Privacy Policy

Below, we provide information about the processing of your personal data in connection with the use of our online services.

Responsible

markilux GmbH + Co. KG

Hansestraße 53
48282 Emsdetten

Phone: +49 (0) 25 72 / 15 31-0
Email: [email protected]

Contact

If you have any questions about data protection, please contact us using the contact details above.

Data protection

Johannes Meibers
meibers.datenschutz GmbH
Haus Sentmaring 9
48151 Münster

Phone: +49 (0)251 203197-0
Email: [email protected]

Storage period

We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have asked for your consent and you have given it, we will delete your personal data if you withdraw your consent and there is no other legal basis for processing.

We will delete your personal data if you object to the processing and there are no overriding legitimate reasons for the processing, or if you object to the processing for the purpose of direct marketing or related profiling.

If deletion is not possible because processing is still necessary to fulfill a legal obligation (statutory retention periods, etc.) to which we are subject or to assert, exercise, or defend legal claims, we will restrict the processing of your personal data.

Further information on the storage period can also be found in the following passages.

Your rights

You have the following rights with regard to your personal data:
- Right to information
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw your consent to the processing of your personal data at any time if you have given us such consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to complain to a supervisory authority about our processing of your personal data.

Provision of your personal data

The provision of your personal data is generally neither required by law nor contractually required and is not necessary for the conclusion of a contract. You are generally not obliged to provide your personal data. However, if this should ever be the case, we will point this out separately when collecting your personal data (for example, by marking the mandatory fields on input forms).

If you do not provide your personal data, we will generally not process your personal data for any of the purposes described below and you will not be able to take advantage of any offers related to the respective processing (example: if you do not provide your email address, you will not receive our newsletter).

Web hosting

We use external services for web hosting. These services may have access to personal data that is processed in the context of using our online offering. Further information on the services used, the scope of data processing, and the technologies and procedures used in the respective services can be found in the additional information about the services we use at the end of this passage and under the links provided there.

Google Cloud
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries takes place depending on the respective Google service and under the various EU standard contractual clauses, if these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Web server log files

We process your personal data in order to display our online offering to you and to ensure the stability and security of our online offering. In doing so, information (e.g., requested element, URL accessed, operating system, date and time of the request, browser type and version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT), and/or HTTP status code) is stored in so-called log files (access log, error log, etc.).

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is the proper display of our online offering and ensuring the stability and security of our online offering.

Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this in the browser line by the string "https://" and the lock symbol.

Content delivery networks

We use content delivery networks from external services to optimize the loading time, stability, and security of our online offering.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to optimize the loading time, stability, and security of our online offering.

When using external services, profiling (for advertising, personalized information, etc.) may also occur. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Cloudflare CDN
Provider: Cloudflare, Inc., United States of America.
Website: www.cloudflare.com/de-de/
Further information & data protection: www.cloudflare.com/de-de/privacypolicy/
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Contact

If you contact us, we will process your personal data in order to respond to your inquiry.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this case is to process your contact request. If the processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures based on your request, the legal basis for the processing is also Art. 6 (1) lit. b GDPR.

We use external services to provide and maintain our email inboxes. These services may have access to personal data that is processed when you contact us. Further information on the services used, the scope of data processing, and the technologies and procedures used in the respective services can be found below in the further information on the services we use and under the links provided there:

Gmail
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.google.com/intl/de/gmail/about/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries is carried out depending on the respective Google service and in accordance with the various EU standard contractual clauses, provided these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

To support the processing of your contact request, we use support systems (appointment booking systems, live chats, ticket systems, help desks, etc.) and employ external services for this purpose. These services may have access to personal data that is processed when you contact us via a support system. Further information on the services used, the scope of data processing, and the technologies and procedures used in the respective services can be found below in the further information on the services we use and under the links provided there:

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further information & data protection: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

SAP Cloud for Customer
Provider: SAP Deutschland SE & Co. KG, Germany.
Website: www.sap.com/germany/index.html
Further information & data protection: www.sap.com/germany/about/trust-center/data-privacy.html

Cookies & similar technologies

Cookies are used. Cookies are text files that are stored on your device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are only deleted after a certain period of time.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following information on cookies also applies to similar technologies. This information also applies to further processing (analysis & marketing, etc.) in connection with cookies and similar technologies. This applies in particular to any consent you may have given for the use of cookies. This also extends to other technologies and to further processing in connection with cookies and similar technologies.

Cookies can be used to enable the use of certain functions. Cookies can also be used to measure the reach of our online offering, to design it in line with demand and interests, and thus to optimize our online offering and our marketing. Cookies can be used by us and by external services.

We use a consent tool to manage the cookies used and the relevant consents. Details on the cookies used (purpose, storage period, external service, etc., if applicable) and the consent tool can be found in the following passages and in the consent tool we use.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies used and the related consents. Depending on the purpose of the processing, our legitimate interests can be found in the following passages.

You can prevent the storage of cookies by adjusting your browser settings accordingly. Below, we provide links for typical browsers where you can find further information on managing cookie settings:
- Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/de/latest/web-preferences/#cookies
- Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

You can find further options for objecting at the following links: www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, and https://optout.aboutads.info/?c=2&lang=EN.

If you prevent cookies from being stored, this may impair the proper functioning of our online offering. If you delete all cookies, the above settings will also be lost and must be made again.

You can also activate the "Do Not Track" function in your browser to signal that you do not want to be tracked. Below, we provide links for typical browsers where you can find further information on the "Do Not Track" setting:
- Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
- Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/verwenden-von-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
- Opera: https://help.opera.com/de/latest/security-and-privacy/
- Safari no longer supports the "Do Not Track" function as of February 2019. Cross-website tracking can be prevented in Safari by clicking on the following link: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
- Yandex: https://yandex.com/support/browser/personal-data-protection/ytp.html

You can also revoke or manage your consent to the use of cookies in the consent tool we use.

Newsletter

If we have asked for your consent and you have given it, we will process your email address for email marketing purposes and, if necessary, other personal data in order to address you personally. The legal basis for processing is Art. 6 (1) (a) GDPR. The content of the email marketing is described in detail when your consent is obtained. In addition, the email marketing contains information about us, our goods, and our services.

We use the so-called double opt-in procedure to prevent possible misuse of your personal data. To do this, after collecting your email address, we send an email to the email address you provided, asking you to confirm that you actually want to receive email marketing. The legal basis for processing is Art. 6 (1) lit. f GDPR. Our legitimate interest here is the legally compliant implementation of email marketing.

We log the time of your consent and the time of your confirmation, as well as your IP address and the content of your declaration of consent, in order to be able to prove that your consent has been obtained in accordance with the law. The legal basis for the processing is Art. 6 (1) lit. f GDPR. Our legitimate interest here is the legally compliant implementation of email marketing.

We use external services for email marketing. Further information on the services used, the scope of data processing, and the technologies and procedures used in the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

You can revoke your consent at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until revocation. To revoke your consent, you can use the link provided for this purpose in the emails or contact us using the contact details provided above.

If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist/block list in order to ensure that no further email marketing is carried out in connection with this personal data in the future. The legal basis for processing is Art. 6 (1) lit. f GDPR. Our legitimate interest in this is to avoid unwanted email marketing.

We process your personal data in the context of tracking and performance measurement in order to measure the reach of our email marketing, to tailor it to your needs and interests, and thus to optimize our email marketing. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also be carried out across services and devices. If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is the optimization of our email marketing. Unfortunately, it is not possible to revoke your consent or object to tracking or performance measurement separately. You must use the above options to revoke your consent or object to the processing of your personal data for the purposes of email marketing as a whole.

CleverReach
Provider: CleverReach GmbH & Co. KG, Germany.
Website: www.cleverreach.com/de/
Further information & data protection: www.cleverreach.com/de/datenschutz/

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further information & data protection: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Analysis & Marketing

We process your personal data to measure the reach of our online offering, to tailor it to your needs and interests, and to optimize our online offering and marketing.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is the optimization of our online offering and our marketing.

We use external services for analysis and marketing. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also be carried out across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Further information on cookies and similar technologies can be found above.

Google Ads Conversion Tracking
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/1722022?hl=de
Further information and data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries is carried out depending on the respective Google service and in accordance with the various EU standard contractual clauses, provided these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Ads Enhanced Conversions
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/9888656?hl=de
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries is carried out depending on the respective Google service and in accordance with the various EU standard contractual clauses, provided these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Analytics 4
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/analytics/answer/10089681?hl=de
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de, and https://business.safety.google/privacy/
The transfer of personal data to third countries takes place depending on the respective Google service and under the validity of the various EU standard contractual clauses, provided these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Remarketing
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/2453998
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries takes place depending on the respective Google service and under the various EU standard contractual clauses, if these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Tag Manager
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/tagmanager/answer/6102821?hl=de
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries takes place depending on the respective Google service and under the various EU standard contractual clauses, provided these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

HubSpot
Provider: HubSpot, Inc., United States of America.
Website: www.hubspot.de/
Further information & data protection: https://legal.hubspot.com/de/legal-stuff and https://legal.hubspot.com/de/privacy-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures an adequate level of data protection based on a decision by the European Commission.

LinkedIn Conversion Tracking
Provider: If you are located in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/conversion-tracking
Further information & data protection: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

LinkedIn Insight Tag
Provider: If you are located in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/insight-tag
Further information & data protection: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Meta Pixel with Custom Audiences
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com/business/help/744354708981227?id=2469097953376494
Further information & data protection: www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Meta Pixel with Custom Audiences and extended data matching
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com/business/help/744354708981227?id=2469097953376494
Further information & data protection: www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, https://de-de.facebook.com/business/help/611774685654668, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Warranty: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

SalesViewer
Provider: SalesViewer GmbH, Germany.
Website: www.salesviewer.com/de/
Further information & data protection: www.salesviewer.com/de/datenschutzerklaerung

Social media presence

We maintain social media presences on external services in order to communicate with users there and thus optimize our online offering and marketing.

This privacy policy also applies to the following social media presences:
- Facebook: www.facebook.com/MarkiluxUSA
- Pinterest: www.pinterest.de/markiluxus/
- YouTube: www.youtube.com/user/markiluxINT
- Instagram: www.instagram.com/markiluxusa/

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is the optimization of our online offering and our marketing.

When using external services, profiling (for advertising, personalized information, etc.) may also occur. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.facebook.com
The provider and we are jointly responsible. We have concluded a corresponding agreement with the provider. You can view this agreement at www.facebook.com/legal/terms/page_controller_addendum and www.facebook.com/legal/controller_addendum.
Further information & data protection: https://developers.facebook.com/docs/plugins/, www.facebook.com/legal/terms/information_about_page_insights_data, www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: www.instagram.com
Further information & data protection: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which guarantees an adequate level of data protection based on a decision by the European Commission.

Pinterest
Provider: For users who are not based in the United States of America, the service is provided by Pinterest Europe Ltd., Ireland. For users who are based in the United States of America, the service is provided by Pinterest Inc., United States of America.
Website: www.pinterest.de/
Further information & data protection: https://policy.pinterest.com/de
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.youtube.com
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries takes place depending on the respective Google service and under the various EU standard contractual clauses, if these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Social media content/plugins

We use social media content/plugins from external services to display content and functions from external services to you and thus optimize our online offering and marketing.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to optimize our online offering and our marketing.

When using external services, profiling (for advertising, personalized information, etc.) may also occur. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.youtube.com
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries is carried out depending on the respective Google service and in accordance with the various EU standard contractual clauses, provided these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Fonts & scripts

We use fonts and scripts from external services to display our online offering and to ensure that fonts and scripts are always up to date.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to display our online offering correctly and to ensure that fonts and scripts are up to date.

The use of external services may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Google Fonts
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://fonts.google.com/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries takes place depending on the respective Google service and under the various EU standard contractual clauses, if these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Maps

We use maps from external services to show you our location and enable you to use the other functions of these external services in connection with the maps.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is the simplified use of maps.

The use of external services may also involve profiling (for advertising, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Google Maps
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: www.google.de/maps
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries is subject to the respective Google service and the various EU standard contractual clauses, if these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Matterport
Provider: Matterport, Inc., United States of America.
Website: https://matterport.com/de
Further information & data protection: www.costar.com/about/privacy-notice
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

Search engines

We use search engines from external services to show you better results when searching our online offering and to optimize our online offering.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is the optimization of our online offering.

When using external services, profiling (for advertising, personalized information, etc.) may also occur. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Algolia
Provider: For users residing in Europe, the service is provided by Algolia SAS, France. For users residing outside Europe, the service is provided by Algolia, Inc., United States of America.
Website: www.algolia.com/products/ai-search
Further information & data protection: www.algolia.com/policies/privacy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

Review platforms

We use review platforms and process your personal data in order to have our services evaluated and thus optimize our online offering and marketing. To this end, we also integrate so-called widgets from the review platforms, for example to show that we use a review platform and how our services are rated.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is the optimization of our online offering and our marketing.

If we or the review platforms we use have asked for your consent and you have given it, we or the review platforms we use will process your personal data to remind you to submit a review. The legal basis for processing is Art. 6 (1) (a) GDPR.

Further information on the review platforms we use, the scope of data processing, and the technologies and procedures used when using the respective review platforms can be found in the additional information about the review platforms we use at the end of this passage and under the links provided there.

Trusted Shops
Provider: Trusted Shops SE, Germany.
Website: www.trustedshops.de/bewertungen/
Further information & data protection: www.trustedshops.de/impressum/#datenschutz

Job applications

If you apply for a job with us, we will process your personal data in order to carry out the application process and make a decision on whether to establish an employment relationship. Once the application process has been completed, we will restrict the processing of your personal data and delete or destroy it no later than 6 months after you have received notification of rejection, or we will return your application documents to you and delete or destroy any copies, unless you have consented to our continued use of your personal data.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is the proper execution of the application process and, if necessary, the defense against claims based on the rejection of an application. If the processing is necessary for the decision on the establishment of an employment relationship, the legal basis for the processing is also Section 26 (1) sentence 1 BDSG.

Captchas

We use captchas to protect our online offering from abusive, machine-generated, and/or automated entries (e.g., in forms) and to prevent any misuse.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is to protect our online offering and prevent misuse.

We use external services to provide captchas. This may also involve profiling. Profiling may also be carried out across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Google reCAPTCHA
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/security/products/recaptcha
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries takes place depending on the respective Google service and under the validity of the various EU standard contractual clauses, provided these are offered by Google. Further information on this and Google's responsibility can be found at the following link: https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. The provider has joined the EU-US Data Privacy Framework (www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Dynamic Yield

We use the services of Dynamic Yield Ltd. The Dynamic Yield personalization tool optimizes our website to make your visit a personalized experience with tailored recommendations and content. We use the page content you have accessed to recommend relevant content to you. Dynamic Yield collects pseudonymized information about your usage activities on our site for this purpose. Cookies are used for this purpose, which store only pseudonymized information under a randomly generated ID (pseudonym). A direct personal reference is therefore not possible. You can object to this collection at any time by clicking on this link and activating the opt-out. An opt-out cookie will be set, which will prevent the future collection of data from your visit to this website.