Privacy Policy

Privacy Policy of TST Solarstrom OHG

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

TST Solarstrom OHG
Baron-Riederer-Str. 48
84337 Schönau
Tel.: +49-8726-910037
www.photovoltaik-shop.com
info@photovoltaik-shop.com
VAT ID: DE321868036

(hereinafter “we”, “us”). The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL/TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser’s address bar.

1. Access data and hosting

1.1 Access data

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to safeguard our overriding legitimate interests in the correct presentation of our offering in accordance with Art. 6(1) sentence 1 lit. f GDPR. All access data is deleted no later than one month after the end of your visit to the site. Access data is processed only for as long as is necessary to achieve the processing purposes stated above.

1.2 Hosting

The services for hosting and displaying the website are provided in part by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected in forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2. Data processing for contract performance and for contacting us

2.1 Data processing for contract performance

For the purpose of contract performance (including enquiries about and handling of any warranty claims, performance disruption claims, and any statutory update obligations) pursuant to Art. 6(1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us in the course of placing your order. Mandatory fields are marked as such, because in these cases we strictly need the data to perform the contract and we cannot dispatch the order without this information. Which data is collected can be seen from the respective input forms.
Further information on the processing of your data, in particular on its transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after expiry of the statutory retention periods under tax and commercial law in accordance with Art. 6(1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

2.2 Customer account

If you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of creating the customer account and storing your data for future orders on our website. You can delete your customer account at any time either by sending a message to the contact option described in this privacy policy or via the function provided in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

2.3 Contacting us

As part of customer communication, we collect personal data to process your enquiries pursuant to Art. 6(1) sentence 1 lit. b GDPR if you voluntarily provide it to us when contacting us (e.g. via contact form or email). Mandatory fields are marked as such, because in these cases we strictly need the data to process your enquiry. Which data is collected can be seen from the respective input forms. After your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

3. Data processing for the purpose of shipping

For the fulfilment of the contract pursuant to Art. 6(1) sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they ship on our behalf (drop shipment). They are considered shipping service providers within the meaning of this privacy policy.

Transfer of data to shipping service providers for delivery notification

If you have given us your explicit consent during or after your order, we will, on the basis of this consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, pass on your email address and telephone number to the selected shipping service provider so that they can contact you prior to delivery for the purpose of delivery notification and/or scheduling. You may revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider using the contact address listed below. After revocation, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4. Data processing for payment processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary to process the payment transaction to our technical service providers who work for us as processors, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for payment processing. This serves contract fulfilment pursuant to Art. 6(1) sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g. on their own website or via technical integration in the order process. In this respect, the privacy policy of the respective payment service provider applies.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined an adequate level of data protection by decision. Where a transfer to third countries outside the EU/EEA takes place for which the European Commission has not issued an adequacy decision, the cooperation is based on the European Commission’s Standard Contractual Clauses.

If you have any questions about our partners for payment processing or the basis of our cooperation with them, please use the contact option stated in this privacy policy.

4.2 Data processing for fraud prevention and optimisation of our payment processes

Where applicable, we provide our service providers with additional data which they use together with the data required for payment processing as our processors for the purpose of fraud prevention and optimisation of our payment processes (e.g. invoicing, handling disputed payments, supporting accounting). This serves to safeguard our overriding legitimate interests, within the framework of a balancing of interests, in protecting ourselves against fraud and in efficient payment management pursuant to Art. 6(1) sentence 1 lit. f GDPR.

5. Advertising by email

5.1 Email newsletter with registration

If you subscribe to our newsletter, we use the data required for this purpose or provided separately by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

5.2 Sending review requests by email via Trusted Shops

If you have given us your explicit consent during or after your order pursuant to Art. 6(1) sentence 1 lit. a GDPR, we use your email address to request that you submit a review of your order via the review system we use. You may revoke this consent at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the review request.

The review requests may also be sent by our service provider Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”).

In connection with the sending of review requests, we receive information from Trusted Shops about the respective status (e.g. whether the review request has been sent and whether it has been delivered). This takes place pursuant to Art. 6(1) sentence 1 lit. f GDPR to fulfil our legitimate interest in receiving information about the review invitations in order to make optimisations on this basis, as well as to fulfil Trusted Shops’ legitimate interest in being able to offer this service.

We and Trusted Shops are jointly responsible for sending review requests and for collecting and displaying review/status information.

Within the framework of the joint controllership between us and Trusted Shops, please contact Trusted Shops preferably with data protection questions and to assert your rights; you can find their contact options here. Further information on data protection can be found here. Regardless of this, you may always contact us using the contact option described in this privacy policy. Your enquiry will then be forwarded to the other controller for response where necessary.

5.3 Sending review requests by email via Google Customer Reviews

If you give us your explicit consent during or after your order pursuant to Art. 6(1) sentence 1 lit. a GDPR, we participate in the “Google Customer Reviews” programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

As part of this programme, Google will send you an email after delivery of your order requesting that you rate your purchasing experience on our website. For this purpose, we transmit to Google the order data required for the invitation (e.g. your email address, order number, country, and, where applicable, product information). Processing takes place for the purpose of collecting your review of our service quality and displaying it in aggregated form as seller ratings in various Google services (e.g. Google Shopping, Google Ads).

Google processes the transmitted data under its own responsibility for data protection purposes. Further information on Google’s data processing, your rights and settings options can be found in Google’s privacy policy at https://policies.google.com/privacy.

To the extent that personal data is transferred to servers of Google LLC in the USA, this is done on the basis of your consent pursuant to Art. 49(1) lit. a GDPR. In addition, Google relies on Standard Contractual Clauses issued by the European Commission to ensure an adequate level of data protection.

You may revoke your consent to receive review requests via Google Customer Reviews at any time with effect for the future, e.g. by sending a message to the contact address stated in this privacy policy or via the opt-out option provided in the review request. After your revocation, no further data will be transferred to Google for this purpose. Statutory retention obligations remain unaffected.

5.4 Information on reviews on Idealo and Trustpilot

As part of our review requests (e.g. in emails you receive after your order), we may provide you with links to our review profiles on the platforms Idealo and Trustpilot. Submitting a review is voluntary.

If you click on a corresponding link and submit a review on the respective platform, the processing of your personal data (e.g. name or username, possibly email address, IP address, review content, time of the review) is carried out directly by the respective platform operator as an independent controller within the meaning of the GDPR. We have no influence over the nature and scope of processing by these providers.

Idealo
The provider of the “Idealo” platform is
idealo internet GmbH, Zimmerstraße 50, 10888 Berlin, Germany.
Information on data processing by Idealo can be found in their privacy policy available at:
https://www.idealo.de/legal/datenschutz

Trustpilot
The provider of the “Trustpilot” platform is
Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen, Denmark.
Information on data processing by Trustpilot (in particular on the processing of reviewer data and any transfers to third countries) can be found in their privacy policy available at:
https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms

To the extent that, as part of your use of the aforementioned platforms, personal data is transferred to third countries (in particular outside the EU/EEA), this is carried out under the responsibility of the respective platform operator and on the legal bases stated there (e.g. Standard Contractual Clauses or your consent vis-à-vis the provider).

As a rule, we only receive aggregated information from Idealo and Trustpilot or your publicly visible review (e.g. text, star rating, date, possibly displayed name) in order to display these reviews on our website or in our offers, to comment on them and to evaluate them for the purpose of improving our service. The legal basis for this is our legitimate interest in transparency and external presentation as well as in improving our offering pursuant to Art. 6(1) sentence 1 lit. f GDPR.

6. Cookies and other technologies

6.1 General information

To make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and enable us to recognise your browser when you next visit (persistent cookies). You can find out the storage period in the overview in your web browser’s cookie settings.

Protection of privacy on end devices

When using our online offering, we use strictly necessary technologies in order to be able to provide the telemedia service expressly requested by you. In this respect, the storage of information on your device or access to information already stored on your device does not require consent.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not give your consent, parts of the website may not be fully usable. Any consent you have given will remain in effect until you adjust or reset the relevant settings on your device.

Subsequent data processing by cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions on our website (e.g. shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping cart). This serves to safeguard our overriding legitimate interests, within the framework of a balancing of interests, in an optimised presentation of our offering pursuant to Art. 6(1) sentence 1 lit. f GDPR.

In addition, we use technologies to fulfil legal obligations to which we are subject (e.g. to be able to prove consents to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

Where applicable, we also use technologies that are not individually listed in this privacy policy. More detailed information on these technologies, including the respective legal basis for data processing, can be found on the Usercentrics platform. You can access it by clicking the fingerprint button in the bottom right or bottom left corner of the page.

Cookie settings

You can find your browser’s cookie settings under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of the technologies pursuant to Art. 6(1) sentence 1 lit. a GDPR, you may revoke your consent at any time by sending a message to the contact option described in this privacy policy. Alternatively, you can click the fingerprint button in the bottom right or bottom left corner of the page. If cookies are not accepted, the functionality of our website may be limited.

6.2 Use of the Usercentrics Consent Management Platform to manage consents

On our website, we use the Usercentrics Consent Management Platform (“Usercentrics”) to inform you about the cookies and other technologies we use on our website and to obtain, manage and document your legally required consent, where applicable, to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1) sentence 1 lit. c GDPR to fulfil our legal obligation under Art. 7(1) GDPR to be able to prove your consent to the processing of your personal data. Usercentrics is a service of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, the Usercentrics web server stores a so-called server log file, which also contains your anonymised IP address, date and time of the visit, device and browser information as well as information about your consent behaviour. Your data will be deleted after three years unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.

The adequacy decision for the USA serves as the basis for the transfer to a third country insofar as the respective service provider is certified. Certification is in place.

7. Use of cookies and other technologies

On our website, we use the following cookies and other technologies from third-party providers. Unless otherwise stated for the individual technologies, this is done on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. Once the purpose has ceased to apply and we have stopped using the respective technology, the data collected in this context will be deleted. You may revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Use of Google services

We use the technologies described below provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between joint controllers pursuant to Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are based in and/or use servers in countries outside the EU and the EEA. For these countries, no adequacy decision of the European Commission exists. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

Google Analytics

For the purpose of website analytics, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website) from which user profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and is then deleted immediately before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

For the purpose of optimised marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google under these data sharing settings is carried out on the basis of an additional agreement between controllers. We have no influence over Google’s subsequent data processing.

For the purpose of optimised marketing of our website, we use the so-called User-ID feature. With the help of this feature, we can assign a unique, permanent ID to your interaction data from one or more sessions on our online presences and thus analyse your user behaviour across devices and sessions.

For web analytics and advertising purposes, the extension function of Google Analytics uses the so-called DoubleClick cookie to enable your browser to be recognised when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.

Google Ads

For advertising purposes in Google search results and on third-party websites, when you visit our website the so-called Google remarketing cookie is set. This cookie enables interest-based advertising automatically through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website), by means of a pseudonymous cookie ID and on the basis of the pages you visited. Further data processing only takes place if you have activated the “personalised advertising” setting in your Google account. If you are logged into Google during your visit to our website in this case, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analytics and event tracking, we use Google Ads conversion tracking to measure your subsequent usage behaviour if you reached our website via a Google Ads advertisement. Cookies may be used for this purpose and data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or subscribing to the newsletter) may be collected, from which user profiles are created using pseudonyms.

Google Maps

For the visual presentation of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google and then processes it. We have no influence over this subsequent data processing.

Google reCAPTCHA

For the purpose of protecting our web forms from misuse and from spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information, and information about your use of our website) and uses so-called JavaScript as well as cookies to analyse your use of our website. In addition, other cookies stored in your browser by Google services are evaluated. No personal data is read or stored from the input fields of the respective form.

Google Tag Manager

Google Tag Manager enables us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of a data processing agreement with Google.

The use of Google Tag Manager makes it possible to integrate various services/technologies.
If you do not wish to use certain tracking services and have therefore deactivated them, the deactivation remains in place for all affected tracking tags integrated via Google Tag Manager.

YouTube video plugin

To integrate third-party content, the YouTube video plugin (in the extended data protection mode used by us) collects data (IP address, time of visit, device and browser information), transmits it to Google and then processes it, only if you play a video.

8. Integration of the Trusted Shops Trustbadge / other widgets

If you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. trust seal, collected reviews) and to offer Trusted Shops products for buyers after an order.

The Trustbadge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with which we are jointly responsible for data protection under Art. 26 GDPR. In the following, we inform you about the essential contents of the agreement pursuant to Art. 26(2) GDPR.

Within the framework of the joint controllership between us and Trusted Shops AG, please contact Trusted Shops preferably with data protection questions and to assert your rights, using the contact options provided in the data protection information. Regardless of this, you may always contact the controller of your choice. Your request will then be forwarded to the other controller for response where necessary.

8.1 Data processing when integrating the Trustbadge / other widgets

The Trustbadge is provided by a US-based CDN provider (content delivery network). An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which can be accessed for the USA here. Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. The IP address is anonymised immediately after collection so that the stored data cannot be attributed to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after completion of an order

If you have given your consent, after completion of an order the Trustbadge accesses order information stored on your device (order amount, order number, and, where applicable, purchased product) as well as your email address, and your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information pursuant to Art. 6(1) sentence 1 lit. a GDPR.
This serves to check whether you are already registered for Trusted Shops services. If this is the case, further processing is carried out in accordance with the contractual agreement concluded between you and Trusted Shops. If you are not yet registered for the services or you do not give your consent to automatic recognition via the Trustbadge, you will subsequently have the option to register manually for the use of the services and/or to take out protection within the framework of your possible existing user agreement.

For this purpose, after completion of your order the Trustbadge accesses the following information stored on your device: order amount, order number and email address. This is necessary so that we can offer you buyer protection. Data will only be transmitted to Trusted Shops if you actively decide to take out buyer protection by clicking the corresponding button in the so-called Trustcard. If you decide to use the services, further processing is carried out in accordance with the contractual agreement with Trusted Shops pursuant to Art. 6(1) lit. b GDPR, in order to complete your registration for buyer protection and secure the order, and, where applicable, to subsequently send you review invitations by email.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6(1) lit. f GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA, United Kingdom and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which can be accessed for the USA here, for the United Kingdom here and for Israel here. Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

9. Social media

9.1 Social buttons from Facebook (by Meta), X (formerly: Twitter), Instagram (by Meta), Pinterest, WhatsApp

Social buttons from social networks are used on our website. These are integrated into the page only as HTML links, so that when our website is accessed, no connection is established with the servers of the respective provider. If you click on one of the buttons, the website of the respective social network opens in a new browser window, where you can, for example, activate the Like or Share button.

9.2 Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube

If you have given your consent to the respective social media operator pursuant to Art. 6(1) sentence 1 lit. a GDPR, when you visit our online presences on the social media platforms mentioned above, your data is automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These may be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. Detailed information on the processing and use of the data by the respective social media operator, as well as contact options and your rights and settings options to protect your privacy, can be found in the providers’ privacy policies linked below. If you still need help in this regard, you can contact us.

Facebook (by Meta) is a service of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with visiting a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information about Insights data) can be found here.

Our service providers are based in and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for the transfer to a third country insofar as the respective service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
For these countries, no adequacy decision of the European Commission exists. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Contractual Clauses.

Instagram (by Meta) is a service of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visiting an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information about Insights data) can be found here.

The adequacy decision for the USA serves as the basis for the transfer to a third country insofar as the respective service provider is certified. Certification is in place.

YouTube is a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

10. Contact options and your rights

10.1 Your rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us, to the extent specified therein;
pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate or the completion of your personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary

for exercising the right of freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest; or
for the establishment, exercise or defence of legal claims;

pursuant to Art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as

you contest the accuracy of the data;
processing is unlawful, but you oppose erasure;
we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
you have objected to processing pursuant to Art. 21 GDPR;

pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request the transfer to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence or place of work or of our company headquarters.

Right to object

Where we process personal data as described above in order to safeguard our overriding legitimate interests within the framework of a balancing of interests, you may object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Where processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

This does not apply if processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

10.2 Contact option

If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, rectification, restriction or erasure of data, or to revoke consents given or object to a particular use of data, please contact us directly using the contact details provided in our legal notice (imprint).