Privacy Policy

1) Information on the collection of personal data and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is RABE Fahrradhandel GmbH, Pasinger Str. 50, 82166 Gräfelfing, Germany, Tel.: +49 89-125 01 01 01, e-mail: info@rabe-bike.de. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller of data). You can recognise an encrypted connection by the string „https://“ and the lock symbol in your browser line.

2) Data collection when visiting our website

When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called „server log files“). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Used BrowserUsed operating system
  • Used IP address (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Content Delivery Network

AWS CloudFront (Amazon)
On our website, we use the Content Delivery Network („CDN“) „AWS CloudFront“ of the service provider „Amazon“ (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg). A Content Delivery Network is an online service that is used in particular to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. The use of Amazon’s Content Delivery Network helps us to optimise the loading speeds of our website.
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
For more information, please see Amazon’s privacy policy at https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html

4) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable your browser to be recognised the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These you can find for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookiesFirefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting us

Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you andthe associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. lit. b GDPR. Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account and for contract processing

Moreover, pursuant to Art. 6 para. 1 lit. b GDPR, personal data will be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the data controller. We store and use the data provided by you for the purpose of processing the contract. After final processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to a further use of your data or a legally permitted further use of data has been reserved on our part.

7) Use of customer data for direct advertising

7.1 Subscription to our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. For sending the newsletter only your e-mail address is required. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an corresponding link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the data controller named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we have reserved the right to a further use of your data that is permitted by law and about which you were informed in this declaration.

7.2 Newsletter dispatch via Sendinblue

For the dispatch of newsletters and the analysis of our newsletter campaigns, we use the service of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin.

The personal data processed for the purpose of sending the newsletter is transmitted to Sendinblue and stored exclusively on servers in Germany. We have concluded a data processing agreement contract with Sendinblue.

If you register for our newsletter, in addition to your email address, we also process data that enables us to prove your consent to the newsletter dispatch or to clarify a possible misuse of your personal data (IP address, date and time of registration and consent, email address). On the basis of your voluntary input, we process further data from you, such as your first and last name, so that we can, for example, address you personally in our newsletter.

Sendinblue also enables us to analyse newsletter campaigns by using tracking technologies like tracking pixels and cookies.

In the newsletters we send, there is a tracking pixel that helps us to see whether you have opened a newsletter. If your mail programblocks images, no tracking takes place through the tracking pixel.

In addition, we can use cookie technology to track whether you have clicked on a certain link in a newsletter. When you click on a link in a newsletter, you are directed to a Sendinblue page that sets the cookie „uuid“ on your terminal device. This cookie has a lifespan of 108 days. A unique user ID is stored in the cookie, which enables an allocation to the data stored by you.

Based on the opening and click-through rates, we can also assign the recipients of our newsletters to different categories in order to improve targeting the newsletters to the interests of the newsletter recipients.

Furthermore, we can track so-called bounce rates, i.e. the cases in which a newsletter has not been received (e.g. because the recipient’s mailbox is full).
We do not implement or use any additional tracking functions of the Sendinblue service (e.g. conversion tracking).

Insofar as we store your data as proof of your consent, the legal basis is Art. 6 para. 1 lit. c) GDPR. Otherwise, the legal basis for the processing of your data via Sendinblue is your consent according to Art. 6 para. 1 lit. a) GDPR.
You can revoke your consent at any time with effect for the future, e.g. by clicking on unsubscribe in a newsletter, by telephone, by e-mail or by post. You can find our contact details in our imprint.

As long as there are no statutory retention periods (e.g. from tax and/or commercial law), we store the data deposited with us for the purpose of sending the newsletter until you have revoked your consent. The storage of your personal data for other purposes (e.g. due to the conclusion of a purchase contract) remains unaffected.
Further information on data processing by Sendinblue can be found here: https://de.sendinblue.com/legal/privacypolicy/.

7.3 Goods availability notification by e-mail

If we offer the possibility in our online shop to inform you by e-mail about the time of availability for selected items that are temporarily unavailable, you can register for our e-mail notification service for the availability of goods. If you subscribe to our email availability notification service, we will send you a one-time email notification of the availability of the item you have selected. Only your e-mail address is required for sending this notification. The provision of further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending this notification. This means that we will only send you a corresponding notification once you have expressly confirmed that you consent to receiving such a message. We will then send you a confirmation email asking you to confirm that you wish to receive such a notification by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for our e-mail notification service on the availability of goods, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for our goods availability e-mail notification service is used solely for the purpose of informing you about the availability of a particular item in our online shop. You can unsubscribe from the goods availability e-mail notification service at any time by sending a message to the data controller named at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we have reserved the right to a further use of your data that is permitted by law and about which you were informed in this declaration.

8) Data processing for order handling

8.1 In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8.2 Transfer of personal data to shipping service providers

– General Overnight (GO!)
If the goods are delivered by the transport service provider GO! Express & Logistics (Deutschland) GmbH, Brühler Straße 9, 53119 Bonn, Germany), we will pass on your e-mail address to GO! prior to the delivery of the goods for the purpose of agreeing on a delivery date or for delivery notification in accordance with Art. 6 para. 1 lit. a GDPR, provided you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to GO! for the purpose of delivery in accordance with Art. 6 p.ara. 1 lit. b GDPR. This information will only be passed on if it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with GO! or notification of delivery is not possible.
The consent can be revoked at any time with effect for the future by declaration to the data controller named above or to the transport service provider GO!

– UPS
If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland S.a.r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will pass on your e-mail address to UPS prior to delivery of the goods in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. This information will only be passed on if it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of status information of the shipment delivery is not possible.
The consent can be revoked at any time with effect for the future by declaration to the data controller named above or to the transport service provider UPS.

8.3 Use of payment service providers (payment services)

– Amazon PayIf you select the payment method „Amazon Pay“, the payment will be processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: „Amazon Payments“), to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 para 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. If cookies, i.e. small text files that are stored on the terminal device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time via the „cookie consent tool“ implemented on the website. You can obtain further information about the data protection provisions of Amazon Payments at the following Internet address: https://pay.amazon.com/de/help/201751600

– PAYONE.
If you choose a payment method from the payment service provider PAYONE, the payment will be processed by the payment service provider PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider PAYONE and only insofar as it is necessary for this purpose.

– Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – „purchase on account“ or „payment by instalments“ via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter „PayPal“) as part of the payment processing. The transfer takes place in accordance with Art. 6 p.ara. 1 lit. b GDPR and only insofar as this is necessary for the payment processing. For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – „purchase on account“ or „payment by instalments“ via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit score information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal’s data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
ou can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

– SOFORT

If you select the payment method „SOFORT“, the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter „SOFORT“), to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. You can obtain further information about SOFORT’s data protection policy at the following Internet address: https://www.klarna.com/sofort/datenschutz.

9) Use of assessment charts and test seal graphics [LW1] 

Integration of the idealo logo

The logo of our partner idealo (idealo internet GmbH, Zimmerstraße 50, 10888 Berlin) is integrated on our website. Our client´s purpose of integrating the logo is the cost-efficient and therefore optimal marketing of their offers via idealo’s platform. When you access our website, information (including the user’s IP address, the date and time of access, the browser used and the operating system of the terminal device used) is automatically transmitted to the idealo server via the browser used on your terminal device. This information is temporarily stored in a so-called server log file for 14 days and automatically deleted after this period. The information is not merged with other data.
As far as personal data are also affected by the processing, this is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offer, the correct display of the page content and to ensure the security of the information technology systems. According to idealo, a transfer of personal data to third countries, i.e. countries outside the EEA/EU, is possible. In these third countries, there may not be an adequate level of data protection equivalent to the EU due to the lack of an adequacy decision (Art. 45(3) GDPR) and/or guarantees (Art. 46 GDPR). For this reason, the enforcement of your rights may be limited or not possible. You can find further information in idealo’s data protection information: https://www.idealo.de/preisvergleich/Datenschutz.html

10) Use of social media: videos

Use of Youtube videos

This website uses the Youtube embedding function to display and play videos from the provider „Youtube“, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“).

We use the extended data protection mode, where, according to the provider, the storage of user information is only initiated if the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider „Youtube“ uses cookies to collect information about user behaviour. According to information from „Youtube“, these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google’s legitimate interests in the display of personalised advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.
Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is visited, which may initiate further data processing operations without our influence.

Further information on data protection at „Youtube“ can be found in the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy.

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the „Cookie Consent Tool“ provided on the website.

11) Online marketing

11.1 Facebook Pixel for the creation of Custom Audiences (with Cookie Consent Tool)
Within our online offer, the so-called „Facebook pixel“ of the social network Facebook is used, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland („Facebook“).
If a user clicks on an advertisement placed by us and played on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. If our site allows data to be shared with Facebook via Pixel, this URL parameter is inscribed in the user’s browser via a cookie that our linked site sets itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook Pixel, it is possible for Facebook, on the one hand, to determine the visitors to our online offer as a target group for the display of advertisements (so-called „Facebook Ads“). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called „Custom Audiences“). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. This allows us to further evaluate the effectiveness of the Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called „conversion“).
The data collected is anonymous for us, so it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook´sdata policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside of Facebook.
The data processing associated with the use of the Facebook Pixel is only carried out with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the checkmark next to the setting for the „Facebook Pixel“ in the „Cookie Consent Tool“ integrated on the website.

11.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program „Google Ads“ and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, Cookies cannot be tracked across Google Ads clients‘ websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

Details on the processing initiated by Google Ads Conversion Tracking and on Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

If you do not wish to participate in the tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under the keyword „User settings“. You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.

You can obtain more information about Google’s privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the „Cookie Consent Tool“ provided on the website or alternatively follow the option described above for making an objection.

12) Web analytics services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). Google (Universal) Analytics uses „cookies“, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
This website uses Google (Universal) Analytics exclusively with the extension „_anonymizeIp()“, which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google LLC.server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser within the use of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information via a special function, the so-called „demographic characteristics“. This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures. However, data records collected via the „demographic characteristics“ cannot be assigned to a specific person.
Details on the processing initiated by Google Analytics and on Google’s handling of website data can be found here: https://policies.google.com/technologies/partner-sites

Al processing described above, in particular the setting of Google Analytics cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the „Cookie Consent Tool“ provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google refers to the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

13) Retargeting/ Remarketing/ Referral advertising

Microsoft Advertising
This website uses the conversion tracking technology „Microsoft Advertising“ from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft sets a cookie on your computer if you have accessed our website via a Microsoft Adveristing ad. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognise that the user clicked on the ad and was redirected to this page (conversion page).
The information collected using the conversion cookie is used to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
All processing described above, in particular the setting of cookies for reading out information on the terminal device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Microsoft Advertising will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the „Cookie Consent Tool“ provided on the website.
You can obtain further information about Microsoft’s data protection policy at the following Internet address: https://privacy.microsoft.com/de-de/privacystatement

Google Ads Remarketing
Our website uses the Google Ads Remarketing function to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR. Further data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalise the ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data in order to form target groups. The use of Google Ads Remarketing may also involve the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing initiated by Google Ads Remarketing and on Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:https://www.google.com/settings/ads/onweb/
Further information and the data protection provisions regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the „Cookie Consent Tool“ provided on the website or alternatively follow the option described above for making an objection.

Google Signals
This website uses Google Signals as an extension to the Google Analytics 4 service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“), to analyze the usage of websites.

Google Signals are session data from websites and applications linked by Google to its users when these users are signed in with their Google account during their visit to our website and have personalized advertising enabled. For these users, it is possible to analyze user behavior across browsers and devices. Google does not transmit personal data about individual users to us but provides statistics and reports. This allows us to improve and tailor our offerings even more effectively.

If you wish to stop cross-device analysis, you can deactivate the „Personalized Advertising“ feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de and https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de&sjid=17419309380195186087-EU

For more information on Google Signals, visit the following link: https://support.google.com/ads/answer/2662922?hl=de

We only store personal data for as long as necessary to achieve the purposes of data processing.

It cannot be ruled out that personal data may be transmitted to Google LLC and Alphabet Inc. via this service. This may also involve a transfer to third countries outside the EU/EEA, especially to the USA. These countries may not have the same level of data protection, and the enforcement of your rights may be limited or not possible. There is a risk that in third countries, government authorities may disproportionately access or process your data without legal recourse.

On July 10, 2023, the European Commission adopted the Adequacy Decision for the EU-U.S. Data Privacy Framework. It assesses that the USA, within the EU-U.S. Data Privacy Framework (DPF), ensures an adequate level of protection for certain transfers of personal data. However, the new DPF only includes U.S. organizations, especially companies that have self-certified according to the requirements of the DPF. This is currently only possible if they fall under the jurisdiction of the Federal Trade Commission or the Department of Transportation. The certified companies can be accessed here: https://www.dataprivacyframework.gov/s/participant-search. For data transfers to certified companies in the USA, the data transfer is based on Art. 45 para. 1, 3 sentence 1 GDPR. Google LLC is a certified company.

The legal basis for processing your personal data is your consent according to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time for the future by clicking on „Cookie Settings“ in the footer of our website and deselecting the tool there.

14) Use of a live chat system

Zendesk (formerly Zopim)This website uses technology provided by Zendesk International Ltd, 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland („Zendesk“) to collect and store pseudonymised data for the purpose of web analytics and to operate the live chat system used to respond to live support requests. From this pseudonymised data, usage profiles can be created under a pseudonym. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor’s internet browser. Among other things, the cookies enable the recognition of the internet browser. If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behaviour for optimisation purposes.
The data collected with Zendesk technologies will not be used to personally identify the visitor to this website without the separately granted consent of the data subject and will not be merged with personal data about the bearer of the pseudonym. In order to avoid the storage of Zendesk cookies, you can set your internet browser so that no cookies can be placed on your computer in the future or so that cookies that have already been placed are deleted. However, switching off all cookies may mean that some functions on our Websites can no longer be carried out. You can deactivate the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future by sending us your objection informally by e-mail to the e-mail address given in the imprint.
We have concluded an a data processing agreement with Zendesk, with which we oblige Zendesk to protect our customers‘ data and not to pass it on to third parties.
Personal data may be transmitted to servers of Zendesk Inc. in the USA. For such data transfers, Zendesk follows binding internal data protection rules (Binding Corporate Rules – BCR) that have been recognised by the Irish Data Protection Authority as providing appropriate safeguards for compliance with European data protection standards.
For more information about Zendesk’s privacy practices, please visit https://www.zendesk.de/company/customers-partners/privacy-policy/.

15) Use of an email ticketing system

Zendesk
We use the Zendesk email ticketing system, a customer service platform provided by Zendesk International Ltd, 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland („Zendesk“) to process customer enquiries. If users of our website send contact requests by email, these are stored and organised in the ticket system to enable chronological processing and to improve the service experience. Users can always view the current status of the processing of their request via the individually assigned ticket number.
Exclusively for the organisation of requests and their processing, personal data is collected as provided in the request, but in any case name, first name and email address, transmitted to Zendesk, stored there and read out.
The legal basis for the processing of this data is our legitimate interest in the efficient arrangement of our customer service, in answering your request as quickly as possible and in optimising our service offer in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a a data processing agreement Zendesk, with which we oblige Zendesk to protect our customers‘ data and not to pass it on to third parties.
Personal data may be transferred to servers of Zendesk Inc. in the USA. For such data transfers, Zendesk follows binding internal data protection rules (Binding Corporate Rules – BCR), which have been recognised by the Irish Data Protection Authority as providing appropriate safeguards for compliance with European data protection standards.
Your data will be deleted once we have completed processing your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
For more information about Zendesk’s data protection, please visit https://www.zendesk.de/company/customers-partners/privacy-policy/.

16) Tools and miscellaneous

16.1 Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This function is primarily used to distinguish whether an entry is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual personal responsibility on the Internet and the prevention of abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.

16.2 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the „Google Customer Reviews“ program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This program gives us the opportunity to collect customer reviews from users of our website. This involves asking you, after you have made a purchase on our website, whether you would like to take part in an email survey from Google. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the purchase experience on our website. The rating you provide will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. In addition, your review will be used for Google Seller Reviews. The use of Google Customer Reviews may also involve the transmission of personal data to the servers of Google LLC. in the USA.

You can withdraw your consent at any time by sending a message to the data controller or to Google.

For more information about Google’s privacy practices in connection with the Google Customer Reviews program, please visit the following link: https://support.google.com/merchants/answer/7188525?hl=de

You can read more information about the privacy of Google Seller Ratings at this link: https://support.google.com/google-ads/answer/2375474

16.3 Applications to job advertisements by e-mail

We advertise current vacancies on our website in a separate section, for which interested parties can apply by e-mail to the contact address provided.

Inclusion in the application process requires that applicants provide us with all the personal data necessary for a sound and informed assessment and selection together with the application by e-mail.
The required information includes general personal information (name, address, telephone or electronic contact details) and performance-related evidence of the qualifications required for a position. If necessary, health-related information may also be required, which must be given special consideration under labour and social law in the interest of social protection in the person of the applicant.

The components that an application must contain in order to be considered and the form in which these components must be sent by e-mail can be found in the respective job advertisement.

After receipt of the application sent using the specified e-mail contact address, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For queries arising in the course of processing, we use, at our discretion, either the e-mail address provided by the applicant with his/her application or a telephone number provided.

The legal basis for this processing, including contacting us for queries, is generally Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 para. 2 lit. b. GDPR. GDPRso that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9 para. 1 lit. h GDPRif it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnosis, care or treatment in the health or social sector or for the management of systems and services in the health or social sector.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his or her application prematurely, his or her data transmitted by e-mail as well as all electronic correspondence including the original application e-mail will be deleted at the latest after 6 months following notification. This period is measured on the basis of our legitimate interest in answering any follow-up questions about the application and, if necessary, to be able to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 para. 1 BDSG) for the purposes of implementing the employment relationship.

16.4 Online applications via a form

On our website, we offer job applicants the opportunity to apply online via a corresponding form. Inclusion in the application process requires that applicants provide us with all the personal data required for a sound and informed assessment and selection via the form.

The required information includes general personal information (the name, address, a telephone or electronic means of contact) as well as performance-specific evidence of the qualifications required for a position. If necessary, health-related information may also be required, which must be given special consideration under labour and social law in the interest of social protection in the person of the applicant.

In the course of submitting the form, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application.
The legal basis for this processing is generally Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 para. 1 BDSG), in the sense of which the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 para. 2 lit. b. GDPR so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9 para. 1 lit. h GDPR if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnosis, care or treatment in the health or social sector or for the management of systems and services in the health or social sector.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his or her application prematurely, his or her data submitted in the form will be deleted at the latest after 6 months following appropriate notification. This period is measured on the basis of our legitimate interest in answering any follow-up questions about the application and, if necessary, to be able to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 para. 1 BDSG) for the purposes of implementing the employment relationship.

16.5 – Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, you will be shown our location and it will be easier for you to find us.
When you visit those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used. You can view Google’s terms of use at https://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website („Google Privacy Policy“): https://www.google.de/intl/de/policies/privacy/.
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.

16.6 – Google Tag Manager

This website integrates the Google Tag Manager, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This is a tag management system. This allows us to update measurement codes and associated code fragments, collectively known as tags, on the website. Personal data may be transferred to Google via the Google Tag Manager. This may also involve a transfer to third countries outside the EU/EEA, such as the USA. These countries may not have the same level of data protection and the enforcement of your rights may be limited or not possible. The legal basis is Art. 6 para. 1 lit f) GDPR, as we have a legitimate interest in ensuring quick and uncomplicated integration and management of various tools on our website.

16.7 – Smartfit – Bike Online Sizing
We integrate the service „Smartfit – Bike Online Sizing“ of Radlabor GmbH, Heinrich-von-Stephan-Straße 5c, 79100 Freiburg, Germany on our website.

You have the option of using „Smartfit“ in our online shop. After entering your gender, height and arm and leg length („size data“), you can automatically have the right bike size suggested for you. The „Smartfit“ tool calculates the right bike size for you using a special algorithm.

The „Smartfit“ tool also allows us to determine how often the „Smartfit“ tool was used and how often which frame size of a particular bicycle was purchased. The „Smartfit“ tool stores this data without it being possible to establish a personal reference on the basis of this overview.

Furthermore, the „Smartfit“ tool uses cookie technology in the form of local storage cookies when you use the tool. This makes it possible that when you return to our website, your data does not have to be entered again. In this respect, it may be that the size data is stored and does not have to be re-entered, or that a bicycle size is already suggested based on the data. The Local Storage is deleted after four hours of inactivity. Further information on this can also be found in our cookie settings.
The legal basis for the processing of your data is Art. 6 para. 1 lit. f) GDPR, as our interest in providing you with an optimal online shopping experience and tailoring our product range to you as individually as possible outweighs your interests. In contrast, the interference with your rights or your conflicting interests is to be classified as minor, in particular because you can or must actively decide to use the tool. You can object to the processing of your data at any time. Further information can be found in section 17.2 of this data protection notice.

We have concluded a data processing agreement with Radlabor GmbH. The provider Radlabor GmbH processes data exclusively on servers in Germany. You can find the Radlabor GmbH data protection notice for the service here: https://www.onlinesizing.bike/end-user-privacy-notice

17) Rights of the data subject

17.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) towards the controller with regard to the processing of your personal data, which we inform you about below:

  • Right to information pursuant to Art. 15 GDPR: You have in particular the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about which guarantees exist in accordance with Art. 46 of the GDPR if your data is transferred to third countries;
  • Right to rectification in accordance with Art. 16 GDPR: You have a right to the immediate rectification of any inaccurate data relating to you and/or completion of any incomplete data we hold about you;
  • Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 para. 1GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation as long as it has not yet been determined whether our legitimate grounds prevail;
  • Right to information pursuant to Article 19 of the GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible;
  • Right to revoke consent given in accordance with Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

17.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA AS A RESULT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONSDIENT FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

18) Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para 1 lit. a GDPR, this data is stored until the data subject revokes his/her consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfilment of the contract or the initiation of the contract and/or there is no justified interest on our part in continuing to store it.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise indicated in the other information in this statement on specific processing situations, stored personal data are otherwise deleted when they are no longer necessary for the purposes for which they were collected or in other ways processed.