NEW NEW - From now on we also produce rolled fondant - NEW NEW

 

 

Cookies

Cookies Summary
 👥 Data subjects: Visitors to the website
🤝 Purpose: depending on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie.

📓 Data processed: Depending on the cookie used. More details can be found below or from the manufacturer of the software that sets the cookie.
📅 Storage period: depending on the respective cookie, can vary
⚖️
from hours to years Legal basis: Art. 6 para. 1 lit  . a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data. Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.

Whenever you browse the Internet, use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: Cookies are really useful helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser transmits the "user-related" information back to our site. Thanks to cookies, our website knows who you are and offers you the setting you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies also cannot access information from your PC.

For example, cookie data can look like this:

Name: _ga
Value
:  GA1.2.1326744211.152122228412-9
Purpose
:  Distinguishing website visitors
Expiry date: after 2 years

A browser should be able to support these minimum sizes:

  • At least 4096 bytes per cookie
  • At least 50 cookies per domain
  • At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user puts a product in the shopping cart, then continues surfing on other pages and later goes to checkout. These cookies do not delete the shopping cart, even if the user closes his browser window.

Useful cookies
These cookies collect information about user behaviour and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and behavior of the website with different browsers.

Targeted cookies
These cookies provide a better user experience. For example, entered locations, font sizes or form data are saved.


Advertising cookies These cookies are also called targeting cookies. They serve to provide the user with individually adapted advertising. This can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you will be asked which of these types of cookies you would like to allow. And of course, this decision is also stored in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".

Purpose of processing via cookies

The purpose ultimately depends on the cookie. More details can be found below or from the manufacturer of the software that sets the cookie.

What data is processed?

Cookies are small aids for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data in the following data protection declaration.

Storage period of cookies

The storage period depends on the respective cookie and is further specified under . Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.

They also have an influence on the storage period. You can manually delete all cookies at any time via your browser (see also "Right to object" below). Furthermore, cookies based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage remains unaffected until then.

Right to object – how can I delete cookies?

How and whether you want to use cookies is up to you. Regardless of which service or website the cookies come from, you always have the option of deleting, disabling or only partially allowing cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable, and manage cookies in Chrome

Safari: Manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

If you do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This allows you to decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search the instructions in Google with the search term "delete cookies Chrome" or "disable cookies Chrome" in the case of a Chrome browser.

Legal basis

Since 2009 there is the so-called "cookie policy". It states that the storage of cookies requires your consent (Article 6 (1) (a) GDPR). Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, that directive was transposed into Paragraph 96(3) of the Telekommunikationsgesetz (Law on telecommunications, 'the TKG'). In Germany, the Cookie Policy has not been transposed as national law. Instead, this directive was largely implemented in § 15 (3) of the Telemedia Act (TMG).

For strictly necessary cookies, even if no consent has been given, there are legitimate interests (Art. 6 para. 1 lit. f GDPR), which in most cases are of an economic nature. We want to provide visitors to the website with a pleasant user experience and certain cookies are often absolutely necessary for this.

Unless absolutely necessary cookies are used, this will only be done with your consent. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.

In the following sections, you will be informed in more detail about the use of cookies if the software used uses cookies.

Web Analytics Introduction

Web Analytics Privacy Policy Summary
 👥 Data subjects: Visitors to the website
 Purpose: Evaluation of visitor information to optimize the website.🤝
📓 Data processed: Access statistics that include data such as access locations, device data, access time and time, navigation behavior, click behavior, and IP addresses. More details can be found at the web analytics tool used.
📅 Storage period: depending on the web analytics tool
⚖️
used Legal basis: Art. 6 para. 1 lit  . a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Web Analytics?

We use software on our website to evaluate the behaviour of website visitors, or web analytics for short. This collects data that the respective analytic tool provider (also called tracking tool) stores, manages and processes. With the help of the data, analyses of user behaviour on our website are created and made available to us as the website operator. In addition, most tools offer various testing options. For example, we can test which offers or content are best received by our visitors. For this purpose, we will show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such test procedures, as well as for other analytics procedures, user profiles can also be created and the data stored in cookies.

Why do we do web analytics?

With our website, we have a clear goal in mind: we want to deliver the best web offer on the market for our industry. In order to achieve this goal, we want to offer the best and most interesting offer on the one hand and on the other hand make sure that you feel completely comfortable on our website. With the help of web analysis tools, we can take a closer look at the behaviour of our website visitors and then improve our website for you and us accordingly. For example, we can see how old our visitors are on average, where they come from, when our website is most visited or which content or products are particularly popular. All this information helps us to optimize the website and thus adapt it to your needs, interests and wishes.

What data is processed?

Of course, the exact data stored depends on the analysis tools used. However, as a rule, it is usually stored, for example, which content you view on our website, which buttons or links you click, when you visit a page, which browser you use, with which device (PC, tablet, smartphone, etc.) You visit the Website or which computer system you are using. If you have agreed that location data may also be collected, these may also be processed by the web analysis tool provider.

In addition, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually stored pseudonymized (i.e. in unrecognizable and abbreviated form). For the purpose of testing, web analysis and web optimization, no direct data, such as your name, age, address or e-mail address are stored. All this data, if collected, is stored pseudonymized. So you cannot be identified as a person.

The following example schematically shows how Google Analytics works as an example of client-based web tracking with Java script code.

How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website, other cookies can store data for several years.

Duration of data processing

We will inform you about the duration of the data processing below, if we have further information. In general, we only process personal data for as long as is strictly necessary for the provision of our services and products. If, as in the case of accounting, it is required by law, for example, this storage period may also be exceeded.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies or third parties at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling or deleting cookies in your browser.

Legal basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (consent), this consent  constitutes the legal basis for the processing of personal data, as it may occur when collected by web analytics tools.

In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors and thus improving our offer technically and economically. With the help of web analytics, we detect errors in the website, can identify attacks and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use the tools if you have given your consent.

Since web analytics tools use cookies, we also recommend that you read our general privacy policy on cookies. In order to find out exactly which data is stored and processed by you, you should read the privacy statements of the respective tools.

Information on specific web analytics tools can be found in the following sections, if available.

Google Analytics Privacy Policy

Google Analytics Privacy Policy Summary
 👥 Data subjects: Visitors to the website
 Purpose: Evaluation of visitor information to optimize the website.🤝
📓 Data processed: Access statistics that include data such as access locations, device data, access time and time, navigation behavior, click behavior, and IP addresses. More details can be found below in this privacy policy.
📅 Storage period: depending on the properties
⚖️
used Legal basis: Art. 6 para. 1 lit  . a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Analytics?

On our website we use the analysis tracking tool Google Analytics (GA) of the American company Google Inc. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. For example, if you click on a link, this action is stored in a cookie and sent to Google Analytics. The reports we receive from Google Analytics allow us to better tailor our website and service to your needs. In the following, we will take a closer look at the tracking tool and, above all, inform you about what data is stored and how you can prevent this.

Google Analytics is a tracking tool used for traffic analysis of our website. In order for Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions you take on our website. As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we receive reports about your user behavior. These reports may include, but are not limited to:

  • Target group reports: Through target group reports, we get to know our users better and know more precisely who is interested in our service.
  • Ad Reporting: Ad Reports make it easier for us to analyze and improve our online advertising.
  • Acquisition reports: Acquisition reports give us helpful information on how to get more people excited about our service.
  • Behavioral reports: Learn how you interact with our website. We can track which way you travel on our site and which links you click.
  • Conversion reports: Conversion is a process in which you take a desired action based on a marketing message. For example, if you go from a pure website visitor to a buyer or newsletter subscriber. These reports help us learn more about how our marketing efforts are resonating with you. This is how we want to increase our conversion rate.
  • Real-time reports: Here we always know immediately what is happening on our website. For example, we see how many users are reading this text.

Why do we use Google Analytics on our website?

Our goal with this website is clear: We want to offer you the best possible service. The statistics and data from Google Analytics help us to achieve this goal.

The statistically evaluated data shows us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is easier for interested people to find it on Google. On the other hand, the data helps us to better understand you as a visitor. We therefore know exactly what we need to improve on our website in order to offer you the best possible service. The data also serves us to carry out our advertising and marketing measures more individually and cost-effectively. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics uses a tracking code to create a random, unique ID associated with your browser cookie. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a "returning" user. All collected data is stored together with this user ID. This makes it possible to evaluate pseudonymous user profiles in the first place.

In order to analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is the default. Alternatively, you can also create the Universal Analytics Property. Depending on the property used, data is stored for different lengths of time.

Identifiers such as cookies and app instance IDs measure your interactions on our website. Interactions are all kinds of actions you take on our website. If you also use other Google systems (such as a Google account), data generated by Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we as the website operator approve this. Exceptions may be made if required by law.

The following cookies are used by Google Analytics:

Name: _ga Value:
2.1326744211.152122228412-5Purpose:
  By default.js analytics uses the cookie _ga to store the user ID. Basically, it serves to distinguish the website visitors.

Expiry date: after 2 years

Name: _gid
Value
: 2.1687193234.152122228412-1
Purpose
:  The cookie is also used to distinguish website visitors
Expiry date: after 24 hours

Name: _gat_gtag_UA_<property-id>
Value
:  1
Purpose: Used to lower the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_ <property-id>.

Expiration date: after 1 minute

Name: AMP_TOKEN
Value
:  not specified
Purpose: The cookie has a token that can be used to retrieve a User ID from the AMP Client ID service. Other possible values indicate a logout, request, or error.

Expiration date: after 30 seconds up to one year

Name: __utma
Value
: 1564498958.1564498958.1564498958.1
Purpose: This cookie can be used to track your behavior on the website and measure performance. The cookie is updated each time information is sent to Google Analytics.
Expiry date: after 2 years

Name: __utmt
Value
:  1
Purpose: Like _gat_gtag_UA_<property-id>, the cookie is used to throttle the request rate.

Expiration date: after 10 minutes

Name: __utmb
Value
: 3.10.1564498958
Purpose: This cookie is used to determine new sessions. It is updated every time new data or info is sent to Google Analytics.

Expiration date: after 30 minutes

Name: __utmc
Value
:  167421564
Purpose: This cookie is used to set new sessions for returning visitors. This is a session cookie and is only stored until you close the browser again.

Expiration date: After closing the browser

Name: __utmz
Value
:  m|utmccn=(referral)|utmcmd=referral|utmcct=/
Purpose: The cookie is used to identify the source of traffic to our website. This means that the cookie stores where you came to our website from. This may have been another page or an advertisement.

Expiry date: after 6 months

Name: __utmv
Value
:  not specified
Purpose: The cookie is used to store user-defined user data. It is always updated when information is sent to Google Analytics.

Expiry date: after 2 years

Note: This list cannot claim to be exhaustive, as Google changes the choice of its cookies again and again.

Here we show you an overview of the most important data collected with Google Analytics:

Heatmaps: Google creates so-called heatmaps. Via heatmaps you can see exactly those areas that you click. This is how we get information about where you are "on the road" on our site.

Session duration: Google refers to the time you spend on our site without leaving the site. If you have been inactive for 20 minutes, the session ends automatically.

 Bounce rate: A bounce rate is when you only view one page on our website and then leave our website.

Account creation: When you create an account or place an order on our website, Google Analytics collects this data.

IP address: The IP address is only displayed in abbreviated form so that no clear assignment is possible.

Location: The IP address can be used to determine the country and your approximate location. This process is also referred to as IP location determination.

Technical Information: Technical information includes, but is not limited to, your browser type, Internet service provider, or screen resolution.

Source of origin: Google Analytics or we are of course also interested in which website or advertising you came to our site.

Other data includes contact details, any ratings, playing media (e.g. when you play a video through our site), sharing content via social media or adding it to your favourites. The list is not exhaustive and serves only as a general orientation of data storage by Google Analytics.

How long and where is the data stored?

Google has distributed their servers all over the world. Most servers are located in America and consequently your data is mostly stored on American servers. Here you can read exactly where the Google data centers are located: https://www.google.com/about/datacenters/locations/?hl=de

Your data is distributed on different physical disks. This has the advantage that the data can be retrieved faster and is better protected against manipulation. Every Google data center has emergency programs for your data. For example, if Google's hardware fails or natural disasters paralyze servers, the risk of service interruption at Google remains low.

The retention period of the data depends on the properties used. When using the newer Google Analytics 4 properties, the retention period of your user data is set to 14 months. For other so-called event data, we have the option of choosing a retention period of 2 months or 14 months.

For Universal Analytics properties, Google Analytics has a standardized retention period of 26 months for your user data. Then your user data will be deleted. However, we have the option of choosing the retention period of user data ourselves. We have five variants available for this:

  • Deletion after 14 months
  • Deletion after 26 months
  • Deletion after 38 months
  • Deletion after 50 months
  • No automatic deletion

In addition, there is also the option that data will only be deleted if you no longer visit our website within the period selected by us. In this case, the retention period will be reset each time you visit our website again within the specified period.

When the specified period has expired, the data is deleted once a month. This retention period applies to your data linked to cookies, user identification and advertising IDs (e.g. cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is a merging of individual data into a larger unit.

How can I delete my data or prevent data storage?

Under European Union data protection law, you have the right to access, update, delete or restrict your information. Use the Google Analytics JavaScript opt-out browser add-on (ga.js, analytics.js, dc.js) to prevent Google Analytics from using your data. You can download and install the browser add-on under https://tools.google.com/dlpage/gaoptout?hl=de . Please note that this add-on only deactivates data collection by Google Analytics.

If you want to disable, delete or manage cookies in principle, you will find the corresponding links to the respective instructions of the most popular browsers under the section "Cookies".

Legal basis

The use of Google Analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (consent), this consent  constitutes the legal basis for the processing of personal data, as it may occur when collected by web analytics tools.

In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors and thus improving our offer technically and economically. With the help of Google Analytics, we detect errors in the website, identify attacks and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use Google Analytics if you have given your consent.

Google processes your data, including in the USA. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can entail various risks to the lawfulness and security of data processing.

Google uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the resolution and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the Standard Contractual Terms, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we were able to bring you closer to the most important information about the data processing of Google Analytics. If you want to know more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.

Auftragsverarbeitungsvertrag (AVV) Google Analytics

We have concluded an order processing agreement (DPA) with Google within the meaning of Article 28 of the General Data Protection Regulation (GDPR). You can find out exactly what a DPA is and, above all, what must be included in a DPA in our general section "Order Processing Agreement (DPA)".

This Agreement is required by law because Google processes personal data on our behalf. It clarifies that Google may only process data that you receive from us in accordance with our instructions and must comply with the GDPR. The link to the order data processing conditions can be found under https://business.safety.google/intl/de/adsprocessorterms/

Google Analytics Demographics and Interests Reports

We have turned on the advertising reporting functions in Google Analytics. Demographic and interest reports include age, gender, and interests. This allows us to get a better picture of our users – without being able to assign this data to individual persons. You can learn more about the advertising features on https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.

You can stop using the activities and information of your Google Account under "Advertising settings" on https://adssettings.google.com/authenticated by checkbox.

Google Analytics in consent mode

Depending on your consent, your personal data will be processed by Google Analytics in the so-called consent mode. You can choose whether or not to accept Google Analytics cookies. This also allows you to choose which data Google Analytics may process about you. This collected data is mainly used to carry out measurements about user behaviour on the website, to display targeted advertising and to provide us with web analysis reports. As a rule, you consent to data processing by Google via a cookie consent tool. If you do not consent to data processing, only aggregated data will be collected and processed. This means that data cannot be assigned to individual users and thus no user profile of you is created. You can also only agree to the statistical measurement. No personal data is processed and therefore not used for advertising or advertising measurement successes.

Google Analytics IP anonymization

We have implemented the IP address anonymization of Google Analytics on this website. This feature has been developed by Google so that this website can comply with the applicable data protection regulations and recommendations of the local data protection authorities if they prohibit the storage of the full IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place.

More information on IP anonymization can be found on https://support.google.com/analytics/answer/2763052?hl=de.

Google Optimize Privacy Policy

We use Google Optimize, a website optimization tool, on our website. The service provider is the American company Google Inc. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes your data, including in the USA. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can entail various risks to the lawfulness and security of data processing.

Google uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the resolution and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the Standard Contractual Terms, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can find out more about the data processed through the use of Google Optimize in the Privacy Policy on https://policies.google.com/privacy?hl=de.

Auftragsverarbeitungsvertrag (AVV) Google Optimize

We have concluded an order processing agreement (DPA) with Google within the meaning of Article 28 of the General Data Protection Regulation (GDPR). You can find out exactly what a DPA is and, above all, what must be included in a DPA in our general section "Order Processing Agreement (DPA)".

This Agreement is required by law because Google processes personal data on our behalf. It clarifies that Google may only process data that you receive from us in accordance with our instructions and must comply with the GDPR. The link to the order data processing conditions can be found under https://business.safety.google/intl/de/adsprocessorterms/

 

 

Social Media Introduction

Social Media Privacy Policy Summary
 👥 Data  subjects: Visitors to the website
🤝 Purpose: Presentation and optimization of our service, contact with visitors, interested parties, etc., advertising
📓 Processed data: Data such as telephone numbers, e-mail addresses, contact data, data on user behavior, information about your device and your IP address.

📅 Storage period: depending on the social media platforms
⚖️
used Legal basis: Art. 6 para. 1  lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is social media?

In addition to our website, we are also active on various social media platforms. User data may be processed so that we can specifically address users who are interested in us via social networks. In addition, elements of a social media platform may also be embedded directly into our website. This is the case, for example, if you click on a so-called social button on our website and are forwarded directly to our social media presence. So-called social media or social media are websites and apps through which registered members can produce content, exchange content openly or in certain groups and network with other members.

Why do we use social media?

For years, social media platforms have been the place where people communicate and connect online. With our social media presences, we can bring our products and services closer to interested parties. The social media elements integrated on our website help you to switch to our social media content quickly and without complications.

The data stored and processed through your use of a social media channel is primarily intended to be able to carry out web analyses. The aim of these analyses is to be able to develop more accurate and personal marketing and advertising strategies. Depending on your behavior on a social media platform, with the help of the evaluated data, appropriate conclusions can be drawn about your interests and so-called user profiles can be created. This also makes it possible for the platforms to present you with tailor-made advertisements. In most cases, cookies are set in your browser for this purpose, which store data about your usage behavior.

As a rule, we assume that we remain responsible under data protection law, even if we use the services of a social media platform. However, the European Court of Justice has ruled that in certain cases the operator of the social media platform together with us may be jointly responsible within the meaning of Art. 26 GDPR. As far as this is the case, we point this out separately and work on the basis of an agreement in this regard. The essence of the agreement is then reproduced below at the platform concerned.

Please note that when using the social media platforms or our built-in elements, data from you may also be processed outside the European Union, as many social media channels, such as Facebook or Twitter, are American companies. As a result, you may not be able to easily claim or enforce your rights in relation to your personal data.

What data is processed?

Which data is stored and processed exactly depends on the respective provider of the social media platform. But usually it is data such as telephone numbers, e-mail addresses, data you enter into a contact form, user data such as which buttons you click, who you like or follow, when you visited which pages, information about your device and your IP address. Most of this data is stored in cookies. Especially if you yourself have a profile on the visited social media channel and are logged in, data can be linked to your profile.

All data collected via a social media platform is also stored on the providers' servers. Thus, only the providers have access to the data and can give you the appropriate information or make changes.

If you want to know exactly which data is stored and processed by the social media providers and how you can object to data processing, you should read the respective data protection declaration of the company carefully. Even if you have questions about data storage and data processing or want to assert corresponding rights, we recommend that you contact the provider directly.

Duration of data processing

We will inform you about the duration of the data processing below, if we have further information. For example, the social media platform Facebook stores data until it is no longer needed for its own purpose. However, customer data that is compared with your own user data will be deleted within two days. In general, we only process personal data for as long as is strictly necessary for the provision of our services and products. If, as in the case of accounting, it is required by law, for example, this storage period may also be exceeded.

Right to object

You also have the right and possibility to revoke your consent to the use of cookies or third parties such as embedded social media elements at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling or deleting cookies in your browser.

Since social media tools may use cookies, we also recommend our general privacy policy on cookies. In order to find out exactly which data is stored and processed by you, you should read the privacy statements of the respective tools.

Legal basis

If you have consented to your data being processed and stored through integrated social media elements, this consent shall be deemed to be the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, if consent is given, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the tools if you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you read our privacy policy about cookies carefully and look at the privacy policy or cookie policy of the respective service provider.

Information on specific social media platforms can be found in the following sections, if available.

Facebook Privacy Policy

Facebook Privacy Policy Summary
 👥 Data  subjects: Visitors to the website
🤝 Purpose: Optimisation of our service
📓 Processed data: Data such as customer data, data on user behaviour, information about your device and your IP address.More details can be found below in the privacy policy.

📅 Storage period: until the data is
⚖️
no longer useful for Facebook's purposes Legal basis: Art. 6 para. 1  lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are Facebook tools?

We use selected tools from Facebook on our website. Facebook is a social media network of the company Meta Platforms Inc. or for the European area of the company Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With the help of these tools, we can offer you and people who are interested in our products and services the best possible offer.

If data is collected and forwarded from you via our embedded Facebook elements or via our Facebook page (fan page), both we and Facebook Ireland Ltd. are responsible for this. Facebook is solely responsible for the further processing of this data. Our joint commitments have also been enshrined in a publicly available agreement under https://www.facebook.com/legal/controller_addendum . It states, for example, that we must clearly inform you about the use of Facebook tools on our site. Furthermore, we are also responsible for ensuring that the tools are integrated into our website in a secure manner under data protection law. Facebook, on the other hand, is responsible, for example, for the data security of Facebook products. If you have any questions about data collection and data processing by Facebook, you can contact the company directly. If you ask us the question, we are obliged to forward it to Facebook.

Below we give an overview of the different Facebook tools, which data is sent to Facebook and how you can delete this data.

In addition to many other products, Facebook also offers the so-called "Facebook Business Tools". This is the official name of Facebook. However, since the term is hardly known, we decided to call them just Facebook tools. These include:

  • Facebook-Pixel
  • social plug-ins (such as the "Like" or "Share" button)
  • Facebook Login
  • Account Kit
  • APIs (programming interface)
  • SDKs (Collection of Programming Tools)
  • Platform Integrations
  • Plug-ins
  • Codes
  • Specifications
  • Documentation
  • Technologies and services

Through these tools, Facebook expands services and has the ability to obtain information about user activities outside of Facebook.

Why do we use Facebook tools on our website?

We only want to show our services and products to people who are really interested in them. With the help of advertisements (Facebook ads) we can reach exactly these people. In order for users to be shown suitable advertising, however, Facebook needs information about people's wishes and needs. In this way, the company is provided with information about user behaviour (and contact details) on our website. As a result, Facebook collects better user data and can show interested people the appropriate advertising about our products or services. The tools thus enable tailor-made advertising campaigns on Facebook.

Facebook calls data about your behavior on our website "event data". These are also used for measurement and analysis services. Facebook can thus create "campaign reports" on our behalf about the effect of our advertising campaigns. Furthermore, analyses give us a better insight into how you use our services, website or products. As a result, we use some of these tools to optimize your user experience on our website. For example, you can use the social plug-ins to share content on our site directly on Facebook.

What data is stored by Facebook tools?

By using individual Facebook tools, personal data (customer data) can be sent to Facebook. Depending on the tools used, customer data such as name, address, telephone number and IP address may be sent.

Facebook uses this information to compare the data with the data it has about you (if you are a Facebook member). Before customer data is transmitted to Facebook, a so-called "hashing" takes place. This means that an arbitrarily large data set is transformed into a string. This also serves to encrypt data.

In addition to the contact data, "event data" is also transmitted. "Event Data" means the information we receive about you on our website. For example, which subpages you visit or which products you buy from us. Facebook does not share the information it receives with third parties (such as advertisers) unless the company has explicit permission or is legally required to do so. "Event data" can also be linked to contact details. This allows Facebook to offer better personalized advertising. After the aforementioned matching process, Facebook deletes the contact data again.

In order to be able to deliver ads in an optimized way, Facebook only uses the event data if it has been combined with other data (collected by Facebook in other ways). Facebook also uses this event data for security, protection, development and research purposes. Much of this data is transmitted to Facebook via cookies. Cookies are small text files that are used to store data or information in browsers. Depending on the tools used and whether you are a Facebook member, different numbers of cookies are created in your browser. In the descriptions of the individual Facebook tools, we go into more detail about individual Facebook cookies. General information about the use of Facebook cookies can also be found on https://www.facebook.com/policies/cookies.

How long and where is the data stored?

Basically, Facebook stores data until it is no longer needed for its own services and Facebook products. Facebook has servers all over the world where its data is stored. However, customer data will be deleted within 48 hours after it has been compared with your own user data.

How can I delete my data or prevent data storage?

In accordance with the General Data Protection Regulation, you have the right to information, correction, portability and deletion of your data.

A complete deletion of the data only takes place if you completely delete your Facebook account. Here's how to delete your Facebook account:

1) On the right side of Facebook, click Settings.

2) Then click on "Your Facebook Information" in the left column.

3) Now click "Deactivation and deletion".

4) Now select "Delete Account" and then click "Next and Delete Account"

5) Now enter your password, click "Next" and then "Delete Account"

The data that Facebook receives via our site is stored, among other things, via cookies (e.g. social plugins). In your browser, you can disable, delete or manage individual or all cookies. Depending on which browser you use, this works in different ways. Under the section "Cookies" you will find the corresponding links to the respective instructions of the most popular browsers.

If you do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. So you can decide for each individual cookie whether you allow it or not.

Legal basis

If you have consented to your data being processed and stored by integrated Facebook tools, this consent is the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the tools if you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you read our privacy policy about cookies carefully and look at Facebook's privacy policy or cookie policy.

Facebook processes your data in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can entail various risks to the lawfulness and security of data processing.

Facebook uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Facebook undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the resolution and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Facebook Data Processing Terms, which correspond to the Standard Contractual Clauses, can be found under https://www.facebook.com/legal/terms/dataprocessing.

We hope we have brought you closer to the most important information about the use and data processing by the Facebook tools. If you want to learn more about how Facebook uses your data, we recommend that you read the data policy on https://www.facebook.com/about/privacy/update.

Facebook Login Privacy Policy

We have integrated the practical Facebook login on our site. So you can easily log in with your Facebook account without having to create another user account. If you decide to make your registration via the Facebook login, you will be redirected to the social media network Facebook. There, the registration takes place via your Facebook user data. Through this login procedure, data about you or Your user behavior is stored and transmitted to Facebook.

To store the data, Facebook uses various cookies. In the following, we show you the most important cookies that are set or already exist in your browser when you log in to our site via Facebook login:

Name: fr
Value: 0jieyh4c2GnlufEJ9.. Bde09j... 1.0.Bde09j
Purpose: This cookie is used to make the social plugin work in the best possible way on our website.

Expiry date: after 3 months

Name: datr Value:
 4Jh7XUA2122228412SEmPsSfzCOO4JFFlPurpose:
 Facebook sets the "datr" cookie when a web browser accesses facebook.com, and the cookie helps identify login activity and protect users.
 
Expiry date: after 2 years

Name: _js_datr
Value
:  deleted
Purpose: This session cookie sets Facebook for tracking purposes, even if you do not have a Facebook account or are logged out.

Expiration date: after session

Note: The cookies listed are only a small selection of the cookies available to Facebook. Other cookies are, for example, _ fbp, sb or wd. A complete list is not possible, as Facebook has a large number of cookies and uses them variably.

On the one hand, the Facebook login offers you a quick and easy registration process, on the other hand, we have the opportunity to share data with Facebook. This allows us to better tailor our offer and promotions to your interests and needs. Data we receive from Facebook in this way is public data such as

  • Your Facebook name
  • Your profile picture
  • a stored e-mail address
  • Freundeslisten
  • Buttons (e.g. "Like" button)
  • Geburtstagsdatum
  • Language
  • Residence

In return, we provide Facebook with information about your activities on our website. This includes, among other things, information about the device you use, which subpages you visit with us or which products you have purchased from us.

By using Facebook Login, you consent to data processing. You may revoke this Agreement at any time. If you would like to find out more information about data processing by Facebook, we recommend the Facebook privacy policy at https://www.facebook.com/policy.php?tid=122228412.

If you are logged in to Facebook, you can change your settings for ads under https://www.facebook.com/adpreferences/advertisers/?entry_product=ad_settings_screen yourself.

Facebook Social Plug-ins Privacy Policy

Our website contains so-called social plug-ins from Meta Platforms Inc. You can recognize these buttons by the classic Facebook logo, such as the "Like" button (the hand with a thumbs up) or by a unique "Facebook plug-in" marking. A social plug-in is a small part of Facebook that is integrated into our site. Each plug-in has its own function. The most used functions are the well-known "Like" and "Share" buttons.

The following social plug-ins are offered by Facebook:

  • "Save" button
  • Like button, share, send and quote
  • Page plug-in
  • Comments
  • Messenger-Plug-in
  • Embedded posts and video players
  • Group plug-in

Visit https://developers.facebook.com/docs/plugins for more information on how to use each plug-in. We use the social plug-ins on the one hand to offer you a better user experience on our site, on the other hand because Facebook can optimize our advertisements.

If you have a Facebook account or have visited https://www.facebook.com/ before, Facebook has already set at least one cookie in your browser. In this case, your browser sends information to Facebook via this cookie as soon as you visit our site or interact with social plug-ins (e.g.dem "Like" button).

The information received will be deleted or anonymized within 90 days. According to Facebook, this data includes your IP address, which website you visited, the date, time and other information concerning your browser.

In order to prevent Facebook from collecting a lot of data during your visit to our website and linking it to the Facebook data, you must log out of Facebook during your visit to the website.

If you are not logged in to Facebook or do not have a Facebook account, your browser will send less information to Facebook because you have fewer Facebook cookies. Nevertheless, data such as your IP address or which website you visit may be transmitted to Facebook. We would like to expressly point out that we do not know exactly about the exact contents of the data. However, according to our current state of knowledge, we try to inform you as well as possible about data processing. You can also read about how Facebook uses the data in the company's data policy under https://www.facebook.com/about/privacy/update.

The following cookies are at least set in your browser when you visit a website with social plug-ins from Facebook:

Name: dpr
Value
:  not specified
Purpose: This cookie is used to make the social plug-ins on our website work.

Expiration date: after session

Name: fr
Value: 0jieyh4122228412c2GnlufEJ9.. Bde09j... 1.0.Bde09j
Purpose: The cookie is also necessary for the plug-ins to function properly.

Expiry date: after 3 months

Note: These cookies were set after a test, even if you are not a Facebook member.

If you are logged in to Facebook, you can change your settings for ads under https://www.facebook.com/adpreferences/advertisers/ yourself. If you are not a Facebook user, you can  generally manage your usage-based online advertising on https://www.youronlinechoices.com/de/praferenzmanagement/?tid=122228412. There you have the option to deactivate or activate providers.

If you want to learn more about Facebook's privacy, we recommend the company's own data policy on https://www.facebook.com/policy.php?tip=122228412.

Instagram Privacy Policy

Instagram Privacy Policy Summary
 👥 Data  subjects: Visitors to the website
🤝 Purpose: Optimization of our service
📓 Processed data: Data such as data on user behavior, information about your device and your IP address.More details can be found below in the privacy policy.

📅 Storage period: until Instagram no longer needs
⚖️
the data for its purposes Legal basis: Art. 6 para. 1 lit  . a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Instagram?

We have integrated functions of Instagram on our website. Instagram is a social media platform of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Meta Platforms Inc. since 2012 and is part of the Facebook products. The embedding of Instagram content on our website is called embedding. This allows us to show you content such as buttons, photos or videos from Instagram directly on our website. If you visit pages of our website that have integrated an Instagram function, data will be transmitted, stored and processed by Instagram. Instagram uses the same systems and technologies as Facebook. Your data will therefore be processed across all Facebook companies.

In the following, we would like to give you a more detailed insight into why Instagram collects data, what data it is and how you can largely control data processing. Since Instagram is part of Meta Platforms Inc., we get our information from the Instagram Policy, but also from the Meta Privacy Policy itself.

Instagram is one of the most famous social media networks worldwide. Instagram combines the advantages of a blog with the advantages of audiovisual platforms such as YouTube or Vimeo. You can upload photos and short videos to "Insta" (as many of the users casually call the platform), edit them with various filters and also distribute them on other social networks. And if you don't want to be active yourself, you can only follow other interesting users.

Why do we use Instagram on our website?

Instagram is the social media platform that has really gone through the roof in recent years. And, of course, we also reacted to this boom. We want you to feel as comfortable as possible on our website. That is why a varied preparation of our content is a matter of course for us. Through the embedded Instagram features, we can enrich our content with helpful, funny or exciting content from the Instagram world. Since Instagram is a subsidiary of Facebook, the data collected may also be useful for personalized advertising on Facebook. So our ads only get people who are really interested in our products or services.

Instagram also uses the collected data for measurement and analysis purposes. We get summarized statistics and thus more insight into your wishes and interests. It is important to note that these reports do not identify you personally.

What data is stored by Instagram?

If you come across one of our pages that have built-in Instagram features (such as Instagram images or plug-ins), your browser automatically connects to Instagram's servers. Data is sent, stored and processed to Instagram. Regardless of whether you have an Instagram account or not. This includes information about our website, about your computer, about purchases made, about advertisements you see and how you use our offer. Furthermore, the date and time of your interaction with Instagram are also stored. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.

Facebook distinguishes between customer data and event data. We assume that this is exactly the case with Instagram. Customer data are, for example, name, address, telephone number and IP address. This customer data will not be transmitted to Instagram until it has been "hashed" beforehand. Hashing means that a record is transformed into a string. This allows you to encrypt the contact data. In addition, the above-mentioned "event data" will also be transmitted. By "event data" Facebook – and consequently Instagram – understands data about your user behavior. It may also happen that contact data is combined with event data. The contact data collected will be compared with the data that Instagram already has about you.

The collected data is transmitted to Facebook via small text files (cookies), which are usually set in your browser. Depending on the Instagram features used and whether you have an Instagram account yourself, different amounts of data are stored.

We assume that data processing works in the same way on Instagram as on Facebook. This means that if you have an Instagram account or have visited www.instagram.com , Instagram has at least set a cookie. If this is the case, your browser sends information to Instagram via the cookie as soon as you come into contact with an Instagram function. At the latest after 90 days (after comparison) this data will be deleted or anonymized. Although we have dealt intensively with Instagram's data processing, we cannot say exactly what data Instagram collects and stores.

In the following, we show you cookies that are set in your browser at least when you click on an Instagram function (such as a button or an Insta image). In our test, we assume that you don't have an Instagram account. If you are logged in to Instagram, significantly more cookies are of course set in your browser.

These cookies were used in our test:

Name: csrftoken
Value
: ""
Purpose: This cookie is most likely set for security reasons to prevent forgery of requests. However, we could not find out more precisely.

Expiry date: after one year

Name: mid
Value
: ""
Purpose: Instagram sets this cookie to optimize its own services and offers in and outside Instagram. The cookie defines a unique user ID.

Expiration date: after the end of the session

Name: fbsr_122228412124024
Value
: no information
Purpose: This cookie stores the log-in request for users of the Instagram app.

 Expiration date: after the end of the session

Name: rur
Value
: ATN
Purpose: This is an Instagram cookie that ensures functionality on Instagram.

Expiration date: after the end of the session

Name: urlgen
Value
: "{"194.96.75.33": 1901}:1iEtYv:Y833k2_UjKvXgYe122228412"
Purpose: This cookie is used for marketing purposes of Instagram.

Expiration date: after the end of the session

Note: We cannot claim to be exhaustive here. Which cookies are set in the individual case depends on the embedded functions and your use of Instagram.

How long and where is the data stored?

Instagram shares the information it receives between the Facebook Companies with external partners and with people you connect with worldwide. Data processing is carried out in compliance with its own data policy. Your data is distributed on Facebook's servers around the world, among other things for security reasons. Most of these servers are located in the USA.

How can I delete my data or prevent data storage?

Thanks to the General Data Protection Regulation, you have the right to information, portability, correction and deletion of your data. You can manage your data in Instagram settings. If you want to completely delete your data on Instagram, you need to delete your Instagram account permanently.

Here's how to delete the Instagram account:

First, open the Instagram app. On your profile page, go down and click on "Help Center". Now you come to the company's website. On the webpage, click Manage Your Account, then click Delete Your Account.

If you delete your account altogether, Instagram will delete posts such as your photos and status updates. Information that other people have shared about you is not part of your account and will not be deleted.

As mentioned above, Instagram stores your data primarily via cookies. You can manage, disable or delete these cookies in your browser. Depending on your browser, the management always works a bit differently. Under the section "Cookies" you will find the corresponding links to the respective instructions of the most popular browsers.

You can also set up your browser so that you are always informed when a cookie is to be set. Then you can always decide individually whether you want to allow the cookie or not.

Legal basis

If you have consented to your data being processed and stored through integrated social media elements, this consent shall be deemed to be the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the integrated social media elements if you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you read our privacy policy about cookies carefully and look at the privacy policy or cookie policy of the respective service provider.

Instagram or Facebook also processes data in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can entail various risks to the lawfulness and security of data processing.

Facebook uses standard contractual clauses approved by the EU Commission (= Art. 46 para. 2 and 3 GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there. These clauses oblige Facebook to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses here: https://germany.representation.ec.europa.eu/index_de.

We have tried to give you the most important information about data processing by Instagram. On https://help.instagram.com/519522125107875,
 you can take a closer look at Instagram's data policy.

Pinterest Privacy Policy

Pinterest Privacy Policy Summary
 👥 Data subjects:  Website visitors
 Purpose: Optimisation
of🤝 our service
📓 Processed data: Data such as user behaviour data, information about your device, your IP address and search terms.More details can be found below in the privacy policy.
📅 Storage period: until Pinterest no longer needs
⚖️
the data for its purposes Legal basis: Art. 6 para. 1 lit  . a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Pinterest?

On our site we use buttons and widgets of the social media network Pinterest, the company Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA. For Europe, the Irish company Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) is responsible for all data protection-relevant aspects.

Pinterest is a social network that specializes in graphic representations and photographs. The name is composed of the two words "pin" and "interest". Users can exchange ideas about various hobbies and interests via Pinterest and view the respective profiles with pictures openly or in defined groups.

Why do we use Pinterest?

Pinterest has been around for several years now and this social media platform is still one of the most visited and appreciated platforms. Pinterest is particularly suitable for our industry because the platform is primarily known for beautiful and interesting images. That's why, of course, we are also represented on Pinterest and want to stage our content accordingly off our website. The data collected may also be used for advertising purposes so that we can show advertising messages to exactly those people who are interested in our services or products.

What data does Pinterest process?

So-called log data can be stored. This includes information about your browser, IP address, the address of our website and the activities performed on it (for example, when you click the remember or pin button), search histories, date and time of the request and cookie and device data. If you interact with an embedded Pinterest feature, cookies that store various data may also be set in your browser. In most cases, the above-mentioned log data, preset language settings and clickstream data are stored in cookies. By clickstream data, Pinterest understands information about your website behavior.

If you have a Pinterest account yourself and are logged in, the data collected through our site may be added to your account and used for advertising purposes. When you interact with our embedded Pinterest features, you will usually be redirected to the Pinterest page. Here you can see an example selection of cookies, which are then set in your browser.

Name: _auth
Value
:  0
Purpose: The cookie is used for authentication. For example, a value such as your "user name" can be stored in it. 
 Expiry date: after one year

Name: _pinterest_referrer
Value
:  1
Purpose: The cookie stores that you came to Pinterest via our website. So the URL of our website is stored.

Expiration date: after session

Name: _pinterest_sess
Value: ... 9HRHZvVE0rQlUxdG89
Purpose: The cookie is used to log in to Pinterest and contains user IDs, authentication tokens and timestamps.

 Expiry date: after one year

Name: _routing_id
Value
: "8d850ddd-4fb8-499c-961c-77efae9d4065122228412-8"
Purpose: The cookie contains an assigned value that is used to identify a specific routing destination.

 Expiration date: after one day

Name: cm_sub
Value
:  denied
Purpose: This cookie stores a user ID and the timestamp.

 Expiry date: after one year

Name: csrftoken
Value
:  9e49145c82a93d34fd933b0fd8446165122228412-1
Purpose: This cookie is most likely set for security reasons to prevent forgery of requests. However, we could not find out more precisely.

 Expiry date: after one year

Name: sessionFunnelEventLogged
Value
:  1
Purpose: We have not yet been able to obtain any further information about this cookie.

 Expiration date: after one day

How long and where is the data stored?

In principle, Pinterest stores the collected data until it is no longer needed for the purposes of the company. As soon as data retention is no longer necessary, for example to comply with legal regulations, the data is either deleted or anonymized so that you can no longer be identified as a person. The data may also be stored on American servers.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies or third parties such as Pinterest at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling or deleting cookies in your browser.

Since cookies may be used for embedded Pinterest elements, we also recommend our general privacy policy on cookies. In order to find out exactly which data is stored and processed by you, you should read the privacy statements of the respective tools.

Legal basis

If you have consented to your data being processed and stored through integrated social media elements, this consent shall be deemed to be the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the tool if you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you read our privacy policy about cookies carefully and look at the privacy policy or cookie policy of the respective service provider.

Pinterest processes your data in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can entail various risks to the lawfulness and security of data processing.

As a basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or data transfer there, Pinterest uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Pinterest undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the resolution and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

For more information on Pinterest's Standard Contractual Clauses, see https://policy.pinterest.com/de/privacy-policy#section-residents-of-the-eea.

We have tried to give you the most important information about data processing by Pinterest. In https://policy.pinterest.com/de/privacy-policy,  you can take a closer look at Pinterest's data policies.

Cookie Consent Management Platform Einleitung

Cookie Consent Management Platform Summary
 👥 Data  subjects: Website visitor
🤝 Purpose: Obtaining and managing consent to certain cookies and thus the use of certain tools
📓 Processed data: Data to manage the set cookie settings such as IP address, time of consent, type of consent, individual consents. More details can be found at the tool used.

📅 Storage period: Depends on the tool used, you have to be prepared
⚖️
for periods of several years Legal basis: Art. 6 para.  1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is a Cookie Consent Management Platform?

We use a Consent Management Platform (CMP) software on our website, which makes it easier for us and you to handle scripts and cookies correctly and securely. The software automatically creates a cookie pop-up, scans and controls all scripts and cookies, provides you with a cookie consent required under data protection law and helps us and you to keep track of all cookies. Most cookie consent management tools identify and categorize all existing cookies. As a website visitor, you then decide for yourself whether and which scripts and cookies you allow or do not allow. The following graphic shows the relationship between browser, web server, and CMP.

 

Why do we use a cookie management tool?

Our goal is to offer you the best possible transparency in the area of data protection. In addition, we are also legally obliged to do so. We want to inform you as much as possible about all tools and all cookies that can store and process your data. It is also your right to decide for yourself which cookies you accept and which you do not. In order to grant you this right, we first need to know exactly which cookies have landed on our website in the first place. Thanks to a cookie management tool, which regularly scans the website for all existing cookies, we know about all cookies and can provide you with GDPR-compliant information. You can then accept or reject cookies via the consent system.

What data is processed?

As part of our cookie management tool, you can manage each individual cookie yourself and have complete control over the storage and processing of your data. The declaration of your consent is stored so that we do not have to ask you every time you visit our website and we can also prove your consent if required by law. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the storage period of your cookie consent varies. In most cases, this data (such as pseudonymous user ID, date of consent, detailed information on cookie categories or tools, browser, device information) is stored for up to two years.

 

Duration of data processing

We will inform you about the duration of the data processing below, if we have further information. In general, we only process personal data for as long as is strictly necessary for the provision of our services and products. Data stored in cookies is stored for different periods of time. Some cookies are deleted after leaving the website, others may be stored in your browser for a few years. The exact duration of data processing depends on the tool used, in most cases you should be prepared for a storage period of several years. In the respective data protection declarations of the individual providers, you will usually receive precise information about the duration of data processing.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling or deleting cookies in your browser.

Information on specific cookie management tools can be found in the following sections, if available.

Legal basis

If you agree to cookies, your personal data will be processed and stored via these cookies. If we are allowed  to use cookies through your consent (Article 6 (1) (a) GDPR), this consent is also the legal basis for the use of cookies or the processing of your data. In order to be able to manage the consent to cookies and to enable you to give consent, a cookie consent management platform software is used. The use of this software enables us to operate the website in an efficient legally compliant manner, which represents a legitimate interest (Art. 6 para. 1 lit. f GDPR).

AdSimple Cookie Manager Privacy Policy

AdSimple Cookie Manager Privacy Policy Summary
 👥 Data subjects:  Website visitor
🤝
Purpose: Obtaining consent to certain  cookies and thus the use of certain tools
📓 Processed data: Data to manage the set cookie settings such as IP address, time of consent, type of consent, individual consents. More details can be found in this privacy policy
📅
Storage  period: the cookie used expires after one year
⚖️
Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is AdSimple Cookie Manager?

On our website we use the AdSimple Cookie Manager of the software development and online marketing company AdSimple GmbH, Fabriksgasse 20, 2230 Gänserndorf. Among other things, the AdSimple Cookie Manager offers us the opportunity to provide you with a comprehensive and privacy-compliant cookie notice so that you can decide for yourself which cookies you allow and which you do not. By using this software, data about you will be sent to AdSimple and stored. In this privacy policy we inform you why we use the AdSimple Cookie Manager, what data is transmitted and stored and how you can prevent this data transfer.

AdSimple Cookie Manager is software that scans our website and identifies and categorizes all existing cookies. In addition, you as a website visitor are informed about the use of cookies via a cookie notice script and decide for yourself which cookies you allow and which you do not.

Why do we use AdSimple Cookie Manager on our website?

We want to offer you maximum transparency in the area of data protection. To ensure this, we first need to know exactly which cookies have landed on our website over time. Because AdSimple's Cookie Manager regularly scans our website and locates all cookies, we have full control over these cookies and can therefore act GDPR compliant. This allows us to inform you exactly about the use of cookies on our website. Furthermore, you will always receive an up-to-date and data protection-compliant cookie notice and decide for yourself which cookies you accept or block via the checkbox system.

What data is stored by AdSimple Cookie Manager?

If you agree to cookies on our website, the following cookie is set by the AdSimple Cookie Manager:

Name: acm_status
Value
: ":true,"statistics":true,"marketing":true,"social media":true  ,"settings":true}
Purpose: This cookie stores your consent status. This allows our website to read and follow the current status on future visits.

Expiry date: after one year

How long and where is the data stored?

All data collected by the AdSimple Cookie Manager is transferred and stored exclusively within the European Union. The collected data is stored on AdSimple servers at Hetzner GmbH in Germany. Only AdSimple GmbH and Hetzner GmbH have access to this data.

How can I delete my data or prevent data storage?

You have the right to access and delete your personal data at any time. You can prevent data collection and storage, for example, by rejecting the use of cookies via the cookie notice script. Another way to prevent data processing or to manage it according to your wishes is your browser. Depending on the browser, cookie management works slightly differently. Under the section "Cookies" you will find the corresponding links to the respective instructions of the most popular browsers.

Legal basis

If you agree to cookies, your personal data will be processed and stored via these cookies. If we are allowed  to use cookies through your consent (Article 6 (1) (a) GDPR), this consent is also the legal basis for the use of cookies or the processing of your data. In order to manage the consent to cookies and to enable you to give consent, the AdSimple Cookie Manager is used. The use of this software enables us to operate the website in an efficient legally compliant manner, which represents a legitimate interest (Art. 6 para. 1 lit. f GDPR).

We hope we have given you a good overview of the traffic and processing by the AdSimple Cookie Manager. If you want to know more about this tool, we recommend the description page on https://www.adsimple.at/adsimple-cookie-manager/.