Privacy policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is Kevin Oppert, ActofValorClothing, Behringhauser Straße 12, 44575 Castrop-Rauxel, Germany, telephone: +49 172 8643658, email: info@actofvalor.shop. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When You Visit Our Website

2.1 When you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the website server, known as “server log files.” When you access our website, we collect the following data, which is technically necessary to display the website to you:

  • The website you visited

  • The date and time of access

  • The volume of data transmitted in bytes

  • The source or referring page from which you reached our website

  • The browser used

  • The operating system used

  • The IP address used, where applicable in anonymized form

Processing takes place pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for other purposes. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content, such as orders or inquiries sent to us, this website uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

3) Hosting and Content Delivery Network

3.1 Shopify

We use the system of the following provider to host our website and display its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For transfers of data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a content delivery network provided by: Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA.

This service allows us to deliver large media files, such as graphics, page content or scripts, more quickly through a network of geographically distributed servers. Processing takes place pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interest in improving the stability and functionality of our website. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For transfers of data to the United States, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Cookies

To make visiting our website appealing and to enable certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for longer and allow website settings to be saved (“persistent cookies”). In the latter case, you can find the storage period in your browser’s cookie settings.

If individual cookies we use also involve the processing of personal data, processing takes place pursuant to Article 6(1)(b) GDPR for the performance of a contract, pursuant to Article 6(1)(a) GDPR where you have given consent, or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in providing the best possible website functionality and a user-friendly and effective browsing experience.

You can configure your browser to notify you when cookies are set and decide whether to accept them individually, or to reject cookies in certain cases or altogether.

Please note that rejecting cookies may restrict the functionality of our website.

5) Contacting Us

5.1 Google Gemini

To provide autonomous customer support on this website, we have integrated an artificial intelligence software solution from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC, USA.

Through an API-based integration, visitors can submit text inquiries about our offerings, website functions, orders placed and the exercise of contractual rights. These inquiries are then answered and processed by the provider’s language models.

For this purpose, the provider’s software may collect personal data from you to compare it with your order history, associate your input with a specific order, assess your request automatically and resolve it by autonomously initiating processing procedures.

Personal data is collected and further processed solely to handle your specific request. The processing of your input to train or further develop the provider’s AI language models is expressly prevented.

Data processing takes place pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interests in effectively assisting website visitors, optimally marketing our offerings and automating customer support to reduce our operational workload.

Subject to any applicable statutory retention periods, the personal data collected is deleted when the provider’s software determines, using automated mathematical and statistical methods, that the matter has been conclusively resolved.

We have entered into a data processing agreement with the provider that ensures the protection of your data and prohibits unauthorized disclosure to third parties.

For transfers of data to the United States, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further legal information and Google’s privacy provisions can be found at:
https://support.google.com/gemini/answer/13594961?hl=de

5.2 When you contact us, for example through a contact form or by email, personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR. If you contact us in connection with a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted when the circumstances indicate that the matter has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

6) Comment Function

When you use the comment function on this website, your comment, the time it was created and your chosen commenter name are stored and published on this website. Your IP address is also logged and stored. The IP address is stored for security reasons and in case a person infringes the rights of third parties or posts unlawful content through a comment. We need your email address to contact you if a third party objects to your published content as unlawful.

The legal bases for storing your data are Article 6(1)(b) and (f) GDPR. We reserve the right to delete comments if third parties object to them as unlawful.

7) Data Processing When You Open a Customer Account

Pursuant to Article 6(1)(b) GDPR, personal data is also collected and processed to the extent necessary when you provide it to us while opening a customer account. The information required to open an account is shown in the relevant form on our website.

You can have your customer account deleted at any time by sending a message to the controller at the address provided above. After your customer account has been deleted, your data will be deleted once all contracts concluded through it have been fully performed, provided that no statutory retention periods prevent deletion and we have no continuing legitimate interest in retaining the data.

8) Use of Customer Data for Direct Marketing

Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offerings. Your email address is the only information required to send the newsletter. Providing additional data is voluntary and is used to address you personally. We use a double opt-in procedure for newsletter subscriptions. This ensures that you only receive newsletters after expressly confirming your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you consent to the use of your personal data pursuant to Article 6(1)(a) GDPR. We store the IP address assigned by your internet service provider (ISP), together with the date and time of registration, to enable us to investigate any subsequent misuse of your email address. The data we collect when you subscribe to the newsletter is used strictly for the stated purposes.

You can unsubscribe at any time using the link provided in the newsletter or by sending an appropriate message to the controller identified at the beginning of this policy. After you unsubscribe, your email address will immediately be deleted from our newsletter mailing list unless you have expressly consented to further use of your data or we reserve the right to use it for other purposes that are legally permitted and described in this policy.

9) Data Processing for Order Fulfillment

9.1 To the extent necessary to perform the contract for delivery and payment purposes, the personal data we collect is disclosed to the transport company and financial institution engaged by us pursuant to Article 6(1)(b) GDPR.

If a relevant contract requires us to provide you with updates for goods with digital elements or for digital products, we process the contact details you provided when ordering, including your name, address and email address, to inform you personally about upcoming updates during the legally prescribed period. We do this through an appropriate communication channel, such as post or email, to meet our statutory information obligations pursuant to Article 6(1)(c) GDPR. Your contact details are used strictly for communications about updates we are required to provide and are processed only to the extent necessary for each notification.

To fulfill your order, we also work with the service providers listed below, who assist us wholly or partly in performing the contracts we have concluded. Certain personal data is transmitted to these providers as described below.

9.2 Disclosure of Personal Data to Shipping Providers

Deutsche Post

We use the following transport provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.

If you have expressly consented during the ordering process, we disclose your email address and/or telephone number to the provider before delivery pursuant to Article 6(1)(a) GDPR to coordinate a delivery date or provide a delivery notification. Otherwise, we disclose only the recipient’s name and delivery address for delivery purposes pursuant to Article 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, prior coordination of the delivery date with the provider or a delivery notification is not possible.

You may withdraw your consent at any time with effect for the future by contacting the controller identified above or the provider.

DHL

We use the following transport provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

If you have expressly consented during the ordering process, we disclose your email address and/or telephone number to the provider before delivery pursuant to Article 6(1)(a) GDPR to coordinate a delivery date or provide a delivery notification. Otherwise, we disclose only the recipient’s name and delivery address for delivery purposes pursuant to Article 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, prior coordination of the delivery date with the provider or a delivery notification is not possible.

You may withdraw your consent at any time with effect for the future by contacting the controller identified above or the provider.

UPS

We use the following transport provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.

If you have expressly consented during the ordering process, we disclose your email address and/or telephone number to the provider before delivery pursuant to Article 6(1)(a) GDPR to coordinate a delivery date or provide a delivery notification. Otherwise, we disclose only the recipient’s name and delivery address for delivery purposes pursuant to Article 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, prior coordination of the delivery date with the provider or a delivery notification is not possible.

You may withdraw your consent at any time with effect for the future by contacting the controller identified above or the provider.

9.3 Use of Payment Service Providers

Apple Pay

If you choose the “Apple Pay” payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed through the Apple Pay function on your device running iOS, watchOS or macOS by charging a payment card stored in Apple Pay. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Authorizing a payment therefore requires entering a code you previously defined and verification through your device’s Face ID or Touch ID function.

For payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider for the card stored in Apple Pay to execute the payment. Encryption ensures that only the website on which the purchase was made can access the payment data. After payment, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

Where these transmissions involve the processing of personal data, processing takes place exclusively for payment processing pursuant to Article 6(1)(b) GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, date and time, and whether the transaction was completed successfully. Anonymization completely removes the link to an identifiable person. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase initiated in Safari on your Mac, the Mac and the authorization device communicate through an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac.”

Further information about privacy with Apple Pay can be found at:
https://support.apple.com/de-de/HT203027

Google Pay

If you choose the “Google Pay” payment method offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed through the Google Pay application on your NFC-enabled mobile device running at least Android 4.4 (“KitKat”), by charging a payment card stored in Google Pay or a payment system verified there, such as PayPal. To authorize a Google Pay payment exceeding €25, your mobile device must first be unlocked using the verification method configured on it, such as facial recognition, a password, a fingerprint or a pattern.

For payment processing, the information you provide during the ordering process, together with information about your order, is disclosed to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a uniquely assigned transaction number, which is used to verify that payment has been made. This transaction number contains no information about the actual payment details of the payment method stored in Google Pay; it is generated and transmitted as a numerical token valid for one use only. For all Google Pay transactions, Google acts only as an intermediary in processing payment. The transaction itself takes place exclusively between you and the originating website by charging the payment method stored in Google Pay.

Where these transmissions involve the processing of personal data, processing takes place exclusively for payment processing pursuant to Article 6(1)(b) GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made through Google Pay. This includes the transaction date, time and amount; the merchant’s location and description; a merchant-provided description of the goods or services purchased; photos you attached to the transaction; the names and email addresses of the seller and buyer or sender and recipient; the payment method used; your description of the reason for the transaction; and, where applicable, the offer associated with the transaction.

According to Google, this processing takes place exclusively pursuant to Article 6(1)(f) GDPR on the basis of its legitimate interests in proper accounting, verification of transaction data, and optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the transaction data processed with other information collected and stored by Google when you use other Google services.

The Google Pay terms of service can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information about privacy with Google Pay can be found at:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you choose a payment method requiring advance payment from you, such as payment by credit card, the payment data you provide during the ordering process, including your name, address, bank and payment card information, currency and transaction number, together with information about the contents of your order, is disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary.

If you choose a payment method under which the provider extends credit or makes an advance payment, such as purchase on account, installment purchase or direct debit, you will also be asked during checkout to provide certain personal information, including your first and last name, street, house number, postal code, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in determining our customers’ ability to pay, we forward this data to the provider for a creditworthiness assessment pursuant to Article 6(1)(f) GDPR. Based on the personal data you provide and additional information, such as your shopping cart, invoice amount, order history and payment experience, the provider assesses whether the payment option you selected can be granted in view of payment and/or debt default risks.

In addition to the provider’s internal criteria, identity and creditworthiness information from the following credit reference agencies may be included in the application assessment pursuant to Article 6(1)(f) GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values, known as scores. Where scores are included in the credit report, they are based on a scientifically recognized mathematical and statistical procedure. Address data, among other information, is used to calculate these scores.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data if necessary to process payment in accordance with the contract.

PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method requiring advance payment from you, the payment data you provide during the ordering process, including your name, address, bank and payment card information, currency and transaction number, together with information about the contents of your order, is disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary.

If you choose a payment method under which we provide goods or services in advance of payment, you will also be asked during checkout to provide certain personal information, including your first and last name, street, house number, postal code, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in determining your ability to pay in such cases, we forward this data to the provider for a creditworthiness assessment pursuant to Article 6(1)(f) GDPR. Based on the personal data you provide and additional information, such as your shopping cart, invoice amount, order history and payment experience, the provider assesses whether the payment option you selected can be granted in view of payment and/or debt default risks.

The credit report may contain probability values, known as scores. Where scores are included in the credit report, they are based on a scientifically recognized mathematical and statistical procedure. Address data, among other information, is used to calculate these scores.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data if necessary to process payment in accordance with the contract.

PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal that combines PayPal’s own payment methods with local payment methods offered by third parties.

When you pay through PayPal, credit card via PayPal, direct debit via PayPal or, where offered, “Pay Later” via PayPal, we disclose your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of payment processing. Data is disclosed pursuant to Article 6(1)(b) GDPR and only to the extent necessary to process payment.

PayPal reserves the right to obtain a credit report for payment by credit card via PayPal, direct debit via PayPal or, where offered, “Pay Later” via PayPal. For this purpose, your payment data may be disclosed to credit reference agencies pursuant to Article 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in determining your ability to pay. PayPal uses the results of the credit assessment concerning the statistical probability of payment default to decide whether to provide the relevant payment method. The credit report may contain probability values, known as scores. Where scores are included in the credit report, they are based on a scientifically recognized mathematical and statistical procedure. Address data, among other information, is used to calculate these scores. You may object to this processing of your data at any time by contacting PayPal. However, PayPal may remain entitled to process your personal data if necessary to process payment in accordance with the contract.

If PayPal’s “purchase on account” payment method is available and selected, your payment data is first transmitted to PayPal to prepare the payment. PayPal then forwards it to Ratepay GmbH, Franklinstraße 28–29, 10587 Berlin, Germany (“Ratepay”) to execute the payment. The legal basis in each case is Article 6(1)(b) GDPR. In this case, Ratepay conducts an identity and creditworthiness assessment in its own name to determine your ability to pay, following the principles described above. It discloses your payment data to credit reference agencies pursuant to Article 6(1)(f) GDPR on the basis of its legitimate interest in determining your ability to pay. A list of the credit reference agencies Ratepay may use can be found here:
https://www.ratepay.com/legal-payment-creditagencies/

If you use a local third-party payment method, your payment data is initially disclosed to PayPal to prepare the payment pursuant to Article 6(1)(b) GDPR. Depending on the available local payment method you select, PayPal then transmits your payment data to the relevant provider to execute the payment pursuant to Article 6(1)(b) GDPR:

  • Apple Pay: Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland

  • Google Pay: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

  • iDeal: Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands

  • bancontact: Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium

  • blik: Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland

  • eps: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria

  • MyBank: PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France

  • Przelewy24: PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland

Further information about data protection can be found in PayPal’s privacy statement:
https://www.paypal.com/de/legalhub/paypal/privacy-full

Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you choose a payment method requiring advance payment from you, such as payment by credit card, the payment data you provide during the ordering process, including your name, address, bank and payment card information, currency and transaction number, together with information about the contents of your order, is disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary.

Sofortüberweisung

One or more online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

If you choose a payment method requiring advance payment from you, such as payment by credit card, the payment data you provide during the ordering process, including your name, address, bank and payment card information, currency and transaction number, together with information about the contents of your order, is disclosed to the provider pursuant to Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary.

9.4 Electronic Withdrawal Function for Distance Contracts

Consumers who conclude contracts through this website that carry a statutory right of withdrawal can exercise that right through an electronic withdrawal function in accordance with the applicable withdrawal provisions.

When using the withdrawal function, consumers must provide or confirm information identifying the contract from which they wish to withdraw, together with additional personal information such as their first and last name and email address.

This information is collected and transmitted to us pursuant to Article 6(1)(b) GDPR and only to the extent necessary to process the withdrawal properly. The personal data provided is also used pursuant to Article 6(1)(b) GDPR to confirm receipt of the withdrawal declaration by email. Article 6(1)(c) GDPR provides an additional legal basis for processing. We are legally required to provide an electronic withdrawal function for consumer distance contracts involving an obligation to pay.

10) Web Analytics Services

Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

Using cookies and/or comparable technologies, such as tracking pixels, web beacons and algorithms that read device and browser information, the service collects and stores pseudonymized visitor data, including device information such as IP addresses and browser information. This data is used for statistical analysis of user behavior on our website and to create pseudonymized usage profiles. Pseudonymization generally prevents direct identification of individuals. This information is not combined with directly identifying personal data about you collected by other means.

All processing described above, in particular reading or storing information on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits disclosure to third parties.

For transfers of data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11) Retargeting, Remarketing and Conversion Tracking

Meta Pixel

We use the “Meta Pixel” service within our online offering. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Meta”).

If you click an advertisement we have placed on Facebook and/or Instagram, Meta Pixel adds a parameter to the URL of our linked page. After redirection, this URL parameter is stored in the user’s browser through a cookie set by our linked page itself.

This enables Meta to identify visitors to our online offering as a target audience for advertisements (“ads”). Accordingly, we use this service to display our Facebook and/or Instagram ads only to users who have shown an interest in our online offering or who have certain characteristics, such as interests in specific topics or products determined from the websites they visit, which we transmit to Meta (“Custom Audiences”).

Meta Pixel also allows us to track whether users were redirected to our website after clicking an advertisement and what actions they performed there (“conversion tracking”).

The data collected is anonymous to us and does not allow us to identify users. However, Meta stores and processes the data, allowing it to be linked to the respective user profile and used by Meta for its own advertising purposes.

All processing described above, in particular setting cookies to read information on your device, is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is generally transmitted to and stored on a Meta server. This may also involve transfers to servers of Meta Platforms Inc. in the United States.

For transfers of data to the United States, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

12) Website Functions

12.1 Facebook Plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins allow direct interaction with content on the social network.

To increase the protection of your data when you visit our website, the plugins are initially disabled and integrated using a “two-click” or “Shariff” solution.

This integration ensures that accessing a page on our website containing these plugins does not initially establish a connection to the provider’s servers.

Only when you activate the plugins, thereby consenting to the transfer of data pursuant to Article 6(1)(a) GDPR, does your browser establish a direct connection to the provider’s servers. Regardless of whether you are logged in to an existing user profile, certain information about your device, including your IP address, your browser and your browsing history is transmitted to the provider and may be processed further there.

If you are logged in to an existing user profile on the provider’s social network, information about interactions performed through the plugins is also published there and displayed to your contacts. You can withdraw your consent at any time by clicking the activated plugin again to disable it. Withdrawal does not affect data already transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For transfers of data to the United States, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

12.2 Instagram Plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins allow direct interaction with content on the social network.

To increase the protection of your data when you visit our website, the plugins are initially disabled and integrated using a “two-click” or “Shariff” solution.

This integration ensures that accessing a page on our website containing these plugins does not initially establish a connection to the provider’s servers.

Only when you activate the plugins, thereby consenting to the transfer of data pursuant to Article 6(1)(a) GDPR, does your browser establish a direct connection to the provider’s servers. Regardless of whether you are logged in to an existing user profile, certain information about your device, including your IP address, your browser and your browsing history is transmitted to the provider and may be processed further there.

If you are logged in to an existing user profile on the provider’s social network, information about interactions performed through the plugins is also published there and displayed to your contacts.

You can withdraw your consent at any time by clicking the activated plugin again to disable it. Withdrawal does not affect data already transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For transfers of data to the United States, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

12.3 Google Translate

This website uses the “Google Translate” translation service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) through an API integration. To display the translation automatically after you select a language, your browser connects to Google’s servers. Certain browser information, including your IP address, is transmitted to Google.

Google may use cookies, meaning small text files stored on your device, to save language settings. The information generated by the cookie about your use of this website, including your shortened IP address, is generally transmitted to and stored on a Google server.

The processing described above may also involve transfers to servers of Google LLC in the United States.

If cookies are set when Google Translate is used, the processing described above is carried out only if you have given us your express consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

If no cookies are set, processing takes place pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interests in optimally marketing our offerings and extending the reach of our online presence.

For transfers of data to the United States, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information about Google’s privacy provisions can be found here:
https://business.safety.google/intl/de/privacy/

13) Tools and Other Services

Cookie Consent Tool

This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent. When you access the website, the tool is displayed as an interactive interface through which you can grant consent to specific cookies and/or cookie-based applications by selecting checkboxes. The tool ensures that all cookies and services requiring consent are loaded only after you have granted the corresponding consent by selecting the relevant checkboxes. This ensures that such cookies are placed on your device only if you have consented.

The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data such as an IP address is processed to store, assign or record cookie settings, processing takes place pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interests in legally compliant, user-specific and user-friendly cookie consent management and, consequently, a legally compliant online presence.

Article 6(1)(c) GDPR provides an additional legal basis for processing. As controllers, we are legally obliged to make the use of cookies that are not technically necessary dependent on the respective user’s consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings available in the cookie consent tool can be found directly in the relevant interface on our website.

14) Rights of Data Subjects

14.1 Applicable data protection law grants you the following rights against us as the controller in relation to the processing of your personal data. The conditions for exercising each right are set out in the legal provisions cited:

  • Right of access pursuant to Article 15 GDPR

  • Right to rectification pursuant to Article 16 GDPR

  • Right to erasure pursuant to Article 17 GDPR

  • Right to restriction of processing pursuant to Article 18 GDPR

  • Right to notification pursuant to Article 19 GDPR

  • Right to data portability pursuant to Article 20 GDPR

  • Right to withdraw consent pursuant to Article 7(3) GDPR

  • Right to lodge a complaint pursuant to Article 77 GDPR

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of Storage of Personal Data

The period for which personal data is stored is determined by the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period, such as retention periods under commercial and tax law.

Where personal data is processed on the basis of express consent pursuant to Article 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods apply to data processed in connection with contractual or similar obligations pursuant to Article 6(1)(b) GDPR, the data is routinely deleted after those retention periods expire, provided that it is no longer required to perform or initiate a contract and/or we have no continuing legitimate interest in retaining it.

Where personal data is processed pursuant to Article 6(1)(f) GDPR, it is stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise or defense of legal claims.

Where personal data is processed for direct marketing purposes pursuant to Article 6(1)(f) GDPR, it is stored until you exercise your right to object pursuant to Article 21(2) GDPR.

Unless otherwise stated in the information in this policy concerning specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

© IT-Recht Kanzlei

Last updated: August 20, 2026, 12:14:36