We are very pleased about your interest in our company. Data protection is of particularly high importance for the management of Ibiza Haus. The use of the Ibiza Haus websites is generally possible without the provision of any personal data. However, if a data subject wishes to use specific services offered by our company through our website, the processing of personal data may be required. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally seek the consent of the data subject.

The processing of personal data, such as the name, address, email address, or phone number of a data subject, will always be carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the applicable national data protection regulations for Ibiza Haus. With this privacy policy, we would like to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects will be informed about their rights under this privacy policy.

Ibiza Haus, as the data controller, has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, internet-based data transmissions may have security gaps, meaning that absolute protection cannot be guaranteed. Therefore, it is at the discretion of the data subject to transmit personal data to us by alternative means, such as by phone.

1. Definitions

The privacy policy of Ibiza Haus is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the public as well as for our customers and business partners. To achieve this, we would like to explain the terms used in advance.

We use the following terms in this privacy policy:

• a) Personal Data

  Personal data refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). A natural person is considered identifiable if they can be identified, directly or indirectly, particularly by assigning an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that are an expression of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

• b) Data Subject

  The data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

• c) Processing

  Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

• d) Restriction of Processing

  Restriction of processing is the marking of stored personal data with the aim of limiting its processing in the future.

• e) Profiling

  Profiling means any automated processing of personal data, consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person.

• f) Pseudonymization

  Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person.

• g) Data Controller

  The data controller is the natural or legal person, authority, agency, or other body that alone or jointly with others determines the purposes and means of processing personal data. If the purposes and means of processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its nomination may be provided by Union law or the law of the Member States.

• h) Processor

  The processor is a natural or legal person, authority, agency, or other body that processes personal data on behalf of the data controller.

• i) Recipient

  The recipient is a natural or legal person, authority, agency, or other body to whom personal data is disclosed, whether or not it is a third party. Authorities that may receive personal data under a specific investigation mandate in accordance with Union law or the law of the Member States are not considered recipients.

• j) Third Party

  A third party is a natural or legal person, authority, agency, or body other than the data subject, the controller, the processor, and the persons authorized to process the data under the direct responsibility of the controller or the processor.

• k) Consent

  Consent is any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

2. Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation, other applicable data protection laws in the Member States of the European Union, and other provisions with data protection character is:

Arno Lippert

C/O Ibiza Haus

Calle Venda des Poble 6, Apt. 56

07814 Santa Gertrudis /

Ibiza - Balearic Islands - Spain

Phone: +34 871 570 643

Email: info (at) ibiza-haus (dot) com

Website: www.ibiza-haus-vermietung.de + www.ibiza-haus.co.uk + www.ibiza-haus.es 

3. Cookies

The websites of Ibiza Haus use cookies. Cookies are text files that are stored on a computer system by an internet browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters that allows websites and servers to recognize the specific internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified by the unique cookie ID.

By using cookies, Ibiza Haus can provide users of this website with more user-friendly services that would not be possible without the setting of cookies.

Through a cookie, the information and offers on our website can be optimized in the interest of the user. Cookies allow us to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, a user does not need to re-enter their login credentials each time they visit the website because this is taken over by the website and the cookie stored on the user’s computer system. Another example is the cookie of a shopping cart in an online store. The online store remembers the items a customer has added to the virtual shopping cart through a cookie.

The data subject can prevent the setting of cookies through our website at any time by using the corresponding setting of the internet browser used, thus permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time through an internet browser or other software programs. This is possible in all commonly used internet browsers. If the data subject disables the setting of cookies in the internet browser, not all functions of our website may be fully usable.

4. Collection of General Data and Information

The Ibiza Haus website collects a range of general data and information with each access to the website by a data subject or an automated system. This general data and information are stored in the server's log files. The data that can be collected includes (1) the types and versions of browsers used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system, and (8) other similar data and information that serve to mitigate risks in the event of attacks on our information technology systems.

When using this general data and information, Ibiza Haus does not make any conclusions about the data subject. This information is rather needed to (1) deliver the content of our website correctly, (2) optimize the content of our website and the advertisements for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. These anonymized data and information are therefore evaluated by Ibiza Haus for statistical purposes and further to increase data protection and data security in our company, ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data in the server log files are stored separately from all personal data provided by a data subject.

5. Registration on Our Website

The data subject has the option to register on the website of the data controller by providing personal data. The personal data transmitted to the data controller during registration is determined by the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the data controller and for its own purposes. The data controller may instruct the transfer of data to one or more processors, such as a parcel delivery service, who will also use the personal data exclusively for internal purposes attributable to the data controller.

Furthermore, when registering on the website of the data controller, the IP address assigned by the internet service provider (ISP) of the data subject, the date, and the time of registration are stored. The storage of this data is necessary to prevent the misuse of our services, and it enables the investigation of committed criminal offenses if necessary. Therefore, the storage of this data is required to secure the data controller's interests. These data will not be disclosed to third parties unless there is a legal obligation to do so or if the disclosure is required for law enforcement purposes.

The registration of the data subject, providing personal data voluntarily, serves the purpose of offering the data subject content or services that can only be provided to registered users due to their nature. Registered individuals have the option to modify the personal data provided during registration or to have it completely deleted from the data controller's database at any time.

The data controller will, at the request of the data subject, provide information at any time about which personal data concerning the data subject are stored. Furthermore, the data controller will correct or delete personal data at the request or notification of the data subject, as long as there are no legal retention obligations to the contrary. A data protection officer named in this privacy statement and the staff of the data controller are available to the data subject as contacts in this regard.

6. Subscription to Our Newsletter

The Ibiza Haus website offers users the opportunity to subscribe to our company's newsletter. The personal data transmitted to the data controller during the subscription to the newsletter is determined by the input mask used for this purpose.

Ibiza Haus informs its customers and business partners at regular intervals through a newsletter about the company's offers. A data subject can generally only receive the newsletter if (1) the data subject has a valid email address and (2) the data subject has registered for the newsletter. A confirmation email is sent to the email address entered by the data subject for the first time for the newsletter subscription, for legal reasons. This confirmation email serves to verify whether the owner of the email address has authorized the receipt of the newsletter.

When subscribing to the newsletter, we also store the IP address assigned by the internet service provider (ISP) of the data subject's computer system used at the time of registration, as well as the date and time of registration. The collection of this data is necessary to trace possible misuse of the data subject's email address later on and thus serves to legally safeguard the data controller.

The personal data collected during the newsletter registration will be used solely for the purpose of sending our newsletter. Furthermore, subscribers to the newsletter may be informed by email if this is necessary for the operation of the newsletter service or for registration-related changes, such as changes to the newsletter offering or technical adjustments. No personal data collected through the newsletter service will be disclosed to third parties. The subscription to our newsletter can be canceled by the data subject at any time. The consent to store personal data given by the data subject for newsletter sending can be revoked at any time. To revoke the consent, there is a corresponding link in every newsletter. Additionally, the data subject can unsubscribe from the newsletter directly on the website of the data controller or inform the data controller by other means.

7. Newsletter Tracking

The newsletters of Ibiza Haus contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such emails that are sent in HTML format, allowing a log file recording and log file analysis. This enables the statistical evaluation of the success or failure of online marketing campaigns. The embedded tracking pixel allows Ibiza Haus to determine whether and when an email was opened by a data subject, and which links in the email were accessed by the data subject.

The personal data collected via tracking pixels in the newsletters will be stored and analyzed by the data controller to optimize the newsletter distribution and adjust the content of future newsletters to better match the data subject's interests. These personal data will not be disclosed to third parties. The data subject is entitled to withdraw the separate consent given through the double-opt-in procedure at any time. After a withdrawal, these personal data will be deleted by the data controller. An unsubscribe request from the newsletter will automatically be interpreted by Ibiza Haus as a withdrawal.

8. Contact Option via the Website

The Ibiza Haus website contains information due to legal requirements that allow for quick electronic contact to our company as well as immediate communication, including a general email address. If a data subject contacts the data controller via email or through a contact form, the personal data transmitted by the data subject will automatically be stored. Such personal data transmitted voluntarily by a data subject to the data controller will be stored for the purpose of processing or contacting the data subject. There will be no transfer of this personal data to third parties.

9. Routine Deletion and Blocking of Personal Data

The data controller processes and stores personal data of the data subject only for the period necessary to achieve the storage purpose, or if required by the European legislator or another legislator in laws or regulations that the data controller is subject to.

Once the storage purpose is no longer applicable or a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the legal requirements.

10. Rights of the Data Subject

• a) Right to Confirmation

  Every data subject has the right granted by the European legislator to request confirmation from the data controller as to whether personal data concerning them are being processed. If a data subject wishes to exercise this right to confirmation, they can contact our data protection officer or another employee of the data controller at any time.

• b) Right to Information

  Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain free information about the personal data stored about them and a copy of this information at any time from the data controller. Furthermore, the European legislator has granted the data subject the right to obtain information about the following:

  • the purposes of processing
  • the categories of personal data being processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, especially in the case of recipients in third countries or international organizations
  • if possible, the planned duration for which the personal data will be stored, or, if not possible, the criteria for determining this duration
  • the existence of the right to rectify or erase personal data or to restrict processing by the controller or a right to object to such processing
  • the existence of the right to lodge a complaint with a supervisory authority
  • if the personal data have not been collected from the data subject: all available information regarding the source of the data
  • the existence of automated decision-making, including profiling, according to Article 22, paragraphs 1 and 4 of the GDPR, and — at least in these cases — meaningful information about the logic involved, as well as the scope and intended impact of such processing for the data subject

  Furthermore, the data subject has the right to be informed whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards related to the transfer.

  If a data subject wishes to exercise this right to information, they can contact our data protection officer or another employee of the data controller at any time.

• c) Right to Rectification

  Every data subject affected by the processing of personal data has the right granted by the European legislator to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request, considering the purposes of processing, the completion of incomplete personal data — including by means of an additional statement.

  If a data subject wishes to exercise this right to rectification, they can contact our data protection officer or another employee of the data controller at any time.

• d) Right to Erasure (Right to be Forgotten)

  Every data subject affected by the processing of personal data has the right granted by the European legislator to request from the controller that personal data concerning them be erased without undue delay, provided that one of the following reasons applies and processing is not necessary:

  • The personal data were collected for such purposes or processed in another manner for which they are no longer necessary.
  • The data subject withdraws their consent on which the processing is based according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
  • The data subject objects to the processing under Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects under Art. 21 (2) GDPR.
  • The personal data have been unlawfully processed.
  • The erasure of personal data is necessary to fulfill a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data were collected in relation to the offered services of the information society according to Art. 8 (1) GDPR.

  If one of the above-mentioned reasons applies and a data subject wishes to request the erasure of personal data stored by Ibiza Haus, they can contact our data protection officer or another employee of the data controller at any time. The data protection officer or another employee will ensure that the erasure request is promptly complied with.

  If personal data have been made public by Ibiza Haus and the company is obligated to erase the personal data as the controller under Art. 17 (1) GDPR, Ibiza Haus will take reasonable measures, including technical measures, to inform other controllers processing the published personal data, considering available technology and implementation costs, that the data subject has requested the erasure of all links to such personal data, or copies or replications of such personal data, as long as the processing is not necessary. The data protection officer or another employee will take the necessary actions on a case-by-case basis.

• e) Right to Restriction of Processing

  Every data subject affected by the processing of personal data has the right granted by the European legislator to request from the controller the restriction of processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject, for a period that allows the controller to verify the accuracy of the personal data.
  • The processing is unlawful, and the data subject opposes the erasure of personal data and requests instead the restriction of its use.
  • The controller no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise, or defense of legal claims.
  • The data subject has objected to the processing under Art. 21 (1) GDPR, and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

  If one of the above-mentioned conditions is met and a data subject wishes to request the restriction of personal data stored by Ibiza Haus, they can contact our data protection officer or another employee of the data controller at any time. The data protection officer or another employee will ensure the restriction of processing.

• f) Right to Data Portability

  Every data subject affected by the processing of personal data has the right granted by the European legislator to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, provided that the processing is based on consent according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, or on a contract according to Art. 6 (1) (b) GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

  Furthermore, the data subject has the right to request, in the exercise of their right to data portability under Art. 20 (1) GDPR, that the personal data be transmitted directly from one controller to another, where technically feasible and unless the rights and freedoms of others would be adversely affected.

  To exercise the right to data portability, the data subject can contact the data protection officer of Ibiza Haus or another employee at any time.

• g) Right to Object

  Every data subject affected by the processing of personal data has the right granted by the European legislator to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, which is based on Art. 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.

  Ibiza Haus will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

  If Ibiza Haus processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for the purpose of such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Ibiza Haus processing their data for direct marketing purposes, Ibiza Haus will no longer process the personal data for these purposes.

  Furthermore, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them, which is processed by Ibiza Haus for scientific or historical research purposes, or for statistical purposes in accordance with Art. 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

  To exercise the right to object, the data subject can directly contact the data protection officer of Ibiza Haus or another employee. The data subject also has the right to exercise their right to object via automated procedures, regardless of Directive 2002/58/EC, using technical specifications.

• h) Automated Decisions in Individual Cases, Including Profiling

  Every data subject affected by the processing of personal data has the right granted by the European legislator not to be subject to a decision based solely on automated processing — including profiling — that produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for the entry into, or performance of, a contract between the data subject and the controller, or (2) is authorized by Union or Member State law to which the controller is subject and that law contains suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, or (3) is based on the explicit consent of the data subject.

  If the decision (1) is necessary for the entry into, or performance of, a contract between the data subject and the controller, or (2) is based on the explicit consent of the data subject, Ibiza Haus will implement suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to express their point of view, and to contest the decision.

  If the data subject wishes to assert rights regarding automated decisions, they can contact our data protection officer or another employee of the data controller at any time.

• i) Right to Withdraw Consent to Data Processing

  Every data subject affected by the processing of personal data has the right granted by the European legislator to withdraw consent to the processing of personal data at any time.

  If the data subject wishes to exercise their right to withdraw consent, they can contact our data protection officer or another employee of the data controller at any time.

11. Data Protection in Application and Recruitment Procedures

The data controller collects and processes the personal data of applicants for the purpose of processing the application process. The processing may also be carried out electronically. This is particularly the case if an applicant submits corresponding application documents electronically, for example, via email or through a web form on the website to the data controller. If the data controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with legal provisions. If the data controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after the notification of the rejection decision, unless there are other legitimate interests for the data controller to retain the documents. Such legitimate interests include, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).

12. Privacy Policy Regarding the Use of Affilinet

The data controller has integrated components of the company Affilinet on this website. Affilinet is a German affiliate network that offers affiliate marketing.

Affiliate marketing is an internet-based sales method that allows commercial operators of websites, called merchants or advertisers, to display ads on third-party websites, i.e., partners, who are also known as affiliates or publishers. The merchant provides advertising materials, such as a banner ad or other suitable internet advertising tools, through the affiliate network, which are subsequently embedded by an affiliate on their website or promoted through other channels, such as keyword advertising or email marketing.

The operating company of Affilinet is affilinet GmbH, Sapporobogen 6-8, 80637 Munich, Germany.

Affilinet places a cookie on the data subject's information technology system. Cookies were already explained above. The Affilinet tracking cookie does not store any personal data. It only stores the identification number of the affiliate (the partner referring the potential customer) and the identification number of the visitor to the website and the clicked advertisement. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are handled through the affiliate network, i.e., Affilinet.

The data subject can prevent the setting of cookies through our website, as explained above, at any time by adjusting the settings in the browser they are using, thereby permanently objecting to the setting of cookies. This setting would also prevent Affilinet from placing a cookie on the data subject's information technology system. Additionally, cookies already set by Affilinet can be deleted at any time via a browser or other software programs.

The applicable privacy policy of Affilinet can be accessed at https://www.affili.net/de/footeritem/datenschutz.

13. Privacy Policy Regarding the Use of etracker

The data controller has integrated components of the company etracker on this website. Etracker is a web analytics service. Web analytics is the collection, compilation, and analysis of data about the behavior of visitors to websites. A web analytics service captures data such as the website a data subject came from (the so-called referrer), which subpages of the website were accessed, how often and for what duration a subpage was viewed. Web analytics is primarily used to optimize websites and to perform cost-benefit analysis of online advertising.

The operating company of etracker is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany.

Etracker places a cookie on the data subject's information technology system. Cookies were already explained above. Every time a page on this website is accessed, the browser on the data subject's information technology system is automatically instructed by the etracker component to transmit data to etracker for marketing and optimization purposes. Through this technical process, etracker becomes aware of data that is subsequently used to create pseudonymized usage profiles. These usage profiles are used to analyze the behavior of the data subject who accessed the data controller's website and are evaluated to improve and optimize the website. The data collected via the etracker component will not be used to identify the data subject without obtaining prior explicit consent from the data subject. These data will not be combined with personal data or with other data containing the same pseudonym.

The data subject can prevent the setting of cookies through our website, as explained above, at any time by adjusting the settings of the browser they are using, thereby permanently objecting to the setting of cookies. This would also prevent etracker from placing a cookie on the data subject's information technology system. Additionally, cookies already set by etracker can be deleted at any time via the browser or other software programs.

Furthermore, the data subject has the option to object to the collection of data generated by the etracker cookie related to the use of this website and to prevent the processing of this data by etracker. To do so, the data subject must click the cookie-setting button under the link http://www.etracker.de/privacy?et=V23Jbb, which sets an opt-out cookie. The opt-out cookie set with the objection will be stored on the data subject's used information technology system. If the cookies are deleted from the data subject's system after an objection, the data subject must click the link again and set a new opt-out cookie.

However, by setting the opt-out cookie, there is a possibility that the data subject may not be able to use all functions of the data controller's website.

The applicable privacy policy of etracker can be accessed at https://www.etracker.com/de/datenschutz.html.

14. Privacy Policy Regarding the Use of Facebook

The data controller has integrated components of the company Facebook on this website. Facebook is a social network.

A social network is an internet-based platform that allows users to communicate and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences or allow the internet community to provide personal or business-related information. Facebook allows users to create private profiles, upload photos, and connect with others through friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For data subjects living outside the USA or Canada, the data controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Every time a page on this website is accessed that has a Facebook component (Facebook plugin) integrated, the browser on the data subject's information technology system is automatically instructed by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. Through this technical process, Facebook becomes aware of which specific subpage of our website the data subject is visiting.

If the data subject is logged into Facebook at the same time, Facebook recognizes with each visit to our website by the data subject, and during the entire stay on our website, which specific subpage the data subject is visiting. This information is collected by the Facebook component and assigned to the corresponding Facebook account of the data subject. If the data subject clicks one of the integrated Facebook buttons, such as the "Like" button, or posts a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information about the visit to our website when the data subject is logged into Facebook at the time of accessing our website, regardless of whether the data subject clicks the Facebook component or not. If the data subject does not want to transmit this information to Facebook, they can prevent the transmission by logging out of their Facebook account before accessing our website.

The data policy published by Facebook, available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing, and use of personal data by Facebook. It also explains what settings Facebook offers to protect the data subject's privacy. Additionally, various applications are available that allow the suppression of data transmission to Facebook. These applications can be used by the data subject to prevent data transmission to Facebook.

15. Privacy Policy Regarding the Use of Amazon Affiliate Program

The data controller, as a participant in the Amazon Affiliate Program, has integrated Amazon components on this website. The Amazon components are designed to promote customers through advertisements on various Amazon websites, including Amazon.co.uk, Local.Amazon.co.uk, Amazon.de, BuyVIP.com, Amazon.fr, Amazon.it, and Amazon.es. BuyVIP.com, in exchange for a commission. The data controller may generate advertising revenue through the use of Amazon components.

The operating company of these Amazon components is Amazon EU S.à r.l., 5 Rue Plaetis, L-2338 Luxembourg, Luxembourg.

Amazon places a cookie on the data subject's information technology system. Cookies were already explained above. Each time one of the pages on this website is accessed that contains an Amazon component, the browser on the data subject's information technology system is automatically instructed by the Amazon component to transmit data for the purpose of online advertising and commission billing to Amazon. In this technical process, Amazon becomes aware of personal data, which Amazon uses to track the origin of orders placed on Amazon and subsequently allow commission billing. Amazon can track that the data subject clicked on an affiliate link on our website.

The data subject can prevent the setting of cookies through our website, as explained above, at any time by adjusting the settings in the browser they are using, thereby permanently objecting to the setting of cookies. This would also prevent Amazon from placing a cookie on the data subject's information technology system. Additionally, cookies already set by Amazon can be deleted at any time via a browser or other software programs.

Further information and the applicable privacy policy of Amazon can be accessed at https://www.amazon.de/gp/help/customer/display.html?nodeId=3312401.

16. Privacy Policy Regarding the Use of Getty Images

The data controller has integrated components of Getty Images on this website. Getty Images is an American image agency. An image agency is a company that offers images and other visual materials on the market. Image agencies typically market photographs, illustrations, and video materials. Through an image agency, various clients, especially website operators, print and TV media editorial teams, and advertising agencies, license the images they use.

The operating company of Getty Images components is Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland.

Getty Images allows (possibly free) embedding of stock images. Embedding refers to the integration of specific foreign content, such as text, video, or image data, provided by an external website that then appears on the own website. An embed code is used for this. An embed code is an HTML code integrated by a website operator into their website. Once the embed code is integrated, external content is automatically displayed when the page is visited.

Through the technical implementation of the embed code, the IP address of the internet connection from which the data subject accesses our website is transmitted to Getty Images. Additionally, Getty Images collects our website, the browser type used, the browser language, the time, and the length of access. Furthermore, Getty Images may collect navigation information, including which subpages of our website were visited and which links were clicked, as well as other interactions the data subject performed during their visit to our website. This data may be stored and analyzed by Getty Images.

Further information and the applicable privacy policy of Getty Images can be accessed at http://www.gettyimages.de/enterprise/privacy-policy.

17. Privacy Policy Regarding the Use of Google AdSense

The data controller has integrated Google AdSense on this website. Google AdSense is an online service that enables the placement of advertisements on third-party websites. Google AdSense is based on an algorithm that selects the advertisements shown on third-party sites according to the content of the respective third-party website. Google AdSense allows interest-based targeting of internet users through the creation of individual user profiles.

The operating company of the Google AdSense component is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of the Google AdSense component is to integrate advertisements into our website. Google AdSense sets a cookie on the data subject's information technology system. Cookies were already explained above. By setting the cookie, Alphabet Inc. is enabled to analyze the use of our website. With each visit to one of the pages on this website, which is operated by the data controller and on which a Google AdSense component is integrated, the browser on the data subject's information technology system is automatically instructed to transmit data for the purpose of online advertising and commission billing to Alphabet Inc.

The data subject can prevent the setting of cookies through our website, as explained above, at any time by adjusting the settings in the browser they are using, thereby permanently objecting to the setting of cookies. This would also prevent Alphabet Inc. from placing a cookie on the data subject's information technology system. Additionally, a cookie set by Alphabet Inc. can be deleted at any time via a browser or other software programs.

Google AdSense also uses so-called tracking pixels. A tracking pixel is a small graphic embedded in a website to enable log file recording and log file analysis, which allows statistical evaluation to be performed. With the embedded tracking pixel, Alphabet Inc. can see if and when a webpage was opened by a data subject and which links were clicked by the data subject. Tracking pixels are also used to evaluate the flow of visitors to a website.

Through Google AdSense, personal data, including the IP address, is transmitted to Alphabet Inc. in the United States of America for the purpose of tracking and accounting for the displayed advertisements. This personal data is stored and processed in the United States. Alphabet Inc. may, in certain cases, pass on this data to third parties.

Google AdSense is explained in more detail at https://www.google.de/intl/de/adsense/start/.

18. Privacy Policy Regarding the Use of Google Analytics (with Anonymization)

The data controller has integrated the Google Analytics component (with anonymization feature) on this website. Google Analytics is a web analytics service. Web analytics is the collection, compilation, and evaluation of data regarding the behavior of visitors to websites.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses Google Analytics for web analysis with the "_gat._anonymizeIp" extension. With this extension, Google shortens and anonymizes the IP address of the data subject’s internet connection when accessing our websites from a member state of the European Union or another contracting state of the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the visitor flows on our website. Google uses the data and information collected to evaluate the use of our website, generate online reports on the activities on our website, and provide additional services related to the use of our website.

Google Analytics sets a cookie on the data subject’s information technology system. What cookies are has already been explained above. The cookie enables Google to analyze the use of our website. By visiting any page of this website that is operated by the data controller and has the Google Analytics component integrated, the browser on the data subject’s information technology system is automatically triggered by the respective Google Analytics component to transmit data for the purpose of online analysis to Google.

With the setting of the cookie, personal data such as the access time, the location from which the access was made, and the frequency of visits to our website by the data subject are stored. Every time our website is visited, these personal data, including the IP address of the data subject’s internet connection, are transferred to Google in the United States of America. This personal data is stored by Google in the United States.

The data subject can prevent the setting of cookies as described above at any time by adjusting the settings of their browser, thereby permanently objecting to the setting of cookies. This would also prevent Google from setting a cookie on the data subject’s information technology system. Furthermore, cookies already set by Google Analytics can be deleted at any time via the browser or other software programs.

Additionally, the data subject has the option to object to the collection of data related to their use of the website generated by Google Analytics and to prevent the processing of this data by Google. To do so, the data subject must download and install a browser add-on available at https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information regarding visits to websites should be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google.

Further information and the applicable privacy policy of Google can be accessed at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is further explained at https://www.google.com/intl/de_de/analytics/.

19. Privacy Policy Regarding the Use of Google+

The data controller has integrated the Google+ button as a component on this website. Google+ is a social network. A social network is an internet-based social gathering place, an online community that generally allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the internet community to provide personal or business-related information. Google+ allows users to create private profiles, upload photos, and connect with others through friend requests.

The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

By accessing any of the pages on this website operated by the data controller that has the Google+ button integrated, the browser on the data subject’s information technology system is automatically instructed by the respective Google+ button to download a representation of the corresponding Google+ button from Google. Through this technical process, Google becomes aware of which specific subpage of our website is being visited by the data subject. More information on Google+ can be found at https://developers.google.com/+/.

If the data subject is logged into Google+ at the same time, Google will recognize with each visit to our website by the data subject, and during their entire stay on our website, which specific subpage of our website the data subject is visiting. This information is collected by the Google+ button and assigned to the respective Google+ account of the data subject.

If the data subject clicks one of the integrated Google+ buttons on our website, thereby giving a Google+1 recommendation, Google will assign this information to the personal Google+ user account of the data subject and store this personal data. Google will store the Google+1 recommendation of the data subject and make it publicly accessible in accordance with the terms accepted by the data subject. A Google+1 recommendation given by the data subject on this website will subsequently be stored and processed along with other personal data, such as the name of the Google+1 account used by the data subject and the photo stored in this account in other Google services, such as Google search engine results, the data subject’s Google account, or other locations such as on websites or in relation to advertisements. Furthermore, Google is able to link the visit to this website with other personal data stored by Google. Google records this personal information for the purpose of improving or optimizing Google’s services.

Google receives information that the data subject has visited our website whenever the data subject is logged into Google+ at the time of accessing our website, regardless of whether the data subject clicks the Google+ button or not.

If the data subject does not wish to transmit personal data to Google, they can prevent such transmission by logging out of their Google+ account before accessing our website.

Further information and the applicable privacy policies of Google can be accessed at https://www.google.de/intl/de/policies/privacy/. Additional information from Google regarding the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.

20. Privacy Policy Regarding the Use of Google AdWords

The data controller has integrated Google AdWords on this website. Google AdWords is an online advertising service that allows advertisers to display ads in Google’s search engine results and on the Google ad network. Google AdWords allows an advertiser to predefine specific keywords, through which an ad will only be shown in Google’s search results when a user retrieves a search result relevant to those keywords. On the Google ad network, ads are distributed on topic-relevant websites via an automated algorithm, taking the predefined keywords into account.

The operating company of the Google AdWords component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote our website by displaying interest-relevant ads on third-party websites and in Google’s search engine results, and to display third-party ads on our website.

When a data subject visits our website through a Google ad, a so-called conversion cookie is placed on the data subject’s information technology system by Google. What cookies are was explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. If the cookie is not yet expired, it is used to track whether certain subpages, for example, the shopping cart of an online shop system, were accessed on our website. With the conversion cookie, both we and Google can track whether a data subject, who arrived at our website through an AdWords ad, generated revenue by completing or abandoning a purchase.

The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. We use these visit statistics to determine the total number of users who were referred to us via AdWords ads, in order to assess the success or failure of a specific AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers using Google AdWords receive information from Google that could be used to identify the data subject.

With the conversion cookie, personal information, such as the websites visited by the data subject, is stored. Therefore, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America during each visit to our website. This personal data is stored by Google in the United States of America. Google may transfer this data to third parties through the technical process.

The data subject can prevent the setting of cookies by our website, as explained above, at any time by adjusting the settings of the browser they are using, thus permanently objecting to the setting of cookies. This would also prevent Google from placing a conversion cookie on the data subject’s information technology system. Additionally, a conversion cookie already set by Google AdWords can be deleted at any time via the browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must visit the link www.google.de/settings/ads from each browser they use and adjust the desired settings.

Further information and the applicable privacy policies of Google can be accessed at https://www.google.de/intl/de/policies/privacy/.

21. Privacy Policy Regarding the Use of Instagram

The data controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and additionally enables the redistribution of such data in other social networks.

The operating company of Instagram’s services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Every time a page on this website, operated by the data controller and containing an Instagram component (Insta button), is accessed, the browser on the data subject’s information technology system is automatically instructed to download the respective Instagram component from Instagram. Through this technical process, Instagram becomes aware of which specific subpage of our website the data subject is visiting.

If the data subject is logged into Instagram at the same time, Instagram recognizes with each visit to our website by the data subject and during their entire stay on our website which specific subpage of our website the data subject is visiting. This information is collected by the Instagram component and assigned to the respective Instagram account of the data subject. If the data subject clicks one of the Instagram buttons integrated into our website, the transmitted data and information are assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

Instagram receives information that the data subject has visited our website whenever the data subject is logged into Instagram at the time of accessing our website, regardless of whether the data subject clicks the Instagram component or not. If the data subject does not wish to transmit this information to Instagram, they can prevent the transmission by logging out of their Instagram account before visiting our website.

Further information and the applicable privacy policies of Instagram can be accessed at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

22. Privacy Policy Regarding the Use of LinkedIn

The data controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an internet-based social network that allows users to connect with existing business contacts and make new business connections. More than 400 million registered individuals use LinkedIn in over 200 countries. LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

Each time a page on our website equipped with a LinkedIn component (LinkedIn plugin) is accessed, this component causes the browser used by the data subject to download the corresponding representation of the LinkedIn component. More information about the LinkedIn plugins can be found at https://developer.linkedin.com/plugins.

If the data subject is logged into LinkedIn at the same time, LinkedIn recognizes with each visit to our website by the data subject, and during their entire stay on our website, which specific subpage of our website the data subject is visiting. This information is collected by the LinkedIn component and assigned to the respective LinkedIn account of the data subject. If the data subject clicks a LinkedIn button integrated into our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.

LinkedIn receives information that the data subject has visited our website whenever the data subject is logged into LinkedIn at the time of accessing our website, regardless of whether the data subject clicks the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, they can prevent it by logging out of their LinkedIn account before visiting our website.

LinkedIn offers the possibility to unsubscribe from email messages, SMS messages, and targeted ads, as well as to manage ad settings, at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, which may set cookies. These cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. The applicable privacy policies of LinkedIn can be accessed at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy can be found at https://www.linkedin.com/legal/cookie-policy.

23. Privacy Policy Regarding the Use of Twitter (X)

The data controller has integrated components from Twitter on this website. Twitter is a multilingual publicly accessible microblogging service where users can post and share short messages, known as tweets, which are limited to 140 characters. These messages are accessible to anyone, even to individuals who are not registered on Twitter. However, tweets are also displayed to the user's followers. Followers are other Twitter users who follow a user’s tweets. Additionally, Twitter allows a broad audience to be addressed through hashtags, links, or retweets.

The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Whenever one of the individual pages of this website operated by the data controller, containing a Twitter component (Twitter button), is accessed, the browser on the data subject's information technology system is automatically prompted by the respective Twitter component to download the corresponding Twitter component from Twitter. More information about the Twitter buttons can be found at https://about.twitter.com/de/resources/buttons. Through this technical process, Twitter becomes aware of which specific subpage of our website the data subject visits. The purpose of integrating the Twitter component is to allow our users to share the content of this website, promote this website in the digital world, and increase our visitor numbers.

If the data subject is logged into Twitter at the same time, Twitter recognizes with each visit to our website by the data subject, and throughout the duration of their visit to our website, which specific subpage the data subject is visiting. This information is collected by the Twitter component and assigned to the data subject's Twitter account. If the data subject clicks one of the Twitter buttons integrated into our website, the transmitted data and information are assigned to the personal Twitter user account of the data subject and stored and processed by Twitter.

Twitter receives information that the data subject has visited our website whenever the data subject is logged into Twitter at the time of accessing our website, regardless of whether the data subject clicks the Twitter component or not. If the data subject does not want this information to be transmitted to Twitter, they can prevent it by logging out of their Twitter account before accessing our website.

The applicable privacy policies of Twitter can be accessed at https://twitter.com/privacy?lang=en.

24. Privacy Policy Regarding the Use of Xing

The data controller has integrated components of Xing on this website. Xing is an internet-based social network that allows users to connect with existing business contacts and make new business connections. Individual users can create personal profiles on Xing. Companies can, for example, create company profiles or post job offers on Xing.

The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Whenever one of the individual pages of this website operated by the data controller, containing a Xing component (Xing plugin), is accessed, the browser on the data subject's information technology system is automatically prompted by the respective Xing component to download the corresponding Xing component from Xing. More information about the Xing plugins can be found at https://dev.xing.com/plugins. Through this technical process, Xing becomes aware of which specific subpage of our website the data subject visits.

If the data subject is logged into Xing at the same time, Xing recognizes with each visit to our website by the data subject, and throughout the duration of their visit to our website, which specific subpage of our website the data subject is visiting. This information is collected by the Xing component and assigned to the data subject's Xing account. If the data subject clicks one of the Xing buttons integrated into our website, such as the "Share" button, Xing assigns this information to the data subject's personal Xing user account and stores and processes this personal data.

Xing receives information that the data subject has visited our website whenever the data subject is logged into Xing at the time of accessing our website, regardless of whether the data subject clicks the Xing component or not. If the data subject does not want this information to be transmitted to Xing, they can prevent it by logging out of their Xing account before visiting our website.

The privacy policies published by Xing, available at https://www.xing.com/privacy, provide insight into the collection, processing, and use of personal data by Xing. Additionally, Xing has published privacy information for the XING Share button at https://www.xing.com/app/share?op=data_protection.

25. Privacy Policy Regarding the Use of DoubleClick

The data controller has integrated components of DoubleClick by Google on this website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers.

The operating company of DoubleClick by Google is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

DoubleClick by Google transmits data to the DoubleClick server with each impression as well as with clicks or other activities. Each of these data transmissions triggers a cookie request to the browser of the data subject. If the browser accepts this request, DoubleClick places a cookie on the data subject's information technology system. What cookies are has already been explained above. The purpose of the cookie is to optimize and display advertising. The cookie is used, among other things, to serve user-relevant ads and display them, as well as to create reports for advertising campaigns or improve them. Furthermore, the cookie is used to avoid multiple displays of the same ad.

DoubleClick uses a cookie ID that is required for the execution of the technical process. The cookie ID is needed, for example, to display an ad in a browser. DoubleClick can also use the cookie ID to track which ads have already been displayed in a browser, to avoid showing the same ads multiple times. Additionally, DoubleClick can track conversions. Conversions are, for example, recorded when a user who has previously seen a DoubleClick ad then completes a purchase on the advertiser's website using the same internet browser.

A DoubleClick cookie does not contain any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns the user has already been in contact with.

Whenever one of the individual pages of this website operated by the data controller, containing a DoubleClick component, is accessed, the browser on the data subject's information technology system is automatically prompted by the respective DoubleClick component to transmit data for the purposes of online advertising and commission billing to Google. Through this technical process, Google becomes aware of data that Google also uses to generate commission statements. Google can track that the data subject has clicked certain links on our website.

The data subject can prevent the setting of cookies by our website, as explained above, at any time by adjusting the settings in the browser they are using, thus permanently objecting to the setting of cookies. This would also prevent Google from placing a cookie on the data subject's information technology system. Additionally, cookies already set by Google can be deleted at any time via a browser or other software programs.

Further information and the applicable privacy policies of DoubleClick by Google can be accessed at https://www.google.com/intl/de/policies/.

26. Privacy Policy Regarding the Use of Zanox

The data controller has integrated components from Zanox on this website. Zanox is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based distribution model that enables commercial operators of websites, the so-called merchants or advertisers, to place advertising, usually paid through click or sale commissions, on third-party websites, i.e., distribution partners, also called affiliates or publishers. The merchant provides advertising materials, such as banners or other suitable forms of internet advertising, via the affiliate network, which are subsequently placed on the affiliate's own websites or promoted through other channels such as keyword advertising or email marketing.

The operating company of Zanox is ZANOX AG, Stralauer Allee 2, 10245 Berlin, Germany.

Zanox sets a cookie on the information technology system of the data subject. What cookies are has been explained above. The tracking cookie from Zanox does not store any personal data. It only stores the affiliate identification number, i.e., the partner who refers the potential customer, and the reference number of the website visitor and the clicked advertisement. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are handled through the affiliate network, i.e., Zanox.

The data subject can prevent the setting of cookies by our website at any time, as outlined above, by adjusting the settings of the internet browser used and thus permanently objecting to the setting of cookies. Such a setting would also prevent Zanox from placing a cookie on the data subject's information technology system. In addition, any cookies already set by Zanox can be deleted at any time via the internet browser or other software programs.

The applicable privacy policies of Zanox can be accessed at http://www.zanox.com/de/ueber-zanox/datenschutz/.

27. Privacy Policy Regarding the Use of TradeTracker

The data controller has integrated components from TradeTracker on this website. TradeTracker is an affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based distribution model that enables commercial operators of websites, the so-called merchants or advertisers, to place advertising, usually paid through click or sale commissions, on third-party websites, i.e., distribution partners, also called affiliates or publishers. The merchant provides advertising materials, such as banners or other suitable forms of internet advertising, via the affiliate network, which are subsequently placed on the affiliate's own websites or promoted through other channels such as keyword advertising or email marketing.

The operating company of TradeTracker is TradeTracker Deutschland GmbH, Eiffestraße 426, 20537 Hamburg, Germany.

TradeTracker sets a cookie on the information technology system of the data subject. What cookies are has been explained above. The tracking cookie from TradeTracker does not store any personal data. It only stores the affiliate identification number, i.e., the partner who refers the potential customer, and the reference number of the website visitor and the clicked advertisement. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are handled through the affiliate network, i.e., TradeTracker.

The data subject can prevent the setting of cookies by our website at any time, as outlined above, by adjusting the settings of the internet browser used and thus permanently objecting to the setting of cookies. Such a setting would also prevent TradeTracker from placing a cookie on the data subject's information technology system. In addition, any cookies already set by TradeTracker can be deleted at any time via the internet browser or other software programs.

The applicable privacy policies of TradeTracker can be accessed at https://tradetracker.com/de/privacy-policy/.

28. Privacy Policy Regarding the Use of Tradedoubler

The data controller has integrated components from Tradedoubler on this website. Tradedoubler is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based distribution model that enables commercial operators of websites, the so-called merchants or advertisers, to place advertising, usually paid through click or sale commissions, on third-party websites, i.e., distribution partners, also called affiliates or publishers. The merchant provides advertising materials, such as banners or other suitable forms of internet advertising, via the affiliate network, which are subsequently placed on the affiliate's own websites or promoted through other channels such as keyword advertising or email marketing.

The operating company of Tradedoubler is Tradedoubler GmbH, Herzog-Wilhelm-Straße 26, 80331 Munich, Germany.

Tradedoubler sets a cookie on the information technology system of the data subject. What cookies are has been explained above. The tracking cookie from Tradedoubler does not store any personal data. It only stores the affiliate identification number, i.e., the partner who refers the potential customer, and the reference number of the website visitor and the clicked advertisement. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are handled through the affiliate network, i.e., Tradedoubler.

The data subject can prevent the setting of cookies by our website at any time, as outlined above, by adjusting the settings of the internet browser used and thus permanently objecting to the setting of cookies. Such a setting would also prevent Tradedoubler from placing a cookie on the data subject's information technology system. In addition, any cookies already set by Tradedoubler can be deleted at any time via the internet browser or other software programs.

The applicable privacy policies of Tradedoubler can be accessed at http://www.tradedoubler.com/de/datenschutzrichtlinie/.

29. Legal Basis for Processing

Article 6(1)(a) of the GDPR serves as the legal basis for processing operations where we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, such as in processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary to carry out pre-contractual measures, such as in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case if, for example, a visitor were to be injured in our business and their name, age, health insurance data, or other vital information needed to be transmitted to a doctor, a hospital, or other third parties. In this case, the processing would be based on Article 6(1)(d) of the GDPR. Finally, processing operations could be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations that are not covered by any of the above legal bases, if the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not outweigh those interests. Such processing operations are particularly permissible because they were specifically mentioned by the European legislature. It is assumed that a legitimate interest exists if the data subject is a customer of the controller (Recital 47, sentence 2 of the GDPR).

30. Legitimate Interests in Processing Pursued by the Controller or a Third Party

If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business for the benefit of the well-being of all our employees and shareholders.

31. Duration for Which Personal Data Will Be Stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiration of the period, the relevant data will be routinely deleted, provided that it is no longer necessary for the fulfillment of the contract or for initiating the contract.

32. Legal or Contractual Obligations to Provide Personal Data; Necessity for Contract Conclusion; Obligation of the Data Subject to Provide Personal Data; Possible Consequences of Non-Providing

We inform you that the provision of personal data is partly required by law (e.g., tax regulations) or may result from contractual regulations (e.g., details of the contractual partner). It may be necessary for the conclusion of a contract that the data subject provides us with personal data that will then be processed by us. For example, the data subject is required to provide us with personal data when our company enters into a contract with them. If the personal data is not provided, the contract with the data subject cannot be concluded. Before the data subject provides personal data, they must contact our data protection officer. Our data protection officer will inform the data subject, on a case-by-case basis, whether the provision of personal data is required by law or contract or necessary for the conclusion of the contract, whether there is an obligation to provide personal data, and the consequences of not providing the personal data.

33. Existence of Automated Decision Making

As a responsible company, we refrain from automated decision-making or profiling.

This privacy statement was created using the privacy statement generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as an External Data Protection Officer Hannover in cooperation with Cologne IT and Data Protection Lawyer Christian Solmecke.