Privacy Policy

Below, we provide information about the processing of your personal data in connection with the use of our online services.

Data Controller

markilux GmbH + Co. KG

Hansestraße 53
48282 Emsdetten

Phone: +49 (0) 25 72 / 15 31-0
Fax: +49 (0) 25 72 / 15 31 444
Email: [email protected]

Contact

If you have any questions regarding data protection, please contact us using the contact information provided above.

Data Protection Officer

Johannes Meibers
meibers.datenschutz GmbH
Haus Sentmaring 9
48151 Münster

Phone: 0251 203197-0
Fax: 0251 203197-99
Email: [email protected]

Retention Period

We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have asked for your consent and you have provided it, we will delete your personal data if you withdraw your consent and there is no other legal basis for processing.

We will delete your personal data if you object to the processing and there are no overriding legitimate grounds for the processing, or if you object to the processing for the purposes of direct marketing or related profiling.

If erasure is not possible because processing is still necessary to fulfill a legal obligation (statutory retention periods, etc.) to which we are subject, or to assert, exercise, or defend legal claims, we will restrict the processing of your personal data.

Further information on the retention period can also be found in the following sections.

Your Rights

You have the following rights with respect to your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw your consent to the processing of your personal data at any time, if you have provided us with such consent. Withdrawing your consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

You have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.

Provision of Your Personal Data

The provision of your personal data is generally neither required by law nor by contract and is not necessary for the conclusion of a contract. You are generally not obligated to provide your personal data. However, should this ever be the case, we will specifically inform you of this when collecting your personal data (for example, by marking mandatory fields on input forms).

Failure to provide your personal data generally means that we will not process your personal data for any of the purposes described below, and you will not be able to take advantage of an offer related to the respective processing (example: Without providing your email address, you will not receive our newsletter).

Web Hosting

We use external services for web hosting. These services may have access to personal data processed in connection with the use of our online services. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services can be found in the additional information about the services we use at the end of this section and via the links provided there.

Google Cloud
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Web Server Log Files

We process your personal data to display our online services to you and to ensure the stability and security of our online services. In doing so, information (such as the requested element, accessed URL, operating system, date and time of the request, browser type and version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference from Greenwich Mean Time (GMT), and/or HTTP status code) is stored in so-called log files (access log, error log, etc.).

If we have asked for your consent and you have provided it, the legal basis for the processing is Art. 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the proper display of our online offering and ensuring the stability and security of our online offering.

Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this in the browser address bar by the string “https://” and the lock icon.

Content Delivery Networks

We use content delivery networks from external services to optimize the loading time, stability, and security of our online offering.

If we have asked for your consent and you have provided it, the legal basis for processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of the loading time, stability, and security of our online offering.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Cloudflare CDN
Provider: Cloudflare, Inc., United States of America.
Website: www.cloudflare.com/de-de/
Further Information & Privacy Policy: www.cloudflare.com/de-de/privacypolicy/
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Contact

If you contact us, we will process your personal data to handle your inquiry.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the processing of your inquiry. If the processing is necessary to fulfill a contract with you or to take pre-contractual measures based on your inquiry, the legal basis for the processing is also Article 6(1)(b) of the GDPR.

We use external services to provide and maintain our email accounts. These services may have access to personal data processed in the context of your contact with us. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services can be found below in the additional information about the services we use and via the links provided there:

Gmail
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.google.com/intl/de/gmail/about/
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

To support the processing of your contact requests, we use support systems (appointment booking systems, live chats, ticket systems, or helpdesks, etc.) and utilize external services for this purpose. These services may have access to personal data processed when you contact us via a support system. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services can be found below in the additional information about the services we use and via the links provided there:

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further Information & Privacy Policy: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

SAP Cloud for Customer
Provider: SAP Deutschland SE & Co. KG, Germany.
Website: www.sap.com/germany/index.html
Further information & privacy policy: www.sap.com/germany/about/trust-center/data-privacy.html

Cookies & Similar Technologies

Cookies are used. Cookies are text files stored on your device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are deleted only after a certain period of time.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following information regarding cookies also applies to similar technologies. This information also applies to further processing related to cookies and similar technologies (analysis & marketing, etc.). This applies in particular to any consent you may have given for the use of cookies. This consent also extends to other technologies and to further processing activities related to cookies and similar technologies.

Cookies may be used to enable the use of certain functions. Cookies may also be used to measure the reach of our online offering, to tailor it to user needs and interests, and thereby to optimize our online offering and our marketing. Cookies may be used by us and by third-party services.

We use a consent tool to manage the cookies used and the related consents. Details regarding the cookies used (purpose, storage duration, external service provider if applicable, etc.) and the consent tool can be found in the following sections and in the consent tool we use.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest is the management of the cookies used and the related consents. Depending on the purpose of the processing, our legitimate interests can be found in the following sections.

You can prevent the storage of cookies by adjusting your browser settings accordingly. Below, we provide links for common browsers where you can find further information on managing cookie settings:
- Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/de/latest/web-preferences/#cookies
- Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

You can find additional options for opting out at the following links: www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, and https://optout.aboutads.info/?c=2&lang=EN.

If you prevent cookies from being stored, this may impair the proper functioning of our website. If you delete all cookies, the settings mentioned above will also be lost and must be reconfigured.

Additionally, you can enable your browser’s “Do Not Track” feature to indicate that you do not wish to be tracked. Below, we provide links for common browsers where you can find further information about the “Do Not Track” setting:
- Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
- Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/verwenden-von-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
- Opera: https://help.opera.com/de/latest/security-and-privacy/
- Since February 2019, Safari no longer supports the "Do Not Track" feature. You can prevent cross-site tracking in Safari by following this link: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
- Yandex: https://yandex.com/support/browser/personal-data-protection/ytp.html

You can also revoke or manage your consent regarding the cookies we use via the consent tool we provide.

Newsletter

If we have asked for your consent and you have provided it, we process your email address for email marketing purposes and, where applicable, additional personal data to address you personally. The legal basis for processing is Art. 6(1)(a) of the GDPR. The content of the email marketing is specifically described when we obtain your consent. In addition, the email marketing contains information about us, our products, and our services.

We use the so-called double opt-in procedure to prevent potential misuse of your personal data. To this end, after collecting your email address, we will send you an email to the address you provided, asking you to confirm that you actually wish to receive email marketing. The legal basis for processing is Art. 6(1)(f) of the GDPR. Our legitimate interest in this context is the legally compliant implementation of email marketing.

We log the time you gave your consent and the time of your confirmation, as well as your IP address and the content of your consent statement, in order to be able to prove that your consent was obtained in compliance with the law. The legal basis for the processing is Art. 6(1)(f) of the GDPR. Our legitimate interest in this context is the legally compliant conduct of email marketing.

We use external services for email marketing. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

You may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. To withdraw your consent, you can use the link provided for this purpose in the emails or contact us using the contact details provided above.

If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist/block list to ensure that no further email marketing related to this personal data takes place in the future. The legal basis for the processing is Art. 6(1)(f) of the GDPR. Our legitimate interest in this regard is to prevent unsolicited email marketing.

We process your personal data as part of tracking and performance measurement to gauge the reach of our email marketing, tailor it to your needs and interests, and thereby optimize our email marketing. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. If we have asked for your consent and you have provided it, the legal basis for the processing is Art. 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our email marketing. Unfortunately, it is not possible to separately withdraw your consent or object to tracking or performance measurement. You must use the options described above to withdraw your consent or object to the processing of your personal data for the purpose of email marketing in its entirety.

CleverReach
Provider: CleverReach GmbH & Co. KG, Germany.
Website: www.cleverreach.com/de/
Further information & privacy policy: www.cleverreach.com/de/datenschutz/

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further information & privacy policy: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Analysis & Marketing

We process your personal data to measure the reach of our online offering, to tailor it to your needs and interests, and thereby to optimize our online offering and our marketing.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offering and our marketing.

We use external services for analysis and marketing. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing on you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Further information on cookies and similar technologies can be found above.

Google Ads Conversion Tracking
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/1722022?hl=de
Further information & privacy policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Ads Enhanced Conversions
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/9888656?hl=de
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Analytics 4
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/analytics/answer/10089681?hl=de
Further Information & Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de, and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Remarketing
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/2453998
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Google Tag Manager
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/tagmanager/answer/6102821?hl=de
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further information & privacy policy: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

LinkedIn Conversion Tracking
Provider: If you are located in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/conversion-tracking
Further Information & Privacy Policy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

LinkedIn Insight Tag
Provider: If you are located in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/insight-tag
Further Information & Privacy Policy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Meta Pixel with Custom Audiences
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com/business/help/744354708981227?id=2469097953376494
In certain cases, the provider and we are also joint controllers. For these cases, we have entered into a corresponding agreement with the provider. You can view this agreement and further information at www.facebook.com/legal/controller_addendum, www.facebook.com/legal/terms/businesstools, and www.facebook.com/legal/terms/businesstools_jointprocessing.
Further information & privacy policy: www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Meta Pixel with Custom Audiences and Extended Data Matching
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com/business/help/744354708981227?id=2469097953376494
In certain cases, the provider and we are also joint controllers. For these cases, we have entered into a corresponding agreement with the provider. You can view this agreement and further information at www.facebook.com/legal/controller_addendum, www.facebook.com/legal/terms/businesstools, and www.facebook.com/legal/terms/businesstools_jointprocessing.
Further information & privacy policy: www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, https://de-de.facebook.com/business/help/611774685654668, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

SalesViewer
Provider: SalesViewer GmbH, Germany.
Website: www.salesviewer.com/de/
Further information & privacy policy: www.salesviewer.com/de/datenschutzerklaerung

Social Media Presence

We maintain social media presences on external platforms to communicate with users and thereby optimize our online offerings and marketing.

This privacy policy also applies to the following social media accounts:
- Facebook: www.facebook.com/MarkiluxUSA
- Pinterest: www.pinterest.de/markiluxus/
- YouTube: www.youtube.com/user/markiluxINT
- Instagram: www.instagram.com/markiluxusa/

If we have asked for your consent and you have provided it, the legal basis for processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offerings and our marketing.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com
The provider and we are joint controllers. We have entered into a corresponding agreement with the provider. You can view this agreement at www.facebook.com/legal/terms/page_controller_addendum and www.facebook.com/legal/controller_addendum.
Further information & privacy policy: https://developers.facebook.com/docs/plugins/, www.facebook.com/legal/terms/information_about_page_insights_data, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.instagram.com
Further information & privacy policy: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Pinterest
Provider: For users not residing in the United States of America, the service is provided by Pinterest Europe Ltd., Ireland. For users residing in the United States of America, the service is provided by Pinterest Inc., United States of America.
Website: www.pinterest.de/
Further Information & Privacy Policy: https://policy.pinterest.com/de
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.youtube.com
Further information & privacy policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Social Media Content/Plugins

We use social media content/plugins from external services to display content and features from those external services to you and thereby optimize our online offering and our marketing.

If we have asked for your consent and you have provided it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offering and our marketing.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

YouTube
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.youtube.com
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Fonts & Scripts

We use fonts and scripts from external services to display our online content to you and to ensure that fonts and scripts are always up to date.

If we have asked for your consent and you have provided it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the proper display of our online content and ensuring up-to-date fonts and scripts.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Google Fonts
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://fonts.google.com/
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Maps

We use maps from external services to show you our location and to enable you to use the additional features of these external services in connection with the maps.

If we have asked for your consent and you have provided it, the legal basis for the processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the simplified use of maps.

When using the external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Google Maps
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.google.de/maps
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Matterport
Provider: Matterport, Inc., United States of America.
Website: https://matterport.com/de
Further information & privacy policy: www.costar.com/about/privacy-notice
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us.

Search engines

We use search engines from external services to provide you with better results when searching our online offerings and to optimize our online offerings.

If we have asked for your consent and you have provided it, the legal basis for the processing is Art. 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offering.

When using external services, profiling may also occur (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Algolia
Provider: For users residing in Europe, the service is provided by Algolia SAS, France. For users residing outside of Europe, the service is provided by Algolia, Inc., United States of America.
Website: www.algolia.com/products/ai-search
Further Information & Privacy Policy: www.algolia.com/policies/privacy
Guarantee: EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from us.

Review platforms

We use review platforms and process your personal data in the process to have our services evaluated and thereby optimize our online offering and our marketing. To this end, we also integrate so-called widgets from the review platforms to, for example, indicate that we use a review platform and how our services are rated.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the optimization of our online offerings and our marketing.

If we or the review platforms we use have asked for your consent and you have provided it, we or the review platforms we use will process your personal data to remind you to submit a review. The legal basis for the processing is Article 6(1)(a) of the GDPR.

Further information on the review platforms we use, the scope of data processing, and the technologies and procedures involved in using the respective review platforms can be found in the additional information about the review platforms we use at the end of this section and via the links provided there.

Trusted Shops
Provider: Trusted Shops SE, Germany.
Website: www.trustedshops.de/bewertungen/
Further information & privacy policy: www.trustedshops.de/impressum/#datenschutz

Job Applications

If you apply for a position with us, we process your personal data to conduct the application process and make a decision regarding the establishment of an employment relationship. Once the application process is complete, we will restrict the processing of your personal data and delete or destroy it no later than 6 months after you receive the rejection notice, or return your application documents to you and delete or destroy any copies, unless you have consented to our continued use of your personal data.

If we have asked for your consent and you have provided it, the legal basis for the processing is Article 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the proper conduct of the application process and, if necessary, the defense against claims arising from the rejection of an application. If the processing is necessary to decide on the establishment of an employment relationship, the legal basis for the processing is also Section 26(1) Sentence 1 of the Federal Data Protection Act (BDSG).

Captchas

We use captchas to protect our online services from abusive, machine-generated, and/or automated entries (for example, in forms) and to prevent any misuse.

If we have asked for your consent and you have provided it, the legal basis for the processing is Art. 6(1)(a) of the GDPR. If we have not asked for your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this context is the protection of our online services and the prevention of misuse.

We use external services to provide the CAPTCHAs. This may also involve profiling. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information about the logic involved, as well as the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Google reCAPTCHA
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/security/products/recaptcha
Further Information & Privacy Policy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU Standard Contractual Clauses, provided these are offered by Google. Further information on this and Google’s liability can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an adequate level of data protection.

Dynamic Yield

We use the services of Dynamic Yield Ltd. The Dynamic Yield personalization tool optimizes our website to turn your visit into a personalized experience through tailored recommendations and content. We use the page content you view to recommend relevant content to you. To do this, Dynamic Yield collects pseudonymized information about your usage activities on our site. Cookies are used for this purpose, through which only pseudonymized information is stored under a randomly generated ID (pseudonym). This makes it impossible to directly link the data to you personally. You can object to this data collection at any time by clicking this link and selecting the opt-out option. An opt-out cookie will be set to prevent future collection of data regarding your visit to this website.