Wide selection of electric sauna heaters from Harvia, Sawo & Helo. ✓ Fast delivery ✓ Expert advi
Data Protection
1. Fee for immediate payment via Klarna
2. Collection of data when visiting our website
3. Contact
4. Cookies
5. Data processing for order processing
6. Data processing when opening a customer account and for contract processing
7. Comment function
8. Contact for review reminder
9. Use of social media: Social plugins
10. Use of social media: Video
11. Online marketing
12. Retargeting / Remarketing / Recommendation advertising
13. Tools and miscellaneous
14. Rights of the data subject
15. Duration of storage of personal data
1. Information about the collection of personal data and contact details of the data controller
1.1. Thank you for visiting our website. Below we would like to inform you about the handling of your personal data when using our website. Personal data is essentially all data with which you can be personally identified.
1.2. The person responsible for data processing on our website within the meaning of the General Data Protection Regulation (GDPR) is:
Aleksandr Moskaljuk
Industriestr. 1
86920 Denklingen
Germany
Tel: 4917631123372
Email: info@amilano.de
1.3. To protect the security of your data during transmission, we use encryption methods (such as SSL or TLS) in accordance with the current state of the art via HTTPS.
2. Data collection when visiting our website
When you visit our website, our system automatically collects data and information that your browser sends to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Operating system used
- Browser used
- IP address used (if applicable: in anonymized form)
The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR due to our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this, the user's IP address must be stored for the duration of the session.
We reserve the right to subsequently check the server log files should there be concrete indications of illegal use. The data will be deleted as soon as it is no longer required to achieve the purpose of its collection. In the case of data collection for the provision of the website, this is the case when the respective session is ended.
In the case of storing data in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized so that an assignment of the calling client is no longer possible. The collection of data to provide the website and the storage of data in log files are absolutely necessary for the operation of the website. Therefore, there is no possibility of objection from the user.
When you reach out to us using the contact form, the data you enter into the form will be transmitted to us and saved. The specific data collected can be seen on the respective form. If you contact us via email, only the data you provide there will be transmitted to us.
This data is used exclusively for processing your query and the conversation that ensues. The legal basis for processing the data, when the user has given consent, is Art. 6 Para. 1 lit. a of the GDPR. For data transmitted via email, the legal basis for processing is Art. 6 Para. 1 lit. f of the GDPR. If email communication aims at concluding a contract, then Art. 6 Para. 1 lit. b of the GDPR serves as the legal basis for processing. Data will be deleted once it is no longer needed for the purpose for which it was collected, provided there are no legal storage obligations to the contrary. This is the case for data collected via the contact form and data sent by email once the conversation with the user has ended. The conversation is considered to have ended when it can be inferred from the circumstances that the relevant matter has been conclusively resolved. Users can revoke their consent to the processing of personal data at any time. If a user contacts us by email, they may object to the storage of their personal data at any time. If so, the conversation cannot continue.
4. Cookies
Our website uses cookies.
Cookies are text files stored on the user's device. When a user visits a website, a cookie may be stored on the user’s operating system. Some features of our website cannot be offered without the use of cookies, as it’s necessary for the browser to be recognized even after a page change. User data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data in accordance with Art. 6 Para. 1 lit. f of the GDPR also lies in these purposes.
Additionally, our website may use cookies that enable the analysis of users' browsing behavior (so-called third-party cookies). You can find detailed information about the scope, purpose, legal basis, and opt-out options in the respective sections of this privacy policy.
Users have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict, or delete the transmission of cookies. If you disable cookies for our website, you may not be able to fully use all features of the website. The transmission of Flash cookies can be prevented by changing the settings of the Flash player.
For help with these settings, please consult the help menu of your browser or follow these links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some cookies are deleted after closing the browser (session cookies), while others remain on your device to recognize your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
5. Data Processing for Order Processing
5.1. If you wish to order from our webshop, it is necessary for the conclusion of the contract that you provide your personal data required for processing your order. We process the data you provide for order fulfillment.
We sometimes work with external service providers to process your order. For this purpose, we must pass on the necessary personal data.
If we commission transportation companies with the delivery of your goods, we pass on the data necessary for delivery to the respective transportation company. For payment processing, we pass on your data to the commissioned credit institution as required. If we use payment service providers, you will be informed accordingly.
The legal basis for the transfer of your data is Art. 6 Para. 1 lit. b GDPR.
5.2. Transfer of Your Personal Data to Shipping Service Providers
- DHL
If the delivery of goods is carried out by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only pass on the recipient's name and delivery address to DHL for the purpose of delivery and as required under Art. 6 Para. 1 lit. b GDPR. Only if you have expressly consented during the ordering process will we pass on your email address to DHL prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery, in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future to the responsible party named above or to the transport service provider DHL.
- DPD
If the delivery of goods is carried out by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will only pass on the recipient's name and delivery address to DPD for the purpose of delivery and as required under Art. 6 Para. 1 lit. b GDPR. Only if you have expressly consented during the ordering process will we pass on your email address to DPD prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery, in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future to the responsible party named above or to the transport service provider DPD.
- GLS
If the delivery of goods is carried out by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we will only pass on the recipient's name and delivery address to GLS for the purpose of delivery and as required under Art. 6 Para. 1 lit. b GDPR. Only if you have expressly consented during the ordering process will we pass on your email address to GLS prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery, in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future to the responsible party named above or to the transport service provider GLS.
- Austrian Post
If the delivery of goods is carried out by the transport service provider Austrian Post (Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Wien, Austria), we will only pass on the recipient's name and delivery address to the Austrian Post for the purpose of delivery and as required under Art. 6 Para. 1 lit. b GDPR. Only if you have expressly consented during the ordering process will we pass on your email address to the Austrian Post prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery, in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future to the responsible party named above or to the transport service provider Austrian Post.
- Post CH
If the delivery of goods is carried out by the transport service provider Post CH (Swiss Post AG, Switzerland, Wankdorfallee 4, 3030 Bern), we will only pass on the recipient's name and delivery address to Post CH for the purpose of delivery and as required under Art. 6 Para. 1 lit. b GDPR. Only if you have expressly consented during the ordering process will we pass on your email address to Post CH prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery, in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future to the responsible party named above or to the transport service provider Post CH.
5.3. Using Payment Service Providers
5.4. Apple Pay
When choosing "Apple Pay" as the payment method (a service provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), payment processing is carried out via the "Apple Pay" function of your device operated by iOS, watchOS, or macOS by charging a payment card registered with "Apple Pay".
Your transaction is protected by the security features of your device's hardware and software. To authorize a payment, it must be approved through the entry of a code and verified using the "Face ID" or "Touch ID" feature of your device.
The information you provide during the ordering process, along with details about your order, are encrypted and sent to Apple for payment processing. These data are then encrypted again by Apple and sent to the payment service provider of the payment card registered in Apple Pay to execute the payment. Encryption ensures that only the website where the order was placed can access the payment data.
After payment, Apple sends the device account number and a transaction-specific, dynamic security code to the merchant's website to confirm the payment. Personal data may be processed during these processes, for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.
When using Apple Pay on an iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple may process or store data in a format that does not allow you to be identified.
For information on Apple Pay's privacy practices, visit: https://support.apple.com/en-us/HT203027
5.5. Google Pay
When selecting "Google Pay" as the payment method (a service by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")), payment processing is mediated through the "Google Pay" application on your Android device (version 4.4 "KitKat" or newer) equipped with NFC functionality. Payment is made using a payment card registered with Google Pay or a verified payment system (e.g., PayPal). To authorize a payment over €25, you must first unlock your mobile device. The information you provide during the ordering process is shared with Google for payment processing. Google generates a unique transaction number that is sent to the merchant's website to verify the payment. This transaction number is a numeric token that contains no personal data. The actual transaction between the user and the merchant's website is carried out by charging the payment method registered with Google Pay. Personal data may be processed in these operations, for the purpose of payment processing in accordance with Article 6(1)(b) GDPR.
Google Pay's terms of use can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
For more information on Google Pay's privacy practices, visit: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
Klarna
For payments using the following methods (if offered): "Klarna Invoice Purchase", "Klarna Installment Purchase", "Klarna Direct Debit" (a Klarna instant payment method), and "Klarna Credit Card Payment" (a Klarna instant payment method), payment processing is carried out through Klarna AB (publ) [https://www.klarna.com/en], Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna"). We share your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address) along with data related to the order (e.g., invoice amount, items, delivery type) for the purpose of identity and credit checks with Klarna, provided you have explicitly consented to this sharing according to Article 6( 1)(a) GDPR. Klarna may forward your data to one of the following credit agencies: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_us/credit_rating_agencies
The credit report may include probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, address data. You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if necessary for contractual payment processing. For individuals residing in Germany, Klarna's privacy policy applies: https://cdn.klarna.com/1.0/shared/content/policy/data/en_us/data_protection.pdf For individuals residing in Austria, Klarna's privacy policy applies: https://cdn.klarna.com/1.0/shared/content/policy/data/en_at/data_protection.pdf
7.1 Subscription to Follow-up Comments
If you subscribe to follow-up comments, you will first receive a confirmation email (double opt-in procedure) in which you must confirm that you are the owner of the provided email address. The legal basis for processing data in the case of subscribing to comments is Article 6(1)(a) of the GDPR. You can cancel a comment subscription at any time with effect for the future, following the instructions in the confirmation email.
8. Contact for Review Reminder
Personal Review Reminder
After your explicit consent in accordance with Article 6(1)(a) of the GDPR, we will send you an email as a one-time reminder to submit a review of your order. You can revoke your consent at any time by sending a message to the data controller responsible for processing your data.
9. Use of Social Media: Social Plugins
9.1 Facebook Plugins with 2-Click Solution
We use social plugins ("plugins") of the social network Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), referred to as "Facebook," on our website.
To enhance the protection of your data when visiting our website, these plugins are integrated using a "2-click solution." This ensures that when you visit a page of our website containing these plugins, no connection is made to Facebook's servers, and thus no data is transmitted. Only when you activate a plugin and thereby consent to data transmission does your browser establish a direct connection to Facebook's servers. The content of the plugin is then transmitted directly to your browser and integrated into the page. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the provider or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a Facebook server. If you are logged into Facebook, your visit to our website can be directly associated with your Facebook profile. If you interact with the plugins, for example, by clicking the "Like" button, this information is also transmitted directly to a Facebook server and stored there. Data transfer to the USA cannot be excluded. The information is also published on the social network and displayed to your contacts.
The processing is based on your consent according to Article 6(1)(a) of the GDPR. You can withdraw your consent by clicking the activated plugin again to deactivate it. Data already transmitted remains unaffected.
Meta Platforms, Inc., based in the USA, is certified under the "EU-U.S. Data Privacy Framework," which ensures compliance with the data protection level applicable in the EU.
For more information, please refer to Facebook's privacy policy: http://www.facebook.com/policy.php and https://www.facebook.com/legal/EU_data_transfer_addendum
If you do not want Facebook to directly associate the data collected via our website with your profile, you must log out of Facebook before activating the plugin.
9.2 Google+ Plugins with 2-Click Solution
We use social plugins ("plugins") of the social network Google+ (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland), referred to as "Google+," on our website.
To enhance the protection of your data during your visit to our website, we have integrated plugins using a so-called "2-click solution". This ensures that when you access a page of our website containing these plugins, no connection is made to Google+'s servers, and no data is transmitted. A connection is established only after you click on a plugin and thereby give your consent to data transmission. Your browser then directly connects to Google+'s servers. The content of the plugin is transmitted directly to your browser and integrated into the page. By incorporating the plugins, the providers receive information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the provider or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a Google+ server and may also be transmitted to the USA and stored there. If you are logged into Google+, the visit to our website can be directly associated with your Google+ profile. Interacting with the plugins, such as clicking the "+1" button, also sends this information directly to a Google+ server where it is stored. The information is also published on the social network and displayed to your contacts.
This processing is based on Art. 6 para. 1 lit. a GDPR by your consent. You can revoke your consent by clicking on the activated plugin again to deactivate it. This does not affect data that has already been transmitted. Google LLC, based in the USA, is certified for the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. For Google+'s privacy policy, visit: http://www.google.com/intl/en/+/policy/+1button.html
To prevent Google from directly associating the data collected through our website with your profile, you must log out of Google+ before activating the plugin.
Instagram Plugins with 2-Click Solution
For enhanced data protection, our website incorporates plugins from the social network Instagram (operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), using a "2-click solution". This ensures that no connection is made to Instagram's servers and no data is transmitted when you visit a page with these plugins. Only after you click a plugin and consent to data transmission does your browser establish a direct connection to Instagram's servers. The content of the plugin is then transmitted directly to your browser and integrated into the page. This allows the provider to receive information that you have visited our website from your browser, even without an Instagram profile or not logged in. This information (including your IP address) is sent directly from your browser to an Instagram server. Data may also be transferred to Meta servers in the USA. If you are logged into Instagram, your website visit can be directly linked to your Instagram profile. Interactions with the plugins, such as clicking the "Instagram" button, also sends this information directly to an Instagram server where it is stored. This information is also published in the social network and shown to your contacts.
This processing is based on Art. 6 para. 1 lit. a GDPR by your consent. You can revoke your consent by clicking on the activated plugin again to deactivate it. This does not affect data that has already been transmitted. Meta Platforms, Inc., based in the USA, is certified for the EU-U.S. Data Privacy Framework. For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/
To prevent Instagram from directly associating the data collected through our website with your profile, you must log out of Instagram before activating the plugin.
Pinterest Plugins with 2-Click Solution
We incorporate "2-click solution" plugins from the social network Pinterest (Pinterest Inc., 808 Brannan Street, San Francisco, CA, 94103, USA) to enhance data protection. This ensures no connection is made to Pinterest's servers and no data is transmitted upon visiting our website's pages containing these plugins. Only after clicking a plugin and consenting to data transmission does your browser connect directly to Pinterest's servers. The content of the plugin is transmitted directly to your browser and integrated into the page, allowing the provider to receive information that you have visited our site, even without a Pinterest profile or not logged in. This information (including your IP address) is sent directly from your browser to a Pinterest server. If you are logged into Pinterest, your visit can be directly linked to your Pinterest profile. Interactions with the plugins, like clicking the "Pinterest" button, also sends this information directly to a Pinterest server where it is stored. This information is also published in the social network and shown to your contacts.
This processing is based on Art. 6 para. 1 lit. a GDPR by your consent. You can revoke your consent by clicking on the activated plugin again to deactivate it. This does not affect data that has already been transmitted. The transmission of data to the USA is based on the EU Commission's standard contractual clauses. For details, please visit: https://policy.pinterest.com/en/privacy-policy and https://about.pinterest.com/en/privacy-policy.
To prevent Pinterest from directly associating the data collected through our website with your profile, you must log out of Pinterest before activating the plugin.
X (Formerly Twitter) Plugins with 2-Click Solution
Our website uses "2-click solution" plugins from the online service X (X Corp., 1355 Market St, Suite 900, San Francisco, CA 94103, US). This ensures no connection is made to X's servers and no data is transmitted when accessing pages with these plugins. A connection is only established after you click a plugin and consent to data transmission. The content of the plugin is transmitted directly to your browser and integrated into the page, allowing the provider to receive information that you have visited our site, even without an X profile or not logged in. This information (including your IP address) is sent directly from your browser to an X server. If you are logged into X, your visit can be directly linked to your X profile. Interactions with the plugins, such as clicking the "X" button, also sends this information directly to an X server where it is stored. This information is also published in the social network and shown to your contacts.
This processing is based on Art. 6 para. 1 lit. a GDPR by your consent. You can revoke your consent by clicking on the activated plugin again to deactivate it. This does not affect data that has already been transmitted. The transmission of data to the USA is based on the EU Commission's standard contractual clauses. For more details, visit: https://twitter.com/en/privacy.
To prevent X from directly associating the data collected through our website with your profile, you must log out of X before activating the plugin.
Use of Social Media: Videos
We utilize the Youtube embedding function to display and play videos from "Youtube", owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the extended data protection mode, which, according to provider statements, starts storing user information only when the video(s) play. Starting the playback of embedded Youtube videos allows "Youtube" to set cookies to gather information about user behavior. According to "Youtube", this aims to compile video statistics, improve user-friendliness, and prevent abusive actions. If you are logged into Google, your data will be directly associated with your account.
If you do not wish the association with your profile on YouTube, you must log out before activating the button. Google stores your data as usage profiles and evaluates them. Such evaluation occurs according to Art. 6 para. 1 lit.f GDPR based on Google's legitimate interests in displaying personalized advertising, market research, and/or demand-oriented design of its website, as well as our legitimate interest in analyzing user behavior, designing our website according to user interests, and exploiting the financial potential of our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. Regardless of the playback of embedded videos, a connection to the Google network "DoubleClick" is established every time this website is accessed, which can trigger further data processing beyond our control.
Data may also be transmitted to Google LLC servers in the USA. For more information on privacy at "YouTube", see the provider's privacy policy at: https://policies.google.com/privacy?hl=en. Settings for personalized advertising can be found at: https://adssettings.google.com/authenticated.
Google LLC, based in the USA, is certified for the EU-U.S. Data Privacy Framework, ensuring compliance with the level of data protection applicable in the EU. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/.
11. Online Marketing
Utilizing Google Ads Conversion Tracking
This website utilizes the "Google Ads" online advertising program and, within Google Ads, the Conversion Tracking feature of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Through this, we advertise our offers on external websites using advertising media (known as Google AdWords). Our legitimate interest is in displaying ads that are relevant to you and achieving a fair calculation of advertising costs. The legal basis is Art. 6 Para. 1 lit.a GDPR, namely your explicit consent.
Google Ads uses cookies for conversion tracking, which are set when you click on an AdWords ad placed by Google.
These cookies generally expire after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across Ads customers' websites.
The information gathered is used to compile conversion statistics for Ads customers about the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag.
You cannot be personally identified through this information.
If you wish to prevent tracking, you can disable the Google Conversion Tracking cookie through your internet browser settings.
Google LLC, based in the USA, is certified for the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. Further information on Google's privacy policy can be found at: http://www.google.de/policies/privacy/. You can permanently disable conversion cookies by adjusting your browser settings or by downloading and installing the browser plugin available at: http://www.google.com/settings/ads/plugin?hl=en. In this case, certain functions of this website may not be fully available.
12. Retargeting / Remarketing / Recommendation Advertising
12.1. AdTiger (arejo GmbH)
We use the service of arejo GmbH, Schönhauser Allee 163, 10435 Berlin ("AdTiger") on this website.
Our legitimate interest lies in the targeted approach to the customer with personalized, interest-related advertising and thus in exploiting the financial potential of our website. The legal basis is according to Art. 6 Para. 1 lit. f GDPR.
For this purpose, cookies are set to collect pseudonymized data about your interests and thus tailor advertising individually based on the stored information. You will be shown advertising that likely matches your product and information interests.
You can generally disable the use of cookies on your computer through browser settings. In this case, you will not participate in this retargeting. However, disabling all cookies may also mean that some functions on our websites can no longer be used fully. You can also use the opt-out cookie: http://ads.adtiger.de/privacy.php
Privacy policy regarding advertising and AdTiger: http://ads.adtiger.de/privacy.php
12.2. Epoq (epoq internet services GmbH)
We use the service of epoq internet services GmbH, Am Rüppurer Schloß 1, 76199 Karlsruhe ("epoq") on this website.
Our legitimate interest is in targeted customer engagement with personalized, interest-related advertising and thus in exploiting the financial potential of our website. The legal basis is according to Art. 6 Para. 1 lit. f GDPR.
Cookies are set for this purpose to collect pseudonymized data about your interests and to show you targeted and individual product recommendations on the homepage, product detail, shopping cart, or category page. The display of product recommendations is based on a cookie-based analysis of previous and current click and purchasing behavior, but no personal data is stored.
You can generally disable the use of cookies on your computer through browser settings. In this case, you will not participate in this retargeting. However, disabling all cookies may also mean that some functions on our websites can no longer be used fully.
12.3. Google AdWords Remarketing
Our website uses the features of Google Ads (formerly "Google AdWords") Remarketing to advertise this site in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising based on a pseudonymous Cookie-ID and based on the pages you visited, which generally expires after 30 days. The processing is based on our legitimate interest in the optimal marketing of our website. The legal basis is Art. 6 Para. 1 lit. a GDPR, namely your explicit consent.
Further data processing only occurs if you have agreed with Google that your web and app browsing history is linked to your Google account and information from your Google account is used to personalize ads you see on the web. In this case, Google will use your data in conjunction with Google Analytics data to target and define audience lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to form target groups.
You can permanently disable cookie setting for ad preferences by downloading and installing the browser plugin available under: https://www.google.com/settings/ads/onweb/
Alternatively, you can check the Digital Advertising Alliance at www.aboutads.info for cookie setting information and make settings for this. Finally, you can set your browser to notify you when cookies are set and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
Google LLC, based in the USA, is certified for the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. Further information on Google's privacy policy can be found at: http://www.google.de/policies/privacy/
12.4. target performance (target performance GmbH)
This website uses retargeting technology of target performance GmbH (target performance), Joseph-von-Fraunhofer-Str. 20, 44227 Dortmund.
Our legitimate interest is in the targeted engagement of customers with personalized, interest-related advertising and thus in exploiting the financial potential of our website. The legal basis is according to Art. 6 Para. 1 lit. f GDPR.
Cookies are set for this purpose to collect pseudonymized data about your interests and thus tailor advertising individually based on the stored information. This results in advertising that is likely to match your product and information interests. Additionally, the displayed advertising is managed to regulate the frequency of ad impressions, preventing you from seeing the same ad repeatedly, among other measures to optimize the displayed advertising.
You can generally disable the use of cookies on your computer through browser settings. In this case, you will not participate in this retargeting. However, disabling all cookies may also mean that some functions on our websites can no longer be used fully. You can also use the opt-out cookie. A link to the opt-out page is provided with every advertising medium that uses the relevant data.
13. Tools and Miscellaneous
13.1. Health Data
If you provide us with health data, we process this data strictly for the intended purpose and only within the framework of the applicable legal data protection provisions. We do not share your data with third parties unless it concerns the ordering of prescription medications—in which case, we forward your health data to your health insurance company for billing purposes.
We collect your health data for the purpose of contract execution only with your explicit consent (Art. 6 Para. 1 lit. a and Art. 7 Para. 2 lit. a GDPR). You can revoke this consent at any time with effect for the future towards the responsible party for processing your data.
Health data are personal data that directly or indirectly allow conclusions to be drawn about a person's physical and/or mental health condition.
13.2. Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") according to Art. 6 Para. 1 lit. f GDPR due to our legitimate interest in preventing misuse and spam.
reCAPTCHA is a feature designed to ensure that an entry is made by a natural person. The service sends your IP address and possibly other data required by Google for the reCAPTCHA service to Google.
When using Google reCAPTCHA, it may also result in the transmission of your personal data to the servers of Google LLC. in the USA.
Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. More information about Google's privacy policy can be found at: http://www.google.com/policies/privacy/
13.3. Google Maps
We use "Google Maps" (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is used to display interactive maps and to create driving directions. By using Google Maps, information about the use of this website, including your IP address and the (starting) address entered as part of the route planner function, may be transmitted to Google. When you visit a webpage of our internet presence that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser and integrated into the webpage. Therefore, we have no control over the extent of data collected by Google in this way. According to our understanding, this includes at least the following data:
• Date and time of the visit to the respective webpage,
• Internet address or URL of the accessed webpage,
• IP address, (starting) address entered during route planning.
We have no influence over the further processing and use of data by Google and can therefore not take any responsibility for this. If you are logged into Google, your data will be directly associated with your Google account. If you do not wish this association, you must log out of Google. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such evaluation is carried out in accordance with Art. 6 Para. 1 lit. a GDPR on the basis of your explicit consent.
If you do not want Google to collect, process, or use data about you via our internet presence, you can also deactivate JavaScript in your browser settings. However, in this case, you will not be able to use the map display. Purpose and scope of data collection and further processing and use of data by Google as well as your related rights and settings options for protecting your privacy can be found in Google's privacy policy (https://policies.google.com/privacy?hl=en).
Google's terms of use can be found here:
http://www.google.com/intl/en/policies/terms/regional.html
The terms of use for Google Maps can be found here:
https://www.google.com/intl/en_US/help/terms_maps.html
Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. More information about Google's privacy policy can be found at: http://www.google.com/policies/privacy/
13.4. Google Web Fonts
We use so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), for the uniform display of fonts. When you access our website, your browser loads the required web fonts into your browser cache.
To do this, your browser must connect to Google's servers, which may result in the transfer of your IP address to Google's servers in the USA. The legal basis is Art. 6 Para. 1 lit. a GDPR, namely your explicit consent.
If your browser does not support web fonts or you reject their use, a standard font from your computer will be used.
Details about Google Web Fonts can be found here:
https://developers.google.com/fonts/faq
Google LLC, based in the USA, is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the level of data protection applicable in the EU. More information about Google's privacy policy can be found at: http://www.google.com/policies/privacy/
14. Rights of the Data Subject
14.1. The applicable data protection law grants you comprehensive rights (rights to access and intervention) against the controller with regard to the processing of your personal data, which we inform you about below:
- Right of access by the data subject according to Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have the right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage, and about further rights such as correction of data or the existence of a right to lodge a complaint with a supervisory authority, the source of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees according to Art. 46 GDPR when your data is transferred to third countries;
- Right to rectification according to Art. 16 GDPR:
You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us; the correction or completion must be made without undue delay.
- Right to restriction of processing according to Art. 18 GDPR:
You have the right to request the restriction of processing of your personal data as long as the accuracy of your data disputed by you is being verified, if you refuse deletion of your data due to unlawful data processing and instead request the restriction of the use of your data, if you need your data for the assertion, exercise, or defense of legal claims after we no longer need this data after achieving the purpose, or if you have lodged an objection due to your particular situation, as long as it is not yet determined whether our legitimate grounds prevail;
If the processing of your personal data has been restricted, these data – apart from their storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.
- Right to erasure according to Art. 17 GDPR:
You have the right to the immediate erasure of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right to erasure does not apply, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
- Right to information according to Art. 19 GDPR:
If you have exercised your right to have the controller correct, delete, or limit processing, the controller is obliged to inform all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability according to Art. 20 GDPR:
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller, insofar as this is technically feasible;
- Right to withdraw consent according to Art. 7 Para. 3 GDPR:
You have the right to withdraw your consent to the processing of your personal data at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint according to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
14.2. Right to object
You have the right to object at any time to the processing of your data with effect for the future if we process your data after weighing our legitimate interests. If you exercise this right to object, we will stop processing your data unless demonstrably compelling legitimate grounds for the processing override your interests or the processing serves the assertion, exercise, or defense of legal claims.
15. Duration of Personal Data Storage
The duration of the storage of personal data depends on the respective legal retention periods. After these periods expire, we routinely delete the data if they are no longer necessary for the fulfillment or initiation of a contract and/or there is no longer any legitimate interest in their further storage.
