Privacy Policy

  1. Data Protection at a Glance General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text. Data Collection on this Website Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the "Responsible Entity Notice" section of this privacy policy. How do we collect your data? Your data is collected by you providing it to us. This can, for example, be data you enter into a contact form. Other data is automatically collected or with your consent when you visit the website through our IT systems. These are primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website. What do we use your data for? Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior. What rights do you have regarding your data? You have the right to request information about the origin, recipient, and purpose of your stored personal data at any time free of charge. You also have the right to request the correction or deletion of this data. If you have given your consent for data processing, you can revoke this consent at any time in the future. Additionally, under certain circumstances, you have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to file a complaint with the relevant supervisory authority. You can contact us at any time for these purposes and for further questions related to data protection.

 

Analysis Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically evaluated, primarily using analytics programs. Detailed information about these analytics programs can be found in the following privacy policy.

  1. Hosting

We host the content of our website with the following provider: External Hosting This website is externally hosted. The personal data collected on this website is stored on the servers of the host or hosts. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact information, names, website access, and other data generated via a website. External hosting is done for the purpose of fulfilling our contractual obligations towards potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing a secure, fast, and efficient online offering by a professional provider (Art. 6 para. 1 lit. f GDPR). If consent has been requested, the processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, as far as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in accordance with TTDSG. Consent can be revoked at any time. Our host or hosts will only process your data to the extent necessary to fulfill its contractual obligations and will follow our instructions with regard to these data.

We use the following host: BENJI IT - Benjamin Schönle Bahnhofstr. 4 79848 Bonndorf

  1. General Information and Mandatory Information Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data refers to data that can personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens. We would like to point out that data transmission over the Internet (e.g., communication by email) can have security vulnerabilities. A complete protection of data against access by third parties is not possible. Responsible Entity Notice The responsible entity for data processing on this website is: Feldberg Sports GmbH Zweiseenblickweg 4b 79868 Feldberg Phone: +49(0)17170809744 Email: info(at)feldberg-sports.de The responsible entity is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

 Storage Period

As far as no specific storage duration is mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing is no longer valid. If you assert a valid request for deletion or withdraw consent for data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods). In the latter case, deletion will occur once these reasons cease to exist.

General Information on the Legal Bases for Data Processing on this Website If you have given your consent for data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of data under Article 9(1) GDPR are processed. In the case of explicit consent for the transmission of personal data to third countries, data processing also occurs based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing also takes place based on § 25(1) TTDSG. Consent can be revoked at any time. If your data is required for contract fulfillment or pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Article 6(1)(c) GDPR. Data processing may also occur based on our legitimate interests under Article 6(1)(f) GDPR. The specific legal bases relevant in each individual case are explained in the following paragraphs of this privacy policy.

Notice Regarding Data Transfers to the USA and Other Third Countries We use tools from companies located in the USA or other data protection non-compliant third countries. When these tools are active, your personal data may be transferred to and processed in these third countries. Please note that these countries may not guarantee a level of data protection comparable to that of the EU. For example, US companies may be obligated to disclose personal data to security authorities without the possibility for you as the data subject to take legal action against this. As a result, it cannot be ruled out that US authorities (e.g., intelligence agencies) may process, evaluate, and store your data located on US servers for monitoring purposes. We have no influence over these processing activities.

Withdrawal of Consent for Data Processing Many data processing operations are only possible with your explicit consent. You can revoke consent that has already been given at any time. The legality of data processing carried out prior to the withdrawal of consent remains unaffected.

Right to Object to Data Collection in Special Cases and Direct Marketing (Article 21 GDPR) WHEN DATA PROCESSING IS BASED ON ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, INCLUDING OBJECTIONS TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RESPECTIVE LEGAL BASIS FOR DATA PROCESSING IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, INCLUDING PROFILING RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedies.

Right to Data Portability You have the right to have data that we process automatically based on your consent or in performance of a contract transferred to yourself or to a third party in a standard, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

Information, Deletion, and Correction Within the framework of the applicable legal provisions, you have the right to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of the data processing and, if necessary, a right to correction or deletion of this data. For these purposes and for any further questions concerning personal data, you can contact us at any time.

Right to Restriction of Processing You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data is unlawful, but you do not want it to be deleted.

If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims.

If you have filed an objection under Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may only be processed - apart from their storage - with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of a significant public interest of the European Union or a Member State.

SSL/TLS Encryption For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this page uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on this Website If there is an obligation to provide us with your payment details (e.g., account number for direct debit) after concluding a paid contract, these data are required for payment processing. Payment transactions using common means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL/TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar. With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Objection to Promotional Emails The use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and informational materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.

 

Data Collection on this Website

Cookies

Our websites use so-called "cookies." Cookies are small data packets that do not cause any harm to your device. They are either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) stored on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or automatic deletion occurs via your web browser.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies allow the integration of specific third-party services within websites (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are necessary for the performance of electronic communication processes, the provision of certain functions desired by you (e.g., the shopping cart function), or for the optimization of the website (e.g., cookies for measuring web audience) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent for the storage of cookies and similar recognition technologies has been requested, processing takes place exclusively on the basis of this consent (Article 6(1)(a) GDPR and § 25(1) TTDSG); consent can be revoked at any time.

You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, accept cookies for certain cases, or generally exclude them, as well as activate automatic deletion of cookies when closing the browser. The functionality of this website may be restricted when cookies are deactivated.

You can find out which cookies and services are used on this website in this privacy policy.

Consent with Cookiebot Our website uses the Consent technology of Cookiebot to obtain your consent to store certain cookies on your device or to use certain technologies in a data protection-compliant manner and to document this. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot").

When you enter our website, a connection to the servers of Cookiebot is established to obtain your consents and other declarations regarding cookie usage. Subsequently, Cookiebot stores a cookie in your browser to be able to assign the consents granted or their withdrawal to you. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected.

The use of Cookiebot is to obtain legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) GDPR.

Server Log Files The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

A combination of this data with other data sources is not performed. The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website, for which the server log files are necessary.

Contact Form If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if it has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer exists (e.g., after completing the processing of your inquiry). Mandatory statutory provisions - especially retention periods - remain unaffected.

Inquiry via Email, Phone, or Fax If you contact us via email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if it has been requested; the consent can be revoked at any time.

The data you send to us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer exists (e.g., after completing the processing of your request). Mandatory statutory provisions - especially statutory retention periods - remain unaffected.

Communication via WhatsApp For communication with our customers and other third parties, we use the instant messaging service WhatsApp, among other means. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from gaining access to communication content. However, WhatsApp does have access to metadata generated during the communication process (e.g., sender, recipient, and timestamp). We also point out that, according to its own statements, WhatsApp shares personal data of its users with its US-based parent company, Meta. Further details on data processing can be found in WhatsApp's privacy policy at: link.

The use of WhatsApp is based on our legitimate interest in the fastest and most effective communication with customers, interested parties, and other business and contractual partners (Article 6(1)(f) GDPR). If corresponding consent has been requested, data processing is carried out exclusively on the basis of consent; this consent can be revoked at any time with future effect.

The communication content exchanged between us and WhatsApp will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer exists (e.g., after completing the processing of your inquiry). Mandatory statutory provisions - especially retention periods - remain unaffected.

We use WhatsApp in the "WhatsApp Business" variant.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: link.

We have configured our WhatsApp accounts in a way that they do not automatically synchronize with the address book on the smartphones in use.

 

Social Media

Facebook

This website includes elements from the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

You can find an overview of Facebook social media elements here: link.

When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of this website to your Facebook profile. Facebook can then associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook's privacy policy: link.

If consent (consent) has been obtained, the above service is used on the basis of Article 6(1)(a) GDPR and § 25 TTDSG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the most comprehensive possible visibility in social media.

Insofar as personal data is collected on our website and transferred to Facebook using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook. The processing by Facebook following the transfer is not part of joint responsibility. The obligations jointly incumbent Requests for information (e.g., inquiries) regarding data processed by Facebook can be made directly to Facebook. If you assert data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: link, link, and link.

Instagram

This website incorporates features of the Instagram service. These features are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. Instagram can then associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

If consent (consent) has been obtained, the above service is used on the basis of Article 6(1)(a) GDPR and § 25 TTDSG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the most comprehensive possible visibility in social media.

Insofar as personal data is collected on our website and transferred to Facebook or Instagram using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook or Instagram. The processing by Facebook or Instagram following the transfer is not part of joint responsibility. The obligations jointly incumbent on us have been recorded in an agreement on joint processing. You can find the wording of the agreement here: link. According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook or Instagram products. Data subject rights (e.g., requests for information) regarding data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: link, link, and link.

For more information, please refer to Instagram's privacy policy: link.

 

Analytical Tools and Advertising

Google Tag Manager We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It serves only to manage and deliver the tools integrated through it. However, Google Tag Manager does collect your IP address, which can also be transferred to Google's parent company in the United States.

The use of Google Tag Manager is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in a fast and uncomplicated integration and management of various tools on their website. If corresponding consent has been requested, data processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in the sense of TTDSG. The consent can be revoked at any time.

Google Analytics This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used, and the origin of the user. This data is assigned to the respective end device of the user. There is no assignment to a user ID.

Furthermore, we can use Google Analytics to record your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the collected data and employs machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a server in the USA and stored there.

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and § 25(1) TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: link.

Browser Plugin You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: link.

For more information on how user data is handled by Google Analytics, please refer to Google's privacy policy: link.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when users enter specific search terms into Google (Keyword Targeting). Additionally, targeted advertisements can be displayed to users based on data available at Google, such as location data and interests (Audience Targeting). As website operators, we can analyze this data quantitatively, for example, by determining which search terms led to the display of our advertisements and how many clicks those ads received.

The use of this service is based on your consent under Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG. Your consent can be revoked at any time.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: link and link.

Google Ads Remarketing This website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign individuals who interact with our online offerings to specific target groups. We can then show them interest-based advertising on the Google advertising network (Remarketing or Retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked with Google's cross-device capabilities. This allows interest-based, personalized advertising messages that have been customized based on your prior usage and browsing behavior on one device (e.g., a mobile phone) to be displayed on another of your devices (e.g., a tablet or PC).

If you have a Google account, you can opt out of personalized advertising at the following link: link.

The use of this service is based on your consent under Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG. Your consent can be revoked at any time.

For more information and the privacy policy, please refer to Google's privacy policy: link.

Google Conversion Tracking This website uses Google Conversion Tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website are clicked more frequently and which products are viewed or purchased more often. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they performed. We do not receive any information that personally identifies the user. Google uses cookies or similar recognition technologies for identification.

The use of this service is based on your consent under Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG. Your consent can be revoked at any time.

For more information on Google Conversion Tracking, please refer to Google's privacy policy: link.

 

Plugins and Tools

OpenStreetMap We use the mapping service of OpenStreetMap (OSM).

We integrate the map material from OpenStreetMap on the server of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The United Kingdom is considered a data protection-compliant third country, which means that the United Kingdom has a level of data protection that corresponds to that in the European Union. When using OpenStreetMap maps, a connection is established to the servers of the OpenStreetMap Foundation. In this process, your IP address and other information about your behavior on this website can be forwarded to the OSMF. OpenStreetMap may store cookies in your browser or use similar recognition technologies for this purpose.

The use of OpenStreetMap serves the purpose of providing an attractive display of our online offerings and making it easy to find the locations we provide on the website. This represents a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If consent has been requested, the processing is carried out solely on the basis of Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in the sense of the TTDSG. Consent can be revoked at any time.

Google reCAPTCHA We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether data input on this website (e.g., in a contact form) is performed by a human or an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the website visitor's stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analysis takes place completely in the background. Website visitors are not informed that an analysis is taking place.

The storage and analysis of the data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting their web offerings from abusive automated data collection and spam. If consent has been requested, the processing is carried out solely on the basis of Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in the sense of the TTDSG. Consent can be revoked at any time.

Here is the translation of the text into English:

Further information on Google reCAPTCHA can be found in Google's privacy policy and terms of use at the following links: link and link.

  1. eCommerce and Payment Providers
  2. Processing of Customer and Contract Data We collect, process, and use personal customer and contract data for the establishment, content design, and modification of our contractual relationships. Personal data regarding the use of this website (usage data) is only collected, processed, and used to the extent necessary to enable the user to use the service or for billing. The legal basis for this is Article 6(1)(b) of the GDPR.

The collected customer data will be deleted after the order is completed or the business relationship is terminated, and after any applicable legal retention periods have expired. Legal retention periods remain unaffected.

Data Transfer for Contract Services and Digital Content We only transfer personal data to third parties if it is necessary as part of the contract processing, for example, to the financial institution responsible for payment processing.

Further data transfer does not occur, except when you have expressly consented to the transfer. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The legal basis for data processing is Article 6(1)(b) of the GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.