetis, L-2338 Luxembourg, as well as Amazon Instant Video Germany GmbH, Domagkstrasse 28, 80807 München, Germany.

On our website, you find ads by Amazon and links to offers on Amazon. If you click from our website onto an ad or such a link, Amazon will use cookies that are stored on your computer that you have clicked from our website. We will receive an affiliate commission for that.

You can find information about the use of your data by Amazon in Amazon's privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

You have the option to choose the preferences for cookies to be placed on your computer or to prevent this completely. On this subject, we refer you to the above information in this Privacy Policy about cookies.

17.2 Digistore24 partner programme

Based on our legitimate interest in an economically sound online offer in accordance with Art.6 para. 1 (f) GDPR, we take part in the Digistore24 partner programme, offered by Digistore24 GmbH, St.-Godehard-Strasse 32, 31139 Hildesheim, Germany.
On our website, there will be advertisement for offers sold by Digistore24 and links to offers by Digistore24. If you click on an ad or such a link from our website, Digistore24 will recognise, thanks to cookies stored on your computer, that you have come from our website. We will receive an affiliate commission for this.
You can find information about the use of your data by Digistore24 in the privacy policy https://www.digistore24.com/page/privacy of Digistore24.
You can change the cookie settings on your computer or disable them altogether. We refer you to the general explanations about cookies in this Privacy Policy above.

18 Security systems

18.1 iThemes

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the security plugin Solid Security (formerly iThemes Security) provided by Liquid Web LLC, 2703 Ena Drive, Lansing, MI 48917, USA to prevent attacks on our website. Login attempts, logout requests, requests for suspicious URLs, changes to the content of the site and password updates are recorded by the plugin and stored for 30 days in order to block massive requests and attacks on our website.
Information about your use of this website (including your IP address) will be sent to a server of iThemes in the USA.
However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.

You can find more information about the use of your data by iThemes in the privacy policy of iThemes:
https://ithemes.com/privacy-policy/
iThemes cannot be blocked, because that would remove the protection of our website.

18.2 reCAPTCHA

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the reCAPTCHA tool provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google“).
The reCAPTCHA tool provided by Google checks if the entries on our website are made by a human or are due to fraudulent automated machine processing and is therefore mainly used in connection with forms. The reCAPTCHA tool uses the following data points to determine that an action was taken by a human and not by an automated bot: IP address of the device used, identification of the browser and the operating system, date and duration of the visit as well as user behaviour, for example mouse movements or other information. The procedure only serves the purpose of fending off spam, DDoS attacks and similar automated attacks. The transmitted IP address will only be connected with information from your Google account if you are logged into your Google account at the time of using Google reCAPTCHA. If you don't want your data to be transmitted, you simply log out from Google before.
When using Google reCAPTCHA, personal data can be transferred to a server of Google in the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.


We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
You can find more information about the use of your data by Google in the privacy policy of Google https://www.google.de/intl/de/policies/privacy/.
If you don't want your data to be transmitted, you can deactivate Java scripts in your browser or install a blocker which will prevent Java scripts from being executed (for example https://noscript.net). We do however want to point out that this can impair the use of our or other websites.

19 Evaluation Sites

19.1 Proven Expert

In the context of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization, we use, in accordance with. Article 6 (1) (f) GDPR, the evaluation portal Proven Expert of Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, Germany. This shows data about evaluations of our services by third parties on the Proven Expert portal on our website. By clicking on Proven Expert's representation on our website, you will find our reviews at Proven Expert with further information.

When you visit our website, the widget records your IP address, the time of the visit to the website and the browser used (access data) as with every call on the Internet. This data is not evaluated, is not merged with other data and later deleted. When you create a review, Proven Expert also records and stores your IP address, time of access, your email address and other information you provide at Proven Expert.

Further information on data processing at Proven Expert can be found in the data protection declaration of Expert Systems [https://www.provenexpert.com/de-de/datenschutzbedingungen/].

20 Mollie

If you chose one of the payment options of our payment provider Mollie, by Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, Niederlande, https://www.mollie.com, the data entered by you during the ordering process will be transmitted to our payment provider to carry out the contractual payment.

In the course of the payment, the purchase data as bought goods or services, amount, billing adress and if applicable more data and the payment data entered by you – credit card number, owner, validity (month and year) and CVC of the credit card bank account or more payment related informations – will be transmitted to our payment provider. This data will only be stored as long as required for processing the payment (including the processing of possible return debits and debt collection) and for combating fraud. Longer storage may be required to adhere to statutory requirements or to investigate a specific case of fraud.

Detailed information about this and about the agencies used can be found in the privacy policy of our payment provider.

The legal basis for passing on your data to our payment provider is primarily the processing of your contractual data in accordance with Art. 6 para. 1 (b) GDPR as well as our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner in accordance with Art. 6 para. 1 (f) GDPR.

21 Payment providers

21.1 PayPal

If you choose one of the payment options of our partner PayPal, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, the data entered by you when ordering will be sent to PayPal in order to facilitate the contractual payment. Detailed information about this can be found in the privacy policy of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

The legal basis for passing on your data to PayPal is primarily the processing of your contractual data according to Art. 6 para. 1 (b) GDPR as well as our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR.

21.2 PayPal Plus

If you choose one of the payment options of our partner PayPal Plus, provided by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal“), PayPal Plus will ask you during the ordering process to agree that the information necessary for the payment processing and for checking your identity and credit rating will be sent to PayPal S.A.R.L. This transfer of data is based on Art. 6 para. 1 (a) GDPR. PayPal Plus allows buyers without their own PayPal account to make payments to the seller through PayPal Plus.
If you provide your consent, your data (in particular first name and surname, street address, post code, town, date of birth, e-mail address, IP address, phone number, mobile number) as well as other data, which are required to process the order, like your preferred way of payment (for example payment by credit card, pre-invoice or bank draft) will be sent to PayPal.
To check your identity and credit rating, PayPal or a partner company instructed by PayPal will, in accordance with your consent, also transmit data to credit rating agencies and will receive information about your credit rating based on mathematical-statistical calculations, which are based on your address, among other factors. This includes profiling, which can influence the conclusion of the contract and the payment processing.
You will find detailed information about this and about the credit-check agencies used as well as which data is collected for which purpose in the privacy policy of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
The basis for passing on your data to PayPal and the other credit rating agencies and third parties is primarily your consent within the meaning of Art. 6 para 1 (a) GDPR, which you provide explicitly when you are taken to PayPal as well as our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR.
You can withdraw your consent towards PayPal at any time. But PayPal might remain authorised to process, use and transmit your personal data if this will still be necessary to carry out the contractual payment, if required by law, or if ordered by a court or a government agency.
PayPal places cookies to offer you an optimal online presence, tailored to your needs. If you do not want your data to be sent to the services of PayPal, you can prevent the placement of cookies by PayPal. For more details, we refer you to the chapter about cookies in this privacy policy. You can also contact us outside of PayPal at any time, thus preventing the storage and forwarding of your data to PayPal. For that purpose you may use the means of contacting us listed in this policy.

21.3 Stripe

If you choose one of the payment options of our partner Stripe, provided by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, the data entered by you when ordering will be sent to Stripe in order to facilitate the contractual payment. Detailed information about this can be found in the privacy policy of Stripe:

https://stripe.com/privacy

The legal basis for passing on your data to Stripe is primarily the processing of your contractual data according to Art. 6 para. 1 (b) GDPR as well as our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR.

22 Various

22.1 Zapier

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use Zapier, a service provided by Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA, in order to integrate different databases and tools. In the course of this, your customer information (but not your payment information) will be transmitted to Zapier.

When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022. 

For the handling of your data at Zapier, we refer you to the Privacy Policy of Zapier at https://zapier.com/privacy/.

23 Our Social Media Fan Page(s) - General Information

Beside our website, we also use fan page(s) on social media platforms. Above, we have already informed you about the data processing on our website and we have in particular made sure that the fact alone that you access our website is not yet forwarded to the social media platform. Following the ECJ ruling dated 5 June 2018 about social media presences, we want to inform you about the data processing during your visit to our social media fan page(s):

On the basis of our legitimate interest in a timely customer communication pursuant to Art. 6 para. 1 (f) GDPR as well as for advertising and public relations purposes, we present ourselves and our offers on social media fan page(s).

Our social media fan page(s) usually can be accessed online independently of you having a user account with the relevant platform or not. But in either case, your data will be processed by the social media platform.

Each time the social media platform is accessed, your IP address will be collected and stored. Usually, a cookie will also be placed on your page, which will save your visit and further data about your visit to the social media platform.

If you are logged in with the social media platform, your visit will also be spotted by a cookie or through other technological means and will be attributed to your user account. Thus, the social media platform is usually able to analyse your user behaviour. In this process, a user profile with your interests is generated, which the social media platform will use to provide you with a user experience tailored to your interests, in particular advertisement tailored to your interests within and outside of the social media platform – even across different devices, if applicable. Your data may also be used for market research. For the details, we refer you to the following privacy policies of the social media platform(s) used by us.

We can usually also use the data of the social media platform in order to allow you to use our fan page in accordance with your interests or to approach you with advertising.

When you interact with our fan page and if you are logged in with the relevant social media platform, according to the social media page's terms of use, we can usually also recognise your user profile and see your content.
If you do not want this, we point you to our explanations about cookies above, with general information about cookies and their deactivation. There, we have laid out in general terms how you can prevent or limit cookies being stored on your devices. Further information about the respective social media platform can be found hereinafter.

According to the aforementioned ECJ ruling dated 5 June 2018, we are always jointly responsible for our social media fan page(s) together with the relevant social media platform. This means that you may also exercise your general rights, which we have listed in detail above under the heading “Users' Rights”, against us. To that purpose, we refer you to our contact details at the beginning of this Privacy Policy. Please keep in mind, though, that we have no conclusive knowledge of the exact scope of the processing of your data by the social media platform and have even less influence on it. Therefore, we kindly ask you to contact the relevant social media platform in the first place regarding your rights.

We generally leave your data on the social media platform and do not import it onto our server. But if that should occur, our general information regarding the storage period will apply.

Further information about the processing of your data and the storage period on the social media platform can be found in the respective privacy policy of the social media platform, which we have listed hereinafter.

23.1 Facebook

We present ourselves on the social media platform Facebook.

Joint Responsibility
Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
Contact
Contact Data Protection Officer

If you open our fan page on Facebook, your data will be forwarded to the USA.

Facebook has concluded an agreement with us https://www.facebook.com/legal/controller_addendum about our shared responsibility for processing the data, in which it recognises its primary responsibility and guarantees in particular that you can exercise your right to information, as described in the general part.

You may obtain more information from Facebook's privacy policy at: https://www.facebook.com/about/privacy. Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA.
Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

Facebook also provides us with statistics as part of "Facebook Insights" for the purpose of targeted advertising. These are created without our participation and then provided to us. The data include information like interaction with our page, such as likes, page activities, video views, reach of our posts, comments, sharing of content, clicks on offers or further information on our fan page as well as statistical data about those interacting, such as gender, origin by country, city and language. The same applies to groups which we may manage.

When you are logged in, you can influence the processing of your data by Facebook considerably and in different ways.

Here you can make changes to your timeline, i.e. what can be seen about you and your page (while being logged in to facebook).

And you can change your advertisement preferences here.

23.2 Instagram

We have a presence on the social media platform Instagram. Instagram is now owned by Facebook.

Jointly Responsible
Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland.
Contact Data Protection Officer
Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have neither knowledge of, nor any influence on the possible collection and processing of your data by Facebook and Instagram. Further information can be found in Instagram's privacy policy at https://privacycenter.instagram.com/policy.
Instagram and Facebook also provide us with statistics as part of "Facebook Insights" for the purpose of targeted advertising. These are created without our participation and then provided to us. The data include information like interaction with our page, such as likes, page activities, video views, reach of our posts, comments, sharing of content, clicks on offers or further information on our fan page as well as statistical data about those interacting, such as gender, origin by country, city and language. The same applies to groups which we may manage.
When you are logged in, you can influence the processing of your data by Instagram considerably and in different ways.
Your content, i.e. what is visible of you and your profile, can be changed here: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/.

23.3 LinkedIn

We have a presence on the social media platform LinkedIn.

Jointly Responsible
LinkedIn Ireland Limited Company,
Wilton Place,
Dublin 2,
Ireland

Contact

If you open our profile on LinkedIn, your data may be forwarded to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
Further information can be found in LinkedIn's privacy policy at
https://www.LinkedIn.com/legal/privacy-policy.

LinkedIn also provides us with statistics. These are created without our participation and then provided to us. The data will include interactions, for example, as well as statistical data.

When you are logged in, you can influence the processing of your data by LinkedIn considerably and in different ways.

For your privacy settings with LinkedIn, LinkedIn refers you to several options that you can read about in their privacy policy.

The LinkedIn advertising cookie can be turned off here (opt-out):
https://www.LinkedIn.com/psettings/guest-controls/retargeting-opt-out

23.4 Pinterest

We have a presence on the social media platform Pinterest.

Jointly Responsible
Pinterest Europe Ltd.
Palmerston House 2nd Floor, Fenian Street, Dublin 2, Ireland Contact
Contact Data Protection Officer

If you open our channel with Pinterest, your data will be forwarded to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. Further information can be found in Pinterest' privacy policy at https://policy.pinterest.com/en/privacy-policy .

Pinterest also provides us with statistics. These are created without our participation and then provided to us. The data will include interactions, for example, as well as statistical data.

For your privacy settings with Pinterest, Pinterest refers you to its privacy policy with different options listed under the heading “Choices you have about your info”.

23.5 Twitter

We have a presence on the social media platform Twitter.

Jointly Responsible
Twitter International Company
Attn: Data Protection Officer
One Cumberland Place, Fenian Street
Dublin 2, D02 AX07 Ireland
Contact


When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. Further information can be found in the privacy policy of Twitter at https://twitter.com/privacy?lang=en.

Twitter also provides us with statistics. These are created without our participation and then provided to us. The data will include interactions, for example, as well as statistical data.

When you are logged in, you can influence the processing of your data by Twitter considerably and in different ways.

Here you can change your privacy settings on Twitter.

23.6 Xing

We have a presence on the social media platform Xing.

Jointly Responsible

NEW WORK SE,
Am Strandkai 1,
20457 Hamburg,
Germany
Phone: +49 40 419 131-0,
Fax: +49 40 419 131-11,
E-mail: info@xing.com.

Data Protection Officer:
Felix Lasse,
Am Strandkai 1,
20457 Hamburg,
Germany,
E-mail: Data Protection Officer@xing.com

We have neither knowledge of, nor any influence on the possible collection and processing of your data by Xing. Further information can be found in Xing's privacy policy at
https://privacy.xing.com/de/datenschutzerklaerung.

Xing also provides us with statistics. These are created without our participation and then provided to us. The data will include interactions, for example, as well as statistical data.

For your privacy settings with Xing, Xing refers you to several options that you can read about in their privacy policy.

23.7 YouTube

We have a presence on the social media platform YouTube.
Together with us, this is the entity responsible for your data:

YouTube LLC ,
901 Cherry Avenue,
San Bruno,
CA 94066
United States,
represented by
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Irland
Contact

When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

Further information can be found in YouTube's privacy policy at https://policies.google.com/privacy .

YouTube also provides us with statistics. These are created without our participation and then provided to us. The data will include interactions, for example, as well as statistical data.

When you are logged in, you can influence the processing of your data by YouTube considerably and in different ways.

You can change your general privacy settings here.
And you can change your advertisement preferences here.

24 Processing of Data for the Purpose of Order Handling

The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment handling. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b GDPR.

We work with external shipping partners to fulfil our contractual obligations to our customers. We pass on your name as well as your delivery address exclusively for the purpose of delivering goods to a shipping partner selected by us, pursuant to Art. 6 (1) point b GDPR.

Use of Special Service Providers for Order Processing and Handling

- Printful
The order is processed by Printful, a service of Printful,Inc. 11025 Westlake Drive,
Charlotte, NC28273, USA. Name, address and other personal data will be passed on to Printful in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of processing the online order. Your data will only be passed on to the extent necessary for processing the order.
Details on Printful's handling of data and the Printful, Inc. privacy policy can be found at https://www.printful.com/policies/privacy.


This is our current valid privacy policy from 29.03.2024