Privacy policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide your data. Failure to provide it will have no consequences. This only applies insofar as no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files
You can visit our website without providing any personal information. 
Each time you access our website, usage data is transmitted to us or our web hosting provider / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services. 
 

Your data may also be transferred to Canada. An adequacy decision by the European Commission exists for data transfers to Canada.

Contact

Data Controller
You may contact us at any time. The controller responsible for data processing is: CORALIA LIMITED, 18 Mallow Street, V94N12Y, Limerick, Ireland, CRO No. 681902, kontakt@emmalove.de

Customer-Initiated Contact via Email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message content) only to the extent provided by you. The data processing serves the purpose of handling and responding to your inquiry.
If your contact is related to pre-contractual measures (e.g. consultation regarding a purchase, preparation of an offer) or concerns an existing contract between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR.
We use your email address solely for processing your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form
When using the contact form, we collect your personal data (name, email address, message content) only to the extent provided by you. The data processing serves the purpose of contacting you.
If your contact is related to pre-contractual measures (e.g. consultation regarding a purchase, preparation of an offer) or concerns an existing contract between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR.
We use your email address solely for processing your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods unless you have consented to further processing and use.

Use of Google Maps API Address Validation
We use the address validation service provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, "Google") on our website.
The data processing serves the purpose of checking your entries in our address forms for input and spelling errors in real time and, where applicable, supplementing missing data. If incorrect data is entered, alternative suggestions for correcting the data will be displayed. For this purpose, the address data you enter is transmitted to the provider, where it is stored and analyzed.
Among other things, the following information may be transmitted to and processed by Google: postal addresses (country, city, postal code, street, house number), email address, telephone number.
Your data may also be transferred to the USA. An adequacy decision by the European Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in maintaining accurate data to fulfill our contractual obligations. You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data.
The data is processed separately by the provider and is not combined with other data. It will be deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.
For more information about Google's terms of use and privacy policy, please visit: https://cloud.google.com/maps-platform/terms or https://www.google.de/policies/privacy/.
 
Collection and Processing of Data for Applications Submitted by Email
Visitors to our website may apply for vacant positions advertised on our website by email. In this context, we collect your personal data only to the extent you provide it. This includes your contact details (e.g. name, email address, telephone number), information about your professional qualifications and education, details of professional training, as well as performance-related certificates and documentation.
The processing of your data serves the purpose of contacting you and deciding whether to establish an employment relationship with you. Providing the data is necessary to carry out the application process. Your personal data is processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the implementation of pre-contractual measures (conducting the application process as preparation for an employment contract).
If you have given us your consent to process your personal data for inclusion in our applicant pool, for example by selecting a checkbox, the processing is based on Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with future effect, without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
If, during the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants, such as information regarding the degree of severe disability, this is processed on the basis of Art. 9 (2) lit. b GDPR so that we can exercise our rights and fulfill our obligations arising from employment law and social security and social protection law.
We store your personal data for as long as necessary to make a decision regarding your application. Your data will then be deleted no later than six months afterward unless you have consented to further processing and use. If an employment relationship is established following the application process, the data provided will continue to be processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the purpose of carrying out the employment relationship and will subsequently be transferred to your personnel file.
 

Collection and Processing of Images Submitted via Upload
We provide an upload function for image files on our website. This enables you to send us images using encrypted data transmission. Upon submission of your images, we may collect your personal data (images depicting identifiable persons) only to the extent provided by you. The processing of the data serves the purpose of creating personalized products. The submitted image serves as the template for the product and is used for this purpose (e.g. T-shirt printing). The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Data may be disclosed to service providers that we use as part of data processing on our behalf. No disclosure to any other third parties takes place.
The image you submit will only be used for the purpose of providing the requested service. Your data will subsequently be deleted in compliance with the applicable statutory retention periods unless you have consented to further processing and use.

Collection and Processing of Images Submitted by Email
You have the option of sending us images by email in connection with the order of a personalized product.
Upon submission of your images, we may collect your personal data (images depicting identifiable persons) only to the extent provided by you. The processing of the data serves the purpose of creating personalized products. The submitted image serves as the template for the product and is used for this purpose (e.g. T-shirt printing). The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data will not be disclosed to third parties.
The image you submit will only be used for the purpose of providing the requested service. Your data will subsequently be deleted in compliance with the applicable statutory retention periods unless you have consented to further processing and use.

Orders

Collection, Processing and Disclosure of Personal Data for Orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is required for the conclusion of the contract. Failure to provide the required data will result in no contract being concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with the applicable legal requirements. The scope of the data transfer is limited to the minimum necessary.
 

Your data may also be transferred to Canada. An adequacy decision by the European Commission exists for data transfers to Canada.

Advertising      


Use of the Email Address for Sending Newsletters
We use your email address, independently of the contract processing, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Use of the Email Address for Direct Marketing
We use your email address, which we received in connection with the sale of a product or service, to send you electronic advertising for our own products or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is required for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct marketing. You may object to the use of your email address for this purpose at any time by notifying us. You can find the contact details for exercising your objection in our Legal Notice. You may also use the corresponding link provided in the promotional email. No costs other than the transmission costs according to the basic rates will be incurred.

Use of Klaviyo
We use the newsletter service provided by Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") as part of a data processing agreement.
We transfer the information you provide when subscribing to the newsletter (email address and, if applicable, your first and last name) to Klaviyo. The data processing serves the purpose of sending newsletters and carrying out statistical analyses.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect personal data such as your IP address, browser type, device type, and the time of access. Usage profiles may be created from this data under a pseudonym. The collected data is not used to personally identify you. It is used solely for statistical analysis to improve newsletter campaigns.
Your data is generally transferred to and stored on Klaviyo's servers in the USA. An adequacy decision by the European Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in providing a targeted, effective, and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Further information about data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice as well as at https://www.klaviyo.com/legal/data-processing-agreement. 

Payment Service Providers      

Use of PayPal
We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to make payments via the payment service. By selecting and using PayPal as your payment method, the data required for payment processing is transferred to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

All PayPal transactions are subject to the PayPal Privacy Statement. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of Amazon Payments
We use the Amazon Payments payment service provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments") on our website.
The data processing serves the purpose of enabling you to make payments via the Amazon Payments service.
To integrate this payment service, Amazon Payments is required to collect, store, and analyze data (e.g. IP address, device type, operating system, browser type, and your device location) when you access the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognized.
Your personal data is processed on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
By selecting and using "Amazon Payments," the data required for payment processing is transferred to Amazon Payments in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Further information about data processing when using Amazon Payments can be found in the corresponding Privacy Policy at: https://pay.amazon.com/de/help/201212490

Use of the Payment Service Provider Stripe
We use the payment service provider Stripe on our website, operated by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The processing of data serves the purpose of offering you payment via the Stripe payment service. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. 
Stripe reserves the right, where applicable, to obtain a credit assessment based on mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for the credit check to a credit agency and uses the information received regarding the statistical probability of a payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit assessment may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, which also take address data into account. Your legitimate interests are considered in accordance with the applicable legal provisions. The data processing serves the purpose of assessing creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when Stripe provides services in advance. 
You have the right, on grounds relating to your particular situation, to object at any time by notifying Stripe to the processing of your personal data based on Art. 6 (1) lit. f GDPR. The provision of the data is required for concluding the contract using the payment method you have selected. Failure to provide the data means that the contract cannot be concluded using your chosen payment method.
All Stripe transactions are subject to the Stripe Privacy Policy. You can find it at https://stripe.com/de/privacy 
 

Cookies

Our website uses cookies. Cookies are small text files that are stored on a user's computer system by the internet browser or the internet browser itself. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a unique character string that enables the browser to be uniquely identified when the website is visited again.
 
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to use all functions of this website to their full extent.
 
You can find information on how to manage (including disable) cookies in the most important browsers via the following links:
 
Technically Necessary Cookies
Unless otherwise stated below in this Privacy Policy, we use only these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to provide you with services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser can be recognized again after changing pages.
 
The use of cookies or similar technologies is based on Section 25 (2) TTDSG. The processing of your personal data is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and providing a user-friendly and efficient design of our services.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
 

Use of Consentmanager
We use the consent management tool Consentmanager provided by Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager") on our website.
The tool enables you to grant consent to data processing via the website, particularly the setting of cookies, and to exercise your right to withdraw consent already granted.
The purpose of the data processing is to obtain and document the necessary consents for data processing and thus comply with legal obligations.
Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Consentmanager: date and time of the page visit, information about the browser and device you use, anonymized IP address, opt-in and opt-out data. This data will not be shared with any other third parties.
The data processing is carried out to fulfill a legal obligation based on Art. 6 (1) lit. c GDPR.
Further information on data protection at Consentmanager can be found at: https://www.consentmanager.net/privacy.php

Use of GDPR Legal Cookie
We use the consent management tool GDPR Legal Cookie provided by beeclever GmbH (Universitätsstraße 3, 56070 Koblenz am Rhein, Germany; "beeclever") on our website. The tool enables you to grant consent to data processing via the website, particularly the setting of cookies, and to exercise your right to withdraw consent already granted.
The purpose of the data processing is to obtain and document the necessary consents for data processing and thus comply with legal obligations. Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to beeclever: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, randomly generated encrypted key, and consent status. This data will not be shared with any other third parties.
The data processing is carried out to fulfill a legal obligation based on Art. 6 (1) lit. c GDPR.
Further information on the terms of use and data protection at beeclever can be found at: https://gdpr-legal-cookie.com/pages/terms-conditions and at https://gdpr-legal-cookie.com/pages/datenschutzerklarung.

Use of GDPR Compliance Pro
We use the cookie consent tool GDPR Compliance Pro 2018 by PrestaChamps.com, provided by SC Wedis Complany SRL (Strada Tudor Vladimirescu nr. 19, Târgu Mureș, Romania; "PrestaChamps"), on our website.
The plug-in enables you to grant consent to data processing via the website, particularly the setting of cookies, and to exercise your right to withdraw consent already granted. The purpose of the data processing is to obtain and document the necessary consents for data processing and thus comply with legal obligations.
Cookies are used for this purpose to store your consent status and, where applicable, transmit it to PrestaChamps. This data will not be shared with any other third parties.
The data processing is carried out to fulfill a legal obligation based on Art. 6 (1) lit. c GDPR.
Further information on data protection at PrestaChamps can be found at: https://www.prestachamps.com/en/content/10-privacy-policy

Use of GDPR Cookie Management
We use the GDPR Cookie Management service provided by iSense LLC (855 W Maude Ave, Mountain View, CA 94043, USA; "iSenseLabs") on our website.
The service enables you to grant consent to data processing via the website, particularly the setting of cookies, and to exercise your right to withdraw consent already granted. The purpose of the data processing is to obtain and document the necessary consents for data processing and thus comply with legal obligations. Cookies are used to store your consent status.
Your data may be transferred to the USA. The European Commission has adopted an adequacy decision for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). iSenseLabs is not certified under the TADPF.
The data processing is carried out to fulfill a legal obligation based on Art. 6 (1) lit. c GDPR.
Further information on data protection at iSenseLabs can be found at: https://isenselabs.com/pages/privacypolicy
 


Analytics      Advertising Tracking      

Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The purpose of the data processing is to analyze this website and its visitors, as well as for marketing and advertising purposes. On behalf of the operator of this website, Google will use the information obtained to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet usage to the website operator.
Among other things, the following information may be collected: IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data, and purchasing activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

Your IP address is shortened by us on our own servers before being transmitted. Google therefore only receives pseudonymized data.

Google uses technologies such as cookies, browser web storage, and tracking pixels to analyze your use of the website. The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR.

The processing of your personal data is based on your consent pursuant to Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out based on your consent before its withdrawal.

The information generated about your use of this website is generally transmitted to and stored on a Google server in the USA. The European Commission has adopted an adequacy decision for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore committed to complying with European data protection principles. Both Google and U.S. government authorities may have access to your data.

Further information on the terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Use of the Meta Pixel
We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are jointly responsible for the collection of your data and the transmission of this data to Meta when this service is integrated. This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are primarily responsible for fulfilling the information obligations pursuant to Articles 13 and 14 GDPR, complying with the security requirements of Article 32 GDPR regarding the correct technical implementation and configuration of the service, and fulfilling the obligations under Articles 33 and 34 GDPR where a personal data breach relates to our responsibilities under the joint processing agreement. Meta is responsible for enabling data subject rights pursuant to Articles 15–20 GDPR, complying with the security requirements of Article 32 GDPR regarding the security of the service, and fulfilling the obligations under Articles 33 and 34 GDPR where a personal data breach relates to Meta's responsibilities under the joint processing agreement.
The application is used to target visitors to our website with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on our website. When you visit our website, this tag establishes a direct connection to the Meta servers. This informs the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based advertisements.
The application is also used to create conversion statistics. This allows us to determine the total number of users who clicked on one of our advertisements and were redirected to a page equipped with a conversion tracking tag, as well as the actions taken after being redirected to this website. However, we do not receive any information that personally identifies users.
Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out based on your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out based on your consent before its withdrawal.
You can disable the "Custom Audiences" remarketing function here. Further information about the collection and use of data by Meta, your rights in this regard, and options for protecting your privacy can be found in Meta's Privacy Policy at https://www.facebook.com/about/privacy/.


Use of Google's Remarketing or "Similar Audiences" Function
We use the remarketing or "Similar Audiences" function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application is used to analyze visitor behavior and visitor interests. To carry out the analysis of website usage, which forms the basis for creating interest-based advertisements, Google uses cookies. These cookies record visits to the website as well as anonymized data regarding website usage. No personal data of website visitors is stored. If you subsequently visit another website within the Google Display Network, you may be shown advertisements that are highly likely to take into account previously viewed products and areas of interest.
Your data may also be transferred to servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent in accordance with Section 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is also based on your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out based on your consent before its withdrawal.
Further information about Google Remarketing and the related Privacy Policy can be found at: https://www.google.com/privacy/ads/
 

Use of the Pinterest Tag
We use the Pinterest Tag provided by Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; "Pinterest") on our website.
The application is used to target visitors to our website with interest-based advertising on the Pinterest social network. For this purpose, the Pinterest conversion tag has been implemented on our website. When you visit our website, this tag establishes a direct connection to the Pinterest servers. This informs the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest advertisements.
If you access our website via a Pin on the Pinterest social network, a cookie for conversion tracking will be stored on your device. These cookies have a limited validity period, do not contain personal data, and therefore do not serve to personally identify you. If you visit certain pages of our website while the cookie is still valid, Pinterest and we can recognize that you clicked on the Pin and were redirected to that page. The information collected using the conversion cookie is used to create conversion statistics and optimize our website. Among other things, the following information may be processed: the total number of users who clicked on one of our Pins and were redirected to our website, the subpages visited on our website (e.g., category or product pages), search queries on our website, the contents of your shopping cart, and completed transactions.
Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer is carried out, among other things, on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or comparable technologies is based on your consent in accordance with Section 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is also based on your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out based on your consent before its withdrawal.
Further information about the collection and use of data by Pinterest, your rights in this regard, and options for protecting your privacy can be found in Pinterest's Privacy Policy at https://policy.pinterest.com/de/privacy-policy.

Use of YouTube
We use the YouTube video embedding function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "Enhanced Privacy Mode" option is enabled. This means that YouTube does not store any information about visitors to the website unless they watch a video. Only when you watch a video will information be transmitted to and stored by YouTube. Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Use of Vimeo
We use plug-ins from Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA; "Vimeo") on our website to integrate videos from the "Vimeo" platform.
When you access pages on our website that contain such a plug-in, a connection to Vimeo's servers is established and the plug-in is displayed on the page by notifying your browser. In doing so, both your IP address and information about which of our pages you have visited are transmitted to Vimeo's servers.
If you are logged into Vimeo at the same time, Vimeo assigns this information to your personal user account. When using the plug-in functions (e.g. by starting a video via the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo is not certified under the TADPF. The data transfer is carried out, among other things, on the basis of Standard Contractual Clauses (SCCs) as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) Sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
Further information on the purpose and scope of the collection as well as the further use and processing of your data by Vimeo, your rights in this regard, and options for protecting your privacy can be found in Vimeo's privacy policy: https://vimeo.com/privacy

Use of Google Fonts
We use Google Fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of ensuring a consistent display of fonts on our website. To load the fonts, a connection to Google's servers is established when you access the page. Cookies may be used in this process. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA under the EU-U.S. Data Privacy Framework (DPF). Google has certified under the DPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) sentence 1 TTDSG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data processing and privacy can be found at https://www.google.de/intl/en/policies/ as well as at https://developers.google.com/fonts/faq.

Rights of Data Subjects and Data Retention Period

Data Retention Period
After the contract has been fully completed, the data will initially be stored for the duration of the warranty period. Thereafter, the data will be retained in accordance with the applicable statutory retention periods, particularly under tax and commercial law, and will then be deleted after these periods have expired, unless you have consented to further processing and use.

Rights of the Data Subject
If the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
Furthermore, pursuant to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) lit. f GDPR, as well as to processing for the purposes of direct marketing.

Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be contacted using the following details:

Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th Floor
20459 Hamburg
Germany
Phone: +49 40 428544040
Fax: +49 40 428544000
Email: mailbox@datenschutz.hamburg.de

Right to Object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation.
Once you have objected, the processing of the data concerned will be discontinued unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. Once you have objected, we will cease processing the data concerned for direct marketing purposes.

Last updated: 29.11.2023