Data Protection

Privacy Notice pursuant to Art. 12 et seq. GDPR

I. Identity and contact details of the controller
II. Contact details of the data protection officer
III. Data Processing on our website

1. Website functions
I. Provision of the website and creation of log files
II. Use of technically necessary cookies
III. Comment function
IV. YouTube

2. eCommerce
I. Online shop
II. Creating a customer account
III. Social Login
IV. Contact form and contacting us by email
V. Partner Programme for Breeders
VI. Order reminders
VII. Wishlist
VIII. Bonus Programme (“My Stars”)
IX. Feed Subscription
X. Rewards Programme
XI. Customer Reviews

3. Marketing
I. Newsletter
II. Direct marketing
III. Sweepstakes, contests and competitions
IV. Comfort improvement, website optimisation, user behaviour analysis and display of personalised advertising
V. Website optimisation using the ‘trbo’ service
VI. Social plugins
VII. Pinterest Pixel/Pinterest Tag
VIII. Google Analytics

4. Data protection and legal disputes
I. Data protection requests pursuant to Art. 12 et seq. GDPR
II. Defending and enforcing legal claims
III. Further data processing other than on our website
1. Facebook Insights (“Facebook fan page”)
2. Instagram
3. YouTube Channel
V. Categories of recipients
VI. Third country transfer
VII. Your rights
VIII. Overview of the cookies use

I. Identity and contact details of the controller

Your contact partner as controller within the meaning of the European General Data Protection Regulation („GDPR”) and other national data protection laws of the member states and other provisions of data protection law is:

Terra Canis GmbH
Parkring 29
85748 Garching

(hereafter "we", "is" or "our")

II. Contact details of the data protection officer

The protection of your personal data is a high priority for us. For any issues relating to data protection and data security, you can contact our "Data Protection" department:

By e-mail: datenschutz@terracanis.eu

By mail: Data Protection Officer, Lyoner Strasse 23, 60528 Frankfurt am Main, Germany

III. Data Processing on our website

1. Website functions

i. Provision of the website and creation of log files

a. Legal basis

Legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f GDPR.

b. Purpose

The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose, your personal data must be stored for the duration of the session.

Your personal data are stored in log files to ensure the functionality of the website. Your personal data also help us to optimise the website and to ensure that our IT systems are secure. Your personal data will not be processed in any other way.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In case your personal data are recorded for the purpose of providing the website, this happens as soon as the relevant session has ended.

If your personal data is stored in log files, they will be erased after seven days at the latest. If the log files are stored beyond this period, your personal data will be made anonymous so that it is no longer possible to assign them to a website visitor.

d. Objection and rectification option

The collection of your personal data for the provision of the website and the storage of your personal data in log files is mandatory for operating the website. Consequently, you cannot object to this data processing.

ii. Use of technically necessary cookies

a. Legal basis

Legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of using echnically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For these functions to work your web browser has to be recognised even after a page change. Your personal data will not be processed in any other way.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens, in particular, as soon as the relevant session has ended.

d. Objection and Rectification Option

You will find an overview of the technically necessary cookies used on our website within our cookie banner as well as within our separate information page on cookies. You can call up the cookie banner again here . You can view our information page on cookies here.

Cookies are stored on your computer and transmitted from the computer to our website. You therefore have complete control over the use of cookies.

By adjusting the settings of your browser you can deactivate or restrict the transfer of cookies. Cookies which are already stored may be deleted by you at any time. This can also be done automatically. If you deactivate cookies for our website, you might not be able to use all functions of our website.

The transmission of Flash cookies cannot be prevented in the settings of your Browser. You will need to make the necessary changes in your Adobe Flash Player settings.

iii. Comment function

a. Legal basis

The legal basis for the processing of your personal data within the framework of the commentary function is Art. 6 (1) lit. f EU-DSGVO .

b. Purpose

The processing of your personal data within the context of the comment function serves to enable transparent and individual communication between you and us. In addition, we process your personal data in order to be able to defend ourselves against third-party liability claims in the event of the publication of illegal comments.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

d. Objection and rectification option

You have the right to object to the processing of personal data concerning you at any time on the grounds relating to your specific situation. In this case, however, we can no longer publish your comment on our website.

iv. YouTube

a. Legal basis

The legal basis for the processing of your personal data, which are processed through the integration of YouTube videos, is Art. 6 (1) lit. f EU-DSGVO.

b. Purpose

The processing of your personal data by YouTube serves to provide an appealing, uniform presentation of video content on our website, independent of your terminal device.

c. Duration of storage

We use YouTube videos in advanced privacy mode. This mode ensures that no further information about visits to our website is stored beyond the integration. Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

This is the case at the latest at the end of your visit to our website.

d. Objection and rectification option

The processing of your personal data, which are processed for the integration of YouTube videos, is mandatory. Consequently, there is no possibility for you to object.

2. eCommerce

i. Online shop

a. Legal basis

Legal basis for the processing of your personal data in the context of the use of our online shop is Art. 6 (1) lit. b GDPR.

b. Purpose

The purpose of the processing of your personal data in the context of our online shop is to perform a contract between you and us.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of processing your personal data in the context of our online shop, this happens when the contract on which the work was based has been performed and all claims arising from the contractual relationship are statute-barred or statutory retention periods do not prevent erasure.

d. Objection and rectification option

The processing of your personal data in the context of our online shop is absolutely necessary to perform a contract between you and us. You can therefore not object to this.

ii. Creating a customer account

a. Legal basis

Legal basis for the processing of your personal data in the context of creating a customer account is Art. 6 (1) lit. b GDPR.

b. Purpose

Your customer account facilitates the way contracts are entered into between you and us and is also for customer care purposes. The processing of your personal data when creating your customer account is necessary in order to perform a contract between you and us or to implement pre-contractual measures and is also for customer care purposes.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens at the latest when you close your customer account.

d. Objection and rectification option

You can close your customer account at any time. In this case, your personal data will be erased unless statutory retention periods prevent erasure.

iii. Social Login

a. Legal basis

Legal basis for the processing of your personal data transmitted in the course of using the Social Login function is Art. 6 (1) lit. a GDPR.

b. Purpose

To register and login to our Online Shop, you can also use an existing account within the social network Facebook. The processing of your personal data, in particular those personal data that are kept within the respective social network, is solely for the purpose of simplifying the registration process.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. This is regularly the case when your customer account is closed. In this context, we expressly point out that we have no influence on the processing of your personal data in the context of the respective social network.

d. Objection and rectification option

You can cancel the registration of the customer account at any time or no longer use the "Social Login" function. In this case, your personal data will be deleted, unless legal retention periods prevent deletion.

iv. Contact form and contacting us by email

a. Legal basis

Legal basis for the processing of your personal data transmitted in the course of contacting us is Art. 6 (1) lit. f GDPR. If you contact us to enter into a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.

b. Purpose

The processing of your personal data when contacting us only takes place to process your request.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data emailed to us, this is the case when your request has been processed and statutory retention periods do not prevent erasure.

d. Objection and rectification option

You can always object to the processing of your personal data in the context of contacting us for the future. In this case, however, we cannot process your request any further. All personal data stored in the context of contacting us will be erased, unless statutory retention periods prevent erasure.

v. Partner Programme for Breeders

a. Legal basis

The legal basis for the processing of your personal data within the framework of the Partner Programme for Breeders is Art. 6 (1) letter b GDPR.

b. Purpose

Your registration as a Breeder enables in particular the conclusion of contracts as well as the maintenance of our customer relationship, including special benefits for Breeders. The processing of your personal data within the scope of the Breeder Programme is therefore necessary for the fulfilment of a contract or for the implementation of pre-contractual measures as well as the successful maintenance of our customer relationship. In addition, the processing of your personal data in this context is carried out for the purpose of proving your entitlement as a breeder.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary for the purpose of their processing. This is the case at the latest when your customer account is closed.

d. Objection and rectification option

You can close your customer account at any time. In this case, your personal data will be erased unless statutory retention periods prevent erasure.

vi. Order reminders

a. Legal basis

The legal basis for the processing of your personal data within the framework of an Order Reminder is Art. 6 (1) letter a GDPR.

b. Purpose

The processing of your personal data within the framework of the Order Reminder function offers you the additional comfort of regular reminder e-mails, which are based on your last order.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer required for the purpose of their processing. This is especially the case when your revocation is received.

d. Objection and rectification option

You can revoke your consent at any time with effect for the future. Revocation of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until revocation.

vii. Wishlist

a. Legal basis

The legal basis for the processing of your personal data within the framework of your Wishlist is Art. 6 (1) lit. a GDPR. In the event that the information within the Wishlist is processed as part of a future order process, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.

b. Purpose

The processing of your personal data within the framework of your Wishlist offers you the additional possibility of depositing or noting articles for future ordering processes.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer required for the purpose of their processing. This is especially the case when you receive your revocation.

d. Objection and rectification option

viii. Bonus Programme (“My Stars”)

a. Legal basis

The legal basis for the processing of your personal data within the framework of the Bonus Programme is Art. 6 (1) lit. f EU-DSGVO. In the event that the optional function "notification of new stars" is activated, Article 6 (1) (a) GDPR is an additional legal basis for the processing of your personal data.

b. Purpose

The processing of your personal data within the framework of the Bonus Programme function serves to calculate whether and to what extent you are entitled to redeem corresponding discounts on the basis of purchases already made. In addition, you can activate the "E-mail Notification" function in order to be continuously informed about the stars already collected.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer required for the purpose of their processing. This is particularly the case if your revocation is received.

d. Objection and rectification option

ix. Feed Subscription

a. Legal basis

The legal basis for the processing of your personal data within the framework of the Feed Subscription function is Article 6 (1) letter a GDPR and/or Article 6 (1) letter b GDPR.

b. Purpose

The processing of your personal data within the framework of the Feed Subscription function serves to calculate and/or fulfil the Feed Subscription concluded by you. The processing of your personal data within the scope of the execution of the Feed Subscription requested by you is therefore necessary for the fulfilment of a contract or the implementation of pre-contractual measures as well as for the successful maintenance of our customer relationship.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer required for the purpose of their processing. This is especially the case when your Feed Subscription is terminated, as long as legal retention periods do not prevent the deletion of your data.

d. Objection and rectification option

You can terminate your Feed Subscription at any time with effect for the future. Via the subscription management within your user profile you can pause or cancel your subscriptions at any time. You can find more information about the "Feed Subscription" here .

x. Rewards Programme

a. Legal basis

The legal basis for the processing of your personal data within the framework of the Rewards Programme is Art. 6 (1) letter a EU-DSGVO.

b. Purpose

The processing of your personal data within the framework of the Rewards Programme serves to assign the recommendation links sent by you and the orders placed on the basis of your recommendation links to your user profile. This allocation enables us to credit you with the respective benefits and rewards within your user profile.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer required for the purpose of processing. This is particularly the case if we receive a revocation of your consent.

d. Objection and rectification option

You can revoke your consent in connection with the rewards programme at any time with effect for the future. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

xi. Customer Reviews

a. Legal basis

The legal basis for the processing of your personal data in the context of the feedback function "Customer Review" is Art. 6 (1) lit. a GDPR.

b. Purpose

The processing of your personal data within the scope of the feedback function "Customer Review" offers you the opportunity to contact us and to tell us your opinion about our products. Your personal data will be processed solely for the purpose of enabling the feedback function.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary for the purpose of their processing. This is especially the case when we receive your revocation.

d. Objection and rectification option

3. Marketing

i. Newsletter

a. Legal basis

Legal basis for the processing of your personal data in the context of sending the newsletter is your given consent, Art. 6 (1) lit. a GDPR.

b. Purpose

The collection of your personal data is for the purpose of sending you the newsletter. The purpose of processing your personal data in the context of sending you the newsletter is to send you updates, offers and, possibly, to promote sales by selling goods or services.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. Your personal data will be stored until you unsubscribe from our newsletter.

d. Objection and rectification option

You can withdraw your consent to receiving the newsletter at any time or use the unsubscribe link in each newsletter to object to receiving the newsletter for the future.

ii. Direct marketing

a. Legal basis

Legal basis for the processing of your personal data in the context of direct marketing measures is either your declared consent pursuant to Art. 6 (1) lit. a GDPR or the lawful basis of Art. 6 (1) lit. f GDPR or § 7 (3) UWG (German Act Combating Unfair Competition, “Gesetz gegen den unlauteren Wettbewerb” - “UWG”).

b. Purpose

The purpose of processing your personal data in the context of direct marketing measures is to send you updates, offers and, possibly, to promote sales by selling goods or services.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to archieve the purpose for which they were collected; this is particularly the case when we receive your withdrawl of your declared consent or your objection.

d. Objection of rectification option

You can withdraw your consent at any time for the future or object to the processing of your personal data within the context of direct marketing measures at any time for the future.

iii. Sweepstakes, contests and competitions

a. Legal basis

Legal basis for the processing of your personal data in the context of sweepstakes, contests and competitions is Art. 6 (1) lit. b GDPR.

b. Purpose

The purpose of the processing of your personal data in the context of sweepstakes, contests and competitions is to perform a contract between you and us based on the sweepstake or contest in which you participate.

c. Duration of storage

Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of processing your personal data in the context of sweepstakes, contests and competitions, this happens when the particular sweepstakes, contests or competitions have been completely carried out.

d. Objection and rectification option

You can at any time object to the processing of your personal data for the future when participating in our sweepstakes, contests and competitions.. In this case you can no longer participate in our sweepstakes, contests and competitions. All personal data stored in the context of your participation in the sweepstakes, contests and competitions will be erased in this case.

iv. Comfort improvement, website optimisation, user behaviour analysis and display of personalised advertising

a. Legal basis

Legal basis for the processing of your personal data in the context of the use cookies of cookies and comparable technologies such as pixels, tags, web beacons, browser fingerprinting, etc. ("tracking cookies") for the purpose of comfort improvement, website optimization, user behaviour analysis and the the display of personalised advertising after a combination with your contract master data and your purchase history is your declared consent pursuant to Art. 6 para. 1 lit. a GDPR.

b. Purpose

The processing of your personal data enables us to optimise the user-friendliness of our website and promote sales by selling goods or services.

c. Storage period

Your personal data will be erased as soon as you revoke your declared consent or your personal data is no longer needed for the aforementioned purposes.

d. Objection and rectification option

An overview of the tracking cookies used on our website can be found within our cookie banner as well as within our separate information page on cookies. You can view our information page on cookies here.

You can revoke your declaration of consent to the processing of your personal data within the scope of the use of tracking cookies at any time for the future by proceeding as follows:

(1) Change of the consent settings on our website

On our website, we offer you the possibility to simply revoke the processing of your personal data in the context of the use of tracking cookies. For this purpose you can call up the cookie banner again here and adjust your individual cookie settings. You can view our information page about cookies here.

By withdrawal of your consent a further cookie is set on your computer, which signals us to use no tracking cookies. If you delete the corresponding cookie, you will be asked for your consent by us again the next time you visit our website.

(2) Changing the settings of your browser

Alternatively, you can deactivate or restrict the transmission of cookies in general by changing the settings in your browser. You can delete already stored cookies at any time. This can also be done automatically. If technically necessary cookies for our website are also deactivated, it is possible that not all functions of the website can be used to their full extent.

(3) Special case: Google Analytics

If you do not want your personal data to be processed by Google Analytics, you can also install the browser add-on to deactivate Google Analytics. This add-on instructs the JavaScript of Google Analytics (ga.js, analytics.js and dc.js) executed on websites not to allow the sending of information to Google Analytics.

If you want to disable Google Analytics, go to the page below and install the Google Analytics disablement add-on for your browser. For detailed information on installing and uninstalling the add-on, please refer to the relevant help resources for your browser.

The latest versions of Internet Explorer occasionally load the add-on to disable Google Analytics after personal information has already been sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on will install cookies on your computer. These cookies ensure that any data collected is immediately deleted from the server that collected it. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, the add-on will reset these cookies within a short period of time to ensure that your Google Analytics browser add-on continues to work properly.

The browser add-on to disable Google Analytics does not prevent personal data from being sent to the website or other tracking services.

For more information on terms of use and privacy, please visit:

www.google.com/analytics/terms/de.html or support.google.com/analytics/answer/6004245?hl=de.

IP anonymization is activated on our website.

v. Website optimisation using the ‘trbo’ service

a. Legal basis

The legal basis for processing your personal data in the context of the use of the ‘trbo’ service is your declared consent in accordance with article 6, paragraph 1 (a) GDPR.

b. Purpose

We use tracking tools from the service provider ‘trbo’ in order to evaluate the use of our online offers and the effectiveness of our online advertising. This helps us to understand what pages of our website are particularly attractive to you, which products interest you the most and which individual as well as requirement-based offers we should make to you.

c. Storage duration

Your personal data will be deleted as soon as you revoke your declaration of consent or your personal data are no longer required to achieve the purpose of their processing.

d. Possibility of objection and removal

On our website, we offer you an easy way to revoke your consent for the processing of your personal data within the context of trbo. For this purpose, you can call up the cookie banner again via the footer of the website and modify your individual cookie settings (‘cookie consent’).

vi. Social plugins

a. Legal basis

Legal basis for the processing of your personal data by so-called "social plugins" is your declared consent pursuant to Art. 6 (1) lit. a GDPR.

b. Purpose

The processing of your personal data in the context of sharing and recommending offers from our website enables us to promote our offers in your contact network.

c. Duration of storage

Your personal data will be erased as soon as they are no longer necessary for our aforementioned purposes.

d. Objection and rectification option

Data will only be transmitted to Facebook, Twitter and Pinterest if you click on any of the "Social Plugins". Therefore, you can fully control the transmission of your personal data to the pre-named networks. The "Social Plugin" remains active until you deactivate it with another click.

vii. Pinterest Pixel/Pinterest Tag

a. Description of processing

Our website uses the remarketing service “Pinterest Pixel”, which is incorporated into our website as an individual code snippet of Pinterest Europe Ltd., Palmerston House 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). This tool allows us to place advertisements on the Pinterest website that specifically target those Pinterest users who have shown interest in our range – for example through a previous visit to our website. The Pinterest tag also allows us to understand and evaluate the effectiveness and reach of our advertising on Pinterest by detecting whether Pinterest users interact with our advertisements on the Pinterest website by clicking on them, which will redirect them to our website. We also do this to ensure that our Pinterest ads are aligned with the potential interest of the users and do not annoy them. Furthermore, this tool helps us measure the conversion of the respective campaign. Using this service requires processing of the following information:

• Device information (e.g. model, brand)

• Operating system used

• IP address

• Time when our offer was accessed

• Nature and content of the campaign

• Response to the campaign (e.g. clicking on a button)

The data collected in this way is anonymous for us and does not allow us to draw conclusions about the identity of the user. If the user logs into their Pinterest account after visiting our website or uses our website while logged into Pinterest, it is possible that Pinterest will store and process this data. Pinterest is responsible for this data processing, not us. For more information on Pinterest’s privacy policy, please visit https://policy.pinterest.com/en/privacy-policy.

b. Purpose of processing

Data is processed to enable targeted online advertisement for our products and to evaluate effectiveness and reach of such advertisement.

c. Legal basis

Data is processed based on your consent in terms of point (a) of Art. 6(1) GDPR. Consent is requested by us via our Consent Tool on our website. Such consent is given voluntarily.

d. Duration of storage and right of objection, withdrawal of consent

You can find information on how long data is stored as well as on your control or settings options in our Consent Tool on our website. You can withdraw your consent to data collection by Pinterest at any time in the settings of the Consent Tool with effect for the future. You can also object to data processing by Pinterest at any time by deactivating data collection for displaying personalised advertising in your Pinterest account settings on the Pinterest website under https://www.pinterest.com/settings, tab “Personalization”, by unchecking the box next to “Use information from our partners to improve recommendations and ads you see” or by checking the box next to “Turn off personalization” under https://help.pinterest.com/en/article/personalization-and-data#info-ad.

e. Recipients and transfer to third countries

The integration of the “Pinterest Pixel” may result in personal data being transferred to Pinterest. Pinterest may also process your personal data in the USA. For more information, please see Pinterest’s privacy policy https://policy.pinterest.com/en/privacy-policy .

viii. Google Analytics

Provided that you have given your consent, we use Google Analytics, a web analysis service offered by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Scope of processing

Google Analytics uses cookies, which enable us to analyse how you use our webpages. The information about your use of this website collected by the cookies is usually transmitted to a Google server in the USA and stored there.

We use the User-ID function. With the help of the User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within those sessions) and analyse user behaviour across devices.

We use Google Signals. This means that Google Analytics collects additional information about users who have personalised ads enabled (interests and demographic data) and ads can be delivered to these users in cross-device remarketing campaigns.

We use the ‘anonymizeIP’ function (i.e. IP masking): Due to the activation of the IP anonymisation option on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and shortened on a Google server in the US. The IP address transferred by your browser in the context of Google Analytics will not be combined with any other data from Google.

During your visit to the website, the following data will be collected, among others:

1. The pages you visit, your “click path”

2. Achievement of “website targets” (conversions, e.g. newsletter registrations, downloads, purchases)

3. Your user behaviour (e.g. clicks, dwell time, bounce rates)

4. Your approximate location (region)

5. Your IP address (in abridged form)

6. Technical information about your browser and the devices you use (e.g. language setting, screen resolution)

7. Your internet service provider

8. The referrer URL (from which website/advertising media you were forwarded to this website)

Purposes of processing

On the website operator’s behalf, Google will use this information to analyse website usage and prepare website activity reports. The reports provided by Google Analytics serve to analyse the performance of our website and the success of our marketing campaigns.

Recipient

The data recipient is

1. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as the Processor. We concluded an order processing contract with Google for this. Google LLC, based in California, United States, and possibly US authorities, can access the data stored by Google.

Transfer to third countries

The transfer of data to the US cannot be excluded.

Retention period

The data sent by us and linked to cookies will be automatically erased after 26 months.

Data that have reached their retention period will be automatically erased once a month. In addition, you can prevent the collection of the data created by the cookie and related to your use of the website (incl. your IP address) as well as the processing of such data by Google by

a. Not giving your consent to the setting of cookies or

b. Downloading and installing the Google Analytics opt-out browser add-on HERE.

You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, you may not be able to use all the functions on this and other websites.

Legal basis and options for withdrawing consent

The legal basis for this data processing is your consent which you granted on the basis of point (a) of Article 6 (1) GDPR. You may withdraw your consent at any time with effect for the future by opening “Cookie settings” in the footer of our websites (link in the bottom line of our websites) and changing your selection there. You can find more detailed information on the Google Analytics terms of use and Google’s privacy policy

at https://marketingplatform.google.com/about/analytics/terms/gb/ and

at https://policies.google.com/?hl=en.

4. Data protection and legal disputes

i. Data protection requests pursuant to Art. 12 et seq. GDPR

a. Legal basis

Legal basis for processing of your personal data in the context of processing your data protection request ("data protection request") is Art. 6 (1) lit. c ICW Art. 12 et seq. GDPR. Legal basis for the subsequent documentation of the legally compliant processing of a data protection request is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of processing your data protection request is to answer your data protection enquiry. The subsequent documentation of the legally compliant processing of the respective data protection request is to fulfil the legally required accountability, Art. 5 (2) GDPR.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the processing of data protection requests, pursuant to § 41 BDSG (Federal Data Protection Act, “Bundesdatenschutzgesetz” - “BDSG”) ICW § 31 (2) Nr. 1 OWiG (Act on Regulatory Offences, “Gesetz über Ordnungswidrigkeiten” – “OWiG”), this is three years after the respective process has ended.

d. Objection and rectification option

You can object to the processing of your personal data for the future at any time in the context of the processing of data protection requests. In this case, however, we will not be able to process your data protection request any further.
The documentation of the legally compliant processing of the respective data protection request is mandatory. Consequently, you cannot object to this data processing.

ii. Defending and enforcing legal claims

a. Legal basis

Legal basis for the processing of your personal data in the context of defending and enforcing legal claims is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of defending and enforcing legal claims is the defence of unjustified claims and the legal enforcement of claims and rights.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

d. Objection and rectification option

The processing of your personal data in the context of defending and enforcing legal claims is absolutely necessary for the defence and enforcement thereof. Consequently, you cannot object to this.

VI. Further data processing other than on our website

1. Facebook Insights (“Facebook fan page”)

i. Joint Controllership

We operate our Facebook fan page together with Facebook Ireland Ltd. (hereinafter "Facebook"). For this purpose, we have concluded an agreement with Facebook on which of us fulfils which obligations under the GDPR.

The main contents of the processing can be found at
https://www.facebook.com/legal/terms/page_controller_addendum

Information on the processing of your personal data by Facebook can be found at
https://www.facebook.com/legal/terms/information_about_page_insights_data

a. Legal basis

The legal basis for the processing of your personal data is Art. 6 (1) letter f GDPR.

b. Purpose

The processing of your personal data by Facebook Insights enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to compile information on the attractiveness of our Facebook fan page. This helps us to make our Facebook fan page more demand-oriented and user-friendly.

c. Origin

Your personal data collected during the operation of our Facebook fan page is made available to us by Facebook.

d. Duration of storage

Your personal data will be deleted as soon as they are no longer required for our previously mentioned purposes.

e. Objection and rectification option

If you do not want your data to be collected by Facebook Insights, you have the possibility to object to the processing of your personal data within the framework of Facebook Insights for the future at any time. In this case we will forward your request for objection to Facebook.

2. Instagram

i. Joint Controllership

Instagram is a product of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter "Facebook"). We operate our Instagram site jointly with Facebook. For this purpose, we have entered into an agreement with Facebook as to which of us fulfils which obligation under the GDPR.

The main content of the processing of your personal data by the Instagram service can be found at
https://help.instagram.com/519522125107875.

Information on the processing of your personal data by Facebook can be found at
https://www.facebook.com/legal/terms/information_about_page_insights_data.

a. Legal basis

The legal basis for the processing of your personal data is Art. 6 (1) letter f GDPR.

b. Purpose

The processing of your personal data by Facebook via the Instagram service enables us to analyse your usage behaviour. By evaluating the data obtained, we are able to compile information on the attractiveness of our Instagram page. This helps us to make our Instagram page more demand-oriented and user-friendly.

c. Origin

Your personal data collected in the course of operating our Instagram Page is made available to us by Facebook.

d. Duration of storage

Your personal information will be deleted as soon as it is no longer needed for our previously stated purposes.

e. Objection and rectification option

If you do not want your data to be collected by Facebook, you can at any time object to the processing of your personal data within Instagram or Facebook for the future. In this case we will forward your request for objection to Facebook.

3. YouTube Channel

i. Scope of processing

To ensure that our social media offering is tailored to the needs of our customers, we use a YouTube channel operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). YouTube is a video platform on which users can post videos and make them publicly available.

Additional information on the processing of your personal data by Google can be found at
https://policies.google.com/privacy?hl=de&gl=de#infocollect

If you wish to use our YouTube channel offer, we would like to point out that you use this offer at your own responsibility. This applies in particular to the use of the functions offered within the YouTube channel, such as sharing, evaluating or commenting on the respective videos.

We have no influence on the type and scope of the data processed by Google within the YouTube channel. With the use of the YouTube channel, your personal data is also processed by Google and, regardless of your place of residence, transmitted to the United States, Ireland and any other country in which Google does business and, if necessary, processed there in addition.

a. Legal basis

The legal basis for the processing of your personal data is Art. 6 (1) letter f GDPR.

b. Purpose

Your personal data is processed for the purpose of designing our YouTube channel in a needs-based, attractive and user-friendly manner. In this context, we process your personal data within the YouTube channel exclusively to the extent necessary for the provision of information on our offers and services. Furthermore, we process personal data within the YouTube channel for the purpose of carrying out any communication processes with users and interested parties of our YouTube channel.

c. Origin

Your personal data collected in the course of operating our YouTube channel is made available to us by Google.

d. Duration of storage

Your personal data will be deleted as soon as they are no longer required for our previously mentioned purposes.

e. Objection and rectification option

If you do not want your data to be collected by Google, you have the possibility to object to the processing of your personal data within the YouTube channel at any time. In this case we will forward your request for objection to Google.

V. Categories of recipients

Within our company, those bodies and departments receive personal data that they need to fulfil the aforementioned purposes. In some cases we use various types of service providers and transfer your personal data to other trusted recipients. These can include:

Banks
Scanning service
Print shops
Letter shops
IT service providers
Lawyers and courts

VI. Third country transfer

As part of the processing of your personal data, we may transfer your personal data to trustworthy and specially selected service providers in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA).

We only work with service providers who provide us with the appropriate safeguards for the security of your personal data and can guarantee that your personal data will be processed in accordance with the strict European data protection standards. A copy of these appropriate safeguards can be inspected at our premises.

If we transfer personal data to third countries, we do so on the basis of a so-called adequacy decision of the European Commission or, in the absence of such a decision, on the basis of so-called standard data protection clauses, which have also been adopted by the European Commission.

VII. Your rights

You have the following rights against us:
1. Right of access

You have the right to access as to whether or not and, if so, what your personal data of you are being processed by us. Is this the case, we will additionally give you access to the following:

(1) the purpose of the processing;
(2) the categories of data;
(3) the recipients of your personal data;
(4) the envisaged period of storage or the criteria used to determine the envisaged period of storage;
(5) any other rights you have;
(6) where we have not obtained the personal data from you: Any available information as to their source;
(7) if available: the existence of automated decision-making and any information about the logic involved, as well as the significance and the envisaged consequences of the processing.

2. Right to rectification

You have the right to rectification and/or completion of the personal data that is being processed by us, if it is inaccurate or incomplete.

3. Right to restriction of processing

You have the right to restriction of processing of your personal data, provided that

(1) we verify the accuracy of your personal data being processed by us;
(2) the processing of your personal data is unlawful;
(3) you need the personal data being processed by us for the purpose of prosecution when we no longer need your personal data for the purpose of processing;
(4) you have objected to the processing of your personal data and we are in the process of verifying your objection.

4. Right to erasure

You have the right to erasure of your personal data, provided that

(1) we no longer need your personal data for its original purpose;
(2) you withdraw your consent and there is no other legal ground for processing your personal data;
(3) you object to the processing of your personal data and, unless it is about direct marketing, there are no overriding grounds for further processing;
(4) the processing of your personal data is unlawful;
(5) the erasure of your personal data is required by law;
(6) your personal data have been collected in relation to the offer of information society services when you were a minor.

5. Right to notification

If you have asserted your right to rectification, erasure of data or restriction of processing, we will communicate any rectification, erasure of data or restriction of processing to any recipients of your personal data.

6. Right to data portability

You have the right to receive your personal data processed by us on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format as well as to transmit them to another controller. If it is technically feasible, you have the right to have them directly transmitted from us to another controller.

7. Right to object

You have the right to object to the processing of your personal data on particular grounds. If this is the case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.

If your personal data is being processed for the purpose of direct marketing, you have the right to object at any time.

8. Right to withdraw

You have the right to withdraw your consent given to us at any time. The withdrawal of the consent does not affect the lawfulness of the processing carried out based on the consent before your withdrawal.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, if you believe that the processing of your personal data by us violates the provisions of the GDPR.

The competent supervisory authority for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Phone: +49 (0) 981 180093-0

VII. Overview of the cookies used

In the operation of this website we use different cookies, as described above.

You will find an overview of the technically necessary cookies used on our website within our cookie banner as well as within our separate information page on cookies. . You can view our information page on cookies here.

If you have any questions, please do not hesitate to contact our data protection officer at any time.