Privacy Policy

Below, we provide information about the processing of your personal data in connection with your use of our online services.

Data Controller

markilux GmbH + Co. KG

Hansestraße 53
48282 Emsdetten

Phone: +49 (0) 25 72 / 15 31-0
Fax: +49 (0) 25 72 / 15 31 444
Email: [email protected]

Contact

If you have any questions regarding data protection, please use the contact information provided above.

Data Protection Officer

Johannes Meibers
meibers.datenschutz GmbH
Haus Sentmaring 9
48151 Münster

Phone: 0251 203197-0
Fax: 0251 203197-99
Email: [email protected]

Retention Period

We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have requested your consent and you have provided it, we will delete your personal data if you withdraw your consent and there is no other legal basis for the processing.

We will delete your personal data if you object to the processing and there are no overriding legitimate grounds for the processing, or if you object to the processing for the purpose of direct marketing or related profiling.

If erasure is not possible because processing is still necessary to fulfill a legal obligation (such as statutory retention periods) to which we are subject, or to assert, exercise, or defend legal claims, we will restrict the processing of your personal data.

You can also find further information on the retention period in the following sections.

Your Rights

You have the following rights with respect to your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw your consent to the processing of your personal data at any time, if you have provided us with such consent. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

You have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.

Provision of Your Personal Data

The provision of your personal data is generally neither required by law nor by contract and is not necessary for the conclusion of a contract. You are generally not obligated to provide your personal data. However, should this ever be the case, we will specifically inform you of this when collecting your personal data (for example, by marking required fields on input forms).

Failure to provide your personal data generally means that we will not process your personal data for any of the purposes described below, and you will not be able to take advantage of an offer related to the respective processing (for example: Without providing your email address, you will not receive our newsletter).

Web Hosting

We use external services for web hosting. These services may have access to personal data processed in connection with the use of our online services. For more information about the services used, the scope of data processing, and the technologies and procedures involved in using the respective services, please refer to the additional information about the services we use at the end of this section and via the links provided there.

Google Cloud
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Web Server Log Files

We process your personal data to display our online services to you and to ensure the stability and security of our online services. In doing so, information (such as the requested item, the accessed URL, operating system, date and time of the request, browser type and version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference from Greenwich Mean Time (GMT), and/or HTTP status code) is stored in so-called log files (access log, error log, etc.).

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the proper display of our online offering and ensuring the stability and security of our online offering.

Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this in the browser address bar by the string “https://” and the padlock icon.

Content Delivery Networks

We use content delivery networks provided by third-party services to optimize the loading time, stability, and security of our online offering.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is to optimize the loading time, stability, and security of our online services.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if so, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Cloudflare CDN
Provider: Cloudflare, Inc., United States of America.
Website: www.cloudflare.com/de-de/
Further Information & Privacy Policy: www.cloudflare.com/de-de/privacypolicy/
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Contacting Us

If you contact us, we will process your personal data to handle your inquiry.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is to process your inquiry. If the processing is necessary to fulfill a contract with you or to take steps prior to entering into a contract based on your inquiry, the legal basis for the processing is also Article 6(1)(b) of the GDPR.

We use external services to provide and maintain our email accounts. These services may have access to personal data processed in connection with your contact with us. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services can be found below in the additional information about the services we use and via the links provided there:

Gmail
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.google.com/intl/de/gmail/about/
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

To assist in handling your inquiries, we use support systems (appointment scheduling systems, live chats, ticket systems, or help desks, etc.) and rely on external services for this purpose. These services may have access to personal data that is processed when you contact us via a support system. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services can be found below in the additional information about the services we use and via the links provided there:

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further Information & Privacy Policy: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

SAP Cloud for Customer
Provider: SAP Deutschland SE & Co. KG, Germany.
Website: www.sap.com/germany/index.html
Further Information & Privacy Policy: www.sap.com/germany/about/trust-center/data-privacy.html

Cookies & Similar Technologies

Cookies are used. Cookies are text files stored on your device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are deleted only after a certain period of time.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following information regarding cookies also applies to such similar technologies. Likewise, this information applies to further processing activities related to cookies and similar technologies (analysis, marketing, etc.). This applies in particular to any consent you may have provided for the use of cookies. This consent also extends to other technologies and to further processing activities related to cookies and similar technologies.

Cookies may be used to enable the use of certain features. Cookies may also be used to measure the reach of our online offering, to tailor it to user needs and interests, and thereby to optimize our online offering and our marketing. Cookies may be used by us and by third-party services.

We use a consent tool to manage the cookies used and the related consents. Details about the cookies used (purpose, storage duration, external service provider if applicable, etc.) and the consent tool can be found in the following sections and in the consent tool we use.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest is the management of the cookies used and the related consents. Depending on the purpose of the processing, our legitimate interests are outlined in the following sections.

You can prevent cookies from being stored by adjusting your browser settings accordingly. Below, we provide links for common browsers where you can find further information on managing cookie settings:
- Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Edge: https://support.microsoft.com/de-de/edge/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use
- Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/de/latest/web-preferences/#cookies

You can find additional options for opting out at the following links: www.youronlinechoices.eu/ and https://optout.aboutads.info/.

If you prevent cookies from being stored, this may impair the proper functioning of our website. If you delete all cookies, the settings mentioned above will also be lost and will need to be reconfigured.

Furthermore, common browsers offer settings that allow you to opt out of tracking your browsing behavior or to technically restrict it. The specific settings available depend on the browser you are using. Below, we provide links for common browsers where you can find more detailed information about the corresponding settings:
- Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
- Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
- Edge: https://support.microsoft.com/de-de/edge/learn-about-tracking-prevention-in-microsoft-edge
- Opera: https://help.opera.com/de/latest/security-and-privacy/
- Safari: https://support.apple.com/de-de/guide/safari/sfri40732/mac

You can also revoke or manage your consent regarding the cookies we use via the consent tool we provide.

Newsletter

If we have asked for your consent and you have provided it, we process your email address for email marketing purposes and, where applicable, additional personal data to address you personally. The legal basis for this processing is Article 6(1)(a) of the GDPR. The content of our email marketing campaigns is specifically described when we obtain your consent. In addition, our email marketing contains information about us, our products, and our services.

We use the so-called double opt-in procedure to prevent any potential misuse of your personal data. To this end, after collecting your email address, we will send you an email to the address you provided, asking you to confirm that you actually wish to receive email marketing. The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is the legally compliant implementation of email marketing.

We log the time you provided your consent and the time of your confirmation, as well as your IP address and the content of your consent statement, in order to be able to demonstrate that your consent was obtained in compliance with the law. The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the legally compliant conduct of email marketing.

We use external services for email marketing. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

You may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. To withdraw your consent, you can use the link provided for this purpose in the emails or contact us using the contact information provided above.

If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist/block list to ensure that no further email marketing related to this personal data takes place in the future. The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is to prevent unsolicited email marketing.

We process your personal data as part of tracking and performance measurement to gauge the reach of our email marketing, tailor it to your needs and interests, and thereby optimize our email marketing. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our email marketing. Unfortunately, it is not possible to separately withdraw your consent or object to tracking or performance measurement. You must use the options described above to withdraw your consent or object to the processing of your personal data for the purpose of email marketing as a whole.

CleverReach
Provider: CleverReach GmbH & Co. KG, Germany.
Website: www.cleverreach.com/de/
Further Information & Privacy Policy: www.cleverreach.com/de/datenschutz/

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further information & privacy policy: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Analysis & Marketing

We process your personal data to measure the reach of our online offerings, to tailor them to your needs and interests, and thereby to optimize our online offerings and our marketing.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offerings and our marketing.

We use external services for analysis and marketing. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Further information on cookies and similar technologies can be found above.

Google Ads Conversion Tracking
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/1722022?hl=de
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Ads Enhanced Conversions
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/9888656?hl=de
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Analytics 4
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/analytics/answer/10089681?hl=de
Further Information & Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de, and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Remarketing
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/2453998
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Tag Manager
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/tagmanager/answer/6102821?hl=de
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s responsibility, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further Information & Privacy Policy: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

LinkedIn Conversion Tracking
Provider: If you are located in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/conversion-tracking
Additional Information & Privacy Policy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

LinkedIn Insight Tag
Provider: If you are located in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/insight-tag
Further Information & Privacy Policy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Meta Pixel with Custom Audiences
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com/business/help/744354708981227?id=2469097953376494
In certain cases, the provider and we are also joint controllers. For these cases, we have entered into a corresponding agreement with the provider. You can view this agreement and further information at www.facebook.com/legal/controller_addendum, www.facebook.com/legal/terms/businesstools, and www.facebook.com/legal/terms/businesstools_jointprocessing.
Further Information & Privacy Policy: www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Meta Pixel with Custom Audiences and Extended Data Matching
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com/business/help/744354708981227?id=2469097953376494
In certain cases, the provider and we are also joint controllers. For these cases, we have entered into a corresponding agreement with the provider. You can view this agreement and further information at www.facebook.com/legal/controller_addendum, www.facebook.com/legal/terms/businesstools, and www.facebook.com/legal/terms/businesstools_jointprocessing.
Further Information & Privacy Policy: www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, https://de-de.facebook.com/business/help/611774685654668, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

SalesViewer
Provider: SalesViewer GmbH, Germany.
Website: www.salesviewer.com/de/
Further Information & Privacy Policy: www.salesviewer.com/de/datenschutzerklaerung

Social Media Presence

We maintain social media accounts on external platforms to communicate with users and thereby optimize our online offerings and marketing.

This Privacy Policy also applies to the following social media accounts:
- Facebook: www.facebook.com/MarkiluxUSA
- Pinterest: www.pinterest.de/markiluxus/
- YouTube: www.youtube.com/user/markiluxINT
- Instagram: www.instagram.com/markiluxusa/

If we have asked for your consent and you have provided it, the legal basis for processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offerings and our marketing.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com
The provider and we are joint controllers. We have entered into a corresponding agreement with the provider. You can view this agreement at www.facebook.com/legal/terms/page_controller_addendum and www.facebook.com/legal/controller_addendum.
Further Information & Privacy Policy: https://developers.facebook.com/docs/plugins/, www.facebook.com/legal/terms/information_about_page_insights_data, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.instagram.com
Further Information & Privacy Policy: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Pinterest
Provider: For users not residing in the United States of America, the service is provided by Pinterest Europe Ltd., Ireland. For users residing in the United States of America, the service is provided by Pinterest Inc., United States of America.
Website: www.pinterest.de/
Further Information & Privacy Policy: https://policy.pinterest.com/de
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

YouTube
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.youtube.com
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s responsibility, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Social Media Content/Plugins

We use social media content/plugins from external services to display content and features from those external services to you and thereby optimize our online offerings and marketing.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offerings and our marketing.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

YouTube
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.youtube.com
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Fonts & Scripts

We use fonts and scripts from external services to display our online content to you and to ensure that the fonts and scripts are always up to date.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the proper display of our online content and ensuring that fonts and scripts are up to date.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across different services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Google Fonts
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://fonts.google.com/
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Maps

We use maps from external services to show you our location and to enable you to use the additional features of these external services in connection with the maps.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is to simplify the use of maps.

When using these external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across different services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if so, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Google Maps
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.google.de/maps
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Matterport
Provider: Matterport, LLC, United States of America. Matterport, LLC is a subsidiary of CoStar Group, Inc., United States of America.
Website: https://matterport.com/de
Further Information & Privacy Policy: www.costar.com/about/privacy-notice
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us.

Search Engines

We use search engines from third-party services to provide you with better search results on our website and to optimize our online offerings.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offerings.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Algolia
Provider: For users residing in Europe, the service is provided by Algolia SAS, France. For users residing outside of Europe, the service is provided by Algolia, Inc., United States of America.
Website: www.algolia.com/products/ai-search
Further Information & Privacy Policy: www.algolia.com/policies/privacy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us.

Review Platforms

We use review platforms and process your personal data in this context to allow our services to be rated and thereby optimize our online offerings and marketing. To this end, we also integrate so-called widgets from the review platforms to indicate, for example, that we use a review platform and how our services are rated.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offerings and our marketing.

If we or the review platforms we use have asked for your consent and you have provided it, we or the review platforms we use will process your personal data to remind you to submit a review. The legal basis for this processing is Article 6(1)(a) of the GDPR.

For more information about the review platforms we use, the scope of data processing, and the technologies and procedures involved in using the respective review platforms, please see the additional information about the review platforms we use at the end of this section and via the links provided there.

Trusted Shops
Provider: Trusted Shops SE, Germany.
Website: www.trustedshops.de/bewertungen/
Further Information & Privacy Policy: www.trustedshops.de/impressum/#datenschutz

Job Applications

If you apply for a position with us, we will process your personal data to conduct the application process and make a decision regarding the establishment of an employment relationship. Once the application process is complete, we will restrict the processing of your personal data and delete or destroy it no later than 6 months after you receive notification of rejection, or we will return your application documents to you and delete or destroy any copies, unless you have consented to our continued use of your personal data.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the proper conduct of the application process and, if necessary, the defense against claims arising from the rejection of an application. If the processing is necessary to decide whether to establish an employment relationship, the legal basis for the processing is also Section 26(1), Sentence 1 of the German Federal Data Protection Act (BDSG).

CAPTCHAs

We use captchas to protect our online services from abusive, machine-generated, and/or automated entries (for example, in forms) and to prevent any potential misuse.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is to protect our online services and prevent misuse.

We use external services to provide the CAPTCHAs. This may also involve profiling. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services—as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Google reCAPTCHA
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/security/products/recaptcha
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses, provided that Google offers them. For more information on this and Google’s liability, please visit the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Dynamic Yield

We use the services of Dynamic Yield Ltd. The Dynamic Yield personalization tool optimizes our website to turn your visit into a personalized experience through tailored recommendations and content. To do this, we use the page content you have viewed to recommend relevant content to you. To do this, Dynamic Yield collects pseudonymized information about your usage activities on our site. Cookies are used for this purpose, which store only pseudonymized information under a randomly generated ID (pseudonym). This makes it impossible to directly link the data to a specific individual. You can object to this data collection at any time by clicking this link and selecting the opt-out option. An opt-out cookie will be set to prevent the future collection of data regarding your visit to this website.