Privacy Policy for Website, Newsletter and Cookies

 

TABLE OF CONTENTS

Processing of personal data on the website

1.     Controller’s contact details

2.     Your data protection rights

3.     How do we get information?

4.     Personal data we collect when you access our website

5.     Personal data we collect when you contact us

6.     Personal data we collect when you sign up for our newsletter

7.     Cookies

a.     Use of technically necessary cookies

b.    Use of technically unnecessary cookies

8.     Analytic /technical tools

a)     Akamai

b)     Convert (A/B‑Testing & Personalisation Tool)

c)     Google Analytic Services and Technical Tools

d)     Microsoft Clarity

9.       Advertising/ Marketing tools

e)     Amazon Advertising

f)      Google Advertising Tools

g)     DoubleClick Floodlight

h)     Google Campaign Manager 360

i)      Google Enhanced Conversions

j)      YouTube

k)     Facebook Pixel

l)      Facebook Social Plugins

m)    Quantcast

n)     TikTok Analytics

10.     Social media channels

c.     Facebook and Instagram

d.    TikTok

e.     YouTube

11.   TLS encryption

12.   Information about your right to object pursuant to Art. 21 UK GDPR

 

Processing of personal data on the website

  1. Controller’s contact details

Freudenberg Home and Cleaning Solutions LTD is the controller for the personal information we process, unless otherwise stated.

You can contact us by post, phone and email:

2 Chichester Street, Rochdale, OL16 2AX, United Kingdom

Telephone: +44(0)345 7697 356

E-Mail: customercare.uk@fhp-ww.com

  1. Your data protection rights

Under UK data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.

Your right of access: You have the right to ask us about any personal data we hold about you.

Your right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing: You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing: You have the right to object to processing if we are able to process your information because the process is in our legitimate interests. If you have given us your consent, you can revoke it at any time with effect for the future.

Your right to data portability: This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

Your right to complain: We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at customercare.uk@fhp-ww.com. If you remain dissatisfied, you can make a complaint about the way we process your personal information to the Information Commissioner's Office as the UK supervisory authority.

  1. How do we get information?

Most of the personal information we process is provided to us directly by you. This is usually for one of the following reasons:

  • You have made an enquiry to us.
  • You subscribe to our e-newsletter.
  • You visit our website and consent to our use of cookies.
  1. Personal data we collect when you access our website

Type and purpose of processing: When you access our website without registering or providing any other information, we automatically collect general information. This information (server log files) may include details such as the type of web browser used, the operating system, the domain name of the internet service provider, the IP address, the referrer URL and the date and time of access.

This data is processed for the following purposes:

  • to ensure a smooth connection to the website,
  • to ensure the smooth use of our website,
  • to ensure and evaluate the security and stability of the system, particularly to detect misuse,
  • to ensure the technically error-free presentation and optimisation of our website.

We will not use your data to draw conclusions about you as an individual. However, if there are concrete indications of unlawful use, we reserve the right to retrospectively check the server log files.

Legal basis and legitimate interest: Processing is carried out based on our legitimate interest (Art. 6(1)(f) UK GDPR) in improving the stability and functionality of our website, ensuring system security, and detecting misuse.

Duration of storage: The data is stored in server log files in a form that enables the identification of data subjects for up to 30 days, unless a security-related event occurs (e.g. a DDoS attack). In the event of such an incident, the server log files are stored until the security-related issue has been resolved and fully investigated.

Third country transfer: Our servers are located in the European Union (EU). The UK has granted the EU an adequacy decision according to article 45 UK GDPR. This means that the UK recognize data protection standards in the EU to be on a par with those in the UK.

Provision required or necessary: Providing personal data is neither required by law nor by contract. However, without the above-mentioned data, we cannot guarantee the service and functionality of our website. Additionally, certain services and/or content may be unavailable or only available to a limited extent.

Right to object: Please read the information on your right to object under Art. 21 of the UK GDPR.

  1. Personal data we collect when you contact us

When you contact marigoldsupport@laundrycompany.co.uk, your enquiry is handled exclusively by Laundry Company. For details on how your data is processed, please refer to Laundry Company’s privacy policy.

Type and purpose of processing:

On our website there is a contact form which can be used for electronic contact. If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored.

At the time the message is sent, the following data is also stored:

  • Date and time of the message
  • URL from which the message was sent
  • IP address from which the message was sent
  • Web browser and operating system used

Legal basis and legitimate interest: Processing is carried out based on our legitimate interest (Art. 6(1)(f) UK GDPR) to enable you to contact us in an uncomplicated manner. If you contact us for a quote, the data you enter into the contact form will be used for pre-contractual purposes (Art. 6(1)(b) UK GDPR).

Duration of storage: The data will be deleted no later than 6 months after the request has been processed. If we enter into a contractual relationship, we will be subject to statutory retention periods and will delete your data six to ten years[NB1] .

Third country transfer: Our servers are located in the European Union (EU). The UK has granted the EU an adequacy decision according to article 45 UK GDPR. This means that the UK recognize data protection standards in the EU to be on a par with those in the UK.

Mandatory or required provision: Providing your personal data is voluntary. However, we can only process your request if you provide us with the necessary information and details of why you are making the request.

Right to object: Please read the information on your right to object under Art. 21 of the UK GDPR.

  1. Personal data we collect when you sign up for our newsletter

Type and purpose of processing: To send our newsletter, we collect personal data that is transmitted to us via an input mask. We require a valid e-mail address in order to be able to register you successfully.

In order to check whether a registration is actually made by the owner of a specific e-mail address, we use the "double opt-in" procedure (DOI) for online registrations. This means that after registering for the newsletter, you will receive an e-mail in which you must confirm your newsletter registration again.

The following data is also stored at the time of DOI confirmation:

  • Timestamp
  • First Name
  • Last Name
  • E-mail Address
  • Postal Address (in case provided during account registration or order placement)
  • Line Items (information on products purchased or added to the cart)
  • Type of consent given

In addition, we evaluate your reading and usage behaviour in order to constantly improve our newsletter and adapt it to your interests and needs. To do this, we analyse whether and what you read or click on in the news by e-mail in order to make it even more attractive, form customer groups and design special offers for these groups.

Legal basis: We send our newsletter and evaluate it on the basis of your consent, Art. 6 (1) a) UK GDPR.

Recipients: We use service providers who act as our data processors for dispatch and any evaluations. All service providers are contractually obliged to treat your data confidentially.

Duration of storage: In this context, the data will only be processed for as long as the corresponding consent has been given.

Third country transfer: Our servers are located in the European Union (EU). The UK has granted the EU an adequacy decision according to article 45 UK GDPR. This means that the UK recognize data protection standards in the EU to be on a par with those in the UK.

Mandatory or required provision: The provision of your personal data is voluntary and is based solely on your consent. There are no disadvantages for you. Unfortunately, we cannot send you our newsletter without your valid consent.

Right to revoke your consent: You can revoke your consent to the storage of your personal data and its use for the newsletter dispatch by us at any time. A corresponding link can be found in every newsletter. You can also withdraw your consent using the other contact options offered on the website.

Profiling: If you have given us your consent, we will evaluate your interaction with the newsletters sent and evaluate subsequent visits to our website in order to further improve the newsletter and the website and optimize them according to the actual interests of the visitors.

  1. Cookies

General information: A cookie is a small data record that is created when a website is visited and temporarily stored on the website user's system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information received in this way. In particular, cookies can make it easier to navigate a website.

Deletion of cookies: You can reject every cookie category, with the exception of technically necessary cookies. To do this, click on the link “Cookie Settings” in the footer and change the desired settings in the cookie consent banner that opens. You may need to refresh your page for your settings to take effect.

Please note that the change in the consent banner settings must be made individually for each end device.

You can also delete individual cookies or the entire cookie inventory via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

You can also prevent so-called scripts from loading by default. No Script only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser manufacturer (e.g. for Mozilla Firefox: https://addons.mozilla.org/en-GB/firefox/addon/noscript/).

  1. Use of technically necessary cookies

Type and purpose of processing: We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

  • Consent management
  • Tag management
  • Request routing
  • Session identifier
  • Cart content identifier

These cookies are essential for providing you with the services you actively request on our website and do not store personal information for marketing purposes.

Consent management:

We obtain and document your consent to the use of optional cookies in line with data protection regulations. For this purpose, the following personal data may be processed when you visit our website: your consent(s) or withdrawal of consent(s), IP address, browser information, device information, and the time of your visit.

We also store a cookie in your browser to remember your choices. This data is retained until you request deletion, delete the cookie yourself, or the purpose for storage no longer applies. Statutory retention obligations remain unaffected.

Tag management:

Our tag management system allows us to integrate and manage technical scripts, analytics tools, and other technologies on our website efficiently. The system itself does not create user profiles, store cookies, or carry out its own analyses; it simply controls the deployment of other tools.

The personal data processed during your visit may include your IP address and information about your device.

Request routing:

This functional cookie ensures your requests are directed to the correct server. It improves website speed and stability and does not store personal information.

Session identifier:

A session cookie allows the website to recognise your browser during your visit so that pages function consistently. It does not store personal data and expires when you close your browser.

Cart content identifier:

This cookie temporarily stores the items you add to your cart so they remain available while you browse the website.

Legal basis and legitimate interest: Processing is carried out on the basis of Art. 6 para. 1 lit. f) UK GDPR on the basis of our legitimate interest in the user-friendly design of our website and in the documentation of consent.

Recipients: For the technical provision of the abovedescribed functions, we rely on specialised external service providers. These providers support us, for example, with hosting, platform infrastructure, and the operation of the systems necessary to deliver these features.

We use Google Tag Manager as a tag management system. The Google Tag Manager is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

All service providers are contractually obliged to treat your data confidentially.

Duration of storage: For information about how long cookies are stored for, please refer to our Cookie Consent Tool. You can access this by clicking on the link “Cookie Settings” in the footer.

Third country transfer: Our service providers and our servers are located in the European Union (EU). The UK has granted the EU an adequacy decision according to article 45 UK GDPR. This means that the UK recognize data protection standards in the EU to be on a par with those in the UK.

In the case of Google Tag Manager, the information is transferred to Google servers in the EU and processed there. As the parent company, Google LLC, is based in the USA, a transfer to the USA cannot be ruled out. Google LLC is certified under the UK Extension to the EU-U.S. Data (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Since Google is certified under the DPF, it is committed to complying with these data protection standards.

Provision required or necessary: The provision of personal data is neither required by law nor by contract. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and benefits may not be available or may only be available to a limited extent.

Right to object: Please read the information on your right to object pursuant to Art. 21 UK GDPR below.

  1. Use of technically unnecessary cookies

Type and purpose of processing: We also use cookies on the website that enable an analysis of the user's surfing behaviour. The purpose of tracking, advertising and targeting cookies is to display advertising offers to users that match their surfing behaviour. The cookies are set in the user's browser to enable cross-session tracking. Since the cookies - unless they are deleted - are permanently stored in the browser (client), this is also referred to as client-side cookie tracking.

Legal basis and legitimate interest: The legal basis for this processing is in any case your consent, Art. 6 para. 1 lit. a) UK GDPR and Art. 49 lit. a) UK GDPR in case of data transfer outside the UK. In this case, you will be informed separately of the associated risks.

Recipients: Further information on third country transfers can be found in the "Tracking and analysis tools" section further down this page.

Duration of storage: For information about how long cookies are stored for, please refer to our Cookie Consent Tool. You can access this by clicking on the link “Cookie Settings” in the footer.

Third country transfer: Further information on third country transfers can be found in the "Tracking and analysis tools" section further down this page.

Provision required or necessary: The provision of personal data is not required by law or contract. Without this data, we cannot and will not send you any suitable advertising offers.

Revocation of consent: You can withdraw your consent at any time. To do so, click on the link “Cookie Settings” in the footer to open the cookie consent banner, then select your preferred settings.

  1. Analytic /technical tools
    1. Akamai

We use Akamai as a content delivery platform. The service is provided by Akamai Technologies International B.V.
One Dockland Central, Guild Street, Dublin 1, D01 E4X0, Ireland.

We use cloud infrastructure services from Akamai that distribute, accelerate and protect online applications. The Akamai A2 cookie is used to reduce page load time by using the adaptive acceleration feature. Adaptive Acceleration (A2) provides a set of features on Akamai's intelligent edge platform that continuously make performance optimizations to improve the overall digital experience for website users.

Akamai Technology's JavaScript snippet is inserted into the HTML code of our website to anonymously collect data to measure online performance. We anonymize IP addresses processed on Akamai's edge servers to perform geolocation and mapping services in delivering and securing our website. By default, Akamai technology is limited to collecting only the strictly necessary anonymized personal IP address data. After the geolocation services are performed, the IP address that is collected when the content hits the Akamai server is immediately discarded.

In the case of Akamai Technology, the information is transferred to Akamai servers in Europe and processed there. As the parent company, Akamai Technologies, Inc. is based in the USA, a transfer to the USA cannot be ruled out. Google LLC is certified under the UK Extension to the EU-U.S. Data (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards.

For more information about Akamai's privacy policy, please visit https://www.akamai.com/legal/compliance/privacy-trust-center

    1. Convert (A/B‑Testing & Personalisation Tool)

We use the testing and optimisation service Convert Experiences (provided by Convert Insights, Inc., 2093 Philadelphia Pike #9985, Claymont, DE 19703, USA) on our website. Convert is an A/Btesting and personalisation platform that enables us to test different versions of our website, analyse user interactions, and improve website performance and usability. Convert helps us understand how visitors use our site and which variants lead to better user outcomes.

Convert allows us to design experiments, personalise content for specific user segments, and analyse the results in order to continuously improve our website and user experience. By using Convert, we can ensure that our website functions as intuitively as possible and that content is tailored to visitors’ preferences—without requiring intrusive tracking methods.

Convert is designed with privacy-by-design principles and applies strict dataminimisation approaches. For example, Convert anonymises visitor IDs by grouping users into non-identifiable cohorts, ensuring that individual user identities cannot be reconstructed. It also avoids storing IP addresses and refrains from collecting unnecessary personal information.

Convert stores and processes information required to run experiments and analyse aggregated performance results. This may include:

  • Device information (e.g. browser type, operating system)
  • Anonymised visitor identifiers (group-level, not individual IDs)
  • Browsing behaviour (e.g. pages visited, test variations viewed)
  • Click and interaction data
  • Session information (time and duration of website visit)
  • Conversion events (e.g. form submissions, button clicks)
  • Aggregated traffic and performance metrics

Convert does not store IP addresses or transaction IDs. Where technically required, such data may be momentarily collected for processing but is immediately anonymised, pseudonymised, or discarded so that no personal identifiers are retained.

Although Convert has servers in the EU, the company is based in the United States. Therefore, a transfer of personal data to the USA cannot be ruled out. Convert Insights, Inc. is certified under the UK Extension to the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards.

In addition, Convert states that it implements additional technical and organisational measures, including data minimisation, pseudonymisation, and security practices, and commits to GDPR obligations as documented in their privacy notice.

For more information about the data processed through Convert Experiences, please refer to the Convert Privacy Notice at https://www.convert.com/privacy-notice/

    1. Google Analytic Services and Technical Tools

This website uses analytical and technical services provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The information is transferred to Google servers in Europe and processed there. As the parent company, Google LLC, is based in the USA, a transfer to the USA cannot be ruled out. Google LLC is certified under the UK Extension to the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards.

Google’s Data Processing Terms apply, which include the Google Ads Data Processing Terms available at: https://business.safety.google/intl/en/adsprocessorterms/.

Further legal information on Google services can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de

For general information about Google's privacy policy, please visit https://policies.google.com/privacy?hl=de.  

The following tools are in use and are described in detail below:

  • Google Analytics
  • Google Signals (part of Google Analytics)
  • Google Translate

Google Analytics

Google Analytics collects data on your activity on our website. Various technologies, such as cookies, device IDs and login information, are used to identify you as a user across different devices. This enables us to analyse your actions across platforms.

For example, when you click on a link, this action is recorded in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us to tailor our website and service more effectively to your needs. Below, we provide more detailed information about the tracking tool, particularly regarding what data is processed and how you can prevent this.

Google Analytics is a tracking tool used to analyse website traffic. These measurements and analyses are based on a pseudonymous user ID. This number does not contain any personal data, such as your name or address, but it is used to assign events to a device. Google Analytics 4 uses an event-based model to collect detailed information about user interactions, such as page views, clicks, scrolling, and conversion events. Various machine learning functions have also been built into Google Analytics 4 to improve our understanding of user behaviour and certain trends. Google Analytics 4 relies on modelling with the help of machine learning functions. This means that missing data can be extrapolated from the collected data to optimise the analysis and enable forecasting.

In order for Google Analytics to function, a tracking code has been embedded in our website's code. When you visit our website, this code records the various actions you perform. With Google Analytics 4's event-based data model, we can define and track specific events to analyse user interactions. This means that, in addition to general information such as clicks or page views, we can also track specific events that are important for our business. Examples of such events include the submission of a contact form or the purchase of a product.

As soon as you leave our website, this data is sent to Google Analytics' servers, where it is stored. Google then processes the data, after which we receive reports on your user behaviour.

Information that may be processed by Google Analytics:

  • Google Analytics uses a tracking code to generate a unique, random ID linked to your browser cookie. This enables Google Analytics to recognise you as a new user and allocate you a user ID. The next time you visit our site; you will be recognised as a 'returning' user. All data collected is stored together with this user ID. This is the only way to evaluate pseudonymous user profiles.
  • In order to analyse our website using Google Analytics, a property ID must be added to the tracking code. This data is then stored in the relevant property. The Google Analytics 4 property is the default for each newly created property. Depending on the property used, data is stored for different lengths of time.
  • Your interactions are measured across platforms through identifiers such as cookies, app instance IDs, user IDs or custom event parameters, provided you have given your consent. These interactions refer to all the actions you perform on our website. If you use other Google systems, such as a Google account, data generated by Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operators, authorise it. However, exceptions may apply if required by law.
  • Google Signals: If you have given your consent, we activate Google Signals within Google Analytics. Google Signals allows Google Analytics to collect additional information from users who are logged into their Google account and have enabled personalised advertising. This enables crossdevice reporting, more detailed demographic and interest reports, and the creation of remarketing audiences. We do not receive any data that identifies you personally; all reports provided to us are aggregated. Google may link your visit data to your Google account for its own purposes if you have permitted this in your Google account settings. You can deactivate personalised advertising at any time in your Google account under https://adssettings.google.com/.
  • Google claims that IP addresses are neither logged nor stored in Google Analytics 4; however, Google does use IP address data to derive location data, which it then deletes immediately. Therefore, all IP addresses collected from users in the EU are deleted before the data is stored in a data centre or on a server.
  • As Google Analytics 4 focuses on event-based data, it uses specific cookies. For an overview of the cookies used by Google Analytics, please refer to our Cookie Consent Tool and search for 'Google Analytics'. You can access the Cookie Consent Tool by clicking on the icon at the bottom left of the screen.

Google Translate

We use Google Translate to provide automated translation of website content so that international users can access information in their preferred language. This is a convenience function and does not affect the core functionality of our website.

When you activate translation on a page, the following information may be processed:

  • IP address of the device used
  • URL of the page being translated
  • browser type and settings
  • device operating system
  • browser language preferences
  • date and time of access
  • content entered for translation (e.g. text on the page)

Google processes this information to provide the translation service and to ensure correct rendering of translated text. Google Translate does not set its own cookies for translation; however, your browser may transmit technical information automatically. We do not receive any personal data from Google Translate.

    1. Microsoft Clarity

This website uses Microsoft Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland (“Microsoft”).

Microsoft Clarity is an analytics tool that assists website operators in gaining deeper insights into user behaviour. It provides detailed insights into visitor interactions with the website by offering features such as heat maps, session recordings and user path analysis. These features allow you to see which areas of the website are clicked on most often, how far users scroll, and which elements receive the most attention.

Microsoft Clarity can be used to analyse heat maps, which visually show where users click most frequently. This can help evaluate the effectiveness of call-to-action buttons and adjust the user interface accordingly. Another example is session recording, which allows you to track a user's entire interaction with the website. This feature empowers website operators to gain valuable insights into user experience issues and the reasons behind user abandonment.

Based on the available technical functionality data, it is reasonable to conclude that the following data is processed:

  • IP address
  • Location data
  • Browser information
  • Screen resolution
  • Language settings
  • Websites/subpages visited
  • Date and time of website visit
  • Clicks, scroll movements, and mouse movements
  • Session recordings (videos of user interactions)
  • Heat map data (visualization of user interactions)

The information is transferred to Microsoft servers in Europe and processed there. As the parent company, Microsoft Corporation, is based in the USA, a transfer to the USA cannot be ruled out. Microsoft Corporation is certified under the UK Extension to the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards.

For more information about Microsoft Clarity, please visit https://learn.microsoft.com/en-us/clarity/setup-and-installation/about-clarity for general information about Microsoft's privacy policy, please visit https://privacy.microsoft.com/en-gb/privacystatement.

  1. Advertising/ Marketing tools
    1. Amazon Advertising

We use the advertising service Amazon Advertising on our website. The service provider is Amazon EU S.à r.l. 38 avenue John F. Kennedy, L-1855, Luxembourg (“Amazon”).

Amazon Advertising is a platform that brings together all of Amazon's advertising services. As well as enabling us to advertise on our own website, Amazon Advertising allows us to offer our products or services on Amazon websites. Amazon offers a variety of features and tools to help you advertise successfully and target your audience effectively. Thanks to Amazon's extensive reach and its various platforms, we can use Amazon Advertising to showcase our products or services to a large number of interested individuals.

Our goal is to provide you with the best possible experience, whether you are visiting our website or others. We are confident in our products and services and want them to be found outside of our own website. By placing ads on Amazon platforms, we can present our products and services to a wider audience, thereby increasing our visibility and sales. Amazon Advertising also allows us to target our advertising very specifically, ensuring that only people who are genuinely interested in our products see them. The service also provides detailed analyses of advertising campaign success, making it easier for us to optimise future campaigns.

Amazon Advertising stores and processes data relating to advertisements. This may include the following types of information:

  • IP address
  • Cookie information
  • Device information (e.g. browser type, operating system)
  • Browsing behaviour and click data
  • Time and duration of website visit
  • Referrer URL
  • Pseudonymised user ID
  • Geographical location (based on IP address)
  • Interests and preferences (derived from surfing behaviour)
  • Demographic information (if provided by the user)

As Amazon has servers all over the world, data can be stored in the US, for example. As the parent company, Amazon.com, Inc., is based in the USA, a transfer to the USA cannot be ruled out. Amazon.com, Inc. is certified under the UK Extension to the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards. Through the DPF, Amazon promises to adhere to European data protection standards when processing your data, even if it is stored, processed and managed in the US.

The Amazon data processing terms (AWS GDPR Data Processing), can be found here: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

For more information about the data processed through Amazon Advertising, please refer to the Privacy Policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010&ref_=footer_privacy%3Ftid%3D331754365754&language=en_GB.

    1. Google Advertising Tools

This website uses analytical and technical services provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The information is transferred to Google servers in Europe and processed there. As the parent company, Google LLC, is based in the USA, a transfer to the USA cannot be ruled out. Google LLC is certified under the UK Extension to the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards.

Google’s Data Processing Terms apply, which include the Google Ads Data Processing Terms available at: https://business.safety.google/intl/en/adsprocessorterms/.

Further legal information on Google services can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de

For general information about Google's privacy policy, please visit https://policies.google.com/privacy?hl=de.  

The following tools are in use and are described in detail below:

  • Google Ads
  • Google Ad Manager
  • DoubleClick Floodlight
  • Google Campaign Manager 360
  • Google Enhanced Conversions
  • YouTube

Google Ads

We use Google Ads to display online advertisements and to measure the performance of advertising campaigns. Depending on your consent settings, Google Ads uses cookies or similar technologies to:

  • display personalised advertising,
  • build remarketing audiences,
  • measure conversions (e.g., purchases, form submissions),
  • optimise ad delivery across Google services.

Google Ads may process data such as:

  • cookie IDs,
  • IP address,
  • browser information,
  • device identifiers,
  • interaction data with ads and landing pages.

Processing activities related to Google Ads also involve DoubleClick Floodlight and Enhanced Conversions, which are described in detail below.

For more information about Google Ads, please visit https://support.google.com/google-ads/?hl=en.

Google Ad Manager

Google Ad Manager is used to manage and deliver display advertisements across our website. It uses cookies and similar technologies to:

  • deliver relevant ads,
  • limit how often ads are shown (frequency capping),
  • prevent invalid traffic and fraud,
  • measure advertising reach and performance,
  • optimise ad placements through real‑time bidding.

Google Ad Manager may process the following data:

  • IP address
  • cookie IDs
  • device identifiers
  • browser and device information
  • approximate location (derived from IP address)
  • interaction data with advertisements
  • information about website visits and content viewed

If you are logged into a Google service, Google may associate your interaction with your Google account. Even without an account or login, Google may store cookie or device signals to improve ad delivery and reporting.

Google Ad Manager may also interact with other Google advertising products such as Google Ads, Campaign Manager 360, DV360 and DoubleClick Floodlight to synchronise metrics and improve campaign effectiveness.

More information about Google Ad Manager, please visit https://support.google.com/admanager/answer/9028.

    1. DoubleClick Floodlight

DoubleClick Floodlight uses cookies to measure the effectiveness of advertising campaigns and user actions after interacting with ads. Floodlight can register actions such as purchases, form submissions, or visits to specific pages on our website.

Integration of DoubleClick Floodlight is capable of processing the following data:

  • IP address
  • Cookie IDs
  • Device identifiers
  • Location data
  • Time and duration of visit
  • Advertisements clicked
  • Websites visited
  • User behaviour (e.g. clicks, scrolling behaviour)
  • Browser information
  • Operating system
  • Referrer URL
  • Conversion data (e.g. purchases, registrations)
  • User-defined variables (e.g. product information, customer status)

For more information about DoubleClick Floodlight, please visit About Floodlight and Floodlight activities - Campaign Manager 360 Help

    1. Google Campaign Manager 360

Google Campaign Manager uses cookies to display ads that are relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser and thus prevent them from being displayed multiple times. Furthermore, Campaign Manager can utilise cookie IDs to track conversions related to ad requests. This is exemplified by a user who views a Campaign Manager advertisement and subsequently visits the advertiser's website using the same browser, subsequently making a purchase. Google has confirmed that Campaign Manager cookies do not contain any personal information.

Please be advised that when Campaign Manager 360 tags are loaded, your browser automatically establishes a direct connection to Google’s servers. Through this connection, Google can collect information about how your browser interacts with advertisements, including which pages you visit on our website and which ads you have viewed or clicked on. These insights allow us to analyse the effectiveness of advertising campaigns and understand user interaction behaviour more accurately. If you are registered with a Google service, Google will be able to associate the visit with your account. Even if you are not registered with Google or logged in, it is possible that Google will still find and store your IP address.

Furthermore, Campaign Manager 360 integrates DoubleClick Floodlight tags, which enable us to measure whether you carry out specific actions on our website after interacting with our display or video ads (e.g. completing a purchase, submitting a form, or visiting certain sections of our site). Campaign Manager uses these Floodlight tags to determine which content you have interacted with and to allow us to later deliver more relevant advertising based on your interactions. These conversiontracking features support us in optimising our marketing strategies and understanding which ads and placements generate meaningful user actions..

For more information about Campaign Manager, please visit https://www.google.de/doubleclick.

    1. Google Enhanced Conversions

We use the "Enhanced Conversions" extension to collect input data in form fields on our website or digital offers using tags and transmits it to Google Ads in encrypted form. Google combines this data with existing user data and uses it to create profiles that are made available to us. If you visit other websites that also use Google Enhanced Conversions or other Google services, this information will be linked to your unique ID. However, we cannot see which other sites you visit.

If you are logged into your Google account, the page views and entries are assigned to your Google account, and your usage behaviour is assigned directly to your personal profile. To prevent this, you can log out of your Google account before visiting our site or not give your consent to this service.

The purpose of this processing is to gain detailed knowledge about the usage behaviour of our users in order to target and optimize our offers and advertising measures more effectively. By using Google Enhanced Conversions, we obtain a more comprehensive picture of usage and better visibility for our Google Ads analysis.

Enhanced Conversions works by hashing (encrypting) firstparty data, such as email addresses or phone numbers entered into forms, before it is transmitted to Google. This hashed data is then matched with Google accounts to improve the accuracy of conversion measurements. This allows Google to attribute conversions more reliably, even when thirdparty cookies are restricted or unavailable.

As far as we are aware, Google does not use the data for its own purposes. The input data is only collected with your express consent and only after the input has been completed and transmitted to us. The processed data will be deleted after the purpose has been achieved, but at the latest after 60 days for unassigned data and after 140 days for assigned data.

For more information about Google Enhanced Conversions, please visit https://support.google.com/google-ads/answer/9888656?hl=en

    1. YouTube

We have embedded YouTube videos on our website. This enables us to showcase interesting videos directly on our site. YouTube is a video portal operated by Google. When you visit a page on our website with an embedded YouTube video, your browser automatically connects to YouTube or Google servers. Various data is transferred during this process, depending on your settings.

YouTube is a platform where users can watch, rate, comment on and upload videos for free. YouTube provides a code snippet that enables us to display videos on our website, which we have incorporated into our site.

We strive to offer you the best possible user experience on our website. Of course, interesting videos are essential. Our embedded videos provide additional helpful content to complement our text and images. The videos also help to make our website easier to find on Google. Although we use Google Ads to place advertisements, Google can only show these to people who are interested in our offers thanks to the data it collects.

As soon as you visit one of our pages with an embedded YouTube video, YouTube will set at least one cookie storing your IP address and our URL. If you are logged into your YouTube account, YouTube can usually use cookies to associate your interactions on our website with your profile. This includes data such as session duration, bounce rate, approximate location and technical information such as browser type, screen resolution and internet service provider. Additional data may include contact details, ratings, sharing content via social media, and adding content to your YouTube favourites.

YouTube may also use stored cookies or device identifiers to combine your viewing behaviour on our website with activity on other websites that embed YouTube videos or use Google services. This enables Google to create aggregated statistics on video performance, recommend related content, and—if personalised advertising is activated—serve targeted ads across Google services.

If you are logged into your Google or YouTube account at the same time, Google may associate your viewing behaviour directly with your personal profile. This includes watch history, search history, and engagement with video elements.

If you are not logged into a Google or YouTube account, Google will store data using a unique identifier linked to your device, browser or app. This enables your preferred language settings to be retained, for example. However, fewer cookies are set, so much interaction data cannot be stored.

Depending on your consent choices in our cookie tool, YouTube may load cookies only after you actively click to play a video (“clicktoplay mode”). If you do not consent to marketing cookies, certain YouTube features or personalised recommendations may not be available.

For more information about YouTube, please visit https://www.youtube.com/howyoutubeworks/.

    1. Facebook Pixel

We use the Facebook Pixel (now meta pixel) provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (“Meta”) on our website. We have implemented a code on our website for this purpose.

The Facebook Pixel is a snippet of JavaScript code that activates a set of functions enabling Facebook to track your actions on our website if you arrived via a Facebook Ad.

Here are some of the main features of the Facebook Pixel:

  • Conversion tracking: This pixel shows us how many users perform certain actions on our website after clicking on a Facebook ad, such as making a purchase or signing up to a newsletter. This helps us understand which ads are effective and provides information for calculating ROI (return on investment).
  • Remarketing: With the Facebook Pixel, we can show targeted ads on Facebook and other Meta platforms to people who have already visited our website. This increases the likelihood of these users interacting again or making a purchase.
  • Target group creation: The Facebook Pixel helps us to create target groups for future ads. We can create similar target groups (lookalike audiences) based on the characteristics of our website visitors to reach new customers with similar interests or behaviours.
  • Ad optimisation: By collecting data on ad performance, the Facebook Pixel can automatically place ads so that they are shown to users most likely to perform the desired action.

Our aim is to showcase our products and services to individuals who are genuinely interested in them. Facebook Pixel helps us to tailor our advertising to your preferences and interests. This means that Facebook users who have enabled personalised advertising will see relevant adverts. Facebook also uses the collected data for analysis purposes and for its own advertising.

The following data may be processed by the Facebook Pixel:

  • IP address
  • Web browser information
  • Location of the page visited
  • Referrer (previous website)
  • User ID (if linked to a Facebook account)
  • Pixel ID
  • Facebook cookie
  • Click data (buttons clicked and their names)
  • Pages visited
  • Form field data (e.g. email, address)
  • Date and time of visit
  • Language of the website
  • Screen resolution
  • Operating system
  • Device information

As the parent company Meta Platforms, Inc. is located in the US, Facebook may process your data in the USA, among other places. Meta Platforms, Inc. is certified under the UK Extension to the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards.

You can find the Meta data processing terms at https://www.facebook.com/legal/terms/dataprocessing.

We recommend that you read Meta's data policy if you would like to learn more about the company's data protection practices at https://www.facebook.com/privacy/policy/.

    1. Facebook Social Plugins[NB2] 

Our website incorporates social plug-ins from provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (“Meta”). You can recognise these buttons by the classic Facebook logo, such as the ‘Like’ button (the hand with the raised thumb) or by a clear ‘Facebook plug-in’ label. A social plug-in is a small part of Facebook that is integrated into our site. Each plug-in has its own function. The most commonly used functions are the familiar ‘Like’ and ‘Share’ buttons.

These plugins establish a direct connection between our website and the Facebook platform, enabling users to share, like or comment on content without leaving our site. They are usually implemented as small code snippets embedded on the website.

The ‘Like’ button allows users to like content directly from our website, which is then displayed on their Facebook profile. The ‘comments plugin’, allows users to leave comments on an article or page, which can then be displayed both on our website and on Facebook. These plugins promote user interactivity and engagement by increasing the reach of content via social networks.

If you have a Facebook account or have previously visited the site https://www.facebook.com/, Facebook will already have placed at least one cookie on your browser. In this case, as soon as you visit our site or interact with social plug-ins (e.g. the 'Like' button), your browser sends information to Facebook via this cookie.

According to Facebook, this data includes:

  • User's IP address
  • Browser information (user agent string)
  • Website visited (URL)
  • Date and time of page view
  • Facebook ID (if the user is logged into Facebook)
  • Facebook profile data (if the user is logged into Facebook)
  • Interactions with the plugin (e.g. clicks on ‘Like’)
  • Websites visited with integrated Facebook plugins
  • Device information (e.g. screen resolution, operating system)
  • Location data (if shared by the browser)

To prevent Facebook from collecting and linking a large amount of data to your Facebook account while you are visiting our website, you must log out of Facebook beforehand.

If you are not logged in to Facebook or do not have an account, your browser will send less information to Facebook because it will have fewer Facebook cookies. However, data such as your IP address and the website you are visiting may still be transferred to Facebook. Please note that we do not know the exact content of this data. Nevertheless, based on our current knowledge, we will inform you as best we can about data processing. You can also read about how Facebook uses data in Meta's data policy at https://www.facebook.com/privacy/policy/.

If you are logged in to Facebook, you can adjust your advertising at preferences https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fadpreferences%2Fadvertisers%2F. If you don't use Facebook, you can manage your usage-based online advertising at https://www.youronlinechoices.com/de/praferenzmanagement/?tid=134384624. There, you can choose to activate or deactivate providers.

As the parent company Meta Platforms, Inc. is located in the US, Facebook may process your data in the USA, among other places. Meta Platforms, Inc. is certified under the UK Extension to the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement with the United States designed to ensure that U.S.-based companies adhere to European data protection standards when processing data in the U.S. Companies certified under the DPF are committed to complying with these standards.

You can find the Meta data processing terms at https://www.facebook.com/legal/terms/dataprocessing.

    1. Quantcast

We use Quantcast, a platform that enables us to better understand our target audiences and tailor our marketing strategies accordingly. The service provider is the Irish company Quantcast International Limited, Beaux Lane House, Lower Mercer Street, 1st Floor, Dublin 2, Ireland (“Quantcast”).

By using cookies and other tracking technologies, Quantcast collects information about users' activities on various websites to create demographic and behavioural profiles.

One such application of Quantcast is the optimisation of online advertising campaigns. Advertisers can then use the collected data to place targeted ads to specific user groups that are more likely to be interested in their products or services. Another example is helping website operators analyse user behaviour in order to improve the user experience and better tailor the content of their websites to the interests of visitors.

Based on the available technical functionality data, it is reasonable to conclude that the following data is processed:

  • Browsing behaviour and interests
  • Purchasing behaviour
  • Domain affinity
  • Occupations
  • Devices used
  • Demographic data (e.g., age and gender)
  • Type, length, and frequency of interaction with specific content
  • Traffic statistics (similar to web server logs)
  • Cookie IDs or device identifiers

The information is transferred to Quantcast servers in Europe and processed there. As the parent company, Quantcast Corp. is based in the USA, a transfer to the USA cannot be ruled out. Quantcast uses standard contractual clauses as the basis for data processing by recipients based in third countries (outside the UK) or for data transfers to such countries.

For general information about Quantcast's services and privacy policy, please visit https://legal.quantcast.com/#products-and-services-privacy-policy.

    1. TikTok Analytics

We use TikTok Analytics on our website. The service provider is the Chinese company Beijing Bytedance Technology Ltd. For the European region, the Irish company TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”), is responsible. TikTok Analytics provides detailed insights into various metrics, helping us to better understand our target audience and tailor our content accordingly. These key metrics include video views, follower growth, engagement (such as likes, comments and shares), and viewer demographics.

TikTok Analytics allows us to monitor follower growth, showing us how many new followers, we have gained or lost over a given period. This helps us to evaluate the success of our content strategies. Additionally, we can analyse viewer demographics to gain insight into the age, gender and geographical location of our audience. This data enables us to tailor our content to specific target groups, thereby maximising our reach and interaction.

TikTok Analytics collects and processes data including:

  •  IP address
  • User agent (browser information)
  • Time of website visit
  • Pages visited and interactions
  • Clicks on website elements
  • Search terms on the website
  • Shopping cart activities
  • Purchases and transaction data
  • Device information
  • Location data
  • Unique ID for user identification
  • Referrer URL
  • Time spent on the website
  • Scrolling behaviour
  • Form entries

The information is transferred to TikTok servers in Europe and processed there. As the parent company, ByteDance Ltd., is based in China, a transfer to China cannot be ruled out. TikTok Technology Limited bases its data processing and transfer to China on standard contractual clauses. Through these clauses, TikTok undertakes to comply with European data protection standards when processing your data, even if it is stored, processed and managed in China.

For more information about TikTok's privacy policy and TikTok's collection of data, please visit the TikTok website at https://www.tiktok.com/legal/page/eea/privacy-policy/en?tid=331754366589 as well as in the general information about TikTok at https://www.tiktok.com/en/

  1. Social media channels

In the following section, you will find information on the company profiles that we maintain on various social media channels.

General information: We are represented on various social networks. Below you will find information on the company profiles that we maintain on various social media channels. For information on the storage and use of your data as well as your rights and settings options to protect your privacy, please refer to the data protection information of the respective network operator.

We are represented in the following social networks:

We do not use social plugins or other interfaces on our websites, but link to our presence on the social media providers.

We have no influence on the processing of personal data by the social networks. For example, we have no knowledge of the extent to which, where and for how long the data is stored, the extent to which the networks comply with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. We therefore expressly point out that user data (e.g. personal information, IP address) is stored by the operators of the social media platforms in accordance with their data usage guidelines and used for business purposes.

We process your personal data when you contact us via our social media profiles by using the functions provided for this purpose (e.g. messages, comment function, posts) or by accessing the content provided by us (e.g. videos). If you contact us in this way, we process your directly visible personal data (usually: user name, profile picture, content of the message including the photos contained therein, date and time of the interaction) in order to respond to your contact or to provide the content you have requested. We also process your personal data in order to present our company to the outside world and to provide information about our products.

Page Insights: The operators of the social media platforms provide us with usage statistics (so-called analytics services or page insights data) for our pages on the social media platforms. These statistics are based on the actions and interactions of our followers (e.g. likes, shares, comments, etc., the number of followers, access data for certain page areas, the reach of a post and demographic statistics about followers, including age, language, origin or interests). These statistics help us to do this:

  • Interaction with our followers and interested parties,
  • understand the use and reach of our contributions,
  • evaluate content and determine usage preferences,
  • design our pages on the social media platforms to be as target group-oriented as possible.

Please note that we have no influence on or access to the creation and processing of these usage statistics and the underlying data; this is the sole responsibility of the operator of the respective social media platform.

The information stored in the cookies is received, stored and processed by the operators of the respective social media platforms. This also includes services of the operator or operator group of the social media platforms as well as services of other companies that use the social media platforms and that are visited by the user. In addition, other entities such as partners or third parties on the social media platforms may also use cookies to provide services to the companies advertising on these platforms. More detailed information about the use of cookies by the operators can be found in their privacy policies, which we provide below in the information about the respective social media provider.

On this basis, we and the operators of the social media platforms are considered "joint controllers" within the meaning of the GDPR. Accordingly, we have concluded the necessary agreement in accordance with Art. 26 GDPR, insofar as the operator of the social media platform permits this:

  • Facebook and Instagram: The joint responsibility agreement is available at:

https://de-de.facebook.com/legal/terms/page_controller_addendum

You can find the essence of the contract at: https://www.facebook.com/legal/terms/information_about_page_insights_data?locale2=de_DE&_rdr 

The essence of the agreement is available at
https://www.tiktok.com/legal/page/global/information-about-tiktok-analytics/en

Legal basis: Processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest. The legitimate interest pursued by us lies in establishing contact with (potential) customers and interested parties, the external presentation of our company and the provision of information about our products and services.

Recipients: Information on the recipients of the data can be found in the following sections of the respective social media providers.

Duration of storage: We do not store any personal data that is processed in the social networks on our servers. Any customer service related queries will be deleted after 3 years.  [NB4] 

Mandatory or required provision: The provision of your data is voluntary. If you wish to interact with us, there are alternative ways to contact us, for example by e-mail and telephone.

Third country transfer: Information on the transfer of data to countries outside the EU/EEA can be found in the sections of the respective social media providers below.

Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below. You also have the option of lodging an objection with the respective platform operator:

  1. Facebook and Instagram

We operate a company page on Facebook and Instagram. The provider of the platforms is Meta Platforms Ireland Limited, "Meta" (4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland).

As a user, you use our company website and its functions at your own risk. This applies in particular to the interactive functions (e.g. commenting, sharing, liking). Meta processes personal data about your account, your IP address and the end devices you use. Cookies are also used to collect data.

If you have a Facebook/Instagram profile and are logged in, Meta can, for example, analyze your usage behavior and create a usage profile corresponding to this behavior. This user data is regularly processed for market research and (personalized) advertising purposes. If you want to avoid this, you should log out of your Facebook/Instagram profile or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. In this way, the Facebook/Instagram information through which you can be directly identified will be deleted. This allows you to use our Facebook/Instagram page without revealing your Facebook/Instagram ID. When you access interactive features of the page (like, comment, share, message, etc.), a Facebook/Instagram login screen will appear. After you log in, Meta will recognize you as a specific user.

Further information about the processing of your data by Meta Ireland, in particular about the storage period and your rights, can be found in Meta's privacy policy, which you can view at https://www.facebook.com/privacy/policy/.

You can find information on how to change your data protection settings at https://www.facebook.com/help/instagram/196883487377501?cms_id=196883487377501.

If you wish to make a request for information or assert your user rights, it is possible to assert these rights against us or Meta.

Transfer to third countries: The recipient of the data is Meta Platforms Ireland Limited. The parent company Meta Platforms Inc. is based in the USA, so that a transfer to the USA cannot be ruled out. Meta is certified in accordance with the EU-US data protection framework and bases the transfer to the USA on the adequacy decision.

  1. TikTok

We operate a company page on TikTok. TikTok is an online service for sharing photos and videos from the Chinese company ByteDance. For the European region, TikTok is provided by TikTok Technology Limited (registered office 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom). We use TikTok so that you can watch our TikTok videos and, if necessary, interact with the videos.

When you watch or interact with our TikTok videos, TikTok may collect information about your usage behavior and your device. This may include data such as your IP address, browser type, operating system, location and other technical information. TikTok may also use cookies and similar technologies to collect information. If you are logged into your TikTok account, further information about you may be processed. This includes, for example, user information (such as name, date of birth and your e-mail address) and data about your communication with other TikTok users. We only receive statistics and findings in anonymized form. It is also not possible for us to draw conclusions about individual members from the Page Insights information.

For more information on how TikTok processes personal data, please refer to TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=en.   

In accordance with our agreement with TikTok, TikTok is responsible for responding to requests from data subjects. In this context, you have the possibility to contact TikTok via TikTok's privacy web form available at https://www.tiktok.com/legal/report/privacy. You can also contact us to assert your rights in connection with the processing of personal data in the context of Page Insights by using the contact details provided on our website. In this case, we will forward your request to TikTok.

Transfers to third countries: TikTok is operated by the Chinese group ByteDance and is therefore subject to access by the Chinese authorities. In the course of using TikTok, personal data may be transferred to China (third country - no adequacy decision). Chinese companies are obliged to disclose data to Chinese authorities under the Chinese Multi-Level Protection Scheme 2.0. The authorities are granted unrestricted access to the servers of Chinese companies. Therefore, the compliance of these services with European data protection requirements cannot be guaranteed. We would like to point out that we have no influence on the further processing of your personal data by TikTok.

  1. YouTube

We are also represented on YouTube to provide videos. YouTube is a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you use YouTube, your personal data is collected, transmitted, stored, shared and used by Google. Google analyzes your user behavior and creates a corresponding usage profile, regardless of whether you have a Google account. This information can be used to tailor content or advertising to you.

YouTube collects data about actions that visitors perform on our channel. This is used to compile statistics about the use of our videos, which we receive in aggregated, i.e. anonymized, form. If you do not actively interact with our channel, e.g. by leaving a comment under a video, it is not possible for us to draw conclusions about individual channel visitors at any time.

If you are logged into your Google or YouTube account, YouTube can assign your surfing behavior to you personally. If you are not logged into a Google or YouTube account, less data is stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser or app.

Further information on the processing of your data by Google, in particular on the storage period and your rights, can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en-US, which also applies to YouTube.

You can find information on how to change your data protection settings at https://policies.google.com/privacy.   

If you wish to make a request for information or assert your user rights, it is possible to assert these rights against us or Google.

Transfer to third countries: The recipient of the data is Google Ireland Limited. The parent company Google LLC is based in the USA, so that a transfer to the USA cannot be ruled out. Google is certified in accordance with the EU-US data protection framework and bases the transfer to the USA on the adequacy decision.

  1. TLS encryption

We process personal data only to the extent permitted by data protection regulations. We also endeavour to take all necessary technical and organizational security measures to adequately protect your personal data from unauthorized access and misuse at all times.

Insofar as we store or process personal data, this is done in a highly secure data center. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS. Our servers are protected by a firewall and virus protection. Back-up and recovery procedures as well as role and authorization concepts are a matter of course for us.

Our employees are obliged to comply with the provisions of the GDPR and national data protection laws when handling data.

  1. Information about your right to object pursuant to Art. 21 UK GDPR

Right to object on a case-by-case basis

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) UK GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) UK GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate interests for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection

The objection can be made informally with the subject "Objection", stating your name, email or other identifying data, to the contact person named above. [NB5] 

Version of 03/2026