Data Privacy Notice

1 Privacy Statement

We, KLEPPER Lifestyle GmbH, Am Kaiserkai 10, 20457 Hamburg, Germany, are the website operator and the controller responsible for processing personal data of website users. Our contact infor-mation is available in the imprint of the website, and contact persons available to answer questions related to the processing of personal data are listed directly in this Privacy Statement. We take the protection of your privacy and your private data very seriously. We collect, store, and use your personal data only in accordance with the content of this Data Priva-cy Declaration as well as applicable data protection law regulations, in particular the European Gen-eral Data Protection Regulation (GDPR) and national data protection provisions. The purpose of this Data Privacy Declaration is to inform you of the scope of personal data that is processed in conjunc-tion with your use of the website, as well as the purposes of that processing.

2 General information

2.1 Personal data

Personal data is information about an identifiable or identified natural person. This includes all in-formation related to your identity, such as your name, your e-mail address, or your mailing address. Information that cannot be associated with your identity – such as statistical information, for in-stance the number of website users – is not considered personal data. You can generally use our website without disclosing your identity and without providing any per-sonal data. In this case, we will only collect general information regarding your visit to our website. However, personal data will be collected from you in order to carry out some of the services we offer. We will then generally only process this data for the purpose of using this website, in particu-lar to provide you with the desired information. When personal data is collected, only data that is absolutely necessary must be provided. You may have the opportunity to provide further infor-mation, but this will then be done on a voluntary basis. In each case, we will indicate whether the fields are mandatory or voluntary information. We will then provide further information on the concrete details in the relevant section of this Data Privacy Declaration. No automated decision-making is carried out based on your personal data in conjunction with the use of our website.

2.2 Processing of personal data

We store your information on specially protected servers within the European Union. These are protected via technical and organisational measures against loss, destruction, access, modification, or processing of your personal data by unauthorised personnel. Access to your data is granted to only a few, authorised individuals. These individuals are responsible for technical, commercial, or editorial servicing of the servers. Despite regular controls, however, it is not possible to provide complete protection against all hazards. Your personal data is transmitted over the internet in an encrypted format. We use SSL-encryption (Secure Sockets Layer) for data transmission.

2.3 Transmission of personal data to third parties

Generally, we use your personal data only to perform services that you request. If we use external service providers in order to provide our services, then they are likewise permitted to access the data only for the purpose of performing the services. We use technical and organisational measures to ensure compliance with data protection law regulations, and we likewise obligate our external service providers to take similar measures. Furthermore, we do not transmit your data to third parties without your express consent, in partic-ular not for advertising purposes. Your personal data is disclosed only if you have personally con-sented to this when you provide the data, or if we are entitled or obligated to disclose the data under the law and/or official or court order. This may include, in particular, providing information for the purposes of criminal prosecution, to avoid danger, or to exercise intellectual property rights. If we transmit your personal data ourselves or via service providers to states outside of the Euro-pean Union, we comply with the special provisions of Art. 44 et seqq. GDPR in doing so, and like-wise obligate our service providers to comply with these regulations. Therefore, we will only transmit your data to states outside of the European Union if the level of protection granted under the GDPR can be ensured. This level of protection is ensured, in particular, through an adequacy decision of the EU Commission or suitable guarantees according to Art. 46 GDPR.

2.4 Legal bases of data processing

If we obtain consent for the processing of your personal data, then Art. 6 para. 1 lit. a) GDPR serves as the legal basis for data processing. If we process your personal data because this is necessary to fulfil a contract or in the course of a relationship that is similar to a contract with you, then Art. 6 para. 1 lit. b) GDPR serves as the legal basis for data processing. If we process your personal data in order to fulfil a legal obligation, Art. 6 para. 1 lit. c) GDPR serves as the legal basis for data processing. Furthermore, Art. 6 para. 1 lit. f) GDPR can serve as the legal basis for data processing if the pro-cessing of your personal data is necessary in order to safeguard a legitimate interest of our compa-ny or that of a third party, and if your interests, basic rights and basic freedoms do not require that the personal data be protected. In the course of this Data Privacy Declaration, we will always note the legal basis for the processing of your personal data.

2.5 Data deletion and storage term

In general, we always delete or block your personal data when the purpose for which it was stored no longer applies. However, data may continue to be stored if this is provided under laws to which we are subject, for instance with respect to statutory retention and documentary obligations. In such cases, we will delete or block your personal data after the end of relevant regulated terms.

3 Use of our website

3.1 Information about your computer

Each time you access our website, we collect the following information about your computer, re-gardless of whether you are registered or not: the IP address of your computer, your browser re-quest, and the time of this request. In addition, the status and quantity of data transmitted will be collected as part of this request. We also collect product and version information on the browser and operating system used on your computer. Furthermore, we collect information on the website from which you accessed our website. The IP address of your computer is stored only while you are using the website, and then deleted or truncated in order to anonymise it. The other data is stored for a limited term (regularly 12 months). We use this data in order to operate our website, in particular to identify and remove errors, in order to assess usage rates for the website and to make adjustments or improvements. We have a legitimate interest to process data for these purposes in the sense of Art. 6 para. 1 lit. f) GDPR.

3.2 Use of cookies

Like many other websites, our website uses cookies. Cookies are small text files stored on your computer that save certain settings as well as data regarding the exchange with our website via your browser. A cookie generally contains the name of the domain from which the cookie file was sent, as well as information on the age of the cookie and an alphanumeric identification code. Cookies allow us to recognise your computer and make any default settings available immediately. The cookies we use are so-called session cookies whenever possible. These are deleted automati-cally after the end of the browser session. In some cases, cookies with a longer storage term may be used so that your default settings and preferences can be taken into consideration the next time you visit our website. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that you are notified once cookies are sent. It is also possible to manually delete previously stored cookies via your browser settings. Please note that, in some cir-cumstances, you may only be able to use our website on a restricted basis or may not be able to use it at all if you reject the storage of cookies or delete necessary cookies. If cookies are not necessary for our website, we will ask you to consent to the use of cookies the first time you access the site. With respect to non-necessary cookies from third-party providers, the following section provides a more complete description of the services of these third-party providers that we use. The legal basis for the associated data processing, including any data trans-mission, is your consent in each case in the sense of Art. 6 para. 1 lit. a) GDPR. Once you have granted your consent, it may be revoked at any time with future effect, in particular through chang-ing your selected settings. The legal basis for using necessary cookies is our legitimate interest in properly providing our web-site in the sense of Art. 6 para. 1 lit. f) GDPR, as well as performing a contract – if contracts are con-cluded or performed via our website – in the sense of Art. 6 para. 1 lit. b) GDPR.

3.3 Registration

You can register to use our website. To do so, you must provide the data requested during the reg-istration, such as your name, address, and e-mail address. In addition, we will collect the date and time of your registration and your IP address. The advantage of registering is that you do not have to enter the data again during each use or order. The legal basis for processing data related to registration is Art. 6 para. 1 lit. a) GDPR, if you have granted your consent. If you register in order to perform or initiate a contract with us, then Art. 6 para. 1 lit. b) GDPR also serves as the legal basis for processing the data. Information requested in mandatory fields during the registration is necessary in order to perform or initiate a contract with us for certain services. However, you are not obligated to register. You can place an order as a guest instead. In this case, however, you will need to enter all the data nec-essary to process the contract again each time you place an order. A customer account will be created for you when you register. We will store the data in the cus-tomer account for as long as we have an active customer relationship with you. If no activity is de-tected for a period of three years, then the status of the customer relationship will be set to inac-tive. You can request that your customer account be deleted at any time.

4 Integration of services from third-party providers

We use the services of third-party providers to provide some functions of our website. These ser-vices are primarily optional functions which you must explicitly accept or use. We have concluded contractual agreements for the provision or integration of services with these providers, and we do everything within our power to ensure that the third-party providers give transparent information regarding the scope of personal data that is processed, and that they comply with data protection law regulations.

4.1 Retargeting and remarketing

Retargeting and remarketing are technologies which make it possible to display relevant adver-tisements to users who have previously visited a certain website even after they leave the web-site. To do so, it is necessary to continue recognising the web users beyond our own website; cook-ies from a relevant service provider are used for this purpose, and the previous usage relationship is also taken into consideration. If a user views certain products, for instance, this product or similar products can then be shown to them as an advertisement on other websites. These are personal-ised advertisements adapted to the needs of individual users. It is not necessary for the user to be identified beyond the recognition function in order to display these personalised advertisements. Because of this, we do not combine the data used for retargeting or remarketing with any other data. We use such technologies to display advertisements online. We use third-party service providers to display the advertisements. We use the services of Google and Facebook, among others, which allow us to automatically display products of interest to the website user. These functions are im-plemented using cookies. It is possible that data may be transmitted to the USA during this process, and that US security authorities may gain access to the relevant data. Should we use cookies for the aforementioned purpose, this will only be done on the basis of your consent and thus on the legal basis of Art. 1 para. 1 lit. a) GDPR.

4.2 YouTube

YouTube videos are integrated into our website; we use a plug-in from the service YouTube (hereinafter referred to as: “YouTube”) operated by Google in order to play these videos. The operator of the service is Google. We use the YouTube service in extended data protection mode, in order to provide as much protection for your privacy as possible. When you access a page of our website on which a YouTube video is integrated, Google initially receives only the information necessary to complete the integration, and no cookies are set to analyse usage behaviour. Google only receives further information if you play the integrated video; Google may also set cookies to analyse your user behaviour in this context. This data processing by Google is technically necessary to play YouTube videos, and is specified by YouTube. We have no influence over this data processing, and we recommend taking this into consideration when you play a YouTube video on our website. When videos are played, for instance, Google's YouTube servers are informed of the page of our website from which you are playing the video. If you are logged into your Google account, you allow Google or YouTube to directly associate your surfing behaviour with your personal Google profile. Therefore, we recommend only playing inte-grated YouTube videos if you consent to have the associated data processing carried out by Google. You can prevent the data from being associated with your Google profile by logging out of your YouTube account. Further information on how user data is handled is available in the Google Data Privacy Declaration at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube. We use YouTube to show you videos and thereby to better inform you about us and our services. The legal basis for integrating the videos is our legitimate interest in the sense of Art. 6 para. 1 lit. f) GDPR; videos are played and further data processing is carried out, however, only based on your consent in the sense of Art. 6 para. 1 lit. a) GDPR.

5 Order processing

We use your personal data to complete orders only within our company and within affiliated com-panies, as well as within the company commissioned to process the order.

5.1 Storage, use, and data transmission in relation to orders

We work with a variety of companies which are responsible for payment processing and logistics in order to process orders. In doing so, we endure that our partners comply with the provisions of data protection law. We provide your address data (name and address), for instance, to the trans-portation company that delivers the products you ordered. The legal basis for doing so is Art. 6 pa-ra. 1 lit. b GDPR. The processing of your personal data is necessary to fulfil the contract. Under the law (Sec. 7 UWG - German Fair Trade Practices Act), it is possible that we may use con-tact information provided during the order to send you advertisements via e-mail or regular mail, even without your express consent. Further information is provided under the “Newsletter” sec-tion. We will store the data for as long as necessary to fulfil the contract. Furthermore, we store this data for the legally required time period in order to fulfil post-contractual obligations and under com-mercial and tax law archiving obligations. These archiving obligations generally last 10 years, to the end of the respective calendar year.

5.2 Payment processing for orders, PayPal

Depending on the payment method selected, payments for orders may be processed with the help of a service provider. For payments made via credit card, your necessary data such as your name, address, and purchase data is forwarded to the respective credit card company. For payments made via PayPal, you will be sent to the PayPal website via a link. Your personal data is processed in the course of this procedure. This includes your name, address, e-mail address, tel-ephone number in some cases, and account or credit card data. Please observe the General Terms and Conditions, Terms of Use, and Data Privacy Provisions of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg in this respect, which are on the PayPal website. You can pay for our goods and services using the reference transaction function (also referred to as “authorise & collect”) of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Lux-embourg (hereinafter referred to as: PayPal). In conjunction with this payment method, we will process available invoice and transaction data, namely your name (first and last name), your ad-dress, e-mail address, PayPal account number, and the invoice amount. The invoice amount and your PayPal account number will be transmitted to PayPal to process the collection procedure. Af-ter this payment function is confirmed for the first time on your behalf, your payment data, in par-ticular your name and PayPal account number, will be saved in your Customer account in order to make it easier to process payment transactions for you in the future. Further information on data protection at PayPal and the relevant Terms of Use of PayPal are avail-able at the following link. Learn more about data protection at PayPal at the following link. If you place an order with us as a guest, the PayPal reference transaction function will not be avail-able to you. However, you can still pay with PayPal. To complete this payment via PayPal, you will be sent to the PayPal website via a link. Your personal data is processed in the course of this proce-dure. This includes your name, address, e-mail address, telephone number in some cases, and ac-count or credit card data. Please observe the General Terms and Conditions, Terms of Use, and Data Privacy Provisions of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg in this respect, which are on the PayPal website.

6 Customer account

You can create a customer account for our online offer on a voluntary basis. In the customer ac-count, all information about you and the use of the various offers is managed centrally. In this way, you have the possibility to manage, update and, if necessary, also delete all data. The legal basis for processing the data for registration is Art. 6 (1) a) GDPR in the case of consent. If you register with us to fulfil or initiate a contract, the legal basis for processing the data is also Art. 6 (1) (b) GDPR.

6.1 Registering for a Customer Account

You can register online for the customer account. To create a customer account, you only need to enter an e-mail address and a password. If no password is requested or entered during registra-tion, we will first automatically assign a password that you can change later. Further details can be added on a voluntary basis. We reserve the right to offer other registration options in addition to registration via the online offer, for which the regulations then apply accordingly. In order to use the full range of functions of the customer account, it may be necessary to verify the e-mail address provided during registration. For this purpose, we will then send a confirmation link to the e-mail address provided, which must be called up by you. This procedure serves on the one hand to ensure the security of your data and on the other hand to ensure that communication regarding services, delivery status or payment situation is sent to a valid e-mail address.

6.2 Collection of data about your customer account

All data relating to the use of the online services is stored in the customer account, insofar as you log in with your customer account in each case. This includes, in particular, personal data (name, age, addresses, delivery and payment information), vouchers, wish lists, purchase history, commu-nication history, search and navigation behaviour, consent to individual services (such as newslet-ters), discount affinity and information provided explicitly or implicitly by the customer about key interests. We can form segments from this data and assign customers to these segments. The affil-iation to such segments is also stored in the customer account. Location-related data such as your delivery addresses or your location will be stored - insofar as you have given your consent for this. Your current location may be used to provide you with location-based offers. If you do not want the data to be stored in your customer account in individual cases, you can use the respective of-fers without using your customer account. If you want to stop the storage of data in the customer account altogether, you can have your customer account deleted.

6.3 Use of data from the Customer Account

We use the stored data to process the joint business relationship and - if appropriate consent has been given - to submit interesting and relevant offers to you via all communication channels used by the customer. On the basis of the stored data, we try to determine which offers are relevant to you. We will contact you within the scope of the business relationship via the contact data provided if you make use of individual services. For example, you will automatically receive order notifications or information on the delivery status; we will inform you according to your selected preferences. Contact can be made via e-mail, messages on your smartphone or via other digital communication channels. In addition, you can select optional communication channels and occasions; these in-clude, in particular, special newsletters and app messages.

6.4 Storage term and deletion

The data accrued during the use of the customer account is generally stored for the duration of the existence of the customer account but can also be deleted prematurely upon request. A large part of the data can be viewed directly online and - with the exception of the e-mail address - changed or deleted. You can delete your customer account at any time by informing us of your wish for de-letion, for example also via the general contact form. In the event of immediate deletion, the data may not be restored later in the event of renewed registration.

7 Communication with us

You can contact us in a variety of ways, including using the contact form on our website. In addition, we are glad to provide you with regular information via e-mail in our newsletter.

7.1 Contact form

If you would like to use the contact form on our website, we will collect the personal data you enter into the contact form, in particular your name and e-mail address. In addition, we will store the IP address and the date and time of the request. We will process the data submitted via the contact form exclusively for the purpose of answering your inquiry or your request. You can decide which information you would like to provide us through the contact form. The legal basis for processing your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. After we complete handling of the matter, the data will be stored initially in case there are any questions. You can request at any time that we delete the data; otherwise, it will be deleted after the matter has been handled in full; any statutory retention periods shall remain unaffected.

7.2 Repair request

On our website you can directly send us a repair request for your boat. The information you pro-vide in this context, such as name, e-mail address and telephone number, we use only to respond to your request, in particular also to provide you with a cost estimate. After we have processed the matter, the data will initially be stored in case of any queries. The data will be deleted after the matter has been fully dealt with; statutory retention obligations remain unaffected in each case.

7.3 Newsletter

When you register for our newsletter, we will use your e-mail address for our own advertising pur-poses until you unsubscribe. You will receive regular information via e-mail on current topics, as well as e-mails for special occasions such as special sales. E-mails may be personalised and custom-ised based on the information which we have about you. Unless you have granted us your consent in writing, we use a so-called double opt-in process to register for our newsletter, meaning that we will only send you a newsletter via e-mail if you have first expressly confirmed that we should activate your newsletter subscription. We will send you a notification e-mail for this purpose asking that you click a link contained in the e-mail to confirm that you would like to receive our newsletter. The legal basis for processing your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR, if you have expressly registered for the newsletter. Under the law, it may also be possible for you to receive newsletters, satisfaction surveys, or other advertising materials from us via e-mail or regular mail even without providing your express consent because you have ordered goods or ser-vices from us, if we receive your e-mail address in this context and if you have not objected to re-ceive information via e-mail. The advertising content will be restricted to goods and services similar to those you have already ordered. In this case, the legal basis is our legitimate interest in direct advertisement in accordance with Art. 6 para. 1 lit. f) GDPR. If you no longer wish to receive any newsletters from us, you can revoke the consent you have granted at any time with future effect, or object to continuing to receive the newsletter, without incurring any costs beyond the transmission costs under basic rates. Simply use the unsubscribe link provided in every newsletter or send a notification to us or to our Data Protection Officer.

7.4 Mailjet

For the newsletter dispatch we use the service Mailjet. The provider is Mailgun Technologies, Inc., 112 E Pecan St #1135, San Antonio, TX 78205 (USA). With this service, the newsletter dispatch can be organized and analysed. The data provided in connection with the newsletter subscription, such as the e-mail address, are stored on Mailjet's servers in the European Union. The service enables a user behaviour analysis of the newsletter recipient. For example, it can be analysed how many recipients have opened certain newsletters or how often certain links in the newsletter have been clicked on. Furthermore, the service offers the possibility of conversion tracking. This can be used to analyse the extent to which, after clicking on a certain link in the news-letter, a predefined action then takes place on our website (for example, registration or viewing a certain video). As part of the technical process, personal data can be transmitted to the USA. In this context, it cannot be ruled out that US security authorities may gain access to this data.
Further information on the relevant analysis options can be found at: https://www.mailjet.de/sicherheit-datenschutz/. The legal basis for the data processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. For more details, please refer to the data protection provisions of Mailjet at: https://www.mailjet.com/privacy-policy/

8 Social media

In addition to our website, we also use a variety of social media channels to provide information and communicate with you; links are provided to these on our website. Specifically, we use the social networks Facebook, Pinterest, Instagram, YouTube, and Twitter. You can identify the links by the logos of the individual providers. When you click the links, the relevant social media pages will open. This Data Privacy Declaration does not apply to these pages. In general, the provisions and Data Privacy Notices of the individual providers apply to those pages. The following section provides an overview of the notices for the individual providers. Facebook: http://www.facebook.com/policy.php Pinterest: https://policy.pinterest.com/de/privacy-policy Instagram: https://help.instagram.com/519522125107875 YouTube: https://policies.google.com/privacy?hl=de&gl=de Twitter: https://twitter.com/privacy?lang=de Before you access these links, no personal data is transmitted to the respective providers. Your access of the linked page serves as the basis for data processing by the respective provider. In addition, the following notices on processing of your personal data apply to our use of the social media channels Facebook and Instagram.

8.1 Facebook fan page

In addition to our website, we also operate a fan page on the social network Facebook. We use the fan page to provide you with information on our activities, and it also serves as a communication channel. The social network Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as: “Facebook”).

Whenever possible in our interactions with Facebook, we work to ensure the protection of your privacy and your private data. If we process your personal data in conjunction with your visit to the fan page, the statements in this Data Privacy Declaration apply without restriction. In addition, be-cause the fan page is integrated into Facebook's site, please note that personal data may be pro-cessed by Facebook as well. We have no influence over this data processing by Facebook; in partic-ular, Facebook does not act as a contract processor on our behalf or under our responsibility. Based on information provided by Facebook, the Facebook guidelines apply to Facebook's data pro-cessing, which are available at https://de-de.facebook.com/policy.php.
From a data protection law standpoint, we and Facebook are considered jointly responsible for operating the fan page and for analysing user data when you visit the fan page. In accordance with data protection law, we have concluded an agreement to define responsibilities within our internal relationship with Facebook.

Facebook offers the operators of fan pages the option of receiving an overview of how the fan page is used and its users via the Page Insights function. Page insights can be used primarily to ac-cess and analyse statistical data. We use the data from Page Insights to make our fan page as attrac-tive and efficient as possible. Data which has been generated by Facebook is provided to us by Fa-cebook for this purpose. Facebook provides further information on how the Page Insights function works and who is responsible for it at https://www.facebook.com/legal/terms/page_controller_addendum.

Facebook offers users who are registered on Facebook the ability to communicate directly using the Facebook Messenger. If you contact us using the Messenger, we will store and use the data you transmit only for the purpose of responding to your inquiry. The legal basis for processing your data is your consent in the sense of Art. 6 para. 1 lit. a) GDPR, as well as our legitimate interest in the sense of Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in recording and processing customer inquiries, in analysing customer inquiries, and in checking for misuse. The data is deleted as long as it is no longer necessary to achieve the purpose for which it was col-lected. For your personal data, this is the case when the respective conversation has ended. We consider the conversation to be ended if circumstances indicate that the matter in question has been fully clarified. You may revoke your consent to process your personal data at any time; in this case, we will delete the data immediately as long as there are no grounds to store it further.

If you have any questions regarding how we use personal data in conjunction with the Facebook fan page, you are welcome to contact us and our Data Protection Officer at any time. The contact information and communication channels are explained in our Data Privacy Declaration. If you have questions regarding data protection at Facebook, please contact Facebook directly. General infor-mation on using social networks securely is also provided by the Bundesamt für die Sicherheit in der Informationstechnologie (BSI - German Federal Office for Information Security) on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

8.2 Instagram account

In addition to our website, we also operate a fan page on the social network Instagram. We use the Instagram account to provide you with information on our activities, and it also serves as a commu-nication channel. The social network Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as: “Facebook”).

Whenever possible in our interactions with Instagram, we work to ensure the protection of your privacy and your private data. If we process your personal data in conjunction with your visit to the Instagram account, the statements in this Data Privacy Declaration apply without restriction. In ad-dition, because the account is integrated into Facebook's site, please note that personal data may be processed by Facebook as well. We have no influence over this data processing by Facebook; in particular, Facebook does not act as a contract processor on our behalf or under our responsibility. Based on information provided by Facebook, the Facebook guidelines apply to Facebook's data processing, which are available at https://de-de.facebook.com/help/instagram/519522125107875. From a data protection law standpoint, we and Facebook bear separate responsibility for operating the account on Instagram and for associated communication and analytic services. If we process your personal data in conjunction with your visit to our Instagram account, and if we solely decide on the purposes and means of data processing used, then we are responsible for the data pro-cessing. This is generally the case if you communicate with us directly via the “Instagram Direct Messaging” function, and transmit your data to us in this manner. If your personal data is processed by Facebook and Facebook decides solely on the means and purposes of data processing, then Facebook is solely responsible for this data processing. This applies in particular to instances when Facebook analyses user behaviour for its own purposes.

Facebook offers the operators of Instagram accounts the option of receiving an overview of how the account is used and its users via the “Instagram insights” function. Instagram insights can be used primarily to access and analyse statistical data. We use the data from Instagram Insights to make our Instagram account as attractive and efficient as possible. Data which has been generated by Facebook on its own account is provided to us by Facebook for this purpose. Most of the data we receive from Facebook is anonymised data and statistical data. If we do receive personal data in this context, we are responsible for our processing of this data in order to analyse use of our Insta-gram account. Facebook provides further information on Instagram Insights at https://www.facebook.com/help/instagram/788388387972460.

You can use the “Instagram Direct Messaging” function on Instagram to communicate directly with us. If you contact us using the Instagram Direct Messaging function, we will store and use the data you transmit only for the purpose of responding to your inquiry. The legal basis for processing your data is your consent in the sense of Art. 6 para. 1 lit. a) GDPR, as well as our legitimate interest in the sense of Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in recording and processing customer inquiries, in analysing customer inquiries, and in checking for misuse. The data is deleted as long as it is no longer necessary to achieve the purpose for which it was col-lected. For your personal data, this is the case when the respective conversation has ended. We consider the conversation to be ended if circumstances indicate that the matter in question has been fully clarified. You may revoke your consent to process your personal data at any time; in this case, we will delete the data immediately as long as there are no grounds to store it further.

If you have any questions regarding how we use personal data in conjunction with our Instagram account, you are welcome to contact us and our Data Protection Officer at any time. The contact information and communication channels are explained in our Data Privacy Declaration. If you have questions regarding data protection on the social network Instagram, which is provided by Face-book, please contact Facebook directly. Please also note that the Bundesamt für die Sicherheit in der Informationstechnologie (BSI - Federal Office for Information Security) provides general infor-mation on securely using social networks on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

8.3 Pinterest

In addition to our own online offering, we also operate an account on the social network Pinterest. Via the account, we provide information about our activities and offer a channel for communica-tion. The social network Pinterest is operated by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter: "Pinterest"). We point out that you use the social network and its functions on your own responsibility. This ap-plies in particular to the use of the interactive functions.

The data collected about you when using the service is processed by Pinterest and may be trans-ferred to countries outside the European Union. The data processed includes, but is not limited to, the data you voluntarily provide, such as your name, username, email address and telephone number, the content you create, upload or receive, such as photos and videos, your IP address, details of the terminal device you use, information on websites and content accessed and your location. We have no influence on the type and scope of the data processed by Pinterest, the type of processing and use or the transfer of this data to third parties. Information on what data is pro-cessed by Pinterest and for what purposes can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy. We process the data you enter on Pinterest, in particular your user name and the content pub-lished under your account, to the extent that we may include your posts in our offer by bookmark-ing them or linking to them, or we may write posts from us that refer to your account. The data you freely publish and distribute on Pinterest is thus included by us in our offer and made available to our followers. You have options to restrict the processing of your data in the general settings of your Pinterest account. In addition, you can restrict Pinterest's access to your data in the settings options for mo-bile devices. However, this depends on the operating system used.

Pinterest offers the operators of Pinterest accounts the possibility of obtaining an overview of the use of the account and its users. The analytics functions can be used to call up and evaluate statisti-cal data in particular. We use the data to make the Pinterest account as attractive and efficient as possible. For this purpose, Pinterest provides us with data that Pinterest has generated on its own responsibility. The data we receive from Pinterest is mostly anonymised data and statistics. If we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our Pinterest accounts. Pinterest provides further information on this at https://business.pinterest.com/de/analytics-and-measurement.

On Pinterest, you have the option of communicating directly with us via Messenger. If you contact us via this function, the data transmitted will be stored and used by us exclusively for the purpose of answering your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 (1) (b) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the recording and processing of customer enquiries, in the evaluation of customer enquiries and in the control of misuse. The data is deleted as soon as it is no longer required to achieve the purpose for which it was col-lected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. You have the option to revoke your consent to the processing of per-sonal data at any time; in this case, the data will be deleted by us immediately if there is no basis for further storage.

If you have any questions about our use of personal data in connection with the use of the Pinter-est account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. Insofar as you have ques-tions regarding data protection on Pinterest, we would like to ask you to contact Pinterest directly.

9 Your rights and contact

We work to provide you with the most transparent explanations possible on how your personal data is processed and on the rights to which you are entitled. If you would like further information or would like to exercise your rights, you can contact us at any time so that we can respond to your request.

9.1 Rights of data subjects

You have a wide range of rights with respect to the processing of your personal data. Firstly, you have a comprehensive right to receive information, and you can also request the rectification and/or deletion or blockage of your personal data. You can also request that processing be restrict-ed, and you have the right to object to processing as well. You also have a right to data portability with respect to the personal data you transmit to us. If you would like to assert one of your rights and/or receive further information on these rights, please contact our customer service. Alternatively, you can also contact our Data Protection Officer.

9.2 Revocation of consent and objection

Once you have granted your consent, you are free to revoke it at any time with future effect. If you revoke your consent, this will not affect the legality of processing carried out based on the consent up to that point. Our customer service and Data Protection Officer also serve as your contact per-sons for doing so. If your personal data is processed not based on your consent, but on another legal basis, you can object to this data processing. Your objection will result in the data processing being reviewed and ended if necessary. You will be informed of the results of the review, and will receive further in-formation from us on why the data processing is permitted, if we intend to continue data pro-cessing.

9.3 Data Protection Officer and contact information

We have appointed an external Data Protection Officer to support us on data protection law mat-ters; you can contact the Officer directly. If you have questions related to how we handle personal data or need further information on data protection law matters, our Data Protection Officer and their team will be happy to assist you:

Dr. Laura Schulte
c/o BRANDI Rechtsanwälte
Adenauerplatz 1
33602 Bielefeld
Telefon: +49 521 96535-820
laura.schulte@brandi.net

9.4 Complaints

If you believe that our processing of your personal data is in violation of this Data Privacy Declara-tion or the applicable data protection provisions, then you have the right to submit a complaint to the supervisory authority. You can also submit a complaint to our Data Protection Officer. The Data Protection Officer will then review the matter and inform you of the results of the review.

10 Further information and changes

10.1 Links to other websites

Our website may contain links to other websites. These links are generally marked as such. We have no influence over whether the linked websites conform to applicable data protection laws. Therefore, we recommend that you review the Data Privacy Declarations of other websites as well.

10.2 Amendments to this Data Privacy Declaration

The date (below) indicates the version of this Data Privacy Declaration. We reserve the right to amend this Data Privacy Declaration at any time with future effect. An amendment will be made, in particular, if we make technical changes to our website or if data protection law regulations change. The current version of the Data Privacy Declaration is always available directly via our website. We recommend that you regularly review the amendments to this Data Privacy Declaration.
Version date for this Data Privacy Declaration: 17/02/2022