The following declaration informs you about what kind of personal data is collected by us as the responsible body and for what purpose, and to what extent this data is made accessible to third parties.

1.1 Responsible body and data protection officer

MBG INTERNATIONAL PREMIUM BRANDS GmbH

Oberes Feld 13, 33106 Paderborn

Phone: +49 5251 546 0

E-mail: info@mbgglobal.com

Data protection officer

Technologiewerft GmbH

Carola Sieling

c/o law firm Sieling

Gurlittstraße 24, 20099 Hamburg

Phone: 040 41923921

E-Mail: info@technologiewerft.de

1.2 Legal basis for the processing of your personal data

The processing of personal data requires a legal basis, which we would like to present to you below.

Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data for which we obtain the consent of the data subject.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also includes processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.

1.3 Rights of the data subject

You have a right to information about the personal data we have stored about you. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

In accordance with the statutory provisions, you also have the right to rectification of inaccurate data, restriction of processing, data portability and erasure of your personal data. To do this, send us an e-mail with the subject "Data protection".

You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data is in breach of the statutory provisions.

For reasons arising from your particular situation, you can object at any time to the processing of personal data concerning you by us, which is carried out on the basis of Art. 6 para. 1 lit. e or f; this also applies to profiling based on these provisions (Art. 21 GDPR). If the legal requirements are met, we will then no longer process your personal data.

In the case of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object, your personal data will no longer be processed for these purposes.

If you have given your consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

If you exercise one of the aforementioned rights as a data subject, process we your in this context collected personal data data for answering your request. The processing your personal data data takes place to fulfillment one legal obligation.

In the case of a Opposition become we yours personal data data not more process, it be unless, we can compelling worthy of protection reasons for the processing of these data can be proven, which your interests, rights and liberties predominate or yours personal data data serve the assertion, exercise or defense from legal claims.

1.4 Storage duration of personal data

Unless we have provided storage information on the specific points, the following applies: We store personal data for the duration of the respective statutory retention period or as long as the purpose of the collection exists. After the retention period has expired, the data is routinely deleted, unless there is a need to initiate or fulfill a contract. If the user's data is not deleted because it is required for other and legally permissible purposes, its processing is restricted as far as possible. Accordingly, the data is blocked where possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.

2 Contractual processing

If you enter into a contractual relationship with us, we generally collect the following data: Title, first and last name, e-mail address, address, telephone/mobile phone number, information necessary for the performance of the contract.

We require this data so that we can identify you as a contractual partner, execute the contract, contact you and for invoicing purposes. The data processing takes place at your / our request or order and is necessary for the purposes mentioned for the mutual fulfillment and obligation arising from the contractual relationship.

We may also process data on the basis of a legitimate interest, e.g. in the assertion of or defense against claims arising from the contractual relationship. The personal data collected will be stored until the end of the contractual relationship and then deleted, unless we are obliged to store it for longer in accordance with statutory obligations under tax and commercial law retention and documentation obligations (from HGB, StGB or AO).

We use the data of our (future) contractual partners and employees (first name, surname and, if applicable, address) to carry out comparisons against so-called sanctions lists. Sanctions lists are centrally compiled and maintained lists of persons, associations or companies against whom state economic or legal restrictions have been imposed. Various regulations oblige us to take measures to prevent support for business partners, suppliers and also our (potential) employees if they are included on the lists. We only use the data to ensure that these persons are not included on any of the sanctions lists. We need this information in order to fulfill our legal obligations and avert possible sanctions. This is also in our legitimate interest.

3 Data processing in the context of the website

3.1 Log files, hosting

The server statistics automatically store data that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called "log files").

This is the following data in detail:

· Language and version of the browser software

· Operating system used and its interface

· Referrer URL (the previously visited page)

· Host name of the accessing computer (IP address)

· Date and time of the server request

· Time zone difference to Greenwich Mean Time (GMT)

· Content of the request (specific page)

· Amount of data transferred

· Access status/ HTTP status code

As a rule, we cannot assign this data to specific persons. This data is not merged with other data sources. The data is also deleted within 2 months after a statistical evaluation. Data whose further retention is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

We make use of hosting services. These are used to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this online offering.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering.

3.2 Contacting us

When you contact us by email or via a contact form, your details will be stored by us in order to answer your questions.

Your data will not be passed on to third parties unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted once we have processed your request or the purpose of storage no longer applies and there are no other legal exceptions to the contrary.

3.3 Cookies

Cookies are small text files that are stored on your computer and through which certain information flows to the site that sets the cookie. They are used to make the website more user-friendly and effective and/or to make it easier for you to navigate our website.

We only set cookies that are not absolutely necessary with your consent. You can revoke this consent for future use at any time.

Consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, refuse to accept third party cookies or all cookies or delete cookies that have already been saved. If you do not accept cookies, please note that our website may not function properly in this case. Unless we provide other information on the individual topics mentioned in this privacy policy or in the cookie banner, the lifespan of cookies is 24 months.

You can find out which function on our website sets cookies in the individual function descriptions in our privacy policy and in the cookie banner.

3.4 Registration

Our website offers a registration and login option. The personal data entered during registration will be transmitted to the controller. The data is stored by us exclusively for internal use.

When logging in, the user's IP address and the date and time of login are stored. This serves to prevent misuse of the services. The data is not passed on to third parties. An exception is made if there is a legal obligation to pass on the data.

The registration of data is necessary for the provision of content or services. Registered persons have the option of having the stored data deleted or amended at any time. The data subject can obtain information about the personal data stored about them at any time.

4 Newsletter and information to existing customers

4.1 newsletter

If you would like to receive the newsletter offered on our website, we require a valid e-mail address from you that allows us to verify that you are the owner of the e-mail address provided or that the owner agrees to receive the newsletter.

After you have provided your e-mail address, we will send you a confirmation e-mail to the address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to the newsletter dispatch will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter.

We only send newsletters with your consent or legal permission.

You can receive the newsletter from us in various ways, for which we use various service providers:

Newsletters are sent by email using "Klaviyo", a service for our email marketing. The service provider is the American company Klaviyo, 125 Summer St, Boston, MA 02110, USA. You can find out more about the data processed through the use of Klaviyo in the privacy policy at https://www.klaviyo.com/privacy/policy. Klaviyo is certified under the Data Privacy Framework, so that possible measures have been taken to ensure compliance with European data protection law.

The data collected is also entered into our content management system Shopify (Shopify International Ltd. c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland) in order to generate vouchers for you and to maintain you as a newsletter customer.

We use the following providers to send our newsletter via WhatsApp:

- We use the Keaz service of Pocket Agency GmbH, Hortensienstr. 9, 12203 Berlin, Germany, for sending. You can find more information on data processing by Keaz in the privacy policy at: https://keaz.app/de/privacypolicy

- We use the Chatwerk service of Inbox Solutions GmbH, Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany, for sending. You can find more information on data processing by Chatwerk in the privacy policy at: https://chatwerk.de/datenschutzerklaerung/

Your personal data will not otherwise be passed on to third parties.

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons, also known as tracking pixels. These are one-pixel image files that link to our website and thus enable us to evaluate your user behavior. This is done by collecting your e-mail address and web beacons, which are assigned to your e-mail address and linked to a unique ID.

We use the data obtained in this way to create a user profile so that we can provide you with a newsletter tailored to your interests. In doing so, we record when you read our newsletter, which links you click on in it and deduce your personal interests from this. We link this data to the actions you take on our website.

We store the data collected in this way on our server. You can object to this tracking and the sending of the newsletter at any time by sending us an e-mail.

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time. You will find a link to unsubscribe from the newsletter at the end of each newsletter. If users have only registered for the newsletter and have canceled this registration, their personal data will be deleted.

4.2 Information for existing customers

If you, as our contractual partner, have concluded a contract for our services, we will offer you further information about our own similar services via the e-mail address provided when the contract was concluded (Section 7 III UWG). You can object to this transmission at any time.

These mailings are made on the basis of our legitimate interest in advertising.

5 Forwarding of the data: General and contractual purpose

We pass on data to third parties if this is necessary for the fulfillment of the contract and / or if we are legally obliged and / or entitled to do so in individual cases. The data is typically passed on to contracted service providers, including hosting, operation, maintenance and support of IT systems, communication systems and disposal under certain circumstances. In addition, your data may also be transmitted to postal or delivery services, your bank, tax consultants/auditors and lawyers.

5.1 Payment service: PayPal

If you select payment with the online payment service provider PayPal as part of your order process, your contact details will be transmitted to PayPal when the order is placed. PayPal is an offer from PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider and a trustee and offers buyer protection services.

The personal data transmitted to PayPal includes data required for order processing as well as data related to the order, such as the number of items, item number and invoice amount.

This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship.

Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit agencies. This transmission is used to check your identity and creditworthiness in relation to the order you have placed. You can find out which credit agencies are involved here and which data is generally collected, processed, stored and passed on by PayPal in PayPal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

5.2 Payment service: Sofortüberweisung

You can pay on our website using Sofortüberweisung, an offer from Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Sofortüberweisung is a technical procedure by which we receive a payment confirmation immediately after the payment has been completed.

If you select "Sofortüberweisung" as the payment option, you consent to the automated transfer of personal data required for payment processing. You use your own online banking data and do not have to transmit any personal information or card details to the merchant. The online banking data is entered on the secure payment page of Sofort GmbH, to which the merchants have no access. The online banking access data, such as PIN and TAN, can never be viewed by the merchant or third parties, including Klarna, or by employees of SOFORT GmbH.

The following personal information is stored: - Name - Account number - Sort code - Subject - Amount - Date. We also receive this information in the payment confirmation. We can also obtain this information from the account statement. No other personal data is stored, no other personal data is passed on to third parties and no credit checks are carried out on the basis of historical payment data. The details of what is automatically checked by the software can be found in Sofort GmbH's privacy policy: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de

You can also see from the information that only the account you have selected for the transfer is included in the check. Sofort GmbH stores the name, account number, bank code, subject, date and transfer amount within the statutory retention periods for billing purposes and to fulfill statutory retention obligations. The basis for this is § 28 para. 1 sentence 1 no. 1 BDSG. The Sofortüberweisung system is designed for data economy, i.e. with Sofortüberweisung you can pay easily and securely with your online banking account without registering or opening an "account".

Here you can call up further data protection regulations of Sofortüberweisung: https://www.klarna.com/sofort/datenschutz/

5.3 Payment service: Klarna

If you choose Klarna's payment services Klarna Invoice and/or Klarna Installment Purchase as a payment option, you agree that we may transmit your customer and purchase contract data collected during your order process to Klarna for the processing of the invoice purchase and an identity and credit check. This data is transmitted so that Klarna can create an invoice and carry out an identity and credit check to process your purchase with the invoice processing you have requested. Klarna requires this data in order to obtain information from credit agencies for the purpose of identity and credit checks.

As part of the decision on the establishment, execution or termination of the contractual relationship when selecting one of Klarna's payment services, Klarna also collects and uses information on the buyer's previous payment behavior and probability values for this behavior in the future, in addition to an address check. The calculation of these score values by Klarna is carried out on the basis of a scientifically recognized mathematical and statistical procedure. Klarna will also use your address data for this purpose. If this calculation shows that you are not creditworthy, Klarna will inform you immediately. It is possible to revoke your consent to the use of personal data at any time from Klarna. However, even in this case Klarna may still be entitled to process, use and transfer the personal data if this is necessary for the contractual payment processing by Klarna's services, is required by law or is required by a court or an authority.

You can find general information about Klarna at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

5.4 Payment service: Google Pay

We offer you the option of making payments via the Google Pay service. You can use the payment details you have stored with Google Pay for your online purchases in our store without having to enter your details again. To do this, select the "Google Pay" option in the checkout and then verify yourself in your Google Pay account. You will not incur any additional costs when paying via Google Pay.

Google Pay does not pass on the payment details stored in your Wallet to us and you do not have to enter them when placing an order.

When paying via Google Pay, all personal data that you have provided to Google Pay will be processed by Google Pay (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as the controller. We have no influence on the processing or your contractual relationship with Google Pay. You can find more information on processing by Google Pay at https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

5.5 Store Pay

We offer you the option of making payments via the Shop Pay service. You can use the payment data you have stored in any Shopify store for your online purchase in our store without having to enter your data again. To do this, select the "Shop Pay" option in the checkout and then verify yourself in your Shopify account. There are no additional costs when paying via Shop Pay.

When paying via Shop Pay, all personal data that you have provided to Shop Pay will be processed by Shopify (Shopify International Ltd. c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland) as the controller. We have no influence on the processing or your contractual relationship with Shopify. You can find more information on processing by Google Pay at https://help.shopify.com/de/manual/payments/shop-pay

6 Forwarding of the data: Tools as part of the operation of the website and online services

In some cases, we use external service providers within the scope of your consent or our legitimate interests with regard to analysis, optimization and economic operation of the online offer. If you have given your consent for tools that are not necessary for the operation of the website, you can have these settings changed again at any time. We list our service providers below.

If your data is to be used for other purposes, we will inform you in advance and only use the data if you have expressly given your further consent to this in advance.

6.1 Google

We use services for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is responsible within the scope of your consent for the optimization and economic operation of our online offer.

Google LLC is certified under the Data Privacy Framework, so that possible measures have been taken to ensure compliance with European data protection law.

6.1.1 Google Analytics

This website uses Google Analytics as a web analysis service on the basis of your consent. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

We would like to point out that this website uses Google Analytics with IP anonymization and therefore IP addresses are shortened by Google in member states within the European Union or in other contracting states of the Agreement on the European Economic Area before transmission in order to exclude a direct personal reference. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Google will use this information on behalf of the provider for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. To the best of our knowledge, Google will not associate your IP address with any other data held by Google.

You can withdraw your consent at any time with effect for the future by accessing the cookie settings on our website and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it.

You can also prevent the installation of cookies in advance by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also object to the collection and storage of data by Google for the respective end device at any time with effect for the future in connection with the use of this link:

https://tools.google.com/dlpage/gaoptout?hl=de

Google Analytics 4 sets a maximum retention period of 14 months for data storage. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

6.1.2 Google Adsense

This website uses Google AdSense, a service for integrating advertisements from Google. These advertisements can be recognized by the reference "Google ads" in the respective advertisement. Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyze information such as visitor traffic on these pages. The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google and authorities. However, Google will not merge your IP address with other data stored by you.

This website may also activate Google Adsense ads from third-party providers. The aforementioned data may be transferred to these third-party providers. You can find a list of these third-party providers at https://support.google.com/adsense/answer/94149

You can not give/revoke your consent or prevent the installation of cookies in various ways; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

For more information on the purpose and scope of data collection and processing by Google Adsense, as well as your rights in this regard and setting options for protecting your privacy, please refer to the general data protection information https://www.google.com/policies/privacy/, especially for Google Adsense at https://www.google.com/policies/privacy/partners/ and www.google.de/intl/de/policies/technologies/ads .

6.1.3 Google AdWords / Conversion Tracking

This website uses "Google Adwords" and conversion tracking as part of Google Adwords. When you click on an advertisement placed by Google, so-called "cookies", text files that are stored on your computer, are set. The cookies lose their validity after 30 days and are not used for personal identification. This allows Google and us to recognize that the user has clicked on the ad and has been redirected to this page. Conversion cookies are used to create conversion statistics for AdWords customers. These customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. Personal identification is not possible for these customers either. You can object to this use by deactivating the Google conversion tracking cookie in your internet browser. You will then not be included in the conversion tracking statistics. Further information about Google's data protection provisions can be found at the following Internet address: http://www.google.de/intl/de/policies/privacy.

6.1.4 Google TagManager

We use the Google Tag Manager. This allows us to manage website tags via an interface and thus integrate Google marketing services into our online offering, for example. The Tag Manager itself does not process any personal user data. For the respective Google services, please refer to the respective information and usage guidelines at https://www.google.com/intl/de/tagmanager/use-policy.html.

6.1.5 YouTube

We use the provider YouTube, a Google service, to embed videos.

These videos are stored on www.youtube.com and can be played directly from our website. YouTube uses cookies for data collection and statistical data analysis. Among other things, YouTube uses cookies to collect reliable video statistics, to prevent fraud and to improve user-friendliness. The information generated by the cookie about your use of this website (including your IP address) is also transmitted to YouTube servers in the USA and stored there. Your IP address cannot be assigned unless you have logged in to YouTube or another Google service before accessing the page or are permanently logged in. If you do not wish this, you must log out of your YouTube account and your other Google accounts.

YouTube cookies provide us with statistical values on the retrieval of individual videos embedded in the website without a reference to the respective user.

The embedded videos from YouTube are used within the scope of the permitted use by YouTube, which all users must accept. If you see any copyright infringements, please report this directly to YouTube. We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user's computer. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by YouTube. For more information on YouTube's official data protection policy, please visit https://www.google.de/intl/de/policies/privacy/ and https://support.google.com/youtube/answer/171780?hl=de.

6.2 Meta Pixel

With your consent, we use services of the social network facebook.com, which is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Facebook" or "Meta"), for the analysis, optimization and economic operation of our online offer.

The US company Meta Platforms Inc. is certified under the Data Privacy Framework, so that possible measures have been taken to ensure compliance with European data protection law.

Our website uses the advertising tools Custom Audiences and Website Custom Audiences from Meta in accordance with your consent. A non-reversible and non-personal checksum (hash value) is generated from your usage data, which is transmitted to Meta for analysis and marketing purposes on its social platform and stored in the USA.

The meta pixel is integrated directly by Meta when you visit our website and can store a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous to us and does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and can be used by Meta and for its own market research and advertising purposes. If we transmit data to Meta for comparison purposes, it is encrypted locally in the browser and only then sent to Meta via a secure https connection. This is done for the sole purpose of creating a comparison with the data that is also encrypted by Meta.

For more information on the purpose and scope of data collection and the further processing and use of the data by Meta, as well as your rights in this regard and setting options for protecting your privacy, please refer to Meta's data protection information at http://www.facebook.com/about/privacy/, and specifically for Facebook Custom Audiences at https://www.facebook.com/ads/website_custom_audiences/.

If you wish to object to the use of Meta Website Custom Audiences, you can also do so at https://www.facebook.com/ads/website_custom_audiences/. To do this, you must log in to your Facebook account.

If you click on the link, an "opt-out" cookie will be stored on your device. If you delete the cookies in this browser, you will have to click the link again. Furthermore, the opt-out only applies within the browser you are using and only within our web domain on which the link was clicked.

7 Data storage outside the EU/EEA

Where indicated in the individual tool descriptions, we use tools from US third-party providers. Insofar as this is necessary for the purposes communicated, your IP address may be processed outside the European Economic Area, where a level of data protection corresponding to the European standard is not always consistently guaranteed and confirmed (e.g. by a suitable guarantee within the meaning of Art. 46 GDPR or an adequacy decision of the European Commission). In particular, it cannot therefore be ruled out that security authorities in a third country may gain access to your IP address without you being able to take effective legal action against this.

The IP address is transmitted to these third-party providers in accordance with Art. 49 para. 1 lit. a GDPR on the basis of your express consent given in the consent banner. This consent is voluntary. You can revoke it at any time with effect for the future. You will not suffer any disadvantages as a result.

In the opinion of some US third-party providers, a level of protection corresponding to the European standard is already guaranteed due to the conclusion of so-called standard contractual clauses and additional measures taken in accordance with the Schrems II case law. However, as the suitability of such measures to guarantee an adequate level of data protection is disputed, we have decided to transmit your IP address exclusively with your consent.

The certification of some companies under the Data Privacy Framework (DPF) serves to ensure the level of protection and can be requested here for the companies: https://www.dataprivacyframework.gov/s/ . This certification is sufficient as a measure to ensure an adequate level of data protection.

8 Our presence in social media

You can find us under online presences within social networks and platforms. We would like to use these presences to communicate with our customers, interested parties and users active there and to inform them about our services and our company in this way.

The processing of the personal data of the users active there is based on our legitimate interests in communicating and providing information to and with the users. If users have given their consent to data processing within the framework of the respective social platform, the processing takes place on the basis of this consent.

If you visit one of our social media sites, we are jointly responsible with the operator of the social platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint, see the following point "Rights of the data subject") both against us and against the operator of the respective social platform.

We would like to point out that, despite the joint responsibility, we do not have full influence on the data processing operations of the social platform and may forward the rights request to the respective operator in order to better process the rights of the data subject. Our options generally depend on the company policy of the respective provider.

You can find our information on storage below. We have no influence on the storage period of your data that is stored by the operator of the social platform for its own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Depending on the social platform named below, user data processing may also take place outside the European Union. EU standard contractual clauses have been agreed with the US companies or they are certified under the Data Privacy Framework (DPF), so that we have taken possible measures to ensure compliance with European data protection law.

As a rule, user data is processed by the platforms for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Data can also be stored in the user profiles independently of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged in to them.

For a detailed description of the respective processing and the possibilities of objection, we refer to the following linked information from the providers.

8.1 Facebook (Meta)

(Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland)

The basis is an agreement on joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum

Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

8.2 Google/ YouTube

(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

Opt-Out: https://adssettings.google.com/authenticated

8.3 Instagram (Meta)