We are pleased that you have visited our website, tissi.de, and are interested in our company.
The protection of your personal data—such as your date of birth, name, phone number, address, etc.—is very important to us.
The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.
The controller, as defined in Article 4(7) of the GDPR, is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
The data controller for our website is:
M.J. Oster GmbH Calmonstraße 8 56814 Bremm Germany Email: info@tissi.de Phone: 02675911440 Fax: 026759114415
Every time our website is accessed, our system automatically collects data and information about the device used to access it (e.g., computer, cell phone, tablet, etc.).
(1) Information about the browser type and version used; (2) The operating system of the device used to access the site; (3) Hostname of the accessing computer; (4) The IP address of the device used to access the site; (5) Date and time of access; (6) Websites and resources (images, files, other page content) accessed on our website; (7) Websites from which the user’s system accessed our website (referrer tracking); (8) Indication of whether the request was successful; (9) Amount of data transferred
This data is stored in our system's log files. This data is not stored together with the personal data of any specific user, so individual site visitors cannot be identified.
Art. 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.
The temporary (automated) storage of data is necessary for the website visit to proceed and to enable the website to be displayed. The storage and processing of personal data also serve to ensure the compatibility of our website for as many visitors as possible, as well as to combat misuse and resolve technical issues. To this end, it is necessary to log the technical data of the accessing computer so that we can respond as quickly as possible to display errors, attacks on our IT systems, and/or malfunctions in the functionality of our website. In addition, we use this data to optimize the website and to generally ensure the security of our IT systems.
The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the website’s compatibility for all visitors, but no later than 3 months after the website is accessed.
You may object to the processing of your data at any time in accordance with Article 21 of the GDPR and request the erasure of your data in accordance with Article 17 of the GDPR. You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.
Our website offers various features, and when you use them, we collect, process, and store personal data. Below, we explain what happens to this data:
The data you enter in the form fields—such as your address, last name, first name, etc.—will be processed by us for the purpose described below.
Art. 6(1)(b) of the GDPR (Implementation of (pre)contractual measures)
The purpose of data processing is to process your order so that we can fulfill potential contractual relationships with you or take precontractual measures.
The data will be deleted as soon as it is no longer needed to process the order and there are no longer any legal retention requirements. This will generally be after 10 years (see Section 147(3) in conjunction with (1)(1), (4), and (4a) of the German Fiscal Code (AO), and Section 14b(1) of the German Value-Added Tax Act (UStG)).
You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.
The information on the order form is not required by contract or by law, but it is necessary to complete a contract. If you do not fill out the required fields, or do not fill them out completely, your order cannot be completed.
The data you enter into the fields of the application form—and any data you upload—will be processed in its entirety for the purpose stated below.
The legal basis for the collection and processing of applicant data is Article 6(1)(b) (pre-contractual measures) and Article 88(1) of the GDPR in conjunction with Section 26 of the BDSG. To the extent that special categories of personal data are collected that are necessary to fulfill legal obligations under labor law, social security law, and social protection law pursuant to Article 9( 2(b) of the GDPR in conjunction with Section 26(3) of the BDSG, processing is carried out on this legal basis. To the extent that special categories of personal data are to be processed beyond this, we will obtain consent for this in accordance with Article 9(2)(a) of the GDPR.
The purpose of data processing is to review and process the application documents you have uploaded via the form.
The data will be deleted as soon as the application has been processed and there is no longer a legitimate interest in storing the application data. Therefore, if an employment relationship is not established, your application documents will be deleted after 6 months at the latest.
You can find information about your rights and how to exercise them at the bottom of this privacy policy.
The information on the application form is not required by contract or by law, but it is necessary for submitting and processing your application. If you do not fill out the required fields—or do not fill them out completely—your application cannot be submitted or processed.
We will process the data you have entered into our contact forms—specifically, the information you have provided in the contact form fields—for the purpose described below.
Art. 6(1)(a) of the GDPR (Consent through a clear affirmative action or conduct)
We will use the data collected via our contact form(s) solely to process the specific inquiry submitted through the contact form.
Once your request has been processed, the collected data will be deleted immediately, unless there are any statutory retention periods.
The options for revocation and deletion are governed by the general provisions regarding the right to revocation and the right to deletion under data protection law, as described below in this Privacy Policy.
Use of the contact forms is voluntary and is not required by contract or by law. You are not required to contact us via the contact form; you may also use the other contact options listed on our website. If you wish to use our contact form, you must fill out the fields marked as required. If you do not provide the necessary information in the contact form, you will either be unable to submit your inquiry, or we will unfortunately be unable to process it.
We will process the registration and login information you provide to us for the purpose described below.
On our website, you have the option to use a separate login area. In order for us to verify your authorization to access the restricted area or the protected documents, you must enter your login information (email address or username and password) in the corresponding form.
The data we collect will be stored for as long as you maintain a user account with us.
Use of the login area on our website is contractually required to access the restricted area. You cannot access the content protected by the login area without entering your personal data. If you wish to use our login area, you must fill in the fields marked as required (username and password). Entering this information requires that you have a user account. You cannot log in if the information you enter is incorrect. If you enter incorrect information or fail to enter it, you will not be able to access the protected area. However, the rest of the site remains accessible without logging in.
If you wish to enter into a contract with us, we reserve the right to process your personal data exclusively by automated means in order to verify your creditworthiness. We are also authorized to make such an automated decision pursuant to Art. 22(2)(a) of the GDPR. Whether or not the contract can be concluded depends on the result of the automated credit check. A credit check involves calculating statistical probabilities of default. The credit report may contain probability values (scores) calculated using scientifically recognized mathematical and statistical methods. A variety of factors, such as income, address information, occupation, marital status, and past payment history, are used to assess the customer’s future risk of default. The result is expressed as a payment value (known as a “score”). The information obtained in this way forms the basis of our decision regarding the establishment, execution, or termination of a contractual relationship. If you believe that you have been wrongfully excluded from entering into a contract as a result of the credit check, please feel free to explain your position to us via email. We will then review the automated decision in accordance with Art. 22(3) of the GDPR on a case-by-case basis. In order to conduct the credit check, we are permitted to store and process your personal data in accordance with Art. 6(1)(b) of the GDPR.
In connection with the upcoming contract, we will transfer your data to the following provider(s) in the cases listed below:
If you have selected "PayPal" as your payment method, we will forward the personal customer data collected as part of your order to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you give your consent, the following data will be transferred: first and last name, street, house number, ZIP code, city, date of birth, phone number, and data related to your order.
When you select "PayPal" as your payment method, PayPal performs a credit check. This process uses mathematical and statistical methods to calculate a rating based on the probability of default (known as a "scoring value"). PayPal bases its decision on whether to provide the respective payment methods on the calculated scoring value. The scoring value is calculated using recognized scientific methods. Please also refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
We will store the data necessary for processing the payment for as long as is necessary to complete the transaction. If the data is subject to statutory retention requirements, it will be deleted once the retention period has expired. The duration of data storage by PayPal is specified in PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
When you access this website or individual files on the website, we collect, process, and store the following data: IP address, the website from which the file was accessed, the name of the file, the date and time of access, the amount of data transferred, and a notification of whether the access was successful (so-called web log). We use this access data exclusively in a non-personalized form to continuously improve our website and for statistical purposes. We also use the following web trackers to analyze visits to this website:
On our website, we use the Google service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.
We use Google to load additional Google services on our website. This service is used to provide additional Google services, such as the data processing required to deliver streams and fonts, as well as relevant content from Google Search. It is technically necessary to exchange the information about the site visitor that Google already has between Google services and to provide the site visitor with personalized content tailored to their Google Account.
For the processing itself, the service—or we—collect the following data: Background data stored about the website visitor in their Google Account or with other Google services; background data required to provide Google services, such as streaming data or advertising data; data regarding the website user’s interaction with Google Search; information about the user’s device, IP address, and browser, as well as additional data from Google services required to provide Google services in connection with our website.
If the service is enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of data processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may receive and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. To this end, data may also be transferred to the Google services Google APIs, DoubleClick, Google Cloud, Google Ads, and Google Fonts in accordance with Google’s Privacy Policy. You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may withdraw your consent at any time. You can find more information on withdrawing your consent either in the consent form itself or at the end of this Privacy Policy.
For more information on how the transferred data is handled, please see the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
On our website, we use the Google Ads service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF— https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
Google Ads is an advertising system that allows us to place ads on external websites across the Internet to inform our customers about our services. Based on the parameters we set, Google Ads displays ads on external websites that are individually tailored to our customer base and lead to our website. If a website visitor clicks on a Google Ads ad, they are directed to our website. To measure the success and cost of Google Ads campaigns, Google Ads tracks the performance of the advertising campaign when our website is visited. Our website processes the data provided by Google Ads to analyze and improve our advertising campaigns, as well as to calculate any applicable fees. With your consent, your data may also be used for remarketing purposes.
For the processing itself, the service—or rather, we—collect the following data: Data on site visitors’ advertising interests, site visitors’ interactions with ads related to our website, data on visits to our website by site visitors who previously clicked on Google Ads and were directed to our website, data regarding the user’s device, IP address, and browser, as well as additional data from Google services used to deliver and optimize Google ads related to our website.
If the service is enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of data processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When Google Ads is used on our website, Google may receive and process information from other Google services in order to provide background services for improving and personalizing Google advertising. To this end, data may also be processed by other Google services such as Google APIs, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Platform, and Google Fonts in accordance with Google’s Privacy Policy, under Google’s own responsibility under data protection law. You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list. For more information on the responsible handling of business data, please visit https://business.safety.google/privacy/.
We use the Google Analytics service on our website, provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
Google Analytics is a web tracking tool that analyzes the behavior of website visitors and their interactions with our website, and provides us with reports and forecasts regarding the content and products on our website and their popularity (known as tracking). We have integrated Google Analytics so that the service can analyze the browsing behavior of website users. To this end, Google collects data on visitors’ interactions with our website and, where applicable, any existing information derived from cookies or other storage technologies, and compiles this data into statistics for us. Google Analytics uses data processing technologies that enable the tracking of individual website visitors and their interactions with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to fill data gaps and generate comprehensive statistics about the content on our website using machine learning technologies, modeled statistics, and forecasting functions. If Google Analytics is enabled on our website, the data collected by Google Analytics is transferred to servers operated by Google Ireland Limited. As part of data processing on behalf of Google, personal data may also be transferred to the servers of the parent company, Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We use Google Analytics to continuously optimize our website and improve its accessibility. This is what is known as audience measurement.
For the processing itself, the service—or rather, we—collect the following data: Data on site visitors’ interactions with the website’s content, data on the use of the services displayed on our website, and data from external Google services, provided they interact with our website, such as advertising data or data regarding advertising behavior, data on approximate geographic location, the browser and operating system used, as well as additional information about the device used.
Google Analytics will store the data relevant to web tracking for as long as necessary to fulfill the web service that has been booked. Data collection and storage are anonymized. To the extent that individual interactions by site visitors make it possible to subsequently link specific actions to a specific individual, we will delete the collected data once the purpose has been fulfilled. The data will be deleted at the latest when it is no longer subject to any statutory retention requirements. As a general rule, we will delete this data no later than 12 months after collection. You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.
The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=de.
On our website, we use the Google Maps service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
On our behalf, Google will use the information collected via Google Maps to display the map to you. Google Maps allows you to find us more quickly and accurately than a simple, non-interactive map would. The relevant data is also used to identify website visitors who view our Google Maps map—potentially using the Google Advertising ID—and to link them to physical visits and accesses of other contact information listed on Google. In this way, Google can estimate expected visitor traffic.
For the processing itself, the service—or rather, we—collect the following data: Data required for the visualization and display of location data in the form of a map, such as, in particular, IP address, information from Google background services such as Google APIs, search terms, IP address, coordinates, starting point and destination when using the route planner, location data, Google Advertising ID, and Android Advertising ID.
We have entered into a joint processing agreement with Google regarding Google Maps. You can find the terms of the agreement at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/. If the service is enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of data processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may receive and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. To this end, data may also be processed by the Google services Google APIs, Google Cloud, and Google Fonts in accordance with Google’s Privacy Policy, with Google bearing responsibility under data protection law. You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may withdraw your consent at any time. You can find more information about withdrawing your consent either in the consent form itself or at the end of this Privacy Policy.
We use the Google Tag Manager service on our website, provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF— https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
Google Tag Manager provides a technical platform for running other web tools and web tracking programs using so-called “tags” and for managing them collectively. In this context, Google Tag Manager stores cookies on your computer and, to the extent that web tracking tools are used via Google Tag Manager, analyzes your browsing behavior (known as “tracking”). The data generated by the “tags” is consolidated, stored, and processed by Google Tag Manager within a unified user interface. All integrated “tags” are listed separately in this Privacy Policy. When you use our website with Google Tag Manager “tags” enabled, data—including, in particular, your IP address and your user activities—is transmitted to Google’s servers. The tracking tools used in Google Tag Manager ensure, through IP anonymization of the source code, that your IP address is anonymized by Google Tag Manager before transmission. Tag Manager allows us to link and analyze metrics from various service providers (Google and third parties) based on what is known as “tag management.” Google Tag Manager helps us compile reports on website activity and manage the web tools on our website.
For the processing itself, the service—or rather, we—collect the following data: cookies, web tracking data, outgoing or incoming links, and information generated during the integration and activation of JavaScript code on the website by Google Tag Manager and the web tools triggered by Google Tag Manager.
You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.
The provider also offers an opt-out option at https://policies.google.com/privacy.
On our website, we use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and preload necessary catalog files. In particular, the service loads background data for Google Fonts and Google Maps.
As part of data processing on behalf of clients, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can view the provider’s certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.
On our website, we use active content from external providers, known as web services. When you visit our website, these external providers may receive personal information about your visit to our website. In some cases, this may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This may result in limited functionality on the websites you visit.
We use the following external web services:
On our website, we use the Font Awesome service provided by Fonticons Inc., 6 Porter Road, Apartment 3R, MA 02140 Cambridge, United States, email: hello@fontawesome.com, website: https://fontawesome.com/. Data is also transferred to a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection required by the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.
The Font Awesome service is used to load fonts on our site so that we can display the page in a more visually appealing format.
For more information on how the transferred data is handled, please see the provider's privacy policy at https://fontawesome.com/privacy.
On our website, we use the Google Cloud APIs service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
We use Google APIs to load additional Google services on our website. Google APIs are a collection of interfaces that enable communication between the various Google services used on our website. The service is used in particular to display Google Fonts and to provide Google Maps.
For the processing itself, the service—or rather, we—collect the following data: IP address
If the service is enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of data processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may receive and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. To this end, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads, and Google Fonts in accordance with Google’s Privacy Policy, with Google bearing responsibility under data protection law. You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.
On our website, we use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
We use the Google Fonts service to incorporate attractive fonts into our site so that we can display our website in a more visually appealing way. This service may also be used on our website if other Google services are loaded that require Google Fonts to function. This is the case, for example, when our website uses Google services that absolutely require Google Fonts to operate.
For the processing itself, the service—or rather, we—collect the following data: data on fonts, the website visitor’s IP address, statistics on font usage, and other data from Google services related to our website.
If the service is enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of data processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may receive and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. To this end, data may also be transferred to the Google services Google APIs, Google Cloud, and Google Ads in accordance with Google’s Privacy Policy. You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.
We use the JotForm service on our website, provided by JotForm Inc., 4 Embarcadero Center, Suite 780, 94111 San Francisco, United States, email: privacy@jotform.com, website: https://www.jotform.com/. The data is also transferred to a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection required by the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.
The JotForm plugin allows users to create custom forms and seamlessly integrate them into their websites or online platforms. It makes it easier for businesses and organizations to capture data, collect feedback, and automate processes.
For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.jotform.com/privacy/.
We use the PayPal service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg, on our website. Personal data is transmitted exclusively to servers located in the European Union.
Pursuant to Article 6(1)(b) of the GDPR, the legal basis for the processing of personal data is the contract that has already been concluded between you and us or that is yet to be concluded.
We have integrated this service so that we can display the PayPal button on every subpage of our online store, letting you know which payment methods are available for shopping with us.
Under the terms of the agreement between you and PayPal, data may be transferred to companies affiliated with PayPal when you make a payment via PayPal. These companies may be located in the United States, which means it cannot be ruled out that U.S. authorities may have access to your data.
You can find information about your rights regarding data processing at the end of this Privacy Policy.
For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.
On our website, we use the Rechtstextsnippet service and modules provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany; email: support@website-check.de; website: https://www.website-check.de/. Personal data is transmitted exclusively to servers located in the European Union.
The legal basis for the processing is Article 6(1)(c) of the GDPR. Using this service helps us comply with our legal obligations.
This service is used to load the content of our legal texts onto our website. The integration on our site ensures that the most current legal texts are loaded. This integration may also be used to load additional technical modules related to the legal texts or legally required elements, as needed.
For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.
On our website, we use the hcaptcha service provided by Intuition Machines, Inc., 2211 Selig Drive, 90026 Los Angeles, United States, email: support@imachines.com, website: https://www.hcaptcha.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission regarding the EU-US Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF— https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, meaning that the standard level of protection provided by the GDPR applies to the transfer.
We use the hcaptcha service to protect our website—and in particular the input fields on our website, such as contact forms—from bots and cyberattacks. To this end, before using our input fields, customers must solve a CAPTCHA to verify their authenticity or undergo an automated verification process.
For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.hcaptcha.com/terms.
We integrate and use cookies on various pages to enable certain features of our website and to integrate external web services. These so-called "cookies" are small text files that your browser can store on your device. These text files contain a unique string of characters that uniquely identifies your browser when you return to our website. The process of storing a cookie file is also referred to as “setting a cookie.” Cookies can be set both by the website itself and by external web services. Cookies are set by our website or by external web services to maintain the full functionality of our website, improve user-friendliness, or to serve the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as unique or random IDs, so that we can offer more personalized services. Details are listed in the table below.
To the extent that cookies are processed on the basis of consent pursuant to Art. 6(1)(a) of the GDPR, this consent also constitutes consent within the meaning of § 25(1) of the TDDDG for the placement of the cookie on the user’s device. To the extent that another legal basis under the GDPR is cited (e.g., for the performance of a contract or to comply with legal obligations), the storage or placement of cookies is based on an exception pursuant to Section 25(2) of the TDDDG. This exception applies “if the sole purpose of storing information on the end user’s terminal equipment or the sole purpose of accessing information already stored on the end user’s terminal equipment is to facilitate the transmission of a message via a public telecommunications network” or “if the storage of information in the end user’s terminal equipment or access to information already stored in the end user’s terminal equipment is absolutely necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user.” The applicable legal basis is determined by the cookie table provided later in this section.
Cookies are set by our website or external web services to maintain the full functionality of our website, improve user-friendliness, or to serve the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as unique or random IDs, so that we can offer more personalized services. Details are listed in the table below.
Our cookies are stored until you delete them from your browser or, in the case of a session cookie, until the session expires. Details are listed in the table below.
You can configure your browser according to your preferences to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or accept them by default. Cookies can be used for various purposes, such as recognizing that your device is already connected to our website (persistent cookies) or saving recently viewed content (session cookies). If you have expressly granted us permission to process your personal data, you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its revocation.
If cookies have been set based on your consent, you can withdraw your consent at any time in the cookie settings of the cookie banner. You can adjust the cookie settings here.
Your personal data is protected through technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. In the case of unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems; therefore, we recommend encrypted communication or sending information by mail for information requiring a high level of confidentiality.
We would like to expressly point out that our email system uses an automated archiving process. All incoming and outgoing emails are digitally archived in an audit-proof manner through this process.
Art. 6(1)(c) GDPR (legal obligation). The legal obligation consists of compliance with tax and commercial law requirements (e.g., Sections 146, 147 of the German Fiscal Code (AO), Sections 238, 257 of the German Commercial Code (HGB)).
The purpose of archiving is to comply with tax law (e.g., Sections 146, 147 AO—obligation to retain emails relevant to tax law) and commercial law requirements (e.g., §§ 238, 257 HGB—obligation to archive business correspondence).
Our email correspondence is stored until the expiration of retention requirements under tax and commercial law. The retention period may be up to 10 years.
You may object to the processing of your data at any time pursuant to Article 21 of the GDPR and request the erasure of your data pursuant to Article 17 of the GDPR. You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.
Please also note that we only accept application documents in PDF format. Compressed files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered. We do not accept applications in Word format or other file formats and will delete them unread. Please note that application documents sent via unencrypted email may be opened by third parties before they reach our IT systems. We assume that we may also respond to unencrypted application emails in unencrypted form. If you do not wish this, please let us know in your application email.
You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have the right to access the information specified in Article 15(1) of the GDPR, provided that this does not infringe upon the rights and freedoms of others (see Article 15(4) of the GDPR). We would also be happy to provide you with a copy of the data.
Pursuant to Article 16 of the GDPR, you have the right to have us correct any personal data we may have stored incorrectly (such as your address, name, etc.) at any time. You may also request that we complete the data we have stored about you at any time. We will make the necessary changes immediately.
Pursuant to Article 17(1) of the GDPR, you have the right to have us erase the personal data we have collected about you if
Pursuant to Article 17(3) of the GDPR, this right does not apply if
Pursuant to Article 18(1) of the GDPR, you have the right, in certain cases, to request that the processing of your personal data be restricted.
This is the case when
If you have given us your explicit consent to the processing of your personal data (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Pursuant to Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data that was collected on the basis of Article 6(1)(f) (in the context of a legitimate interest). You are entitled to this right only if there are specific circumstances that preclude the storage and processing of such data.
You can exercise your rights at any time by contacting us using the contact information below:
Pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used, and machine-readable format. The data may be sent either to you or to a data controller of your choice.
Upon request, we will provide you with the following data in accordance with Article 20(1) of the GDPR:
We will transfer your personal data directly to the data controller of your choice, provided this is technically feasible. Please note that, pursuant to Article 20(4) of the GDPR, we are not permitted to transfer data that would infringe upon the freedoms and rights of other individuals.
If you suspect that your data is being processed unlawfully on our website, you may, of course, seek a judicial resolution of the matter at any time. In addition, you may pursue any other legal remedies available to you. Regardless of this, pursuant to Article 77(1) of the GDPR, you have the option to contact a supervisory authority. You have the right to lodge a complaint under Article 77 of the GDPR in the EU Member State where you reside, where you work, and/or where the alleged infringement occurred; that is, you may choose the supervisory authority to which you wish to submit your complaint from among the locations listed above. The supervisory authority to which the complaint was submitted will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
Created by:
© DURY LEGAL Attorneys at Law – www.dury.de
© Website-Check GmbH – www.website-check.de
Individual cookie settings Individual cookie settings
Essential cookies enable basic functions and are necessary for the proper functioning of the website.
These cookies are part of anonymous website usage analysis services. We employ them so that we can better understand how you use our website.
Cookies like this are used by third parties to display personalized advertisements. They do this by tracking visitors across websites.
Any content from both video and social media platforms is blocked by default. If you accept cookies from external media, you give consent to use at least social media platforms. We may still require explicit consent for any external video or service interaction such as Google Maps.
We use cookies and scripts on our website. Some of them are essential, while others help us to improve this website and your user experience with it. You have the option to withdraw your consent at any time via the privacy policy.
