Privacy Policy

Protecting your privacy is of great concern to us. Therefore, we adhere to the legal provisions of European and German data protection laws in all data processing operations (e.g., collection, processing, and transmission).

The following statement provides an overview of which of your data are collected on our websites, how these data are used and shared, how you can receive information about the information given to us, and what security measures we take to protect your data. 

1. Who is your contact (controller) for your data protection concerns? 

The controller within the meaning of data protection laws for all data processing processes carried out via our websites is: 

K-Active Europe GmbH 
Frohnradstr. 2 
63768 Hösbach 

Phone: +49 (0)6021-62998-100 
Email address: [email protected] 

You can also address concerns and questions on data protection via email to [email protected]. 

2. What data do we require from you for the use of our websites?  Which data are collected and stored during use? 

Personal data are all information relating to an identified or identifiable natural person ("data subject"), such as your name, address, telephone number, date of birth, bank details, and your IP address. 

We generally collect and use personal data of our users only to the extent necessary to provide a functioning website and our content and services. The collection and use of personal data of our users take place regularly only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law. 

Usage data 

When using our websites, the following data are logged, which are stored exclusively for internal system-related and statistical purposes, so-called usage data: 

1. The user's IP address 
2. Date and time of access 
3. Websites accessed by the user's system through our website 

The data are also stored in the log files of our system. These data are not stored together with other personal data of the user.

The legal basis for the temporary storage of data and log files is Art. 6 Para. 1 lit. f GDPR. 

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, the data serve us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing according to Art. 6 Para. 1 lit. f GDPR. 

The data will be deleted as soon as they are no longer required for the purpose of their collection. In the case of collecting data to provide the website, this is the case when the respective session is ended. 

Data stored in log files are deleted after a maximum of seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. 

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user. 

Registration 

On our website, we offer users the possibility to register by providing personal data. The data is entered into an input mask, transmitted to us, and stored. The data is not passed on to third parties. The following data are processed during the registration process: 

• Name 
• Email address 
• Address 
• Salutation, company, phone, fax, date of birth, profession/industry including proof via file upload (optional) 

At the time of registration, the following data are also stored: 

• The user's IP address 
• Date and time of registration 

If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR. The registration of the user is necessary for the fulfillment of a contract with the user or for the implementation of pre-contractual measures. 

The data will be deleted as soon as they are no longer required for the purpose of their collection. This is the case for the data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer necessary for the execution of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contract partner in order to comply with contractual or legal obligations. 

As a user, you have the option to cancel the registration at any time by contacting us using the contact details provided above. The data stored about you can be changed at any time.

If the data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible to the extent that contractual or legal obligations do not preclude deletion. 

Contact form 

We provide a contact form on our website that you can use to contact us electronically and communicate your concerns to us. We collect your name, the reason for your inquiry, salutation, your email address, and address via the contact form. The indication of your practice/company is voluntary. At the time of sending the message, the following data are also stored: 

(1) Date and time of registration 

(2) Date and time of the last login 

For the processing of the data, reference is made to this privacy policy during the sending process. 

Alternatively, contact can be made via the provided email address. In this case, the user's personal data transmitted with the email will be stored. 

We use your data solely to process your request and may contact you using the contact details provided for this purpose. The data is not used for advertising purposes or passed on to third parties. 

The legal basis for the processing of the data transmitted via the contact form or during the sending of an email is Art. 6 Para. 1 lit. f GDPR. If the contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. The processing of personal data from the input mask serves us solely to process the contact. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. 

The data will be deleted as soon as they are no longer required for the purpose of their collection. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. 

The additional personal data collected during the sending process will be deleted after a maximum period of seven days. 

Right to object 

You have the option to object to the processing of your personal data by email to [email protected] or by contacting us using the contact details provided above. In such a case, the conversation cannot be continued. All personal data stored during the contact will be deleted in this case, unless they need to be stored for other purposes (e.g., order processing) or due to legal retention obligations. 

3. How are my data used and possibly passed on to third parties, and for what purpose does this happen? 

The personal data provided by you are used to answer your inquiries, to process your order in our online shop, and for the technical administration of our websites. For the assessment of your creditworthiness, we use your data only if we make an advance performance at your order, e.g., when ordering on account. 

A transfer, sale, or other transmission of your personal data to third parties takes place only if the transfer is necessary for the purpose of contract processing or for billing purposes or for the collection of the fee (e.g., shipping companies or payment service providers) or you have expressly consented. Furthermore, we are entitled to pass on personal data for collection purposes; this is of course only if the legal requirements for this are met. 

The legal basis for the transmission of data to third parties for the purpose of contract processing or for billing purposes is Art. 6 Para. 1 lit. b GDPR. The assessment of your creditworthiness is based on legitimate interests according to Art. 6 Para. 1 lit. f GDPR. The legitimate interest lies in the special order situation and payment method on account in that we make an advance delivery of the goods and the payment of the purchase price takes place only after receipt of the goods and the invoice. The transmission of data for collection purposes is also based on legitimate interests according to Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the need for appropriate legal action in cases of payment default. 

Right to object 

You can object to the processing of your data for the purpose of credit assessment at [email protected]. In the case of an objection, it is unfortunately not possible to continue to offer you the payment method on account for future orders. 

Due to the impaired effectiveness of legal action in the case of collection, there is no possibility to object to the transmission of data for collection purposes. 

Payment processing via Paypal 

For payment processing in our online shop, we use the payment system of the external payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you want to pay via PayPal with your payment methods stored there, an automatic connection to the online payment system of PayPal is established via a technical interface. The payment data you enter are transmitted to PayPal via an encrypted connection exclusively for the purpose of payment processing and are stored and processed there. The processing of the data takes place exclusively for the aforementioned purpose of payment processing of your order, whereby the payment data may have to be forwarded by PayPal to the credit institution you specified in order to initiate and authorize the payment process. 

Payment via Sofortüberweisung 

In cooperation with SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, we offer you the Sofort Überweisungs option “SOFORT”. In this case, your personal data provided during the order process are transmitted via a technical interface to SOFORT GmbH for the purpose of payment processing. After submitting the order offer, you will be automatically redirected to the payment form of SOFORT GmbH. The further processing of the transaction with your bank then takes place via SOFORT GmbH. In this process, SOFORT GmbH acts as a technical service provider that transmits the data you enter into the secured payment form in encrypted form to your bank. Further data protection information regarding Sofort Überweisung of SOFORT GmbH can be found here. 

Transfer in legally mandated cases 

We would like to point out that we are authorized to provide information about data on the order of the competent authority in individual cases, insofar as this is necessary for the purposes of law enforcement, for the prevention of danger by the police authorities of the federal states or for the fulfillment of the statutory tasks of the federal and state constitutional protection authorities. The legal basis for this is Art. 6 Para. 1 lit. c GDPR. 

4. Email advertising (e.g., email newsletter) 

For sending email messages to our customers, we use the newsletter service Newsletter2Go of the provider Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, Germany (hereinafter Newsletter2Go). The following data are processed by Newsletter2Go on our behalf and stored on the servers of Newsletter2Go in Germany for this purpose. Newsletter2Go uses your data exclusively for sending and evaluating the newsletters. The data protection provisions of the service provider can be found at https://www.newsletter2go.de/datenschutz-uebersicht/. 

Further information for recipients of newsletters from Newsletter2GO can be found here. 

The following data are transmitted during the newsletter registration: 

• Name 
• Email address 

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy. The legal basis for the processing of the data by Newsletter2Go after registration for the promotional emails is thus the consent given by you according to Art. 6 Para. 1 S. 1 lit. a in conjunction with Art. 7 GDPR. The data will be deleted as soon as they are no longer required for the purpose of their collection. The data collected for sending the email to the user are therefore stored as long as the subscription to the promotional emails is active. Except for your email address, which we include in our blacklist after unsubscribing from promotional emails. The processing of the email address in this case is justified via Art. 6 Para. 1 f GDPR, and the legitimate interest in this processing lies in the protection of your interest in not receiving further promotional emails from us. Therefore, your email address is not deleted but its processing is restricted according to Art. 18 GDPR. 

Revocability of consent 

The subscription to the newsletter can be terminated by the affected user at any time. For this purpose, a corresponding link can be found in each newsletter. Alternatively, the newsletter can also be unsubscribed via email to [email protected]. 

This also enables a revocation of the consent to the storage of personal data collected during the registration process. 

5. Newsletter tracking 

The newsletters sent on our behalf by Newsletter2Go contain a tracking pixel (see above), which transmits information to Newsletter2Go as soon as the newsletter is opened by you. This information is subsequently accessed by us from the servers of Newsletter2Go to generate statistical evaluations and measure the success of our newsletter campaigns. This includes the following information: 

• Your IP address 
• Information about the used browser 
• Information about the used system 
• Time of retrieval 

Through this information, we can determine whether the newsletters are opened, at what time they are opened, and which links within the newsletters are clicked. Technically, it is possible to assign this to individual newsletter recipients, but neither we nor Newsletter2Go as a service provider aim to individually track or observe single users. The evaluations serve us solely to adapt the newsletter contents to the wishes and interests of our subscribers based on their reading habits and to personalize them within the legal limits. The legal basis for the processing of personal data by the service provider Newsletter2Go for analysis purposes is Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR. 

The measurement of the newsletter usage intensity through tracking software is done, in addition to the aforementioned purposes, also to improve the quality of our newsletter system and to align the newsletter as closely as possible to your individual interests. These purposes also constitute our legitimate interest in processing personal data for the success measurement according to Art. 6 Para. 1 lit. f GDPR. 

Right to object 

By exercising your right to object to the receipt of the newsletter (see above item 5), you can simultaneously object to the processing of your data for tracking purposes. 

6. When using our websites, cookies are stored on your computer. What does this mean?

General function of cookies We use so-called cookies on our websites. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are stored only on your hard drive. Cookies can only be read by the server that previously also placed them and obtain information about what you have viewed on a website. Cookies themselves identify only the IP address of your computer and store no personal information, such as your name. The data stored in the cookies are not linked to your personal data (name, address, etc.). 

Further information on which types of cookies and to what extent we use cookies and other comparable identifiers on our websites can be found in the cookie settings, which can be accessed via our cookie management tool. A list of the specific cookies and identifiers used on our websites can be found here. 

In addition, you will find a detailed description of the services that set cookies on your device or use other identifiers such as e.g., pixels, in the following sections under item 7 of this privacy policy. In the individual sections, you will also find supplementary information on how you can additionally prevent the use of cookies or the collection by other identifiers (e.g., through browser settings or other opt-out options) in addition to the cookie settings. 

Legal basis for the use of cookies 

The legal basis for the processing of cookies that are absolutely necessary for the operation of our websites ("technically required cookies") is Art. 6 Para. 1 S. 1 lit. f GDPR, Art. 5 Para. 3 S. 2 ePrivacy Directive. 

The purpose of using technically required cookies is to simplify the use of websites for users. Some functions of our websites cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. For technically required cookies, the right to object is excluded as these are absolutely necessary to display our websites and their content to you and to make the functionalities of the websites available to you. The usage data collected by technically required cookies are not used to create user profiles. 

The use of cookies for "comfort functions" as well as for "statistics & tracking" (see more detailed description in the cookie settings) is done for the purpose of improving the quality of our websites and their content. Through these cookies, we learn how our websites are used and can thus continuously optimize our offer. Processing, especially on your device, based on cookies or other identifiers (e.g., browser fingerprints, pixels) that are not technically necessary for the function of our websites, we only carry out with your consent, which you can give via our cookie management tool, which is displayed when you access our websites. The legal basis for these cookie-based processing is § 15 Para. 3 TMG, Art. 5 Para. 3 S. 1 ePrivacy Directive. Before you have not given your consent, such cookies that are not absolutely necessary for the function of our websites will not be set. 

Revocability of given consents regarding the use of cookies 

The consents you have given for cookie processing on our websites can be revoked at any time via our cookie management tool. Cookie administration is possible at any time via the cookie settings of our cookie management tool. In addition, you can delete cookies at any time or adjust the corresponding cookie settings of the browser you are using. For further information on how to delete and/or manage cookies via your browser settings, please visit the help pages of the respective browser. 

7. Use of services for marketing and analysis purposes 

The following services are used for the statistical evaluation of user behavior on our websites and also for advertising and marketing purposes with the goal of making our offer more attractive and continuously adapting it to your specific wishes and interests. 

Google Analytics 

We use Google Analytics on our websites, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event of the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. 

More information on the functionality of Google Analytics and the applicable terms of use and data protection provisions can be found at http://www.google.com/analytics/terms/de.html or at http://www.google.de/intl/de/policies/privacy/. We would also like to point out that Google Analytics is used on our websites with the extension anonymizeIP and therefore IP addresses are only processed in a truncated form to exclude a direct personal reference. 

Revocability of consent 

We only use Google Analytics with your consent, which you can give via our cookie management tool, e.g., when accessing our websites. You can revoke your given consent at any time via the cookie settings by removing the checkmark set at "Google Analytics" in the "Statistics & Tracking" section. 

The revocation of your consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. In addition, you can prevent the transmission of data generated by the cookie and related to your use of our websites (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. 

Alternatively to installing the browser plugin, especially in internet browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on the following link:

Disable Google Analytics 

This will place an opt-out cookie on your device, which prevents the future collection of your data by Google Analytics when visiting this website. You must perform this process separately for each device. Google Ireland Ltd. is a subsidiary of Google LLC based in the USA. It is not excluded that your data collected by Google may also be transmitted to the USA. However, Google LLC has subjected itself to the Privacy Shield agreement concluded between the European Union and the USA and certified. Google has thus committed to comply with the standards and regulations of European data protection law. Further information on the Privacy Shield certification of Google LLC and its validity can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active 

Google AdWords Conversion Tracking 

On our websites, we use the function Google AdWords Conversion Tracking, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you click on an AdWords advertisement placed by Google, a so-called conversion tracking cookie is stored on your computer. This cookie is valid for 30 days and does not contain any personal data, so we cannot personally identify you. 

With the help of conversion tracking, we and Google can recognize which AdWords ads you have clicked on and whether you were redirected to our websites through this ad, provided you visit our websites and the validity of the cookie has not yet expired. We receive a separate cookie from Google, which differs from cookies of other customers of this Google service, so that we can only carry out a range measurement regarding our cookie and not across all websites of customers of the Google service AdWords. The cookie is used to create our own conversion statistics about customers who visit our websites via AdWords ads. 

Revocability of consent 

We only use Google AdWords Conversion Tracking with your consent, which you can give via our cookie management tool, e.g., when accessing our websites. You can revoke your given consent at any time via the cookie settings by removing the checkmark set at "End Device Detection" in the "Statistics & Tracking" section. 

The revocation of your consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. 

In addition, you can also deactivate participation in Google AdWords Conversion Tracking by making the appropriate setting in your browser. You will then not be included in our conversion tracking statistics. 

Further information on Google AdWords Conversion Tracking, the details of data processing via this service, and the corresponding data protection provisions of Google can be found at http://www.google.com/policies/technologies/ads/. 

Google Ireland Ltd. is a subsidiary of Google LLC based in the USA. It is not excluded that your data collected by Google may also be transmitted to the USA. However, Google LLC has subjected itself to the Privacy Shield agreement concluded between the European Union and the USA and certified. Google has thus committed to comply with the standards and regulations of European data protection law. Further information on the Privacy Shield certification of Google LLC and its validity can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active 

Facebook Remarketing – Custom Audiences via the pixel method 

On our websites, we use "Custom Audiences" via the pixel method for remarketing purposes, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). With the help of this service, we can target you with advertising by displaying so-called Facebook ads to visitors of our websites when you visit the social network Facebook. 

For this purpose, we have implemented so-called remarketing pixels from Facebook on our websites. The pixel is a code snippet that is capable of identifying your browser type through the browser ID – the individual fingerprint of your browser – and recognizing it. When visiting our websites, a direct connection to the Facebook servers is established via the pixel. Facebook is able to identify you based on the browser ID, as it is linked with other data stored by Facebook about your user account. Facebook then delivers customized, tailored ads from us in your Facebook timeline or elsewhere on Facebook. 

We ourselves are not able to identify you personally via the Facebook pixel, as only your browser ID and no further personal data about the remarketing pixel from Facebook are stored with us. Further information on Custom Audiences from Facebook, the details of data processing via this service, and Facebook's data protection provisions can be found at https://www.facebook.com/about/privacy/. 

Revocability of consent 

We only use Facebook Remarketing with your consent, which you can give via our cookie management tool, e.g., when accessing our websites. You can revoke your given consent at any time via the cookie settings by removing the checkmark set at "Facebook Pixel" in the "Statistics & Tracking" section. 

The revocation of your consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. In addition, you can deactivate the use of Facebook Remarketing by clicking here. 

This will place an opt-out cookie on your device, which prevents the future collection of your data by Facebook Remarketing when visiting this website. 

Please note that, should you delete cookies in your browser settings, this may result in the opt-out cookie being deleted as well and possibly needing to be activated again by you by clicking the link again and setting the opt-out cookie. 

Facebook Inc. is a company based in the USA, so that your data collected by Facebook may also be transmitted to the USA. However, Facebook Inc. has subjected itself to the Privacy Shield agreement concluded between the European Union and the USA and certified. Facebook has thus committed to comply with the standards and regulations of European data protection law. 

Further information on the Privacy Shield certification of Facebook Inc. and its validity can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active 

Hotjar 

Our websites use Hotjar. Hotjar is an analysis software from Hotjar Ltd., 3 Lyons Range- 20 Bisazza Street- Sliema SLM 1640, Malta. The software allows us to analyze the usage behavior of our visitors by measuring and evaluating clicks, mouse movements, and similar usage data on our website. The information collected by a tracking code and cookies are transmitted to the Hotjar server. This information is mainly device-related data such as the IP address of your device. Also, the screen size of your device, the device type, and browser information such as type and version, your geographical location, and your preferred language for the displayed websites are captured. User interactions such as mouse events (movement, position, and clicks) are also captured. Typical logfile data such as the domain, visited pages, access date, and access time are also collected via Hotjar. The collected IP address is automatically anonymized by Hotjar and stored exclusively in this anonymized form. In addition, visitors to our website are assigned a "unique user identifier (UUID)". This allows Hotjar to capture returning users of our websites without having to establish a connection to personal data (such as the IP address). 

Revocability of consent 

We only use Hotjar with your consent, which you can give via our cookie management tool, e.g., when accessing our websites. You can revoke your given consent at any time via the cookie settings by removing the checkmark set at "End Device Detection" in the "Statistics & Tracking" section. 

The revocation of your consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Moreover, you can prevent the processing of your data by Hotjar by clicking on the link https://www.hotjar.com/opt-out.

Occasionally, we will ask you anonymously via Hotjar to provide information as part of surveys. We need this information to make the offer more interesting for you and to be able to offer our products always up to date. These surveys are of course voluntary, your details are collected anonymously and treated confidentially. Identification of users is excluded. 

8. Google Maps Plugin 

We use Google Maps on our website. Google Maps is provided as a plugin for websites by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By using Google Maps on our website, information about the use of this website and your IP address are transmitted to a Google server in the USA and also stored on this server. We do not have knowledge of the exact content of the transmitted data, nor of their use by Google. Google denies in this context the connection of the data with information from other Google services and the collection of personal data. However, Google may transmit the information to third parties. If you disable Javascript in your browser, you prevent the execution of Google Maps. You can then not use any map display on our website. By using our website, you consent to the described collection and processing of information by Google. More about the privacy policy and terms of use for Google Maps can be found here: https://www.google.com/intl/de_de/help/terms_maps.html. 

9. Trusted Shops Trust Badge 

To display our Trusted Shops seal of approval and the reviews collected as well as to offer the Trusted Shops products for buyers after an order, the Trusted Shops Trustbadge is integrated on this website. This serves to safeguard our predominantly legitimate interests in optimal marketing by enabling secure shopping according to Art. 6 Para. 1 S. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further infor-mation on the data protection of Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz 

When calling up the Trustbadge, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of the call, transmitted data volume and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for analysis of security anomalies. The log files are automatically deleted no later than 90 days after creation. 

Further personal data is transmitted to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this, personal data is automatically collected from the order data. Whether you as a buyer are already registered for a product use is automatically checked using a neutral parameter, the e-mail address hashed by cryptological one-way function. The e-mail address is converted before transmission in this form not decipherable for Trusted Shops. After checking for a match, the parameter is automatically deleted. 

This is necessary for the fulfillment of our and Trusted Shops' predominant legitimate interests in the provision of the buyer protection linked to the specific order and the transactional review services according to Art. 6 Para. 1 S. 1 lit. f GDPR. Further details, also on the objection, can be taken from the Trusted Shops privacy policy linked above in this section and directly in the Trustbadge (right-click on the three dots at the top right of the Trustbadge). 

10. Rights of the data subject 

If your personal data are processed, you are the data subject within the meaning of the GDPR and you have the following rights against the controller: 

Right to information, correction, restriction of processing, and deletion You have the right at any time to free information about the data stored about you, their origin and recipient as well as the purpose of data processing on our websites. Furthermore, you have the right to correction, deletion, and restriction of processing of your personal data, provided that the legal requirements for this are met. 

Right to data portability 

You have the right to receive the personal data concerning you, which you have provided to us as the controller, in a structured, common, and machine-readable format. We can fulfill this right by providing a csv export of the customer data processed about you. Right to be informed If you have asserted the right to correction, deletion, or restriction of processing to the controller, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the controller. 

Right to object 

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. 

The controller shall no longer process the personal data unless he demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. 

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. 

If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. You have the possibility to exercise your right of objection in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications. 

Revocability of data protection consent declarations 

In addition, you can revoke at any time the consents you have given with effect for the future towards us using the contact details provided below. 

Right to lodge a complaint with a supervisory authority 

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the EU General Data Protection Regulation. 

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR. 

11. Changes to this Privacy Policy 

We reserve the right to change this privacy policy for valid reasons and without prior notice. Therefore, please regularly check this page for possible changes to this privacy policy.