Privacy Policy

The responsible party for data processing is: Photolux GmbH Berlichingenstraße 16 91126 Schwabach Germany Email: info@photolux.de Phone: 09122833029

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a website is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the retrieval, the transferred data volume, and the requesting provider (access data), and documents the retrieval. These access data are exclusively evaluated for the purpose of ensuring the trouble-free operation of the site as well as improving our offerings. This serves to protect our overriding legitimate interests in a correct presentation of our offerings according to Art. 6 para. 1 sentence 1 lit. f GDPR.

All access data are deleted no later than seven days after your visit to the site ends.

1.1 Hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact the information described in this privacy policy.

Our service providers are located and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection by decision: Switzerland.

1.2 Content Delivery Network

To shorten the loading time, we use a so-called Content Delivery Network (CDN) for some offerings. With this service, content, such as large media files, is delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers work for us as part of processing orders. Our service providers are located and/or use servers in countries outside the EU and EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on the standard data protection clauses of the European Commission. If you have questions about our service providers and the basis of our cooperation with them, please contact the information described in this privacy policy.

2. Data Processing for Contract Processing and Contacting

2.1 Data Processing for Contract Processing

For the purpose of contract processing (including inquiries and fulfillment of any existing warranty and performance disruption claims, as well as any statutory update obligations), we collect personal data according to Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide us with this data as part of your order. Mandatory fields are marked as such because we necessarily need the data in these cases for contract processing, and without this information, we cannot send the order. The data collected is evident from the respective input forms. Further information on the processing of your data, particularly regarding the disclosure to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After full contract processing, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods according to Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data according to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this policy.

2.2 Customer Account

If you have given your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account and storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by a message to the contact option described in this privacy policy or via a designated function in the customer account. After deleting your customer account, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this policy.

2.3 Contacting

As part of customer communication, we collect personal data according to Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide us with this data when you contact us (e.g., via contact form or email). Mandatory fields are marked as such because we necessarily need the data in these cases for processing your contact. The data collected is evident from the respective input forms. After fully processing your request, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this policy.

3. Data Processing for Shipping Purposes

To fulfill the contract according to Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned for delivery, as far as this is necessary for the delivery of ordered goods.

The same applies to the disclosure of data to our manufacturers or wholesalers in cases where they take over the shipment for us (drop shipping). These are considered shipping service providers within the meaning of this privacy policy.

Data Transfer to Shipping Service Providers for Shipping Notification

If you have given us your explicit consent during or after your order, we will pass on your email address and phone number to the selected shipping service provider based on this consent according to Art. 6 para. 1 sentence 1 lit. a GDPR so that they can contact you before delivery for the purpose of notification or coordination of delivery. This consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this policy.

General Logistics Systems Germany GmbH & Co. OHG GLS Germany-Straße 1 - 7 DE-36286 Neuenstein Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG Görlitzer Straße 1 41460 Neuss Germany

DHL Paket GmbH Sträßchensweg 10 53113 Bonn Germany

Raben Logistics Germany GmbH Duisburger Str. 22 90451 Nürnberg Germany

DPD Deutschland GmbH Wailandtstraße 1 63741 Aschaffenburg Germany

4. Data Processing for Payment Processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we pass on the data necessary for the processing of the payment transaction to our technical service providers, who work for us as part of order processing, or to the commissioned credit institutions or the selected payment service provider, as far as this is necessary for the processing of the payment. This serves the fulfillment of the contract according to Art. 6 para. 1 sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g., on their own website or through a technical integration in the order process. In this respect, the privacy policy of the respective payment service provider applies. If you have questions about our payment processing partners and the basis of our cooperation with them, please contact the information described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes

Where applicable, we provide our service providers with additional data, which they use together with the data necessary for the processing of the payment as our order processors for the purposes of fraud prevention and optimizing our payment processes (e.g., invoicing, processing of contested payments, support of accounting). This serves according to Art. 6 para. 1 sentence 1 lit. f GDPR to protect our overriding legitimate interests in our protection against fraud or in efficient payment management.

5. Advertising via Email, Mail, Phone

5.1 Email Newsletter with Registration and Newsletter Tracking

If you subscribe to our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter.

After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data according to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this policy.

We inform you that we analyze your user behavior when sending the newsletter. To do this, we analyze, for example, the handling of our newsletter by measuring, storing, and evaluating opening rates and click rates to design future newsletter campaigns. For this evaluation, the sent emails include one.

6. Cookies and Other Technologies

6.1 General Information

To make our website attractive to visit and to enable the use of certain features, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). Protection of Privacy on Devices When using our online services, we necessarily employ technologies to provide the explicitly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require consent in this case.

For non-essential functions, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not give your consent, some parts of the website may not be fully usable. Any consents you have given remain in effect until you adjust or reset the relevant settings on your device.

Subsequent Data Processing by Cookies and Other Technologies We use technologies that are necessary for the use of certain functions on our website (e.g., shopping cart functionality). Through these technologies, IP address, visit time, device and browser information, as well as information about your use of our website (e.g., information about the contents of the shopping cart) are collected and processed. This serves, within the framework of a balancing of interests, predominant legitimate interests in an optimized presentation of our offer according to Art. 6 para. 1 sentence 1 lit. f GDPR.

We also use technologies to fulfill the legal obligations we are subject to (e.g., to document consents to the processing of your personal data) as well as for web analysis and online marketing. Further information, including the legal basis for data processing, can be found in the subsequent sections of this privacy policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of technologies according to Art. 6 para. 1 sentence 1 lit. a GDPR, you can withdraw your consent at any time by sending a message to the contact options described in the privacy policy.

Alternatively, you can also visit the following link: https://cloud.ccm19.de/. If you do not accept cookies, the functionality of our website may be limited.

6.2 Consent Manager Platform (CMP)

On our website, we use a service for consent management ("Consent Manager Platform (CMP)") to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your required consent for the processing of your personal data by these technologies. This is necessary under Art. 6 para. 1 sentence 1 lit. c GDPR to fulfill our legal obligation under Art. 7 para. 1 GDPR to prove your consent to the processing of your personal data. The Consent Manager Platform (CMP) used is provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany, which processes your data on our behalf. After you submit your cookie declaration on our website, the web server stores the following data: IP address, device information, browser information, selected language, visited website or its URL, date and time of your consent declaration, and information about your consent behavior. Additionally, the following technologies are used, which include information about your consent behavior: cookies, log files.

Your data will be deleted after 2 months unless you have expressly consented to further use of your data under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve a further data use that is legally permissible and of which we inform you in this statement.

7. Use of Cookies and Other Technologies

If you have given your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR, we use the following cookies and other technologies from third parties on our website. Upon the purpose ceasing and the end of the use of the respective technology by us, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information on your withdrawal options can be found in the section "Cookies and Other Technologies". Further information, including the basis of our cooperation with the individual providers, can be found with the respective technologies. If you have questions about the providers and the basis of our cooperation with them, please contact the contact options described in this privacy policy.

7.1 Use of Google Services

We use the technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") as described below. The information automatically collected by Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise stated for individual technologies, data processing is based on an agreement between joint controllers according to Art. 26 GDPR. Further information about data processing by Google can be found in Google's privacy notices. Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by decision. Our service providers are located and/or use servers in countries outside the EU and EEA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.

Google Analytics

For the purpose of website analysis, data (IP address, visit time, device and browser information, and information about your use of our website) is automatically collected and stored using Google Analytics, from which pseudonymous usage profiles are created. Cookies may be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server within the EU to derive location data and then immediately deleted before the traffic is forwarded for processing on other Google servers. Data processing is based on an agreement on data processing by Google.

For the purpose of optimized marketing of our website, we have activated the data sharing settings for "Google Products and Services." Thus, Google can access the data collected and processed by Google Analytics and then use it to improve Google services. Data sharing with Google within the framework of these data sharing settings is based on an additional agreement between controllers. We have no influence on the subsequent data processing by Google.

For testing and implementation purposes, we also use the Google Analytics extension Google Optimize.

For optimized marketing of our website, we use the so-called User-ID function. With this function, we can assign a unique, permanent ID to your interaction data from one or more sessions on our online platforms, thus analyzing your user behavior across devices and sessions.

For web analysis, the Google Analytics extension Google Signals enables "Cross-Device Tracking." If your internet-enabled devices are linked to your Google account and you have activated the "personalized ads" setting in your Google account, Google can create reports about your user behavior (especially cross-device user numbers) even if you switch devices. No processing of personal data by us takes place in this regard; we only receive statistics created based on Google Signals.

For web analysis and advertising purposes, the so-called DoubleClick cookie, an extension of Google Analytics, allows the recognition of your browser when visiting other websites. Google will use this information to compile reports on website activity and provide other services related to website usage.

Google AdSense

Our website markets ad space from third parties via Google AdSense. These ads are displayed to you at various locations on this website. Through the so-called DoubleClick cookie, interest-based advertising is enabled by collecting and processing data (IP address, visit time, device and browser information, and information about your use of our website) and automatically assigning a pseudonymous user ID, which helps determine interests based on visits to this and other websites.

Google Ads

For advertising purposes in Google search results as well as on third-party websites, the so-called Google Remarketing Cookie is set when visiting our website, which automatically enables interest-based advertising by collecting and processing data (IP address, visit time, device and browser information, and information about your use of our website) and using a pseudonymous cookie ID based on the pages you visited. Further data processing only occurs if you have activated the "personalized ads" setting in your Google account. In this case, if you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we measure your subsequent behavior if you have arrived at our website via a Google Ads advertisement using Google Ads Conversion Tracking. Cookies may be used, and data (IP address, visit time, device and browser information, and information about your use of our website based on events we specify, such as visiting a webpage or subscribing to a newsletter) is collected to create pseudonymous usage profiles.

Google Maps

For the visual representation of geographical information, data about your use of Maps functions, including IP address and location data, is collected, transmitted to Google, and processed by Google. We have no influence on this subsequent data processing.

Google reCAPTCHA

To protect against abuse of our web forms and spam from automated software (so-called bots), Google reCAPTCHA collects data (IP address, visit time, browser information, and information about your use of our website) and performs an analysis of your use of our website using a so-called JavaScript and cookies. Additionally, other cookies stored by Google services in your browser are evaluated. No reading or storage of personal data from the input fields of the respective form takes place.

7. Google Tag Manager

The Google Tag Manager allows us to manage various codes and services on our website. During the implementation of individual tags, Google may process personal data (e.g., IP address, online identifiers including cookies). Data processing is based on a data processing agreement with Google. By using the Google Tag Manager, integration of various services/technologies can be achieved. If you do not wish to use specific tracking services and have therefore disabled them, this deactivation will apply to all affected tracking tags integrated through the Google Tag Manager.

7.2 Use of Facebook Services

Use of Facebook Pixel

We use Facebook Pixel as part of the following technologies from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website based on predefined events such as visiting a page or subscribing to a newsletter), from which usage profiles are created using pseudonyms.

In the context of extended data matching, information for matching purposes is also hashed and stored, allowing individuals to be identified (e.g., names, email addresses, and phone numbers).

When you visit our website, Facebook Pixel automatically sets a cookie, which enables the pseudonymous recognition of your browser when visiting other websites. Facebook (by Meta) will combine this information with additional data from your Facebook account and use it to compile reports on website activities and to provide other services related to website use, particularly personalized and group-based advertising. The information automatically collected by Facebook (by Meta) about your use of our website is generally transmitted to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Further information about data processing by Facebook can be found in Facebook (by Meta) privacy notices. Our service providers operate servers in countries for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. An adequacy decision of the European Commission for the USA is in place, provided the respective service provider is certified. Certification is in place. Our service providers operate servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. For these countries, no adequacy decision by the European Commission exists. Our collaboration with you is based on these guarantees: Standard Contractual Clauses of the European Commission.

Facebook Analytics

As part of Facebook Business Tools, statistics about visitor activities on our website are created using data collected by Facebook Pixel. Data processing is based on a data processing agreement with Facebook (by Meta). Your analysis helps optimize the presentation and marketing of our website.

Facebook Ads (Advertising Manager)

Through Facebook Ads, we advertise this website on Facebook (by Meta) and other platforms. We determine the parameters of each advertising campaign. Facebook (by Meta) is responsible for the exact implementation, particularly the decision regarding ad placement to individual users. Unless otherwise specified for individual technologies, data processing is based on a joint responsibility agreement according to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered.

Based on the statistics created by Facebook Pixel about visitor activities on our website, we use Facebook Custom Audience for group-based advertising on Facebook (by Meta) by defining the characteristics of the target audience.

In the context of extended data matching (see above), Facebook (by Meta) acts as our data processor.

Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behavior on our website, we use Facebook Pixel Remarketing for personalized advertising.

Through Facebook Pixel Conversions, we measure your subsequent usage behavior for web analysis and event tracking if you reached our website via a Facebook Ads advertisement. Data processing is based on a data processing agreement with Facebook (by Meta).

8. Integration of Trusted Shops Trustbadge/Other Widgets

If you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g., quality seal, collected reviews) and to offer Trusted Shops products for buyers after an order.

The Trustbadge and the services promoted are offered by Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with whom we are jointly responsible under Art. 26 GDPR. We inform you in these privacy notices about the essential content of the contract according to Art. 26 para. 2 GDPR.

8.1 Data Processing During the Integration of the Trustbadge/Other Widgets

The Trustbadge is provided by a US-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured by an adequacy decision of the EU Commission, which is available here for the USA. Service providers from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers are not certified under the DPF, Standard Contractual Clauses have been concluded as appropriate guarantees.

When the Trustbadge is called, the web server automatically saves a so-called server log file, which also includes your IP address, date and time of access, transmitted data volume, and the requesting provider (access data) and documents the retrieval. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to your person. The anonymized data is used mainly for statistical purposes and error analysis.

8.2 Data Processing After Order Completion

If you have given your consent, the Trustbadge will access the order information (order amount, order number, possibly purchased product) stored on your end device after completing the order, and your email address will be hashed using a cryptographic one-way function. The hash value is then transmitted with the order information in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR to Trusted Shops. This is to verify whether you are already registered for Trusted Shops services. If so, further processing occurs according to the contractual agreement between you and Trusted Shops. If you are not yet registered for the services or do not consent to automatic recognition via the Trustbadge, you will be given the option to manually register for the services or complete the protection under your possibly existing contract.

To offer buyer protection, the Trustbadge accesses the following information stored on your device after completing your order: order amount, order number, and email address. This is necessary to provide buyer protection. Data will only be transmitted to Trusted Shops when you actively choose to complete the buyer protection by clicking the corresponding button in the so-called Trustcard. If you choose to use the services, further processing is based on the contractual agreement with Trusted Shops according to Art. 6 para. 1 lit. b GDPR to complete your registration for buyer protection, secure the order, and possibly send you review invitations via email.

Trusted Shops uses service providers in hosting, monitoring, and logging. The legal basis is Art. 6 para. 1 lit. f GDPR to ensure trouble-free operation. Processing may occur in third countries (USA and Israel). An adequate level of data protection is ensured by an adequacy decision of the EU Commission, which is available here for the USA and here for Israel. Service providers from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers are not certified under the DPF, Standard Contractual Clauses have been concluded as appropriate guarantees.

9. Social Media

9.1 Social Plugins from Facebook (by Meta), Twitter, Instagram (by Meta), Pinterest, Xing, Addthis, Whatsapp

On our website, social buttons from social networks are used. These are only embedded as HTML links on the page, so no connection with the servers of the respective provider is established when you visit our website. Clicking on one of the buttons opens the website of the respective social network in a new browser window. There, you can, for example, use the like or share button.

9.2 Our Online Presence on Facebook (by Meta), Twitter, Instagram (by Meta), YouTube, LinkedIn, Xing

If you have given your consent according to Art. 6 (1) sentence 1 lit. a DSGVO to the respective social media operator, your data will be automatically collected and stored when visiting our online presence on the aforementioned social media platforms for market research and advertising purposes, from which user profiles are created using pseudonyms. These may be used to display advertisements both within and outside the platforms that are presumed to match your interests. Typically, cookies are used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as contact options and your related rights and privacy settings, please refer to the privacy notices of the providers linked below. If you still need assistance in this regard, you can contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information about your use of our online presence on Facebook (by Meta) automatically collected by Meta Platforms Ireland is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing during the visit to a Facebook (by Meta) fan page is carried out based on an agreement between joint controllers according to Art. 26 DSGVO. Further information (Information on Insights Data) can be found here. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. There is a decision by the European Commission on an adequate level of data protection for the USA as a basis for third-country transfers, provided that the respective service provider is certified. Certification is available. Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with you is based on these guarantees: Standard Contractual Clauses of the European Commission.

Twitter is a service provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("Twitter"). Information about your use of our online presence on Twitter automatically collected by Twitter is usually transferred to a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, and stored there. Our service providers are located and/or use servers in countries outside the EU and EEA, for which the European Commission has determined an adequate level of data protection. Our service providers are located and/or use servers in countries outside the EU and EEA. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on Standard Contractual Clauses of the European Commission.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information about your use of our online presence on Instagram automatically collected by Meta Platforms Ireland is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and stored there. Data processing during the visit to an Instagram (by Meta) fan page is carried out based on an agreement between joint controllers according to Art. 26 DSGVO. Further information (Information on Insights Data) can be found here. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. There is a decision by the European Commission on an adequate level of data protection for the USA as a basis for third-country transfers, provided that the respective service provider is certified. Certification is available. Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with you is based on these guarantees: Standard Contractual Clauses of the European Commission.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information about your use of our online presence on YouTube automatically collected by Google is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. Our service providers are located and/or use servers in countries outside the EU and EEA, for which the European Commission has determined an adequate level of data protection. Our service providers are located and/or use servers in countries outside the EU and EEA. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on Standard Contractual Clauses of the European Commission.

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). Information about your use of our online presence on LinkedIn automatically collected by LinkedIn is usually transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA. There is a decision by the European Commission on an adequate level of data protection for the USA as a basis for third-country transfers, provided that the respective service provider is certified. Until certification by our service providers, data transfer is based on these guarantees: Standard Contractual Clauses of the European Commission.

Xing is a service provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

10. Contact Options and Your Rights

10.1 Your Rights

As an affected individual, you have the following rights: under Art. 15 DSGVO, the right to request information about the personal data we process about you to the extent specified there; under Art. 16 DSGVO, the right to request the correction of incorrect or completion of your stored personal data; under Art. 17 DSGVO, the right to request the deletion of your stored personal data, unless further processing is necessary for exercising the right to freedom of expression and information; to fulfill a legal obligation; for reasons of public interest; or for the establishment, exercise, or defense of legal claims; under Art. 18 DSGVO, the right to request the restriction of the processing of your personal data, provided the accuracy of the data is contested by you; the processing is unlawful, but you oppose its deletion; we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or you have objected to the processing under Art. 21 DSGVO; under Art. 20 DSGVO, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller; under Art. 77 DSGVO, the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of your usual place of residence or workplace or our company's registered office.

Right to Object If we process personal data to safeguard our legitimate interests as described above, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only if there are reasons arising from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims. This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

10.2 Contact Options

If you have any questions about the collection, processing, or use of your personal data, or if you need information, correction, restriction, or deletion of data, or if you wish to withdraw any consents given or object to a specific data use, please contact us directly using the contact details provided in our imprint.