Privacybeleid

Data privacy statement

1. Data protection at a glance

General notes

The protection of your personal data is important to us.

The following notices provide a simple overview of what happens to your personal data when you entrust your data to LetSmile in connection with a service, purchase and/or financing contract, as well as what happens to your data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our privacy policy listed below this text.

Data collection in connection with processing of service contract and purchase contract

Who is responsible for data collection under the service contract?

The data processing is carried out by your contractual partner LetSmile. The entity responsible for data processing in connection with the operation of our website is:

Note on the responsible entity

LetSmile is represented by its Data Protection Officer Kersting Holding GmbH.

The Data Protection Officer can be contacted by e-mail at datenschutz@let-smile.com and by post at bos en lommerplein 280 1055 RW amsterdam, Netherlands.

We process your personal data either on the basis of your consent (Art. 6 para. 1 lit. a) GDPR), to fulfill a contract to which you are a party (Art. 6 para. 1 lit. b) GDPR), to fulfill a legal obligation of ours (Art. 6 para. 1 lit. c) GDPR) or to protect our legitimate interests (Art. 6 para. 1 lit. f) GDPR).

Types of data

On the one hand, your data is collected by you – or either with your consent or for the fulfillment of the contract your partner doctor or the manufacturer of the aligners – providing it to us. This can be, for example, data that you enter in a contact form.

Categories of data subjects

Visitors and users of the online offer (hereinafter we also refer to the data subjects collectively as “users”).

In addition, it may be data that you have consented to LetSmile obtaining and that LetSmile has obtained itself as part of that consent, such as health data from your previous dentists and orthodontists (see detailed explanation below).

Purpose for the use of data

The LetSmile company, the treating dentists of LetSmile and the dental laboratory K Line Europe GmbH, Niederrheinstraße 16, 40474 Düsseldorf, (hereinafter “K Line”) work together on an optimal treatment process to ensure you as a patient not only the best possible treatment result, but also a competently supervised treatment sequence.

For this reason, it is necessary that LetSmile, the dental laboratory and the dentists are allowed to exchange information among themselves regarding the treatment itself and the patient. LetSmile shares the data received from you under the service contract with these partners. LetSmile will also inform the partners when the treatment has been terminated so that the partners can delete the data according to their applicable data privacy regulations.

All data you provide via the website will be processed in accordance with the following provisions on website use.

In addition, the partners K Line and LetSmile communicate via K Line’s software, which is secured against third-party access, to create the treatment plan.

Furthermore, we use your data so that we or our named partners can communicate with you to achieve the best possible treatment.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. For details, please refer to the privacy policy under “Right to restriction of processing”.

Health data collection

Before and during aligner treatment, we need to collect personal data from you for the purpose of optimal treatment, which allows conclusions to be drawn about your state of health, so-called health data. This health data can be collected via our process or/ and analogously by obtaining information from your previously treating dentist. It is necessary in order to provide you with the best possible care and so that, for example, no pre-existing conditions etc. jeopardize the treatment. Depending on which treatment is performed and which services you use, the data broken down individually below will be collected:

Photos in the customer profile

In an initial online consultation, LetSmile may take photos of you (hereinafter “before photo”), which may provide conclusions about a misaligned tooth or other dental anomaly. This photo also counts as health data. It is collected to enable you to compare your previous tooth position with a potential final result (hereinafter “after photo”). For the After Photo, we or one of our partners must edit the Before Photo, and we also store this editing on your profile.

Scan / impression at your family dentist

A scan or impression of your upper and lower jaw can be taken at your

family dentist. This is necessary for an initial indication and treatment planning. The scan image is stored according to K Line’s medical storage guidelines and by your family dentist.

Suitability test
A suitability test is scheduled at the beginning of treatment to check the compatibility of your jaw with the aligners. As part of the suitability test, health data may be collected through scans, X-rays or other medical procedures. In addition, health data regarding pre-existing conditions, etc., may be obtained from your previously treating dentist. The LetSmile dentist then determines the treatment plan, also part of the health data, which is to become the basis for the fabrication of the aligners and further treatment. The scan data is initially stored in an individualizable form and deleted again directly after completion of the entire treatment.

The answers to medical/physical questions, including health data, can be individualized but are only stored until the treatment is completed and then deleted. In addition, we store them anonymously for statistical purposes without assignment or attribution possibility. A transfer to third parties only takes place in the cases mentioned in this privacy policy.

Treatment

If a dental treatment is necessary, in which the treating dentist also creates an intermediate scan, this is also individualized but only stored until the treatment is completed. In addition, we store this anonymously for statistical purposes without assignment or assignment possibility.

Upon termination of the active phase of the treatment, LetSmile communicates this information to all partners so that they can delete the individualized health data in a privacy-compliant manner, with the exception of the final treatment photos taken by the patient.

Partners

The company LetSmile, the family dentists as well as the treating dentist of LetSmile and the dental laboratory K Line Europe GmbH, Niederrheinstraße 16, 40474 Düsseldorf, work together on an optimal treatment process to ensure you as a patient not only the best possible treatment result, but also a competently supervised treatment sequence. For this reason, it is necessary that LetSmile shares the collected health data – as far as you have purely consented here – with these partners.

Data collection on our website

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.

How do we collect your data?

On the one hand, your data is collected by you – or either with your consent or for the fulfillment of the contract your family dentist or the manufacturer of the aligners – providing it to us. This can be, for example, data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). The collection of this data takes place automatically as soon as you call up our website.

In the context of data processing, these are in particular the following data:

Inventory data (e.g., person master data, names or addresses).
Contact information (e.g., email, phone numbers).
Content data (e.g. text input, photographs, videos).
Usage data (e.g. websites visited, interest in content, access times).
Meta/communication data (e.g., device information, IP addresses).

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

Third-party analytics and tools

When visiting our website, your surfing behavior can be statistically evaluated. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following privacy policy.

You can object to this analysis. We will inform you about the objection options in this privacy policy.

2. General notes and mandatory information

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission over the Internet (eg communication by e-mail) security gaps. A complete protection of the data against access by third parties is not possible.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If the data processing is based on Art. 6 (1) lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of relevant personal data for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).

Right of appeal to the competent supervisory authority

In the event of breaches of the GDPR, data subjects shall have a right of appeal to a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged breach. The right of appeal is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data happened / happens unlawfully, you may request the restriction of the data processing instead of the deletion.
If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from storage – may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Encrypted payment transactions on this website

If, after the conclusion of a contract with costs, there is an obligation to provide us with your payment data (e.g. account number in the case of direct debit authorization), this data will be required for payment processing.

Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Objection to advertising e-mails

The use of contact data published within the framework of the imprint obligation to send advertising and information materials not expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

3. Data protection officer

We have appointed a data protection officer for our company (see above).

4. Data collection on our website

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these are treated separately in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.

Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our websites (usage data) only to the extent necessary to enable the user to use the service or to bill the user.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer upon conclusion of a contract for services and digital content

We transmit personal data to third parties only if this is necessary for the processing of the contract, for example, to the credit institution entrusted with the processing of payments.

A further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

5. Call center

In order to process your telephone inquiries or to contact you by telephone as far as permissible, we can make use of a call center. All data will remain within the EU.

For this purpose, the call center employees have access to all of your personal data that may be relevant in a telephone inquiry, from the initiation of a business transaction and an initial inquiry from you to the administration for contract execution after the end of the contract.

The processing of personal data is necessary in case of an inquiry from you or after the conclusion of a contract for the performance of the contract or for the implementation of pre-contractual measures, which are carried out upon your request (Art. 6 para. 1 lit. b GDPR).

Insofar as we contact you based on your consent, the processing of personal data is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Here you can find the privacy policy of our call center: https://www.bestseller.de/de-de/datenschutzerklaerung.html

Job processing

We have concluded an order processing contract with the call center and fully implement the strict requirements of the German data protection authorities.

6. Social media

Facebook plugins (Like & Share button)

Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, may be integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit our pages, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook.

For more information, please see Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.

If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

The use of Facebook plugins is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the widest possible visibility in social media.

Google+ plugin

Our pages can use functions of Google+. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Information collection and sharing: You can use the Google+ button to publish information around the world. Through the Google+ button, you and other users receive personalized content from Google and our partners. Google stores both the information that you gave +1 for a content and information about the page you were viewing when you clicked +1. Your +1s may be displayed as notices along with your profile name and photo in Google services, such as search results or your Google profile, or elsewhere on websites and ads on the Internet.

Google records information about your +1 activities in order to improve Google services for you and others. To use the Google+ button, you need a globally visible, public Google profile, which must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.

Use of Collected Information: In addition to the uses explained above, the information you provide will be used in accordance with applicable Google privacy policies. Google may publish aggregate statistics about users’ +1 activities or share them with users and partners, such as publishers, advertisers, or affiliated websites.

The use of the Google+ plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the widest possible visibility in social media.

Instagram plugin

Functions of the Instagram service may be integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

The use of the Instagram plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the widest possible visibility in social media.

For more information, please see Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

7. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website will be usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection and revocation possibility

The basis for this data processing is your consent, Art.6 para.1 p.1 lit.a GDPR. You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there.

For more information about Google Analytics’ terms of use and Google’s privacy policy, please visit https://policies.google.com/?hl=de.

Job processing

We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Objection to data collection”.

Google AdSense

This website uses Google AdSense, an advertising integration service provided by Google Inc. (“Google”). The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on these pages can be evaluated.

The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats will be transmitted to and stored by Google on servers in the United States. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

The storage of AdSense cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account.

To support this feature, Google Analytics collects google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create target groups for cross-device ad advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google account is based solely on your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). In the case of data collection processes that are not merged in your Google account (e.g., because you do not have a Google account or have objected to the merging), the collection of data is based on Art. 6 (1) lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

Furthermore, we may use the “Google Tag Manager” to integrate and manage Google analytics and marketing services on our website.

For more information and the privacy policy, please see Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

Within the framework of Google AdWords, we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

For more information on Google AdWords and Google Conversion Tracking, please see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Facebook Pixel

Our website uses the visitor action pixel from Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion measurement.

This allows the behavior of page visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The use of Facebook Pixel is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media.

You can find more information about protecting your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.

You can also disable the Custom Audiences remarketing feature in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Mixpanel

This application uses the Mixpanel analytics service, a service provided by Mixpanel Inc, a company incorporated under the laws of the State of Delaware of the United States of America, with its registered office at 405 Howard St, San Francisco, CA 94105, USA. The Mixpanel service logs page views and page activity. To make this possible, log data is transferred to Mixpanel. You can obtain more detailed information about the use of your data on the English privacy page of the Mixpanel service (http://mixpanel.com/privacy) in the paragraphs provided for this purpose.

If you do not want the transmission of log data of your activities on this website to Mixpanel, you can stop the recording of logs of your activity with the so-called “opt out cookie”, which you can activate at http://mixpanel.com/optout/. Please note, however, that this cookie and thus the recording ban will be deleted as soon as you delete your cookies in the settings of your browser (Internet access program). Please note that we, as the operator of the website you are on, have no influence on the use of your data.

Jameda

Jameda seal and widget: Seals or widgets of jameda GmbH, St. Cajetan-Straße 41, 81669 Munich, Germany are integrated on our website. A widget is a small window that displays changeable information. Our seal also works in a similar way, i.e. it does not always look the same, but the display changes. Although the corresponding content is displayed on our website, it is retrieved from the jameda servers at that moment. This is the only way to always show the current content, especially the current rating. For this purpose, a data connection must be established from this website to jameda and jameda receives certain technical data (date and time of the visit; the page from which the query is made; Internet Protocol address (IP address) used, browser type and version, device type, operating system and similar technical information) that are necessary for the content to be delivered. However, this data is only used to provide the content and is not stored or used in any other way. With the integration, we pursue the purpose and legitimate interest of presenting current and correct content on our homepage. The legal basis is Art 6 para. 1 f) GDPR. We do not store the aforementioned data due to this integration. Further information on data processing by jameda can be found in the privacy policy of the page www.jameda.de.

8. Newsletter

Newsletter data

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the described procedures.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter “newsletter”) only with the consent of the recipients or a legal permission. Insofar as the contents of the Newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and us.

Double-Opt-In and logging: The registration for our newsletter takes place in a so-called double-opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise, the changes to your data stored with the shipping service provider are logged.

Registration data: To register for the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to provide a name, for the purpose of personal address in the newsletter.

The dispatch of the newsletter and the associated performance measurement are based on the consent of the recipients pursuant to Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 para. 2 no. 3 UWG or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6 para. 1 lt. f. GDPR in conjunction with. Section 7 (3) UWG.

The logging of the registration process is based on our legitimate interests pursuant to Art. 6 (1) lit. f GDPR. Our interest is directed towards the use of a user-friendly as well as secure newsletter system that serves our business interests as well as meets the expectations of the users and furthermore allows us to prove consent.

Cancellation/Revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consents. You will find a link to cancel the newsletter at the end of each newsletter. We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to be able to prove consent formerly given. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that at the same time the former existence of consent is is confirmed.

9. Plugins and tools

YouTube with enhanced privacy

Our website uses plugins of the website YouTube. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

We use YouTube in extended privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your end device after starting a video. These cookies allow YouTube to obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts. The cookies remain on your terminal device until you delete them.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

10. payment provider

SKG Sofort Kredit

On our website, among other payment methods, payment via SKG Sofortkredit can be offered. When selecting the payment method “payment by installments” and granting the necessary data protection consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. a GDPR, personal data (first name, last name, address, email, IP address, gender) the data required for transaction processing (due dates, total amount, order number, taxes, currency) is sent to our partner Deutsche Kreditbank AG, Taubenstraße 7-9, 10117 Berlin, Germany for the purpose of processing this payment method.

To check the identity and creditworthiness of the customer, our partner carries out queries and information on publicly accessible databases and credit agencies. The providers from whom information and, if necessary, creditworthiness information is obtained on the basis of mathematical-statistical processes, as well as further details on the processing of your data after transmission to our partner Deutsche Kreditbank AG, can be found in their data protection declaration, which you can find here: https://www. dkb.de/kundenservice/datenschutz/

Our partner Deutsche Kreditbank AG uses the information received about the statistical probability of non-payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. You have the opportunity to present your point of view and to contest the decision by contacting our partner Deutsche Kreditbank AG. The consent given in the ordering process to the transfer of data can be revoked at any time, even without giving reasons, with effect for the future.

Mollie

On our website we offer, among other things, payment via Mollie. The provider of this payment service is Mollie B.V, Keizersgracht 313, 1016 EE Amsterdam, The Netherlands (hereinafter “Mollie”). If you select payment via Mollie, the payment data you enter will be transmitted to Mollie as well as the corresponding selected payment provider (iDEAL, Bancontact, SOFORT Banking, Overboeking, PayPal, Bitcoin, KBC/CBC Payment Button, Belfius Direct Net).

The transfer of your data to Mollie is based on Art. 6 (1) a GDPR (consent) and Art. 6 (1) b GDPR (processing for the performance of a contract). Mollie uses cookies to optimize the use of the Mollie checkout solution. You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.

For details on the use of Klarna cookies, please refer to the following link: https://www.mollie.com/de/features/checkout.

Klarna

On our website we offer, among other things, payment with the services of Klarna. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”).

Klarna offers various payment options (e.g. installment purchase). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. You can read details about this in Klarna’s privacy policy at the following link: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimize the use of the Klarna checkout solution. The optimization of the checkout solution represents a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. Cookies are small text files that are stored on your end device and do no harm. They remain on your end device until you delete them. For details on the use of Klarna cookies, please refer to the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

The transfer of your data to Klarna is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

Ideal Payment

On our website we offer, among other things, payment with the services of Ideal Payment. The provider is Ideal Payment AG, Europa-Strasse 19, 8152 Glattbrugg ZH, Switzerland (hereinafter “Ideal”).

Ideal offers various payment options (e.g. installment purchase). If you choose to pay with Ideal (Ideal checkout solution), Ideal will collect various personal data from you. You can read details about this in Ideal’s privacy policy at the following link: https://www.ideal-payment.ch/impressum-und-datenschutz.

Ideal uses cookies to optimize the use of the Ideal checkout solution. The optimization of the checkout solution represents a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. Cookies are small text files that are stored on your end device and do no harm. They remain on your end device until you delete them. For details on the use of Ideal cookies, please refer to the following link: https://www.ideal-payment.ch/impressum-und-datenschutz.

The transfer of your data to Ideal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

PayPal Plus

On our website we offer, among other things, payment via PayPal Plus. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal“).

If you select payment via PayPal Plus, the payment data you enter will be transmitted to PayPal.

The transfer of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

More information about PayPal Plus can be found here: https://www.paypal.com/de/webapps/mpp/paypal-plus.

Last update: 26.05.2022