Privacy Policy

Privacy Policy

1) Information about the collection of personal data and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data refers to any data that can personally identify you.

1.2 The data controller for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR) is Embassy Sporthandel GmbH, Eulerstraße 9, 48155 Münster, Germany, Tel.: +49 (0) 251 539 501 0, Fax: +49 (0)251 539 501 29, Email: info@embassy-sports.com. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the padlock symbol in your browser bar.

2) Data collection when visiting our website

2.1 When you visit our website for informational purposes only, without registering or otherwise providing us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

- The website visited

- Date and time of access

- Amount of data sent in bytes

- Source/reference from which you accessed the page

- Browser used

- Operating system used

- IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to retrospectively check the server log files if there are specific indications of unlawful use.

2.2 Landing pages hosted by Arrow Labs

For the creation and hosting of some of our landing pages, we use Swipe Pages, a landing page and website system provided by Arrow Labs Pte Ltd, 1 Raffles place 44-01A, One Raffles Place, 048616 Singapore, Singapore ("Swipe Pages") on the basis of processing on our behalf. All data collected on the pages hosted by Swipe Pages is processed on Leadpages' servers. For further information on the privacy practices of Swipe Pages, please refer to: https://swipepages.com/privacy-policy

2.3 Landing pages hosted by Leadpages

For the creation and hosting of some of our landing pages, we use Leadpages, a landing page and website system provided by Leadpages (US), Inc. 1330 Lagoon Avenue, Suite 400, Minneapolis, MN 55408 ("Leadpages") on the basis of processing on our behalf. All data collected on the pages hosted by Leadpages is processed on Leadpages' servers. For further information on the privacy practices of Leadpages, please refer to: https://www.leadpages.net/privacy

3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of each cookie storage in the overview of your web browser's cookie settings.

Partly, the cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) of the GDPR for the performance of a contract, in accordance with Art. 6(1)(a) of the GDPR in the case of given consent, or in accordance with Art. 6(1)(f) of the GDPR for the purpose of safeguarding our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can configure your browser to inform you about the setting of cookies and individually decide on their acceptance, or you can exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this information for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Chrome: https://support.google.com/chrome/answer/95647?hl=en

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) of the GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) of the GDPR. Your data will be deleted after the final processing of your inquiry, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no legal storage obligations to the contrary.

5) Online Appointment Scheduling

We process your personal data within the framework of the online appointment scheduling service provided. The data we collect for online appointment scheduling can be found in the respective input form or appointment inquiry for scheduling. If certain data is necessary to carry out online appointment scheduling, we will indicate this in the input form or appointment inquiry accordingly. If we provide you with a free text field in the input form, you can provide a more detailed description of your request there. You can also control which additional data you want to enter.

The data you provide will be stored and used exclusively for the purpose of appointment scheduling. The legal basis for the processing of personal data required for the performance of a contract with you is Art. 6(1)(b) of the GDPR. If you have given us consent for the processing of your data, the processing is carried out based on Art. 6(1)(a) of the GDPR. A given consent can be revoked at any time by sending a message to the data controller mentioned at the beginning of this statement.

6) Data Processing for Opening a Customer Account and for Contract Processing

According to Art. 6(1)(b) of the GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the address of the data controller mentioned above. We store and use the data you provide for contract processing. After the complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after the expiration of these periods, unless you have expressly consented to the further use of your data or a legally permitted further data usage has been reserved by us.

7) Use of customer data for direct advertising

7.1 Subscription to our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Providing additional data is voluntary and is used to address you personally. For the delivery of the newsletter, we use the double opt-in procedure. This means that we will only send you an email newsletter after you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) of the General Data Protection Regulation (GDPR). When you subscribe to the newsletter, we store the IP address, as well as the date and time of registration, provided by your Internet service provider (ISP) to be able to trace any potential misuse of your email address at a later time. The data collected during the newsletter subscription process is used exclusively for the purpose of addressing you in promotional materials through the newsletter. You can unsubscribe from the newsletter at any time by using the unsubscribe link provided in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data for additional purposes permitted by law, as described in this statement.

7.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. According to § 7(3) of the German Unfair Competition Act (UWG), we are not required to obtain separate consent from you for this purpose. The data processing is based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time, effective for the future, by sending a message to the responsible party mentioned at the beginning. You will only be charged transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7.3 Newsletter delivery via rapidmail

The delivery of our email newsletters is done through the technical service provider rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg ("rapidmail"), to whom we provide the data you provided during newsletter registration. This transfer is based on Art. 6(1)(f) of the GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. The data you enter for newsletter subscription purposes (e.g., email address) is stored on rapidmail's servers in Germany.

rapidmail uses this information to send and statistically analyze the newsletters on our behalf. For analysis purposes, the emails sent include web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Additionally, technical information such as the time of access, IP address, browser type, and operating system may be collected. The data is collected pseudonymously and is not linked to your other personal data, ensuring that direct personal identification is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the recipients' interests.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded a data processing agreement with rapidmail in which we require rapidmail to protect our customers' data and not to disclose it to third parties.

You can find further information about rapidmail's data protection in rapidmail's privacy policy: https://www.rapidmail.de/datenschutz

7.4 Newsletter delivery via Sendinblue

The delivery of our email newsletters is done through the technical service provider Sendinblue SAS (55 Rue d'Amsterdam, 75008 Paris, France), to whom we provide the data you provided during newsletter registration. This transfer is based on Art. 6(1)(f) of the GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. The data you enter for newsletter subscription purposes (e.g., email address) is stored on Sendinblue's servers in the EU.

Sendinblue uses this information to send and statistically analyze the newsletters on our behalf. For analysis purposes, the emails sent include web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Additionally, technical information such as the time of access, IP address, browser type, and operating system may be collected. The data is collected pseudonymously and is not linked to your other personal data, ensuring that direct personal identification is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the recipients' interests. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

Furthermore, Sendinblue may use this data based on its own legitimate interest in customizing and optimizing its service and for market research purposes, for example, to determine the countries from which recipients come, in accordance with Art. 6(1)(f) of the GDPR. However, Sendinblue does not use the data of our newsletter recipients to contact them directly or to disclose it to third parties.

We have concluded a data processing agreement with Sendinblue in which we require Sendinblue to protect our customers' data and not to disclose it to third parties.

You can view Sendinblue's privacy policy here: https://de.sendinblue.com/legal/privacypolicy/

7.5 Advertising by postal mail

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, postal address, and - if we have received this additional information from you in the context of the contractual relationship - your title, academic degree, year of birth, and professional, industry, or business designation, in accordance with Art. 6(1)(f) of the GDPR, and to use them for sending interesting offers and information about our products by postal mail.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the responsible party.

7.6 Product availability notification by email

If we offer the option in our online shop to inform you via email about the availability of selected temporarily unavailable items, you can subscribe to our email notification service for product availability. When you subscribe to our email notification service for product availability, we will send you a one-time email notification about the availability of the item you have selected. The mandatory information for sending this notification is solely your email address. Providing additional data is voluntary and may be used to address you personally. We use the double opt-in procedure to send this notification. This means that we will only send you such a notification after you have explicitly confirmed that you consent to receiving such messages. We will then send you a confirmation email asking you to confirm your desire to receive such notifications by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) of the GDPR. When you sign up for our email notification service for product availability, we store the IP address provided by your internet service provider (ISP) as well as the date and time of registration to be able to trace any potential misuse of your email address at a later time. The data collected during registration for our email notification service for product availability is used exclusively for the purpose of informing you about the availability of a specific item in our online shop. You can unsubscribe from the email notification service for product availability at any time by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list specifically created for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use it beyond that, as permitted by law and as informed in this statement.

8) Data processing for order processing

8.1 In order to process your order, we cooperate with the following service provider(s) who assist us, either fully or partially, in the execution of concluded contracts. Certain personal data will be transmitted to these service providers as outlined in the following information.

The personal data collected by us will be forwarded to the transport company commissioned with the delivery as far as necessary for the delivery of the goods. For payment processing, we will forward your payment data to the authorized banking institution, if necessary for the payment process. If payment service providers are used, we will explicitly inform you about this below. The legal basis for data transfer is Art. 6(1)(b) of the GDPR.

8.2 Credit checks

- Creditreform Münster Riegel & Riegel KG

If we make an advance payment (e.g., delivery on invoice), we reserve the right to carry out a credit check based on mathematical-statistical methods in order to safeguard our legitimate interest in determining the creditworthiness of our customers. We transmit the personal data necessary for a credit check to the following service provider, in accordance with Art. 6(1)(f) of the GDPR:

Creditreform Münster Riegel & Riegel KG

Scharnhorststraße 46

48151 Münster

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data, among other factors, are included in the calculation of the score values. We use the result of the credit check regarding the statistical probability of payment default for the purpose of making decisions regarding the establishment, execution, or termination of a contractual relationship.

You can object to this processing of your data at any time by sending a message to the party responsible for data processing or to the aforementioned credit reporting agency. However, we reserve the right to continue processing your personal data if necessary for the contractual payment processing.

9) Use of social media: videos

Use of YouTube videos

This website uses the YouTube embedding feature to display and play videos from the provider "YouTube," which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used, which, according to the provider's information, only initiates the storage of user information when the video(s) are played. When the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to information from "YouTube," these cookies are used, among other things, to capture video statistics, improve user-friendliness, and prevent abusive actions. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not wish for this association with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out, in particular, in accordance with Art. 6(1)(f) of the GDPR based on Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet users' needs. You have the right to object to the creation of these user profiles, but to exercise this right, you must contact YouTube. When using YouTube, personal data may also be transferred to the servers of Google LLC. in the United States.

Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which can trigger further data processing operations beyond our control.

In the event of personal data being transferred to Google LLC. based in the United States, Google LLC. has certified its compliance with the EU-US Privacy Shield, which ensures compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

For more information on data protection at "YouTube," please refer to the provider's privacy policy at: https://www.google.com/intl/en/policies/privacy

If legally required, we have obtained your consent in accordance with Art. 6(1)(a) of the GDPR for the data processing described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option to object.

10) Online marketing

10.1 Facebook Pixel for creating custom audiences with advanced data matching (with cookie consent tool)

Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of advanced data matching, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").

Based on the user's explicit consent, when a user clicks on an advertisement displayed on Facebook that we have placed, an additional parameter is added to the URL of our linked page through Facebook Pixel. This URL parameter is then written into the user's browser via a cookie upon redirection, which is set by our linked page. Additionally, this cookie collects specific customer data, such as the email address, that we gather on our website linked to the Facebook ad during activities like making purchases, logging into accounts, or registrations (advanced data matching). Facebook Pixel then reads this cookie and enables the transmission of data, including the specific customer data, to Facebook.

Using Facebook Pixel with advanced data matching, Facebook is able to determine the visitors of our online offering as a target audience for displaying ads (so-called "Facebook Ads"). Accordingly, we use Facebook Pixel with advanced data matching to show the Facebook Ads we have placed only to Facebook users who have shown an interest in our online offering or who possess certain characteristics (e.g., interests in specific topics or products determined based on visited web pages) that we transmit to Facebook (so-called "Custom Audiences"). With the help of Facebook Pixel with advanced data matching, we also aim to ensure that our Facebook Ads correspond to the potential interests of users and do not appear bothersome. Additionally, we can evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of Facebook Pixel, the advanced data matching function helps us measure the effectiveness of our advertising campaigns better by capturing more attributed conversions.

All data transmitted is stored and processed by Facebook, allowing a connection to the respective user profile, and Facebook may use the data for its own advertising purposes in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to display ads on and off Facebook.

These processing operations are carried out exclusively upon granting explicit consent in accordance with Art. 6(1)(a) of the GDPR.

Consent to the use of Facebook Pixel may only be given by users who are at least 13 years old. If you are younger, we ask you to seek permission from your legal guardian.

The information generated by Facebook is usually transmitted to and stored on a server operated by Facebook, which may also be located in the United States. Facebook Inc., based in the USA, is certified under the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.

You can revoke your given consent at any time with effect for the future. To exercise your revocation, uncheck the box set by the "cookie consent tool" embedded on the website next to the setting for the "Facebook Pixel".

10.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers by means of advertising materials (so-called Google AdWords) on external websites. We can determine the success of individual advertising campaigns based on the campaign data. Our aim is to display advertising that is of interest to you, to make our website more appealing to you, and to achieve a fair calculation of advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google Ads. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked through the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers are informed about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not want to participate in tracking, you can block this usage by disabling the Google conversion tracking cookie in your internet browser under the keyword "User settings". You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising pursuant to Art. 6(1)(f) of the GDPR. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself under the EU-US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list

You can find further information about Google's privacy policy at the following internet address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by preventing them from being set in your browser software or by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain features of this website may not be available or may be restricted if you have deactivated the use of cookies.

To the extent legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6(1)(a) of the GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-mentioned option to object.

10.3 LinkedIn Insight

This website uses the retargeting and conversion tool provided by LinkedIn Ireland Unlimited Company, located at Wilton Place, Dublin 2, Ireland, which enables personalized advertisements to be displayed on the "LinkedIn" platform to visitors of this website.

To achieve this, a cookie, a small text file, is set on the browser of your device when you visit our website, and it expires after 120 days. If the user visits specific pages of this website while simultaneously logged into their LinkedIn account, a connection is established with LinkedIn's servers, allowing for interest-based advertising to be displayed on the platform. At the same time, the cookie enables the creation of anonymous reports on the performance of advertisements on LinkedIn, as well as information on website interaction, which is provided to us and LinkedIn.

The delivery of advertisements and the creation of statistical reports are omitted if the user is not logged into their LinkedIn account when visiting this website.

The information obtained through the cookie never allows for the personal identification of individual users.

The transmission of information is carried out in accordance with Art. 6(1)(f) of the GDPR, based on our legitimate interest in targeted advertising and the statistical evaluation of the success of product advertisements on LinkedIn, thus serving the optimization of our online offering.

You can disable the LinkedIn Insight tool and the display of interest-based advertising on LinkedIn by setting an opt-out cookie using the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click the above link again.

You can find further information about LinkedIn's privacy policy at the following internet address: https://www.linkedin.com/legal/privacy-policy#choices-oblig

To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) of the GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option to object described above.

11) Web Analytics Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies," which are text files stored on your device that enable an analysis of your website usage. The information generated by the cookie about your use of this website (including your IP address, which is shortened) is generally transmitted to and stored on a Google server, which may also be located in the servers of Google LLC. in the United States.

This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()" to ensure anonymization of the IP address by truncation, thereby excluding direct personal identification. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases is the full IP address transmitted to a Google LLC. server in the United States and shortened there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.

Google Analytics also enables the creation of statistics through a special function called "demographic features," which provides information about the age, gender, and interests of website visitors based on an evaluation of interest-based advertising and the use of third-party information. This allows for the definition and differentiation of user groups on the website for the purpose of targeted marketing optimization. However, data collected through "demographic features" cannot be attributed to a specific individual.

For details on the data processing triggered by Google Analytics and how Google handles data from websites, please refer to the following link: https://policies.google.com/technologies/partner-sites

All of the aforementioned processes, particularly the use of Google Analytics cookies to retrieve information from the device you are using, are carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR. Without your consent, Google Analytics will not be used during your visit to the website.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please disable this service using the "Cookie Consent Tool" provided on the website. We have entered into a data processing agreement with Google for the use of Google Analytics, whereby Google is obligated to protect the data of our website visitors and not share it with third parties.

For the transfer of data from the EU to the United States, Google relies on the Standard Contractual Clauses issued by the European Commission, which are intended to ensure compliance with the European data protection level in the United States.

For more information on Google (Universal) Analytics, please visit: https://policies.google.com/privacy?hl=en&gl=en

12) Tools and Miscellaneous

12.1 Iubenda

This website uses the cookie consent tool provided by iubenda s.r.l, Via Torino 2, 20123 Milan, Italy ("Iubenda"), which sets technically necessary cookies to store your cookie preferences. This data processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in providing a cookie consent management service for website visitors.

12.2 Google Tag Manager

This website uses the service "Google Tag Manager" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The Tag Manager is a tool for managing website tags used for tracking in online marketing. The Tag Manager itself does not process any personal data as it is solely used for the management of other services, such as Google Analytics, etc.

For more information about the Tag Manager, please visit: https://www.google.com/intl/en/tagmanager/use-policy.html

12.3 Google Web Fonts

This site uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") to ensure a consistent and appealing display of fonts. When a page is accessed, your browser loads the necessary web fonts into its cache to display texts and fonts correctly.

For this purpose, the browser you are using needs to establish a connection to Google's servers, which may also involve the transmission of personal data to the servers of Google LLC. in the United States. In this way, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and visually appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR. If your browser does not support web fonts, a default font will be used by your computer.

In the event of the transmission of personal data to Google LLC. based in the United States, Google LLC. has certified its compliance with the EU-US Privacy Shield framework, which ensures compliance with the data protection level applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list

For more information about Google Web Fonts, please visit: https://developers.google.com/fonts/faq and review Google's Privacy Policy: https://www.google.com/policies/privacy/

12.4 Applications for Job Postings via Email

On our website, we advertise current vacant positions in a separate section, and interested individuals can apply by sending an email to the provided contact address.

To be considered for the application process, applicants are required to provide us with all the necessary personal data for a thorough and informed assessment and selection along with their application via email. The required information includes general personal details (name, address, telephone or electronic contact information) as well as performance-related evidence of the qualifications necessary for the position. Additionally, health-related information may be required, which must be given special consideration in terms of labor and social law for the applicant's social protection.

The specific components that an application must contain for its eligibility and the format in which these components should be submitted via email can be found in the respective job posting.

Upon receipt of the application sent using the provided email contact address, we store the applicant's data and evaluate it solely for the purpose of processing the application. In case of any follow-up questions that arise during the processing, we will use either the email address provided by the applicant with their application or a provided telephone number, at our discretion.

The legal basis for these processing activities, including contacting the applicant for follow-up questions, is primarily Art. 6(1)(b) of the GDPR in conjunction with § 26(1) of the BDSG, under which the application process is considered as the initiation of an employment contract.

If, within the application process, special categories of personal data within the meaning of Art. 9(1) of the GDPR (e.g., health data such as information about disability status) are requested from applicants, the processing is carried out in accordance with Art. 9(2)(b) of the GDPR, in order to exercise rights arising from labor law, social security, and social protection or to fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9(1)(h) of the GDPR when it serves purposes of preventive medicine, occupational medicine, assessing the applicant's ability to work, medical diagnosis, health or social care, or the management of health or social care systems and services.

If, during the evaluation process described above, an applicant is not selected or if an applicant withdraws their application prematurely, the data transmitted via email, as well as all electronic correspondence including the original application email, will be deleted no later than 6 months after appropriate notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, fulfill our obligations to provide evidence in accordance with equal treatment regulations for applicants.

In the event of a successful application, the provided data will be further processed based on Art. 6(1)(b) of the GDPR in conjunction with § 26(1) of the BDSG for the purpose of employment relationship management.

12.5 Online Applications via a Form

On our website, we offer job seekers the opportunity to apply online through a corresponding form. To be considered for the application process, applicants are required to provide us with all the necessary personal data for a thorough and informed assessment and selection through the form.

The required information includes general personal details (name, address, telephone or electronic contact information) as well as performance-related evidence of the qualifications necessary for the position. Additionally, health-related information may be required, which must be given special consideration in terms of labor and social law for the applicant's social protection.

Upon submitting the form, the applicant's data is encrypted and transmitted to us using state-of-the-art technology. We store the data and evaluate it solely for the purpose of processing the application. The legal basis for these processing activities is primarily Art. 6(1)(b) of the GDPR in conjunction with § 26(1) of the BDSG, under which the application process is considered as the initiation of an employment contract.

If, during the evaluation process described above, an applicant is not selected or if an applicant withdraws their application prematurely, the data transmitted through the form will be deleted no later than 6 months after appropriate notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, fulfill our obligations to provide evidence in accordance with equal treatment regulations for applicants.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) in relation to the processing of your personal data by the data controller, which we will inform you about below:

Right of access pursuant to Art. 15 of the GDPR: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, if so, access to your personal data and certain information, such as the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom the data has been or will be disclosed, the envisaged storage period or the criteria used to determine the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to the processing, the right to lodge a complaint with a supervisory authority, the source of the data, if not collected from you, the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing, and the appropriate safeguards for transfers of data to third countries;

Right to rectification pursuant to Art. 16 of the GDPR: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed;

Right to erasure ("right to be forgotten") pursuant to Art. 17 of the GDPR: You have the right to obtain the erasure of personal data concerning you without undue delay, in certain circumstances specified in Art. 17(1) of the GDPR. However, this right does not apply, in particular, where the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

Right to restriction of processing pursuant to Art. 18 of the GDPR: You have the right to obtain restriction of the processing of your personal data in certain circumstances specified in Art. 18 of the GDPR, such as when the accuracy of the data is contested by you, or the processing is unlawful, and you oppose the erasure of the data and request the restriction of its use instead, or when we no longer need the data for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to your right to object, pending verification of whether our legitimate grounds override yours;

Right to be informed pursuant to Art. 19 of the GDPR: If you have exercised your right to rectification, erasure, or restriction of processing against the data controller, they are obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients;

Right to data portability pursuant to Art. 20 of the GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another controller, where technically feasible;

Right to withdraw consent pursuant to Art. 7(3) of the GDPR: You have the right to withdraw your consent to the processing of your personal data at any time with effect for the future. In the event of withdrawal, we will promptly erase the relevant data unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;

Right to lodge a complaint pursuant to Article 77 of the GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

13.2 Right to object

If we process your personal data based on our legitimate interests as part of a balancing of interests, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the affected data. However, further processing may be permitted if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object to the processing of your personal data for such marketing purposes at any time. You can exercise your objection right as described above.

If you exercise your right to object, we will cease processing the affected data for direct marketing purposes.

14) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and, if applicable, the relevant statutory retention periods (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent pursuant to Article 6(1)(a) of the GDPR, these data will be stored until the data subject revokes their consent.

If there are statutory retention periods for data processed on the basis of contractual or contract-like obligations pursuant to Article 6(1)(b) of the GDPR, these data will be routinely deleted after the expiration of the retention periods, provided that they are no longer necessary for the fulfillment or initiation of a contract and/or there is no legitimate interest on our part to continue storing them.

When processing personal data based on Article 6(1)(f) of the GDPR, these data will be stored until the data subject exercises their right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Article 6(1)(f) of the GDPR, these data will be stored until the data subject exercises their right to object under Article 21(2) of the GDPR.

Unless otherwise indicated in the other information provided in this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.