Privacy Policy

The data controller is:

Christian Wichmann

Tannholzweg 1-3

29229 Celle

Email: info@orchideen-wichmann.de

Telephone: 05141-93720

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal details. Each time you access a webpage, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data), and documents the request. This access data is analyzed solely for the purpose of ensuring the smooth operation of the site and improving our service. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in the correct presentation of our services in accordance with Article 6(1)(f) of the GDPR. All access data is deleted no later than seven days after the end of your visit to the website. All access data is processed only for as long as is necessary to achieve the processing purposes set out above.

 Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of data processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected via the forms provided for this purpose on this website are processed on their servers. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

2. Data processing for the purposes of contract fulfilment and establishing contact

2.1 Data processing for the purpose of contract fulfilment

For the purpose of contract fulfilment (including enquiries regarding and the handling of any existing claims arising from warranty, breach of contract and the right of withdrawal, as well as any statutory obligations to update data) in accordance with Article 6(1), first sentence, point (b) of the GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, as in these cases we require the data to fulfil the contract and cannot dispatch the order without it. The data collected is specified in the relevant input forms.

Further information on the processing of your data, in particular regarding its disclosure to our service providers for the purposes of order, payment and dispatch processing, can be found in the following sections of this privacy policy. Once the contract has been fully fulfilled, your data will be restricted for further processing and deleted upon expiry of the retention periods under tax and commercial law in accordance with Article 6(1), first sentence, point (c) of the GDPR, unless you have expressly consented to the further use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

2.2 Customer account

Where you have given your consent in accordance with Article 6(1)(a) of the GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account and for storing your data for future orders on our website. You may delete your customer account at any time, either by contacting us via the contact details provided in this privacy policy or by using the function provided for this purpose within your customer account. Once your customer account has been deleted, your data will be deleted, unless you have expressly consented to the continued use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

 Contact us

As part of our customer communications, we collect personal data to process your inquiries in accordance with Article 6(1)(b) of the GDPR if you voluntarily provide this to us when contacting us (e.g. via the contact form, live chat tool or email). Required fields are marked as such, as we need this data to process your request. The data collected is specified in the respective input forms. Once your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

3. Data processing for the purpose of order fulfilment

To fulfil the contract in accordance with Article 6(1)(b) of the GDPR, we pass on your data to the delivery service provider commissioned to carry out the delivery, insofar as this is necessary for the delivery of goods ordered. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

 Transfer of data to delivery service providers for the purpose of sending dispatch notifications

Provided you have given us your explicit consent to do so during or after placing your order, we will, on this basis and in accordance with Article 6(1)(a) of the GDPR, pass on your email address and telephone number to the selected delivery service provider, so that they can contact you prior to delivery to notify you of the delivery or to arrange a suitable time.
Consent may be withdrawn at any time by sending a message via the contact details provided in this privacy policy. Following revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy. If you have any questions regarding our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

4. Data processing for payment processing

We work with the following partners to process payments in our online shop: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we will pass on the data necessary for processing the payment transaction to our technical service providers, the commissioned credit institutions or the selected payment service provider, insofar as this is necessary to process the payment. This serves to fulfil the contract in accordance with Article 6(1), first sentence, point (b) of the GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration into the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has, by means of a decision, determined an adequate level of data protection. Where data is transferred to third countries outside the EU/EEA for which the European Commission has not adopted a decision on an adequate level of data protection, the cooperation is based on the European Commission’s Standard Data Protection Clauses.

If you have any questions regarding our payment processing partners or the basis of our cooperation with them, please use the contact details provided in this privacy policy.

4.2 Data processing for the purposes of fraud prevention and optimising our payment processes

Where necessary, we may provide the aforementioned service providers with further data, which they use, together with the data required to process the payment, for the purposes of fraud prevention and optimising our payment processes (e.g. invoicing, handling disputed payments, supporting accounting). This serves, in accordance with Article 6(1), first sentence, point (f) of the GDPR, to safeguard our legitimate interests – which, following a balancing of interests, are deemed to prevail – in protecting ourselves against fraud and in ensuring efficient payment management.

4.3 Identity and credit checks when selecting Klarna payment services

Purchase on account via Klarna, Klarna instalment plan
If you choose to use the payment services provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter ‘Klarna’), we ask for your consent in accordance with Article 6(1)(a) of the GDPR to allow us to transfer to Klarna the data necessary for processing the payment and for carrying out an identity and creditworthiness check. In Germany, the credit reference agencies listed in Klarna’s privacy policy may be used for identity and credit checks. Klarna uses the information received regarding the statistical probability of payment default to make a balanced decision on whether to establish, continue or terminate the contractual relationship. You may withdraw your consent at any time by contacting us via the contact details provided in this privacy policy. This may mean that we are no longer able to offer you certain payment options. You may also withdraw your consent to this use of personal data at any time by contacting Klarna directly.

5. Advertising by email and post

5.1 Email newsletters with subscription and newsletter tracking

If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you to send you our email newsletter on a regular basis, based on your consent in accordance with Article 6(1)(a) of the GDPR. You can unsubscribe from the newsletter at any time, either by contacting us via the details provided below or by clicking on the link provided for this purpose in the newsletter. Once you have unsubscribed, we will remove your email address from the mailing list, unless you have expressly consented to the further use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

Please note that we analyse your user behaviour when sending out the newsletter. To this end, we also analyse your interaction with our newsletter by measuring, storing and evaluating open rates and click-through rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

For the purposes of this analysis, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. For the purposes of analysis, we link the following “newsletter data” in particular:

• the page from which the page was requested (known as the referrer URL),
• the date and time of the visit,
• a description of the type of web browser used,
• the IP address of the requesting computer,
• the email address,
• the date and time of registration and confirmation

and the single-pixel technologies with your email address or your IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID.

If you do not wish to be tracked via the newsletter, you can unsubscribe from the newsletter at any time, as described above.

The information will be stored for as long as you remain subscribed to the newsletter.

5.2 Newsletter distribution

The newsletter and the aforementioned newsletter tracking may also be handled by our service providers as part of data processing carried out on our behalf. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

5.3 Sending requests for reviews by email

Provided that you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR during or after placing your order, we will use your email address to ask you to submit a review of your order via the review system we use. This consent may be withdrawn at any time by sending a message via the contact details provided in this privacy policy or via a link provided for this purpose in the review request. Once you have withdrawn your consent, we will delete your email address from the recipient list, unless you have expressly consented to the further processing of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to process your data for other purposes permitted by law and about which we inform you in this policy.

Review requests may also be sent by our service provider, Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

In the course of sending review requests, we receive information on the respective status from Trusted Shops (e.g. whether the review request has been sent and whether it has been received). This is carried out in accordance with Article 6(1)(f) of the GDPR to fulfil our legitimate interest in receiving information about the review invitations, so that we can, where necessary, as well as to fulfil Trusted Shops’ legitimate interest in being able to offer this service.

We are jointly responsible with Trusted Shops for sending review requests and for the collection and display of review and status information.

As part of the joint responsibility arrangement between us and Trusted Shops, please contact Trusted Shops in the first instance regarding data protection matters and to exercise your rights; you can find their contact details here. Further information on data protection can be found via the following link here. Irrespective of this, you can always contact us using the contact details provided in this privacy policy. Your enquiry will then, if necessary, be forwarded to the other data controller for a response.

5.4 Direct mail and your right to object

Furthermore, we reserve the right to use your first name, surname and postal address for our own marketing purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our overriding legitimate interests, as determined by a balancing of interests, in addressing our customers for advertising purposes in accordance with Article 6(1)(f) of the GDPR. You may object to the storage and use of your data for these purposes at any time by contacting us via the contact details provided in this privacy policy.
Once you have withdrawn your consent, we will remove your address from the recipient list, unless you have expressly consented to the continued use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

6. Cookies and other technologies

6.1 General information

To make your visit to our website more engaging and to enable the use of certain functions, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. once you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser the next time you visit (persistent cookies). You can find the storage duration in the overview within your web browser’s cookie settings.

Privacy protection on end devices

When you use our online services, we employ technologies that are strictly necessary to provide the digital service you have expressly requested. The storage of information on your device or access to information already stored on your device does not require your consent in this respect.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not give your consent, parts of the website may not be fully accessible. Any consent you have given remains valid until you adjust or reset the relevant settings on your device.

Any subsequent data processing carried out by cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions on our website. These technologies collect and process your IP address, the time of your visit, device and browser information, and information regarding your use of our website. This is based on a balancing of interests, where our overriding legitimate interests in optimising the presentation of our website prevail, in accordance with Article 6(1)(f) of the GDPR.

We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to provide evidence of consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

Cookie settings

You can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have consented to the use of these technologies in accordance with Article 6(1)(a) of the GDPR, you may withdraw your consent at any time by sending a message via the contact details provided in the privacy policy. Alternatively, you can click on the privacy button. If you do not accept cookies, the functionality of our website may be restricted.

6.2 Consent Manager Platform (CMP)

On our website, we use a consent management service (“Consent Manager Platform (CMP)”) to inform you about the cookies and other technologies we use on our website, and to obtain, manage and document your consent – where required – to the processing of your personal data by these technologies. This is necessary in accordance with Article 6(1), first sentence, point (c) of the GDPR to fulfil our legal obligation under Article 7(1) of the GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject. The Consent Manager Platform (CMP) used is a service provided by Shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany, which processes your data on our behalf.

Once you have submitted your cookie consent on our website, the web server stores the following data: IP address, device information, browser information, language setting, the webpage visited or its URL, the date and time of your declaration of consent, and information regarding your consent behaviour.

In addition, the following technologies are used, which contain information about your consent behavior: cookies

The data is stored exclusively on the end device; no personal data is transferred to the provider of the Consent Manager Platform (CMP). Your data will be deleted unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

7. Use of cookies and other technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for the individual technologies, this is done on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. Once the purpose has ceased to apply and we have stopped using the relevant technology, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future. Further information on your options for withdrawal can be found in the section "Cookies and other technologies". Further information, including the legal basis for our cooperation with the individual providers, can be found under the descriptions of the individual technologies. If you have any questions regarding the providers and the legal basis for our cooperation with them, please use the contact details provided in this privacy policy.

7.1 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) described below. The information automatically collected by Google’s technologies regarding your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement concluded between joint controllers for the respective technology in accordance with Article 26 of the GDPR. Further information on data processing by Google can be found in Google’s privacy policy.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists.

Our service providers are based in and/or use servers in countries outside the EU and the EEA. No adequacy decision has been issued by the European Commission for these countries. Our cooperation with them is based on the European Commission’s Standard Data Protection Clauses. 

 Google Analytics

For the purpose of website analysis, data (IP address, time of visit, device and browser information, and information regarding your use of our website) is automatically collected and stored using Google Analytics; this data is used to create usage profiles using pseudonyms. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU for the purpose of deriving location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

To optimise the marketing of our website, we use the so-called User ID feature. This function enables us to assign a unique, permanent ID to your interaction data from one or more sessions on our online platforms, thereby allowing us to analyse your user behaviour across devices and sessions.

 Google Ads

For website analysis and event tracking, we use Google Ads Conversion Tracking to track your subsequent usage behaviour if you have arrived at our website via a Google Ads advertisement. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, as well as information regarding your use of our website based on events specified by us, such as visiting a web page or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms.

 Google Maps

For the visual display of geographical information, Google Maps collects data relating to your use of the Maps functions – in particular your IP address and location data – which is transmitted to Google and subsequently processed by Google. We have no influence over this subsequent data processing.

 Google reCAPTCHA

To protect against misuse of our web forms and against spam generated by automated software (so-called ‘bots’), Google reCAPTCHA collects data (IP address, time of visit, browser information and details of your use of our website) and analyses your use of our website using JavaScript and cookies. In addition, other cookies stored in your browser by Google services are analysed. Data processing is carried out on the basis of a data processing agreement with Google. The users of a customer who access websites protected by reCAPTCHA are no longer subject to Google’s privacy policy and terms of service.

 Google Tag Manager

Google Tag Manager enables us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of a data processing agreement with Google.

The use of Google Tag Manager enables the integration of various services and technologies.
If you do not wish to use certain tracking services and have therefore disabled them, this deactivation will apply to all relevant tracking tags integrated via Google Tag Manager.

 YouTube Video Plugin

When embedding third-party content via the YouTube video plugin in the enhanced privacy mode we use, data (IP address, time of visit, device and browser information) is collected, transmitted to Google and subsequently processed by Google only if you play a video.

7.2 Use of meta-services

 Use of Meta Pixel

We use the Meta Pixel as part of the technologies described below, provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter), from which usage profiles are created using pseudonyms. To this end, when you visit our website, the Meta Pixel automatically sets a cookie which, by means of a pseudonymous cookie ID, enables your browser to be recognised when you visit other websites. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalised and audience-based advertising.
The information automatically collected by Meta Platforms Ireland’s technologies regarding your use of our website is generally transferred to and stored on a server belonging to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information on data processing by Meta Platforms Ireland can be found in the Meta Platforms Ireland’s privacy policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The Adequacy Decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification has been obtained.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. No adequacy decision has been issued by the European Commission for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

 Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Meta Platforms Ireland is responsible for the actual implementation, in particular for deciding where to place the adverts for individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. The joint controllership is limited to the collection of data and its transfer to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this.

8. Integration of the Trusted Shops Trustbadge/ other widgets

Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. quality seal, collected reviews) and to offer Trusted Shops products to buyers following an order.

This serves to safeguard our overriding legitimate interests, as determined following a balancing of interests, in optimising our marketing by enabling a secure shopping experience in accordance with Article 6(1), first sentence, point (f) of the GDPR. The Trustbadge and the services advertised via it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are joint data controllers under Article 26 of the GDPR. In the following section of this privacy notice, we provide you with information on the key terms of the agreement in accordance with Article 26(2) of the GDPR.

As part of the joint responsibility arrangement between us and Trusted Shops SE, please contact Trusted Shops in the first instance regarding data protection matters and to exercise your rights, using the contact details provided in the privacy policy indicated contact options. Regardless of this, you may always contact the data controller of your choice. Your enquiry will then, if necessary, be forwarded to the other data controller for a response.

8.1 Data processing when the Trustbadge or other widgets are integrated

The Trustbadge is provided by a US-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which can be accessed here for the USA. Service providers based in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where service providers are not certified under the DPF, standard contractual clauses have been agreed as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. The IP address is anonymised immediately after collection, so that the stored data cannot be linked to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after completion of an order

Once your order has been completed, the Trustbadge accesses order information stored on your device (order total, order number, product purchased where applicable) as well as your email address. This is necessary in order to provide you with Trusted Shops services and, where applicable, to have your order automatically secured. To this end, your email address—hashed using a cryptographic one-way function—is transmitted to Trusted Shops. The legal basis for this is Article 6(1)(f) of the GDPR.

This serves to verify whether you are already registered for services with Trusted Shops and is therefore necessary to fulfil our and Trusted Shops’ overriding legitimate interests in providing the buyer protection and transactional review services linked to the specific order in question, in accordance with Article 6(1), first sentence, point (f) of the GDPR. If this is the case, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered for the services, you will subsequently be given the opportunity to do so for the first time. Further processing following registration is also governed by the contractual agreement with Trusted Shops. If you do not register, all data transmitted will be automatically deleted by Trusted Shops and it will no longer be possible to link the data to an individual.

Trusted Shops uses service providers for hosting, monitoring and logging. The legal basis is Article 6(1)(f) of the GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (the USA, the UK and Israel). An adequate level of data protection is ensured in each case by an adequacy decision from the European Commission, which can be accessed here, for the USA here and for Israel here for the UK is available. Service providers based in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where service providers are not certified under the DPF, standard contractual clauses have been agreed as an appropriate safeguard.

9. Social Media

9.1 Social media buttons from Facebook (by Meta), X (formerly Twitter) and Instagram (by Meta)

Our website uses social media buttons from social networks. These are merely embedded in the page as HTML links, meaning that no connection is established with the respective provider’s servers when you visit our website. If you click on one of the buttons, the website of the relevant social network will open in a new browser window There, you can, for example, click the ‘Like’ or ‘Share’ button.

9.2 Our online presence on Facebook (by Meta), X (formerly: Twitter), Instagram (by Meta), YouTube

Insofar as you have given your consent to the relevant social media operator in accordance with Article 6(1)(a) of the GDPR, when you visit our online presence on the social media platforms mentioned above, your data will be automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These may be used, for example, to display ads both within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as contact details, your rights in this regard and settings to protect your privacy, please refer to the providers’ privacy policies linked below. Should you nevertheless require assistance in this matter, please do not hesitate to contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Facebook (by Meta) is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with a visit to a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (including details on Insights data) can be found here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The Adequacy Decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification has been obtained.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico.
There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on the following safeguards: Standard Data Protection Clauses of the European Commission.

X is a service provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“X”). The information automatically collected by X regarding your use of our online presence on X is generally transferred to and stored on a server belonging to X Corp., FM 1209, Building 2, Bastrop, TX 78602, USA.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists.

Our service providers are based in and/or use servers in countries outside the EU and the EEA. No adequacy decision has been issued by the European Commission for these countries. Our cooperation with them is based on the European Commission’s Standard Data Protection Clauses. 

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with a visit to an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (including details on Insights data) can be found here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The Adequacy Decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification has been obtained.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico.
There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these safeguards: the European Commission’s Standard Data Protection Clauses.

YouTube is a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google regarding your use of our online presence on YouTube is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists.

Our service providers are based in and/or use servers in countries outside the EU and the EEA. No adequacy decision has been issued by the European Commission for these countries. Our cooperation with them is based on the European Commission’s Standard Data Protection Clauses. 

10. How to contact us and your rights

10.1 Your rights

As a data subject, you have the following rights:

• in accordance with Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data processed by us;
• in accordance with Article 16 of the GDPR, the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
• in accordance with Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless further processing
  • to exercise the right to freedom of expression and information;
  • to fulfil a legal obligation;
  • for reasons of public interest or
  • is necessary for the assertion, exercise or defence of legal claims;
• in accordance with Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, insofar as
  • you dispute the accuracy of the data;
  • the processing is unlawful, but you object to its erasure;
  • we no longer require the data, but you require it to assert, exercise or defend legal claims, or
  • you have objected to the processing in accordance with Article 21 of the GDPR;
• in accordance with Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another data controller;
• In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority for your usual place of residence, your place of work or our company’s registered office.

10.2 Contact details

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, rectification, restriction or erasure of data, or to withdraw consent or object to a specific use of your data, please contact us directly using the contact details in our legal notice.