Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information on how your personal data is handled when you use our website. Personal data refers to any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is prade design GmbH, Herzogstraße 1, 86981 Kinsau, Germany, Tel.: 0886992061, E-mail: info@tami-dogbox.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for purely informational purposes—that is, if you do not register or otherwise provide us with information—we only collect data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited
Date and time of access
Amount of data transmitted in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in an anonymized form)

This processing is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used for any other purpose. However, we reserve the right to review server log files retrospectively should there be concrete evidence pointing to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the party responsible), this website uses SSL/TLS encryption. You can identify an encrypted connection by the string "https://" and the padlock icon in your browser's address bar.

3) Hosting & Content Delivery Network

Shopify

To host our website and display its content, we use the system provided by: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision from the European Commission.

4) Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period, allowing for the storage of site preferences (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview provided within your web browser’s cookie settings.

If any of the cookies we use involve the processing of personal data, such processing is carried out either for the performance of a contract (pursuant to Art. 6(1)(b) GDPR), based on your consent (pursuant to Art. 6(1)(a) GDPR), or to safeguard our legitimate interests—specifically, ensuring the best possible functionality of the website and providing a user-friendly, effective experience for visitors (pursuant to Art. 6(1)(f) GDPR).

You can configure your browser to notify you whenever cookies are set, allowing you to decide whether to accept them on a case-by-case basis, or to decline them entirely or in specific instances.

Please note that if you choose not to accept cookies, the functionality of our website may be limited.

5) Contacting Us

When you contact us (e.g., via a contact form or email), we process personal data—exclusively for the purpose of handling and responding to your inquiry, and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry, in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract,

In this case, an additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted once the circumstances indicate that the matter in question has been conclusively resolved, provided that there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account

Pursuant to Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed to the extent necessary if you provide such data to us when opening a customer account. You can see which data is required for opening an account in the input fields of the corresponding form on our website.

You may delete your customer account at any time by sending a message to the address of the controller mentioned above. Once your customer account has been deleted, your data will also be deleted, provided that all contracts concluded through the account have been fully settled, no statutory retention periods apply, and we have no further legitimate interest in continuing to store the data.

7) Use of customer data for direct marketing

7.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your e-mail address. Providing any further data is voluntary and is used solely for the purpose of addressing you personally. For the distribution of our newsletter, we use the "double opt-in" procedure; this ensures that you will only receive the newsletter once you have expressly confirmed your consent to receive it by clicking a verification link sent to the e-mail address you provided. By activating the confirmation link, you provide your consent for us to use your personal data in accordance with Art. 6 para. 1 lit. a of the GDPR. In this process, we store the IP address assigned to you by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect during newsletter registration is used strictly for the intended purpose.

You may unsubscribe from the newsletter at any time by using the link provided within the newsletter itself or by sending a corresponding message to the party responsible (as identified above). Once you have unsubscribed, your email address will be promptly deleted from our newsletter distribution list, unless you have explicitly consented to the continued use of your data, or we have reserved the right to further use your email address for advertising purposes—as permitted by law and as described in this policy.

Following an unsubscribe request, your email address may be stored on a "blocklist" and cross-referenced against the recipient lists for future newsletters; this is a technical measure to prevent the renewed sending of newsletters that require consent. This processing is based on our legitimate interest in avoiding the delivery of unwanted promotional material, in accordance with Art. 6 para. 1 lit. f of the GDPR.

7.2 Sending email newsletters to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular email offers for products or services from our range that are similar to those you have already purchased. In such cases, pursuant to Section 7 para. 3 of the German Act Against Unfair Competition (UWG), we are not required to obtain separate consent from you. In this respect, data processing is based solely on our legitimate interest in personalized direct marketing, in accordance with Article 6(1)(f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You have the right to object to the use of your email address for the aforementioned marketing purpose at any time, with effect for the future, by notifying the party responsible (as identified at the beginning of this document). You will only incur the standard transmission costs for such a notification. Once your objection is received, the use of your email address for marketing purposes will cease immediately.

8) Data processing for order fulfillment

8.1 To the extent necessary for the performance of a contract—specifically for delivery and payment purposes—the personal data we collect will be shared with the appointed transport provider and the relevant financial institution, in accordance with Article 6(1)(b) of the GDPR.

If, under the terms of a contract, we are required to provide updates for goods with digital elements or for digital products, we will process the contact details you provided at the time of your order in order to fulfill our statutory information obligations, pursuant to Article 6(1)(c) of the GDPR.

...to keep you informed. In this context, your contact details will be used strictly for the purpose of communicating updates that we are obligated to provide; they will be processed by us only to the extent necessary for the specific information being conveyed.

8.2 To fulfill our contractual obligations, we may utilize direct shipment from suppliers ("dropshipping"). For this purpose, we share your name and delivery address with a supplier selected by us, exclusively for the delivery of goods, in accordance with Article 6(1)(b) of the GDPR.
In cases where the delivery involves items that cannot be shipped via standard parcel services (e.g., freight shipments, bulky goods, etc.) and prior coordination of a delivery date by telephone is required, we will also share your telephone number with said supplier, in accordance with Article 6(1)(b) of the GDPR.

8.3 Transfer of personal data to shipping service providers

- DHL

We use the following transport service provider: DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany.

Provided you have given your express consent during the ordering process, we will share your e-mail address and/or telephone number with the provider—in accordance with Article 6(1)(a) of the GDPR—for the purpose of coordinating a delivery date or providing a delivery notification. Otherwise, for the purpose of delivery, we will only share the recipient's name and delivery address with the provider, in accordance with Article 6(1)(b) of the GDPR. Data is shared only to the extent necessary for the delivery of the goods. In such cases, it will not be possible to coordinate a delivery date with the provider in advance or to receive a delivery notification. Consent may be withdrawn at any time, with effect for the future, by contacting the controller mentioned above or the service provider.
- DPD

As a transport service provider, we use the following company: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany.

In accordance with Article 6(1)(a) of the GDPR, we will share your email address and/or telephone number with the service provider prior to delivery for the purpose of coordinating a delivery date or providing a delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery and in accordance with Article 6(1)(b) of the GDPR, we will only provide the recipient's name and delivery address to the service provider. Data is shared only to the extent necessary for the delivery of the goods. In such cases, it will not be possible to coordinate a delivery date with the service provider in advance or to receive a delivery notification.

Consent may be withdrawn at any time, with effect for the future, by contacting the controller mentioned above or the service provider.
- GLS

As a transport service provider, we use the following company: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein, Germany.

In accordance with Article 6(1)(a) of the GDPR, we will share your email address and/or telephone number with the service provider prior to delivery for the purpose of coordinating a delivery date or providing a delivery notification, provided you have given your express consent during the ordering process. Otherwise, for the purpose of delivery and in accordance with Article 6(1)(b) of the GDPR, we will only provide the recipient's name and delivery address to the service provider. Data is shared only to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider in advance, nor will there be a notification of delivery.

Consent may be revoked at any time, with effect for the future, by contacting the party responsible (as identified above) or the provider.

8.4 Use of Payment Service Providers

- Amazon Pay

This website offers one or more online payment methods provided by: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.

If you select a payment method from this provider that requires you to make an advance payment (such as payment by credit card), the payment details you provide during the ordering process—including your name, address, bank or payment card information, currency, and transaction number—as well as information regarding the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) of the GDPR. In such cases, your data is transmitted exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

- Apple Pay

If you choose the "Apple Pay" payment method—provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland—the payment is processed via the "Apple Pay" feature on your device (running iOS, watchOS, or macOS) by charging a payment method stored within "Apple Pay."

Apple Pay employs security features integrated into your device’s hardware and software to protect your transactions. Consequently, authorizing a payment requires entering a passcode you have previously set, as well as verification via the "Face ID" or "Touch ID" feature on your device.

For the purpose of processing payments, the information you provide during the ordering process—along with details regarding your order—is transmitted to Apple in an encrypted format. Apple then re-encrypts this data using a developer-specific key before forwarding it to the payment service provider associated with the payment card stored in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment data. Once the payment has been completed, Apple sends your device account number and a transaction-specific, dynamic security code back to the originating website to confirm that the payment was successful.

If any personal data is processed during these transmissions, such processing is carried out exclusively for the purpose of payment processing, in accordance with Article 6(1)(b) of the GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and an indication of whether the transaction was successfully completed. This anonymization ensures that the data cannot be linked to any specific individual. Apple uses this anonymized data to improve "Apple Pay" and other Apple products and services.

When you use Apple Pay on an iPhone or Apple Watch to complete a purchase initiated via Safari on a Mac, the Mac and the authorizing device communicate through an encrypted channel hosted on Apple’s servers. Apple does not process or store any of this information in a format that can be used to personally identify you. You can disable the option to use Apple Pay on your Mac via the settings on your iPhone. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac."

For further information regarding data protection with Apple Pay, please visit the following website: https://support.apple.com/de-de/HT203027
- Google Pay

If you choose the "Google Pay" payment method—provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")—the payment is processed using the payment method stored in your Google account.
To authorize a payment via Google Pay on a desktop device, you must first log in to your Google account; on a mobile device, you must complete the relevant verification process (such as facial recognition, a password, a fingerprint, or a pattern).

For the purpose of processing the payment, the information you provide during the ordering process, along with details about your order, is shared with Google. Google then transmits the payment information stored in your Google Pay account—in the form of a unique, one-time transaction number—to the website where the purchase is being made, which uses it to verify that the payment has been completed. This transaction number does not contain any actual payment details from the payment methods stored in your Google Pay account; instead, it is generated and transmitted as a unique, one-time numeric token. In all transactions made via Google Pay, Google acts solely as an intermediary to facilitate the payment process. The actual transaction takes place exclusively between the user and the website where the purchase is made, by charging the payment method stored in the user's Google Pay account. Insofar as personal data is processed during the aforementioned transmissions, such processing is carried out exclusively for the purpose of payment processing in accordance with Article 6(1)(b) of the GDPR.

For every transaction made via Google Pay, Google reserves the right to collect, store, and analyze certain transaction-specific information. This includes the date, time, and amount of the transaction; the merchant's location and description; a description of the goods or services purchased (as provided by the merchant); any photos you have attached to the transaction; the names and email addresses of the seller and buyer (or sender and recipient); the payment method used; your description of the reason for the transaction; and, where applicable, any offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Article 6(1)(f) of the GDPR, based on a legitimate interest in ensuring proper accounting, verifying transaction data, and optimizing and maintaining the functionality of the Google Pay service.

Furthermore, Google reserves the right to use the processed transaction data...

...to be combined with further information collected and stored by Google through your use of other Google services.

The terms of service for Google Pay can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information regarding data protection at Google Pay can be found at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna

This website offers one or more online payment methods provided by: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method from this provider that requires you to make an advance payment (such as a credit card payment), the payment data you provide during the ordering process—including your name, address, bank or payment card details, currency, and transaction number—as well as information regarding the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) of the GDPR. In such cases, your data is transmitted exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider makes an advance payment (such as payment by invoice, installment plan, or direct debit), you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details regarding an alternative payment method). To safeguard our legitimate interest in determining the creditworthiness of our customers, we transmit this data to the provider for the purpose of a credit check, in accordance with Article 6(1)(f) of the GDPR. Based on the personal data you have provided, as well as other information (such as the contents of your shopping cart, the invoice amount, your order history, and past payment behavior), the provider assesses whether the payment method you have selected can be approved, taking into account potential risks of non-payment or default.

In addition to the provider’s internal criteria, identity and creditworthiness information from the following credit reference agencies may also be used to inform the decision-making process, pursuant to Article 6(1)(f) of the GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may include probability values (so-called "score values"). Where such score values are incorporated into the credit assessment, they are derived using a scientifically recognized mathematical-statistical method. The calculation of these score values takes into account, among other factors, your address data.

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if such processing is necessary for the contractual execution of the payment. - PAYONE

This website offers one or more online payment methods provided by: PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany.

If you select a payment method from this provider that requires you to make an advance payment (such as a credit card payment), the payment data you provide during the ordering process—including your name, address, bank or payment card details, currency, and transaction number—as well as information regarding the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) of the GDPR. In such cases, your data is shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- PayPal

This website offers one or more online payment methods provided by: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method from this provider that requires you to make an advance payment, the payment data you provide during the ordering process—including your name, address, bank or payment card details, currency, and transaction number—as well as information regarding the contents of your order, will be transmitted to the provider in accordance with Article 6(1)(b) of the GDPR. In such cases, your data is shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we provide an advance service (i.e., we provide the goods or services before receiving payment), you will be asked during the ordering process to provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, details regarding an alternative payment method). In such cases, in order to safeguard our legitimate interest in determining your creditworthiness, we use this data—in accordance with Article 6(1)(f) of the GDPR—for the purpose of a credit assessment.

...creditworthiness check is forwarded to the provider. Based on the personal data you have provided, as well as other data (such as your shopping cart, invoice amount, order history, and payment experience), the provider assesses whether the payment method you have selected can be offered, taking into account any risks of non-payment or default.

The credit assessment may include probability values (so-called "score values"). Where such score values are incorporated into the credit assessment, they are based on a scientifically recognized mathematical-statistical method. The calculation of these score values includes, among other factors, address data.

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
- PayPal Checkout

This website uses PayPal Checkout, an online payment system provided by PayPal, which comprises both PayPal’s own payment methods and local payment options offered by third-party providers.

When paying via PayPal, credit card (via PayPal), direct debit (via PayPal), or—if available—"Pay Later" (via PayPal), we transmit your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), for the purpose of processing the payment. This transfer is carried out in accordance with Article 6(1)(b) of the GDPR and only to the extent necessary for payment processing.

For payment methods such as credit card (via PayPal), direct debit (via PayPal), or—if available—"Pay Later" (via PayPal), PayPal reserves the right to conduct a credit assessment. For this purpose, your payment data may be shared with credit reference agencies, in accordance with Article 6(1)(f) of the GDPR, based on PayPal’s legitimate interest in assessing your creditworthiness. PayPal uses the outcome of this credit check—specifically the statistical probability of payment default—to decide whether to make a particular payment method available to you. The credit report may include probability values (so-called "score values"). Where such score values are incorporated into the credit report, they are derived using a scientifically recognized mathematical-statistical method. The calculation of these score values includes, among other factors, address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if such processing is necessary for the contractual execution of the payment.

If the PayPal payment option "Pay by Invoice" is available and selected, your payment data will first be transmitted to PayPal to prepare for the payment; PayPal will then forward this data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin, "Ratepay") to facilitate the payment. The legal basis for this is Article 6(1)(b) of the GDPR. In this scenario, Ratepay conducts its own identity and credit check to assess your creditworthiness—following the principles described above—and, based on its legitimate interest in determining your ability to pay, shares your payment data with credit reference agencies in accordance with Article 6(1)(f) of the GDPR. A list of the credit agencies that Ratepay may consult can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment details are first shared with PayPal in preparation for the transaction, in accordance with Article 6(1)(b) of the GDPR. Depending on the local payment method you select, PayPal will then transmit your payment details to the respective provider to facilitate the payment, also in accordance with Article 6(1)(b) of the GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- BLIK (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information regarding data protection, please refer to PayPal’s privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website:

Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method offered by a third-party provider that requires you to make an advance payment (such as a credit card payment), the payment data you provide during the ordering process—including your name, address, bank or payment card details, currency, and transaction number—as well as information regarding the contents of your order, will be shared with that provider in accordance with Article 6(1)(b) of the GDPR. In such cases, your data is shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

8.5 Electronic Withdrawal Function for Distance Contracts

Consumers who enter into contracts on this website—for which a statutory right of withdrawal exists—may exercise this right using an electronic withdrawal function, in accordance with the applicable withdrawal provisions.

When using this withdrawal function, you must provide or confirm details to identify the contract being withdrawn from, as well as other personal information, such as your first and last name and your email address.

This information is collected and transmitted to us in accordance with Article 6(1)(b) of the GDPR, and only to the extent necessary for the proper processing of the withdrawal. Furthermore, based on Article 6(1)(b) of the GDPR, the personal data provided is used to send an email confirming receipt of the withdrawal notice. An additional legal basis for this processing is Article 6(1)(c) of the GDPR; we are legally required to provide an electronic withdrawal function for consumer distance contracts that involve payment. 9) Site Functionalities

Google Customer Reviews (formerly the Google Certified Shops program)

We participate in the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website. After using our services, you may be asked on our website whether you would like to participate in an email survey conducted by Google.

If you provide your consent in accordance with Article 6(1)(a) of the GDPR, we will transmit your email address to Google. You will then receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you provide will be aggregated with our other reviews and displayed within our Google Customer Reviews badge and our Merchant Center dashboard. Furthermore, your rating may be used for Google Seller Ratings. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC in the United States.

You may revoke your consent at any time by sending a message to the party responsible for data processing or by contacting Google directly.

For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission. Further information regarding Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

10) Tools and Other Items

10.1 Billbee

For accounting purposes, we use the cloud-based accounting software provided by: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.

The provider processes incoming and outgoing invoices, as well as our company’s bank transactions, in order to automatically record invoices, match them to the corresponding transactions, and generate financial accounting records through a semi-automated process.

To the extent that personal data is processed in this context, such processing is based on our legitimate interest in the efficient organization and documentation of our business operations, in accordance with Art. 6(1)(f) of the GDPR.

10.2 Cookie Consent Tool

This website uses a "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications that require such consent. When a user visits the site, the cookie consent tool is displayed as an interactive user interface, allowing users to provide consent for specific cookies and/or cookie-based applications by selecting the corresponding checkboxes. Through the use of this tool, any cookies or services requiring consent are only loaded once the user has provided their consent by checking the relevant boxes. This ensures that only...

In the event that consent is granted, such cookies will be placed on the user's respective device.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed in this context.

If, in an individual case, personal data (such as an IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in providing a legally compliant, user-specific, and user-friendly cookie consent management system—and, consequently, in ensuring our website is structured in a legally compliant manner.

A further legal basis for this processing is Article 6(1)(c) of the GDPR. As the data controller, we are subject to a legal obligation to ensure that the use of cookies that are not technically necessary is contingent upon the user's consent.

Where required, we have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties.

Further information regarding the operator and the configuration options for the cookie consent tool can be found directly within the relevant user interface on our website.

11) Rights of the Data Subject

11.1 Under applicable data protection law, you have the following rights (rights of access and intervention) vis-à-vis the data controller regarding the processing of your personal data; the specific legal basis for exercising each of these rights is indicated below:

Right of access pursuant to Article 15 of the GDPR;
Right to rectification pursuant to Article 16 of the GDPR;
Right to erasure pursuant to Article 17 of the GDPR;
Right to restriction of processing pursuant to Article 18 of the GDPR; Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw previously granted consent pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE SCOPE OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME—FOR REASONS RELATING TO YOUR PARTICULAR SITUATION—WITH EFFECT FOR THE FUTURE.

SHOULD YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS. IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE THIS RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of the processing, and—where applicable—any relevant statutory retention periods (e.g., retention periods under commercial or tax law).

When personal data is processed based on explicit consent pursuant to Article 6(1)(a) of the GDPR, the data in question will be stored until you withdraw your consent.

If statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations pursuant to Article 6(1)(b) of the GDPR, such data will be routinely deleted upon the expiry of these retention periods, provided that the data is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage. When processing personal data on the basis of Article 6(1)(f) of the GDPR, such data will be stored until you exercise your right to object pursuant to Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Article 6(1)(f) of the GDPR, such data will be stored until you exercise your right to object pursuant to Article 21(2) of the GDPR.

Unless otherwise indicated in the further information...

Unless otherwise stated in this declaration with regard to specific processing situations, stored personal data will be deleted when they are no longer required for the purposes for which they were collected or otherwise processed.

As of: 19/10/2026, 04:26:34