Data protection declaration

1) Introduction and contact details of the controller

1.1We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2Responsible for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is travelträger Verwaltungs GmbH, Hafenweg 16, 48155 Münster, Germany, phone: 02592 98 90 147, email: info@rackpacker.de. The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3The controller has appointed a data protection officer, who can be reached as follows: "Natalie Königshausen, datenschutz@traveltraeger.de"

2) Data collection when visiting our website

2.1If you only use our website for information purposes, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to show you the website:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymous form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to subsequently check the server log files if concrete indications point to illegal use.

2.2For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the string "https ://" and the lock icon in your browser line.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page contents, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data will also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), in some cases these cookies remain on your device longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 Lit.B GDPR either for the implementation of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent or According to Art. 6 Para. 1 Lit. f GDPR to maintain our legitimate interests in the best possible functionality of the website and a customer -friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or can rule out the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be restricted if you are not accepted.

5) contact

5.1Help Scout

This website uses a live chat system of the following provider: Help Scout PBC, 100 City Hall Plaza, 5th Floor, Boston, MA 02108, USA

The processing of personal data transmitted via the chat is either in accordance with Art. 6 Para. 1 Lit B GDPR, because it is required for contract initiation or implementation, or in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest the effective care of our side visitors.
Your data transmitted in this way will be deleted, subject to contradictory legal retention periods, if the affected fact is finally clarified.

In addition, for the purpose of creating pseudonymized usage profiles, further information can be collected and evaluated using cookies, which, however, do not serve your personal identification and are not merged with other data records. If this information has a personal reference, the processing is carried out in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interest in the statistical analysis of the user behavior for optimization purposes.

The setting of cookies can be prevented by corresponding browser settings. In this case, the functionality of our website will be restricted. The data collection and storage for the purpose of creating a pseudonymized usage profile can be objected to us at any time with effect for the future.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

For the transmission of data to the USA, the provider relies on standard contract clauses of the European Commission, which should ensure compliance with the European data protection level.

5.2Brevo

For evaluations, we use the services of the following provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

Only on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, we transmit your email address and, if necessary, other customer data to the provider so that he can contact you with an email.

You can revoke your consent at any time with effect for the future towards us or the provider.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

5.3As part of contact with us (e.g. via contact form or email)-only for the purpose of processing and answering your request and only to the extent required-personal data are processed.

The legal basis for the processing of this data is our legitimate interest in answering your concern in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be seen from the circumstances that the affected fact is finally clarified and if there are no statutory retention obligations.

6) Data processing when opening a customer account

According to Art. 6 Para. 1 Lit. B GDPR, personal data will continue to be collected and processed to the extent required if you provide us with the opening of a customer account. The input mask of the corresponding form on our website can be found in which data is required for the opening of the account.

Your customer account is deleted at any time and can be made by a message to the above address of the person responsible. After deleting your customer account, your data will be deleted, provided that all contracts concluded over it are completely handled, there are no statutory retention periods and our partly no legitimate interest in the further storage continues.

7) Use of customer data for direct marketing

7.1Registration for our email newsletter

If you register for our email newsletter, we will send you information about our offers regularly. Your email address is solely mandatory for sending the newsletter. The specification of further data is voluntary and is used to be able to address you personally. For the newsletter shipping, we use the so-called Double Opt-in that ensures that you will only receive newsletters if you have expressly confirmed your consent to the newsletter reception by pressing an email address provided to the specified email address.

By activating the confirmation link, you will give us your consent to the use of your personal data in accordance with Art. 6 Para. 1 Lit. a GDPR. Here we save your IP address entered by the Internet Service provider (ISP) as well as the date and time of registration in order to be able to understand a possible misuse of your email address at a later date. The data collected by us when registering for the newsletter are used strictly.

You can unsubscribe from the newsletter provided in the newsletter at any time via the link provided or by means of a message to the responsible responsible person. After deregistration, your e-mail address will be deleted immediately in our newsletter distributor, unless you have expressly consented to further use of your data or we are reserved for any other uses that are legally allowed and about which we inform you in this declaration.

7.2Shipping of the email newsletter to existing customers

If you have made your email address available to us when buying goods or services, we reserve the right to send you offers for goods or services, such as those already purchased, from our range by email. To do this, we do not have to obtain separate consent from you in accordance with Section 7 (3) UWG. In this respect, data processing takes place solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you initially contradict the use of your email address for this purpose, a mail order from our part does not take place.

You are entitled to contradict the use of your email address for the predetermined advertising purpose at any time with effect for the future by notification to the responsible person at the beginning. For this, only transmission costs according to the basic tariffs are incurred. After receipt of your objection, the use of your email address for advertising purposes will be set immediately.

7.3Brevo

Our email newsletter is sent by this provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

Based on our legitimate interest in an effective and user-friendly newsletter marketing, we pass on your data provided for the newsletter registration according to Art. 6 Para. 1 lit. f GDPR to this provider so that the newsletter shipping on our behalf.

Subject to your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of success of newsletter campaigns using web beacons or tracking pixels in the emails sent, the opening rates and specific interactions with the content can measure the newsletter. The end device information (e.g. time of the call, IP address, browser type and operating system) is also charged and evaluated, but not merged with other databases.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing contract with the provider that protects our side visitors' data and prohibits a transfer to third parties.

7.4Cart's memories by email

In the event of the termination of your purchase from us, you have the option of being reminded of the content of your virtual shopping cart once before completing the order.

Your email address is mandatory for sending this memory. The specification of further data is voluntary and is used if necessary to be able to address it personally. For the mail order shipping, we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent to us by pressing an email address provided to the specified email address.

By activating the confirmation link, you will grant us your consent to the use of your personal data in accordance with Art. 6 Para. 1 Lit. a GDPR for sending a shopping cart reminder. Here we save your IP address entered by the Internet Service provider (ISP) as well as the date and time of registration in order to be able to understand a possible misuse of your email address at a later date. The data collected by us when registering for our email notification service are used strictly.

You can unsubscribe from the shopping basket memories at any time by the appropriate message to the responsible responsible person. After deregistration, your e-mail address will be deleted immediately from our distributor set up for this purpose, provided that you have not expressly consented to further use of your data or we are reserved for an additional data usage that is permitted by law and which we will inform you in this explanation .

8) Data processing for order processing

8.1Insofar as the contractual processing is required for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 Lit.B GDPR.

If we are on the basis of a corresponding contract updates for goods with digital elements or for digital products, we will process the contact details you transmit when you order (name, address, email address) in order to be within the framework of our statutory information obligations in accordance with Art. 6 ABS . 1 lit. c GDPR on a suitable communication path (such as postal or email) about upcoming updates in the legally provided period. Your contact details will be used strictly for communications about updates owed by us and for this purpose by us only processed to the extent that this is necessary for the respective information.

To handle your order, we also work with the subsequent service provider (s), who support us in whole or in part in the implementation. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2To fulfill our contractual obligations towards our customers, we work with external shipping partners. We give your name as well as your delivery address and, as far as the delivery requires, your telephone number, only for the purposes of the delivery of goods. Art. 6 Para. 1 lit. b GDPR to a shipping partner selected by us.

8.3Delivering of personal data to shipping service providers

- As a transport service provider, we use the following provider: Cargoboard GmbH & Co. KG, Technology Park 22, 33100 Paderborn

We pass on your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of the coordination of a delivery date or for the delivery notice to the provider, provided that you are expressed in the order process Have given consent. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 Lit. B GDPR. The transfer is only carried out if this is required for the delivery of goods. In this case, a prior coordination of the delivery date with the provider or the delivery notice is not possible.

The consent can be revoked at any time with effect for the future towards the person responsible for the above or to the provider.
- German postal service

As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future towards the person responsible for the above or to the provider.
- DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future towards the person responsible for the above or to the provider.
- DHL Express

As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future towards the person responsible for the above or to the provider.
- DPD

As a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

The consent can be revoked at any time with effect for the future towards the person responsible for the above or to the provider.

8.4Use of payment service providers (payment services)

- Amazon Pay

One or more types of online payment from the following provider are available on this website: Amazon Payments Europe S.C.A., 38 Avenue J.F. Kennedy, L-1855 Luxembourg

If you choose a payment method of the provider, in which you are in advance (such as credit card payment), your payment data communicated as part of the order process (including name, address, banking and number card information, currency and transaction number) as well as information about the content of your order will passed on in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary.
- Apple Pay

If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing will be done via the Apple Pay function of your with iOS, watchOS or macOS-operated terminal device by charging a payment card deposited with "Apple Pay". Apple Pay uses security features built into your device’s hardware and software to protect your transactions. For the approval of a payment, it is therefore necessary to enter a code previously defined by you and verify using the "Face ID" or Touch ID function of your device.

For the purpose of processing payments, your information provided during the ordering process will be transmitted to Apple in encrypted form along with information about your order. Apple then re-encrypts this data with a developer-specific key before the payment processing data is transmitted to the payment service provider of the payment card stored in Apple Pay. The encryption ensures that only the website from which the purchase was made can access the payment data. After payment is made, Apple will send your device account number and a transaction-specific dynamic security code to the originating website to confirm that payment has been successful.

If personal data is processed in the described transmissions, the processing takes place exclusively for the purpose of payment processing pursuant to Art. 6 paragraph 1 letter b GDPR.

Apple retains anonymized transaction information, including the approximate purchase amount, date and time of the transaction, and whether the transaction was completed successfully. Anonymisation completely excludes a personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on your iPhone or Apple Watch to complete a purchase that you made through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel to Apple’s servers. Apple does not process or store any of this information in a form that can be used to identify you. You can turn off the ability to use Apple Pay on your Mac in your iPhone’s settings. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".

For more information about Apple Pay privacy, please visit the following web address: https://support.apple.com/ en-de/ HT203027
- Google Pay

If you opt for the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing takes place via the "Google Pay" application of your with at least Android 4.4 ("KitKat") and has an NFC function by debiting a payment card deposited with Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than 25, - €, the prior unlocking of your mobile device by the respectively established verification measure (such as face recognition, password, fingerprint or pattern) is required.

For the purpose of the payment processing, your information given as part of the ordering process and the information about your order will be passed on to Google. Google then transmits its payment information stored in Google Pay in the form of a one -off transaction number to the starting website with which a payment is verified. This transaction number contains no information about the real payment data of your payment method stored in Google Pay, but is created and transmitted as a one -off numerical token. In all transactions via Google Pay, Google only appears as an intermediary for processing the payment process. The transaction is carried out exclusively in the ratio between the user and the output website by loading the payment stored on Google Pay.

If personal data is processed in the transmission described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Google reserves the right to collect, save and evaluate certain process -specific information on every transaction made via Google Pay. This includes the date, time and amount of the transaction, dealer location and description, a description of the goods or services provided by the dealer, photos that you have attached to the transaction, the name and email address of the seller and buyer or buyer or of the sender and recipient, the payment method used, your description for the reason of the transaction and, if necessary, the offer associated with the transaction.

According to Google, this processing takes place exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in the proper accounting, the verification of process data and the optimization and function maintenance of the Google Pay service.

Google also reserves the right to bring the processed process data together with further information that is collected and saved by Google when using further Google services.

Google Pay's terms of use can be found here:

https://payments.google.com/Payments/APIS-Secure/u/0/get_legal_document? Ldo = 0& ldt = Google Paytos& ldl = de
Further information on data protection on Google Pay can be found at the following Internet address:
https://payments.google.com/Payments/APIS-Secure/get_legal_document? Ldo = 0& ldt = privacynotice& ldl = de
- Klarna

One or more types of online payment from the following provider are available on this website: Klarna Bank, Sveafen 46, 111 34 Stockholm, Sweden

If you choose a payment method in which the provider is in advance (such as accounting or installment purchase or direct debit), you will also be asked in the order process, certain personal data (first and last name, street, house number, postal code, place, date of birth, E -Mail address, telephone number, possibly data on an alternative means of payment).

In order to protect our legitimate interest in determining the solvency of our customers, we are forwarded to the provider for the purpose of a credit check to the provider in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks on the basis of the personal data you specified and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected with regard to payment and/or claim loss risks can be granted.

In addition to the provider-internal criteria in accordance with Art. 6 Para. 1 Lit. f GDPR, identity and credit information from the following information can also be included in the decision as part of the application test:

https://cdn.klarna.com/1.0/shared/content/legal/term/0/de_de/Credit_rting_agencies

The credit information can contain probability values (so-called score values). Insofar as score values flow into the result of the credit information, you have your basis in a scientifically recognized mathematical-statistical process. The calculation of the score values flow, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by a message to us or to the provider. However, the provider may remain entitled to process your personal data, provided that this is necessary for contractual payment processing.
- PayPal

One or more types of online payment from the following provider are available on this website: PayPal (Europe) S.A.R.L. et cie, s.c.a., 22-24 Boulevard Royal, L-2449 Luxembourg

If you choose a payment method of the provider, in which you are in advance, your payment data communicated as part of the order process (including name, address, banking and number card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 Paragraph 1 lit. b GDPR passed on. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary.

When selecting a payment method in which we are in advance, you will also be asked in the order sequence, certain personal data (first and last name, street, house number, postcode, location, date of birth, email address, telephone number, an alternative means of payment).

In order to protect our legitimate interest in determining your solvency in such cases, this data is forwarded by us in accordance with Art. 6 Para. 1 Lit. f GDPR for the purpose of a credit check to the provider. The provider checks on the basis of the personal data you specified and other data (such as shopping cart, invoice amount, order history, payment experience) whether the payment option you have selected with regard to payment and/or claim loss risks can be granted.

One or more types of online payment from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

On this website, one or more types of online payment of the following provider are available: STIGHT GmbH, Theresienhöhe 12, 80339 Munich, Germany

8.5We reserve the right to pass on your data to the debt collection provider Euronord® Inkasso GmbH & Co. KG, Lüner Weg 19, 21337 Lüneburg, unless our payment claim has been paid despite the previous reminder. In this case, the claim will be collected directly by the collection service provider.

The transfer of your data serves to fulfill the contract in accordance with Art. 6 Para. 1 Sentence 1 Lit.B B GDPR and the protection of our legitimate interests on an effect on interests in the context of a balancing of interests in an effective assertion or enforcement of our payment claim in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

9) online marketing

Brevo Tracker

This website uses the software-based marketing service of the following provider: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany

The service enables the automated processing of feed activities, the control of advertising in marketing channels used and the success analysis of marketing measures as well as central email marketing and contact management.

Cookies are used to fulfill the various functions, i.e. small text files that are saved locally in the intermediate memory of your web browser on your end device and enable an analysis of your use of the website by us. Here, the cookies record certain information, such as the IP address, the location, the time of the page call.

All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR. You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

Other legal bases for data processing that are used as part of specific service functions (such as the need for express consent in accordance with Article 6 (1) lit. a GDPR when sending newsletters) remain unaffected.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our side visitors and prohibits an unauthorized transfer to third parties.

10) Web analysis services

Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics sets 4 cookies, which are stored as small text modules on your device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal reference.

The information is transmitted to Google servers and further processed there. Transfers to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the terminal used, will only take place if you give us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded an order processing agreement with Google that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For more legal information about Google Analytics 4, see https://business.safety.google/ intl/ en/ privacy/, https://policies.google.com/ privacy? hl = en& gl = en and under https://policies.google.com/ technologies/ partner-sites

Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can use this to create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and third-party information. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after storage for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Article 6 (1) lit. a GDPR Analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can use the Personalized Advertising feature. in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ ads/ answer/2662922? hl = en Further information about Google Signals can be found under the following link: https://support.google.com/ analytics/ answer/7532985? hl = en

UserIDs
As an extension to Google Analytics 4, the function "UserIDs" can be used on this website. If you use Google Analytics 4 pursuant to Article 6 paragraph 1 lit. a GDPR, have set up an account on this website and log in on different devices with this account, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

11) Retargeting/ Remarketing and conversion tracking

11.1Meta Pixel

Within our online offering we use the service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

If a user clicks on an ad placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel. This URL parameter is then entered into the user’s browser after the redirect by a cookie that our linked site itself sets.

This makes it possible for Meta to target the visitors of our online offer as a target group for the display of advertisements (so-called 'Ads&quot'). Accordingly, we use the service to display the Facebook and/ or Instagram ads that we have placed only to users who have also shown an interest in our online offer or the specific features (for example, interests in certain topics or products that are determined by the visited websites) which we transmit to Meta (so-called "custom audiences").

On the other hand, the "meta pixel" can be used to track whether users have been redirected to our website after clicking on an advertisement and what actions they carry out there (conversion tracking).

The data collected is anonymous to us, so we do not have any information about the identity of users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All of the above-described processing, in particular the setting of cookies for reading out information on the terminal device used, will only be carried out if you have requested us pursuant to Art. 6 paragraph 1 letter a GDPR have given your express consent to this. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a contract with the provider for processing data, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is usually transmitted to and stored on a server of Meta; in this context, it may also be transferred to servers of Meta Platforms Inc. come to the USA.

11.2Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising using a pseudonymous cookie ID and on the basis of the pages you have visited. Any further processing of data will only take place if you have given Google your consent to the linking of your internet and app browsing history by Google with your Google account and information from your Google accountAccount used to personalize ads they view on the web. If you are logged in to Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data with Google Analytics data in order to create audiences. In the context of using Google Ads Remarketing, it may also be transmitted to the servers of Google LLC. come to the USA.

All the processing described above, in particular the setting of cookies for reading out information on the terminal device used, will only be carried out if you have requested us pursuant to Art. 6 paragraph 1 letter a GDPR have given your express consent to this. Without this consent, the use of retargeting technology during your visit to the site will be suspended.

You can revoke your consent at any time with future effect. To exercise your opt-out, please disable this service in the cookie consent tool provided on the website.

Details about the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

For more information on Google’s privacy policy, please visit: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.3billiger.de Sales Tracking

This website uses conversion tracking technology from the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany

If you have reached our website from an advertisement on the provider’s domain, the success of the advertisement can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain terminal and browser information is used via the tracking technology, including, where appropriate, personal data. also your IP address, collected to record and evaluate user actions predefined by us (for example completed transactions, leads, search queries on the website, visits of product pages). This allows us to create statistics about the usage behavior on our website after being directed from an advertisement, which we use to optimize our offer.

We have concluded a contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

11.4Google Ads conversion tracking

This website uses the online advertising program "Google Ads" and as part of Google Ads conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use the offer of Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine the success of each advertising campaign in relation to the data from the campaigns. We use this to show you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and do not serve to identify you personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked through the websites of Google Ads customers. The information collected through the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page that has a conversion tracking tag. However, you do not receive any information that can personally identify users.

In the context of using Google Ads, personal data may also be transmitted to the servers of Google LLC.

Details about the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

To better target users whose data we have received in the context of business or business-like relationships, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (especially email addresses and telephone numbers) to Google by electronic means. Google does not get access to clear data, but encrypts the information in the customer files automatically by means of a special algorithm during the transmission process. The encrypted information can then only be used by Google to associate it with existing Google accounts set up by the persons concerned. This allows for the delivery of personalised advertising via all Google services linked to the respective Google account.

The transmission of customer data to Google takes place only if you give us your explicit consent in accordance with Article 6 paragraph 1 lit. a GDPR, you can revoke this consent at any time with effect for the future. For more information about the data protection measures of Google in relation to the customer matching function, please visit: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s data protection regulations can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.5Google Ads conversion tracking without cookies

This website uses the online advertising program "Google Ads" and as part of Google Ads conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This website uses Google Ads conversion tracking exclusively without the use of cookies, which means that the service does not set cookies on your device at any time.

Instead, the local storage of your browser is used to store an individual ID assigned by Google, which allows an analysis of your use of the website. For this purpose, certain user information is processed via the ID.

The ID is set when a user clicks on an ad placed by Google. When the user visits certain pages of this website, Google and we can recognize that the user has clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked through the websites of Google Ads customers. The information collected is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page that has a conversion tracking tag.

However, you do not receive any information that can personally identify users. In the context of using Google Ads, personal data may also be transmitted to the servers of Google LLC. Details about the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

If the information collected is personal, the processing takes place in accordance with Article 6 paragraph 1 lit. f GDPR based on our legitimate interest in the statistical evaluation of the success of our advertising campaigns.
Google’s data protection regulations can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

12) Side functionalities

12.1Facebook plugins

Our website uses social network plugins from the following provider: Meta Platforms Ireland Ltd. , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

In order to increase the protection of your data when visiting our website, the plugins are first deactivated by means of the so-called "2-click" or shariff solution integrated into the page.

This integration ensures that when you call up a page of our website that contains such plugins, no connection is made to the servers of the provider.

If you are logged into an existing user profile on the social network of the provider, information about interactions made through the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking again. However, the revocation does not affect the data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a contract with the provider for processing data, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

12.2Instagram plugins

Our website uses social network plugins from the following provider: Meta Platforms Ireland Ltd. , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins allow direct interactions with content on the social network.

In order to increase the protection of your data when visiting our website, the plugins are first deactivated by means of the so-called "2-click" or shariff solution integrated into the page.

This integration ensures that when you call up a page of our website that contains such plugins, no connection is made to the servers of the provider.

Only if you activate the plugins and thus in accordance with Article 6 paragraph 1 lit. a GDPR If you give your consent to the data transmission, your browser establishes a direct connection to the servers of the provider. In this case, information about your used terminal device (including your IP address), your browser and your page history is transmitted to the provider, regardless of a login to an existing user profile, and processed there if necessary.

If you are logged into an existing user profile on the social network of the provider, information about interactions made through the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking again. However, the revocation does not affect the data that has already been transferred to the provider.

Data can also be transferred: Meta Platforms Inc., USA

We have concluded a contract with the provider for processing data, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

12.3Make

We use the services of the following provider for the integration and synchronization of databases and web applications: Celonis, Inc. , One World Trade Center, 87th Floor, New York, NY, 10007, USA

Our processing processes are automated and different work flows are established in order to efficiently manage and execute internal processes in our processing system. If personal data is also processed in this context, this shall be done in accordance with Article 6 paragraph 1 lit. f GDPR based on our legitimate interest in optimizing our internal organization.

We have concluded a contract with the provider for processing data, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

13) Tools and other

13.1- DATEV

For the execution of the accounting we use the service of cloud-based accounting software from the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

The provider processes incoming and outgoing invoices as well as any other documents. also the bank movements of our company to automatically record invoices, to match transactions and to create financial accounting in a partially automated process.

If personal data is also processed in this context, the processing takes place on the basis of our legitimate interest in an efficient organisation and documentation of our business operations.

13.2Cookie consent tool

This website uses cookies and cookie-based applications to obtain effective user consent for those requiring consent. Cookie consent tool. The "cookie consent tool" is displayed to users upon page view in the form of an interactive user interface, on which you can give consent for certain cookies and/ or cookie-based applications by setting a check mark. Here, all cookies/services requiring consent are loaded by using the tool only if the respective user gives corresponding consent by ticking. This ensures that only in the case of a consent granted such cookies are placed on the respective end device of the user.

The tool sets technically necessary cookies to remember your cookie preferences. Personal user data is not processed in this case.

If, in individual cases, the processing of personal data (such as the IP address) is carried out for the purpose of storing, assigning or logging cookie settings, this will be done pursuant to Art. 6 Section 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website.

Further legal basis for the processing is also Article 6 paragraph 1 letter c GDPR. We are subject to the legal obligation as controller to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a contract with the provider for processing data which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the settings of the cookie consent tool can be found directly in the corresponding user interface on our website.

14) Rights of the data subject

14.1The applicable data protection law grants you the following rights of data subjects (information and intervention rights) in relation to the controller regarding the processing of your personal data, with reference to the legal basis given for the respective conditions of exercise:

Right of access pursuant to Article 15 GDPR;
Right to correction pursuant to Article 16 GDPR;
Right to deletion pursuant to Article 17 GDPR;
Right to restriction of processing pursuant to Article 18 GDPR;
Right to information pursuant to Article 19 GDPR;
Right to data portability pursuant to Article 20 GDPR;
Right to withdraw consent granted pursuant to Article 7 paragraph 3 GDPR;
Right to complain in accordance with Article 77 GDPR.

14.2Right to object

IF, IN THE CONTEXT OF A BALANCE OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING GROUNDS FOR PROCESSING THAT ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OF THE CLAIM EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA RELATING TO YOU FOR SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and - if relevant - additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data on the basis of an express consent pursuant to Article 6 paragraph 1 lit. a GDPR the data concerned will be stored until you withdraw your consent.

There are statutory retention periods for data that is processed within the scope of legal business or. Similar legal obligations based on Article 6 paragraph 1 lit. b GDPR, these data will be routinely deleted after the retention periods, if they are no longer necessary for the performance of the contract or the initiation of a contract and/ or if there is no legitimate interest on our part in further storage.

When processing personal data on the basis of Article 6 paragraph 1 lit. f GDPR, these data will be stored until you exercise your right to object pursuant to Article 21 para. 1 GDPR, unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Article 6 paragraph 1 lit. f GDPR, these data will be stored until you exercise your right of objection pursuant to Article 21 paragraph 2 GDPR.

Unless otherwise indicated in the other information on specific processing situations contained in this statement, stored personal data shall be deleted for the purposes for which they were collected or processed in any other way are no longer necessary.

As of: 15.02.2025, 03:30:08