Privacy policy

1. General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice on this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, restriction of processing or deletion of this data. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and third-party tools

When you visit our website, your surfing behaviour may be statistically evaluated. This is mainly done using cookies and so-called analysis programmes. The analysis of your surfing behaviour is usually anonymous; your surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

You can object to this analysis. We will inform you about the options for objection in this privacy policy.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information about the responsible body

The responsible body for data processing on this website is:

ELEO GmbH
Katrin Weinkauf
Ziegeleistr. 14
96269 Großheirath

Phone: +49 (0)9565 / 509170
E-Mail: datenschutz@eleo-zaun.de

Data protection officer: Lisa Thonhauser-Walter

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. To do so, simply send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If, after concluding a contract that involves a charge, you are required to provide us with your payment details (e.g., account number for direct debit authorization), this data is required for payment processing.

Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

With encrypted communication, your payment details that you transmit to us cannot be read by third parties.

Information, restriction of processing, deletion

Within the framework of the applicable legal provisions, you have the right to receive information free of charge at any time about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to correction, restriction of processing, or deletion of this data. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of personal data.
As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate or incomplete personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary • for exercising the right of freedom of expression and information; • for compliance with a legal obligation; • for reasons of public interest; or • for the establishment, exercise or defence of legal claims
pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as • you dispute the accuracy of the data; • the processing is unlawful, but you refuse to have it deleted; • we no longer need the data, but you need it to assert, exercise or defend legal claims; or • you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

3. Data collection on our website

Cookies

Some of the web pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be restricted.

Cookies that are necessary for the electronic communication process or for the provision of certain functions you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this privacy policy.

Adjust your cookie settings

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be collected.

Contact forms

If you send us enquiries via a contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. To do so, simply send us an informal email. The legality of the data processing operations carried out until revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

On our website, you have the option of subscribing to the free newsletter from ELEO GmbH. The newsletter provides information about current offers, new products, special promotions and exclusive benefits. We also use the newsletter to inform you about surveys and competitions from time to time and to ask for your opinion about our services.

All you need to do to subscribe is provide your email address. If you wish to be addressed personally, you can voluntarily provide your title, first name, surname and date of birth. After submitting the registration form, you will receive a confirmation email (double opt-in email) from us. Your registration for the newsletter will only become effective once you have clicked on the link in the confirmation email. If you do not click on the link in the confirmation email, your registration will not be completed.

As part of this service and on the basis of your consent, we also collect and process usage data. Data processing for the implementation and optimisation of the newsletter service is carried out on the basis of your consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR.

You can revoke your consent to the newsletter service at any time with future effect and unsubscribe from the newsletter. To do so, you can use the unsubscribe link provided at the end of each newsletter email or contact us using or providing your email address registered for the newsletter; please use the contact details provided for this purpose. Your email address will then be deleted from the newsletter distribution list.

Sending surveys and offers

Use of your email address

If you have made a purchase from us, we will send you the following by email:

Feedback surveys to improve our services and product quality
Advertisements for similar products from our range

Legal basis: Section 7(3) UWG and Article 6(1)(f) GDPR (legitimate interest in customer loyalty and product improvement).

Your right to object

You can object at any time free of charge:

Email: datenschutz@eleo-zaun.de
Post: ELEO GmbH, Ziegeleistr. 14, 96269 Großheirath

Survey service provider SurveyMonkey

Processor: SurveyMonkey Inc. (USA) with a processing agreement in accordance with Art. 28 GDPR. Third country transfer: Based on the EU-US Data Privacy Framework and EU standard contractual clauses. US authorities may access data under certain circumstances.

Application (application by email)

Purpose of data processing: Processing your application and carrying out the application process; consideration of your application in future application processes, provided that express consent has been given.

Legal basis: Art. 6(1)(a) GDPR, Art. 6(1)(b) GDPR, Art. 9(1) GDPR, Art. 49(1)(a) GDPR

Data categories: Master data, contact details, content data, contract data, connection data (if applicable), usage data (if applicable) and special categories of personal data within the meaning of Art. 9(1) GDPR (depending on the specific job advertisement; only the data relating to your application that you provide to us and that we are permitted to process in the context of applications will be stored).

Information about external websites of ELEO GmbH

Instagram

On the ‘Instagram’ platform of Meta Platforms Ireland
Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’), we have set up pages about our company at the addresses https://www.instagram.com/eleo_de, https://www.instagram.com/eleo.fr, https://www.instagram.com/eleo_nl/ and https://www.instagram.com/eleo_it. When you visit these pages, Facebook processes your personal data.

Legal basis: Art. 6(1)(a) GDPR, Art. 49(1)(a) GDPR.

Data categories: Master data, contact data, content data, usage data, connection data, location data (if applicable).

Recipients of the data: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’) (as joint controller, Art. 26 GDPR – the essence of the agreement can be accessed at https://www.facebook.com/legal/terms/page_controller_addendum
).

Data subject rights: Meta is responsible for implementing your data subject rights. Meta will inform you about your data subject rights at https://www.facebook.com/legal/terms/information_about_page_insights_data.

We have set up pages on the Pinterest platform at the following addresses: https://de.pinterest.com/eleo_de/, https://fr.pinterest.com/eleo_fr/, https://it.pinterest.com/eleo_it/, https://nl.pinterest.com/eleo_nl/. When you visit these pages, Pinterest processes your personal data. We receive statistics on the use of this page, which are derived from this data.

Legal basis: Art. 6(1)(a) GDPR, Art. 49(1)(a) GDPR.

Data categories: Master data, contact data, content data, usage data, connection data, location data if applicable.

Recipient of the data: Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street, Dublin 2, Ireland.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data relating to the use of our website (usage data) only to the extent necessary to enable the user to use the service or to bill for it.

The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer upon conclusion of contract for online shops, retailers and goods dispatch

We only transfer personal data to third parties if this is necessary for the execution of the contract, for example to companies entrusted with the delivery of goods or the credit institution responsible for payment processing. No further transfer of data takes place unless you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 (1) lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

4. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

We use Google Analytics 4 (provider: Google Ireland Limited). With your consent (Art. 6(1)(a) GDPR), usage data is processed to analyse behaviour on our website. IP addresses are anonymised and event data is stored for 14 months. Optional Google Signals allow cross-device analysis, provided you have consented to this in your Google account.
You can revoke your consent at any time via the cookie settings.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent cookies from being stored by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics.

For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have concluded a contract with Google for contract data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature allows the advertising audiences created with Google Analytics Remarketing to be linked to the cross-device features of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been tailored to you based on your previous usage and surfing behaviour on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. This allows the same personalised advertising messages to be displayed on every device you log into with your Google account.

To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by disabling personalised advertising in your Google account; to do so, follow this link: https://www.google.com/settings/ads/onweb/.

The summary of the data collected in your Google Account is based solely on your consent, which you can give or withdraw from Google (Art. 6(1)(a) GDPR). For data collection processes that are not merged into your Google Account (e.g. because you do not have a Google Account or have objected to the merger), the collection of data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymous analysis of website visitors for advertising purposes.

Further information and the data protection provisions can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising programme from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’).

We use conversion tracking as part of Google AdWords. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and been redirected to this page.

Each Google AdWords customer receives a different cookie. Cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of ‘conversion cookies’ is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

For more information about Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy: https://www.google.de/policies/privacy/.

Consent Mode v2

We use Google Consent Mode v2 to control the behaviour of our Google tags in accordance with your consent in the cookie banner. If no consent is given, our tag sends anonymised signals to Google, which are used exclusively for the modelled measurement of aggregated conversion data. Legal basis: Art. 6 para. 1 lit. a GDPR.

Google Customer Match

If you have given your consent, we use hashed customer data (e.g. email address) to create target groups for personalised ads in Google Ads (‘Customer Match’). The hash values are transmitted to Google Ireland Limited, where they are matched with Google accounts. Legal basis: Art. 6(1)(a) GDPR. After matching, the hash values are deleted. Processing in the USA by Google LLC is possible; this is secured by the EU-US Data Privacy Framework (DPF) and supplemented by standard contractual clauses.

Enhanced Conversions

We use the ‘Enhanced Conversions’ feature to assign conversions more accurately. This allows hashed order data (e.g. email) to be securely transmitted to Google. The data is used exclusively for performance measurement. Legal basis: Art. 6(1)(a) GDPR.

Bing Universal Event Tracking (UET)

Our website uses Bing Ads technology to collect and store data, which is used to create usage profiles using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website when they have accessed our website via Bing Ads advertisements. If you access our website via such an advertisement, a cookie is placed on your computer. A Bing UET tag is integrated into our website. This is a code that, in conjunction with the cookie, stores some non-personal data about the use of the website. This includes, among other things, the length of time spent on the website, which areas of the website were accessed and which advertisement brought users to the website. Information about your identity is not collected.

The information collected is transferred to Microsoft servers in the United States and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data, by deactivating the setting of cookies. This may limit the functionality of the website.

In addition, Microsoft may use cross-device tracking to track your usage behaviour across multiple electronic devices, enabling it to display personalised advertising on Microsoft websites and apps. You can disable this behaviour at https://choice.microsoft.com/de-de/opt-out.

For more information about Bing’s analytics services, please visit the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). For more information about data protection at Microsoft and Bing, please refer to Microsoft’s privacy policy (https://privacy.microsoft.com/de-de/privacystatement).

Custom Audiences

The website uses the remarketing function ‘Custom Audiences’ from Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; ‘Facebook’). This function serves the purpose of targeting visitors to the website with interest-based advertising on the Facebook social network. For this purpose, the Facebook remarketing tag has been implemented on the website. This tag establishes a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalised, interest-based Facebook ads. Processing is based on Art. 6 (1) lit. f GDPR from the legitimate interest in the above-mentioned purpose. You have the right to object to the processing of your personal data based on Art. 6 (1) f GDPR at any time for reasons arising from your particular situation. To do so, you can deactivate the ‘Custom Audiences’ remarketing function here (). For more information about Facebook’s collection and use of data, your rights in this regard and options for protecting your privacy, please refer to Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

Microsoft Clarity

When you visit this website, personal data is processed. Categories of data processed: Data for the creation of usage statistics. Purpose of processing: Anonymisation and creation of statistics and analysis of usage behaviour. Legal basis for processing: Your consent in accordance with Art. 6 (1) a GDPR. Data is transferred to: the independent controller Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The legal basis for the transfer of data to Microsoft Ireland Operations Ltd. is your consent in accordance with Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the adequacy decision C(2023) 4745 of the European Commission, as the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF). To contact the data protection officer of Microsoft Ireland Operations Ltd. by email, please use: https://www.microsoft.com/de-at/concern/privacy. The privacy policy of Microsoft Ireland Operations Ltd. can be found at: https://www.microsoft.com/de-de/privacy/privacystatement.

Facebook Pixel

We use the ‘visitor action pixel’ from Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (‘Facebook’) to evaluate and support online marketing measures. This allows us to track the actions of users after they have seen or clicked on a Facebook advertisement. This enables us to record the significance of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous to us and we cannot see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook may link this data to your Facebook account and also use it for its own advertising purposes in accordance with Facebook’s data use policy (https://de-de.facebook.com/policy.php). Cookies may be stored on your computer for these purposes. You can prevent the storage of cookies by adjusting your browser software settings accordingly.

Facebook is certified for the US-European data protection agreement ‘Privacy Shield’.

5. Plugins and tools

Google Web Fonts

This site uses web fonts provided by Google to ensure uniform font display. When you visit a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This allows Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the locations we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

For more information on the handling of user data, please refer to Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

6. Payment providers

PayPal

On our website, we offer payment via PayPal, among other methods. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as ‘PayPal’).

If you choose to pay via PayPal, the payment details you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

Klarna

On our website, we offer payment via Klarna, among other options. This payment service is provided by Klarna Bank AB, German Branch, Chausseestraße 117, 10115 Berlin (hereinafter referred to as ‘Klarna’).

In order to offer you Klarna’s payment options, we will transfer personal data, such as contact details and order details, to Klarna. This allows Klarna to assess whether you can use the payment options offered by Klarna and to adapt the payment options to your needs. General information about Klarna can be found here. Your personal data will be processed by Klarna in accordance with the applicable data protection regulations and in accordance with the information provided in Klarna’s privacy policy.

Personal data may be transferred to the USA when using the aforementioned services. This is based on the EU-US Data Privacy Framework (DPF) and supplemented by EU standard contractual clauses (Art. 46 GDPR). Further information can be found in the privacy policies of the respective providers.