Privacy Policy

The controller responsible for data processing is:

S•K•S GmbH; Hans Günter Weber; Christian Weber; Sebastian Weber

Ulmenstraße 4

85445 Schwaig/Oberding

Email: info@sks-gmbh.com

Telephone: 0049 8122 6898-0

We appreciate your interest in our website. The protection of your privacy is very important to us. Below, we provide detailed information on how your data is handled.

1. Access Data and Hosting

You can visit our websites without providing personal information. Each time a webpage is accessed, the web server automatically saves a server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, data transferred, and the requesting provider (access data) and documents the access. This access data is exclusively evaluated for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to protect our overriding legitimate interests in a correct presentation of our offering within the scope of a balancing of interests, pursuant to Art. 6(1)(1)(f) GDPR. All access data will be deleted at the latest seven days after your site visit ends. All access data will only be processed for as long as is necessary to achieve the processing purposes mentioned above.

2. Data processing for contract execution and contact

2.1 Data processing for contract execution

For the purposes of contract processing (including enquiries about and processing of any existing claims arising from warranty, performance issues, and the right of withdrawal, as well as any statutory update obligations) pursuant to Art. 6(1)(1)(b) GDPR, we collect personal data when you voluntarily provide it to us in the course of your order. Mandatory fields are marked as such, as we necessarily require this data for contract processing and cannot ship the order without it being provided. Which data is collected is evident from the respective input forms.

Further information on the processing of your data, particularly on the disclosure to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After full processing of the contract, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods in accordance with Art. 6 Para. 1 Sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, or we reserve the right to use your data beyond this, which is permitted by law and about which we will inform you in this policy.

2.2 Customer Account

Provided you have given your consent according to Art. 6 Para. 1 Sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening the customer account and for storing your data for further future orders on our website. Deleting your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a designated function in the customer account. After your customer account has been deleted, your data will be erased, unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, or we reserve the right to further use your data, which is legally permissible and about which we will inform you in this statement.

 Contact

Within the scope of customer communication, we collect personal data for the processing of your enquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide it to us when contacting us (e.g. via contact form, live chat tool or email). Mandatory fields are marked as such, as in these cases we absolutely require the data to process your contact request. Which data is collected is evident from the respective input forms. After your request has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data beyond this, which is legally permissible and about which we will inform you in this declaration.

3. Data Processing for Shipping Purposes

For contract fulfillment in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, as far as this is necessary for the delivery of ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

 Disclosure of data to shipping service providers for dispatch announcement purposes

If you have given us your express consent during or after your order, we will pass on your e-mail address to the selected shipping service provider pursuant to Art. 6 Para. 1 Sentence 1 lit. a GDPR, so that they can contact you before delivery for the purpose of delivery announcement or coordination.
The consent can be revoked at any time by a message to the contact option described in this privacy policy. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we will inform you in this policy. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

4. Data processing for payment processing

We work with the following partners to process payments in our online shop: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we will pass on the data necessary for processing the payment transaction to our technical service providers or the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for processing the payment. This serves the fulfillment of the contract according to Art. 6 Para. 1 Sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g. on their own website or via a technical integration in the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has established an adequate level of data protection by decision. If data is transferred to third countries outside the EU/EEA for which the European Commission has not issued a decision on an adequate level of data protection, the cooperation will be based on standard data protection clauses of the European Commission.

If you have questions about our partners for payment processing or the basis of our cooperation with them, please contact the contact option mentioned in this data protection declaration.

4.2 Data processing for the purpose of fraud prevention and optimisation of our payment processes

Where applicable, we will provide the aforementioned service providers with further data, which they will use together with the data necessary for payment processing for the purpose of fraud prevention and optimisation of our payment processes (e.g. invoicing, processing of disputed payments, support for accounting). In accordance with Art. 6(1)(f) GDPR, this serves to safeguard our overriding legitimate interests in protection against fraud or efficient payment management, as part of a balancing of interests.

4.3 Involvement of debt collection service providers

We will pass on your data to a commissioned debt collection service provider, Zyklop Inkasso Deutschland GmbH – Part of Lowell Group, Am EUROPA-CENTER 1b, 45145 Essen, Germany, if our payment claim has not been settled despite prior dunning. In this case, the claim will be collected directly by the debt collection service provider. This serves the fulfilment of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR and the safeguarding of our overriding legitimate interests in the effective assertion or enforcement of our payment claim in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

5. Advertising via E-mail

5.1 E-mail Newsletter with Registration

If you subscribe to our newsletter, we will use the data required for this or data separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) sentence 1 lit. a GDPR, or we reserve the right to further use your data, which is permitted by law and about which we will inform you in this declaration.

5.2 Sending Review Requests via E-Mail

If you have given us your express consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR during or after your order, we will use your email address to request a review of your order via the review system used by us. This consent can be withdrawn at any time by sending a message to the contact option described in this privacy policy or via a dedicated link in the review request. After withdrawing your consent, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use your data beyond this, which is legally permissible and about which we will inform you in this declaration.

The review requests may also be sent by our service provider Trusted Shops SE Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

As part of sending review requests, we receive information on the respective status from Trusted Shops (e.g., whether the review request has been sent and whether it has arrived). This is done in accordance with Art. 6(1)(f) GDPR to fulfil our legitimate interest in receiving information about review invitations, in order to make optimisations based on this if necessary, and to fulfil the legitimate interest of Trusted Shops in being able to offer this service.

We are jointly responsible with Trusted Shops for sending review requests and for collecting and displaying review and status information.

In the context of our joint responsibility with Trusted Shops, please preferentially contact Trusted Shops for data protection questions and to assert your rights, their contact options can be found here. Further information on data protection can be found via the following link here extract. Regardless, you can always contact us using the contact options described in this privacy policy. Your request will then be forwarded to the other responsible party for a response, if necessary. 6. Cookies and other technologies

6.1 General Information

To make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). You can find out the duration of storage in the overview in your web browser's cookie settings.

Privacy protection for end devices

When using our online offer, we use absolutely necessary technologies to provide the explicitly requested digital service. The storage of information on your end device or access to information already stored on your end device does not require consent in this regard.

For functions that are not absolutely necessary, the storage of information on your end device or access to information already stored on your end device requires your consent. We would like to point out that if consent is not granted, parts of the website may not be fully usable. Any consent you have given will remain valid until you adjust or reset the respective settings on your end device.

Subsequent data processing by cookies and other technologies, if applicable

We use technologies that are absolutely necessary for the use of certain functions of our website. Through these technologies, IP address, time of visit, device and browser information, as well as information about your use of our website are collected and processed. This serves, within the framework of a balancing of interests, our predominant legitimate interests in an optimised presentation of our offer in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

Cookie Settings

The cookie settings for your browser can be found via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of technologies pursuant to Art. 6 (1) sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy. Alternatively, you can click on the privacy settings button. If cookies are not accepted, the functionality of our website may be restricted.

6.2 Cookiebot Consent Management Platform

We use Cookiebot on our website to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage and document your consent, if required, to the processing of your personal data by these technologies. This is required pursuant to Art. 6 (1) sentence 1 lit. c GDPR for the fulfillment of our legal obligation pursuant to Art. 7 (1) GDPR to be able to prove your consent to the processing of your personal data, which we are subject to. Cookiebot is a service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf.
After submitting your cookie declaration on our website, Cookiebot's web server stores your anonymised IP address, the date and time of your declaration, browser information, the URL from which the declaration was sent, information about your consent behaviour, and an anonymous random key. Additionally, a cookie is used which contains the information about your consent behaviour and the key. Your data will be deleted after twelve months, unless you have expressly consented to further use of your data according to Art. 6 Para. 1 Sentence 1 lit. a GDPR or we reserve the right to use your data beyond that, which is legally permitted and about which we will inform you in this declaration.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.

The adequacy decision for the USA is considered the basis for third country transfers, provided that the respective service provider is certified. Until certification by our service providers, data transfer will continue to be based on this foundation: Standard data protection clauses of the European Commission.6.3 Information regarding third-country transfers (data transmission to third countries)

We use technologies from service providers on our website whose registered office and/or server locations may be in third countries outside the EU or EEA. If there is no adequacy decision by the EU Commission for this country, an appropriate level of data protection must be guaranteed by other suitable measures.

Suitable measures in the form of contractually agreed standard contractual clauses of the EU Commission or binding internal data protection regulations (Binding Corporate Rules) are fundamentally possible, but require a prior review by the contracting parties as to whether an appropriate level of protection can be guaranteed. According to the case law of the ECJ, it may be necessary to take additional protective measures.
 
We have generally agreed on the standard data protection clauses issued by the EU Commission with the technology providers we use who process personal data in a third country. Where possible, we also agree on additional safeguards to ensure that sufficient data protection is guaranteed in third countries without an adequacy decision. 

Notwithstanding this, it may occur that despite all contractual and technical measures, the level of data protection in the third country does not correspond to that of the EU. In these cases, we ask for your consent, if necessary within the scope of cookie consent, pursuant to Art. 49 (1) lit. a GDPR for the transfer of your personal data to a third country.
There is a particular risk that local authorities in the third country may obtain access rights to your personal data that are not sufficiently restricted from a European data protection perspective, that we as data exporter or you as the data subject will not notice this and/or that you may not have sufficient legal remedies available to prevent this and/or to take action against such access. 

The following countries, in particular, are currently considered third countries without an adequacy decision from the EU Commission (example list): 

• China 
• Russia 
• Taiwan 

You can find out which third countries data is transferred to by us in the privacy policy for the respective tool used and/or by the consent management/Consent Manager Platform (CMP) used by us. 

7. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for individual technologies, this is done on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR. The data collected in this context will be deleted when the purpose ceases to apply and the respective technology is no longer used by us. You can revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the "Cookies and other technologies" section. Further information, including the basis for our cooperation with individual providers, can be found with the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

7.1 Use of Google Services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") presented below. The information automatically collected by Google technologies about your use of our website is usually transferred to a Google LLC server, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement concluded between joint controllers in accordance with Art. 26 GDPR for the respective technology. You can find further information about data processing by Google in Google's privacy policy.

Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission. 

 Google Analytics

For the purpose of website analysis, usage profiles are automatically collected and stored using Google Analytics (IP address, time of visit, device and browser information, and information about your use of our website), using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server located in the EU to derive location data and then immediately deleted before the traffic is forwarded to Google for processing on further servers. Data processing is carried out on the basis of a contract for order processing by Google.

For the purpose of optimised marketing of our website, we have activated the Data Sharing Settings for "Google Products and Services". This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google within the scope of these data sharing settings is based on an additional agreement between controllers. We have no influence on subsequent data processing by Google.

For the purpose of optimised marketing of our website, we use the so-called User ID function. With this function, we can assign a unique, permanent ID to your interaction data from one or more sessions on our online platforms and thus analyse your user behaviour across devices and sessions.

For web analytics, the extension function of Google Analytics Google Signals enables so-called “Cross-Device Tracking”. If your internet-enabled devices are linked to your Google account and you have activated the “personalised advertising” setting in your Google account, Google can create reports on your usage behaviour (esp. cross-device user numbers), even if you switch your terminal device. We do not process personal data in this respect; we only receive statistics generated on the basis of Google Signals.

For web analytics and advertising purposes, the extension function of Google Analytics, the so-called DoubleClick cookie, enables your browser to be recognised when visiting other websites. Google will use this information to compile reports on website activities and to provide other services associated with website usage.

If you do not give us consentIn accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, if you consent to the use of Google Analytics, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To close gaps in web analysis through behaviour and conversion modelling, pings with data (user agent, information about your consent behaviour, screen resolution, IP address) will be sent to Google.

 Google AdSense

Our website markets space for third-party advertisements via Google AdSense. These advertisements will be displayed to you at various points on this website. The so-called DoubleClick cookie enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, as well as information about your use of our website) and the automatic assignment of a pseudonymous User ID, which is used to determine interests based on visits to this and other websites.

 Google Ads

For advertising purposes in Google search results as well as on third-party websites, the so-called Google Remarketing is used when visiting our website.Cookie set, which enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website) and via a pseudonymised cookie ID, based on the pages you have visited. Further data processing will only take place if you have activated the "personalised advertising" setting in your Google Account. If you are logged into Google during your visit to our website in this case, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we measure your subsequent user behaviour via Google Ads Conversion Tracking if you arrived at our website via a Google Ads advertisement. Cookies may be used for this purpose and data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or registering for a newsletter) may be collected, from which user profiles are created using pseudonyms.

If you do not give us consent according to Art. 6 (1) sentence 1 lit. a GDPR regarding the use of Google Ads, no cookies will be stored on or read from your device. The data processing described in the previous paragraphs will not take place. To close gaps in web analytics through behaviour and conversion modelling, pings with data (user agent, information on your consent behaviour, screen resolution, IP address, page URL, information on ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

 Google Maps

For the visual representation of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google and then processes it by Google. We have no influence on this subsequent data processing.

 Google reCAPTCHA

For the purpose of protecting our web forms against misuse and spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information, and information about your use of our website) and performs an analysis of your use of our website using so-called JavaScript and cookies. In addition, other cookies stored in your browser by Google services are evaluated. Data processing is carried out on the basis of a contract processing agreement with Google. Users of a customer who access websites protected by reCAPTCHA are no longer subject to Google's privacy policy and terms of use.

 Google Tag Manager

Google Tag Manager allows us to manage various codes and services on our website. During the implementation of individual tags, Google may also process personal data (e.g., IP address, online identifiers (including cookies)). Data processing is carried out on the basis of a contract processing agreement with Google.

The use of Google Tag Manager enables the integration of various services/technologies.
If you do not wish to use individual tracking services and have therefore deactivated them, the deactivation will remain in effect for all affected tracking tags that are integrated via Google Tag Manager.

 YouTube Video Plugin

For the integration of third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube Video Plugin in the extended data protection mode we use, transmitted to Google, and then processed by Google only when you play a video.

7.2 Use of Meta Services

 Use of Meta Pixel

We use the Meta Pixel as part of the technologies from Meta Platforms Ireland Ltd. presented below., Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). The Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or signing up for a newsletter), from which usage profiles are created using pseudonyms. As part of the so-called extended data matching, information for matching purposes is also hashed, collected, and stored, which can be used to identify individual persons (e.g., names, email addresses, and phone numbers). To this end, when you visit our website, the Meta Pixel automatically sets a cookie that automatically enables recognition of your browser on subsequent visits to other websites using a pseudonymous cookie ID. Meta Platforms Ireland will combine this information with further data from your Facebook account and use it to compile reports on website activities and to provide other services related to website usage, particularly personalised and group-based advertising.
The information automatically collected by Meta Platforms Ireland's technologies about your use of our website is generally transmitted to a Meta Platforms, Inc. server, 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. You can find further information about data processing by Meta Platforms Ireland in the Privacy Policy of Meta Platforms Ireland.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for third-country transfers, provided that the respective service provider is certified. Certification is available.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on the following guarantees: Standard Data Protection Clauses of the European Commission.

 Meta Ads Manager

We advertise for this website on Facebook (by Meta) and other platforms via Meta Ads Manager. We determine the parameters of the respective advertising campaign. Meta Platforms Ireland is responsible for the precise implementation, particularly the decision on the placement of ads with individual users. To the extent that nothing to the contrary is specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transfer to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this.

Based on the statistics created via Meta Pixel about visitor activities on our website, we conduct group-based advertising on Facebook (by Meta) via Custom Audiences by determining the characteristics of the respective target group. Within the scope of the extended data matching (see above) that takes place to determine the respective target group, Meta Platforms Ireland acts as our processor.

Based on the pseudonymous cookie ID set by the Meta Pixel and the data collected about your usage behaviour on our website, we use Custom Audiences for personalised advertising.

Via Conversions (via Meta Pixel or Conversations API), we measure your subsequent usage behaviour for web analysis and event tracking if you have arrived at our website via an advertisement from Meta Ads Manager. Data processing is carried out on the basis of a data processing agreement with Meta Platforms Ireland.

7.3 Other providers of web analysis and online marketing services

 Use of Vimeo Video Plugin for embedding third-party content

For embedding third-party content, the video plugin from Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA ("Vimeo") data (IP address, time of visit, device and browser information) are collected, transmitted to Vimeo, and subsequently processed by Vimeo. The data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Google Analytics is automatically integrated into the Vimeo video plugin. For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and is then immediately deleted before the traffic is forwarded to further Google servers for processing. We have no influence or access to the data processing by Vimeo, including the settings andof the results from Google Analytics.

Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and EEA. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission. 

 Use of the OpenAI Ads Pixel (oaiq)

To measure the success of advertisements placed in ChatGPT, we use the so-called "OpenAI Ads Pixel" (oaiq), an offering from OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland ("OpenAI"). The information automatically collected by the pixel about your use of our website is usually transferred to a server of OpenAI OpCo, LLC, 1455 Third Street, San Francisco, CA 94158, USA and stored there. You can find further information about data processing by OpenAI in the privacy policy of OpenAI.

When the pixel is used, a first-party cookie ("__oppref") is stored on your end device, which allows your browser to be recognised on a later visit to our website in order to measure the success of an advertisement previously displayed in ChatGPT (so-called conversion measurement). Data such as IP address, time of visit, and device and browser information may be collected.

Optionally, further data provided by you during an order or contact (e.g. email address, telephone number, name, and location data such as country, city, region, and postcode) can also be processed for matching purposes (so-called "Advanced Matching"). According to OpenAI, this contact data is already pseudonymised ("hashed") in your browser using the one-way cryptographic method SHA-256 before it is transmitted; according to OpenAI, this data does not leave your browser in plain text.

The adequacy decision for the USA is considered the basis for third-country transfer, provided that OpenAI is certified. Until certification by OpenAI, data transfer continues to be based on this foundation: Standard data protection clauses of the European Commission.

If you give us no consent in accordance with Art. 6(1)(a) GDPR, you consent to the use of the OpenAI Ads Pixel, the pixel will not be loaded and none of the data processing described above will take place.

8. Integration of the Trusted Shops Trustbadge/Other Widgets

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g., trust seal, collected reviews) and to offer Trusted Shops products to buyers after an order.

This serves to safeguard our overriding legitimate interests in optimal marketing by enabling secure purchasing in accordance with Art. 6(1)(a) GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly responsible under data protection law in accordance with Art. 26 GDPR. In the following, we will inform you about the essential contractual contents in accordance with Art. 26(2) GDPR within the scope of these data protection notices.

When interacting with the Trustbadge AI+, session cookies are set to save the login status and display the so-called welcome layer, which shows the details of the respective online shop (company information, reviews, information about buyer protection) as well as the #trstd secret. To recognise logged-in users, a cookie is set and stored for a maximum of 400 days after login. Session cookies are also set to send push notifications when using the app, provided the user has allowed them. This is necessary for Trusted Shops to provide the digital service you desire. Trusted Shops is responsible for data processing when interacting with the Trustbadge AI+.

As part of the joint responsibility between us and Trusted Shops SE, please contact Trusted Shops preferably for data protection questions and to assert your rights using the information provided in the privacy information provided contact options. Independently of this, you can always contact the responsible person of your choice. If necessary, your request will be forwarded to the other responsible person for a response.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a US-based CDN provider (Content Delivery Network). An appropriate level of data protection is ensured by an adequacy decision of the EU Commission, which can be accessed for the USA here. Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). You can find more information here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as suitable guarantees.

When the Trustbadge is called, the web server automatically saves a server log file, which also contains your IP address, date and time of access, data volume transferred, and the requesting provider (access data) and documents the access. The IP address is anonymised immediately after collection, so that the stored data cannot be assigned to your person. The anonymised data is used especially for statistical purposes and error analysis.

8.2 Data Processing After Order Completion

After completing your order, order information (order total, order number, purchased product if applicable) and your email address, hashed using a cryptological one-way function, will be transmitted to Trusted Shops. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR. This is for the purpose of verifying whether you are already registered for services with Trusted Shops and is therefore necessary for the fulfilment of our and Trusted Shops' predominant legitimate interests in providing buyer protection and transactional review services linked to the specific order, pursuant to Art. 6 (1) sentence 1 lit. f GDPR. If this is the case, further processing will be carried out in accordance with the contractual agreement made between you and Trusted Shops. If you are not yet registered for the services, you will subsequently be given the opportunity to do so for the first time. Further processing after registration is also governed by the contractual agreement with Trusted Shops. If you do not register, all transmitted data will be automatically deleted by Trusted Shops, and it will no longer be possible to establish a personal reference.

Trusted Shops uses service providers in the areas of hosting, monitoring, and logging. The legal basis is Art. 6(1)(f) GDPR for the purpose of ensuring undisturbed operation. Processing may take place in third countries (USA, Great Britain, and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which is accessible for the USA here, for Great Britain here, and for Israel here. Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). You can find more information here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as suitable guarantees.

9. Social Media

 Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube, Xing

If you have given your consent to this according to Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media provider, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms mentioned above, from which usage profiles are created using pseudonyms. These can be used, for example, to display advertisements inside and outside the platforms that are presumed to match your interests. Cookies are usually used for this purpose. Please refer to the provider's privacy policy linked below for detailed information on the processing and use of data by the respective social media provider, as well as contact options and your rights and settings for protecting your privacy. Should you still require assistance in this regard, you can contact us.

Facebook (by Meta) is an offer from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is typically transferred to a Meta Platforms, Inc. server at 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing in connection with visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has adopted an adequacy decision regarding the level of data protection: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as a basis for third-country transfers, provided that the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico.
For these countries, there is no adequacy decision from the European Commission. Our cooperation with them is based on these guarantees: Standard data protection clauses of the European Commission.

Instagram (by Meta) is an offering from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is typically transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in the context of visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA is considered the basis for third-country transfers, provided the respective service provider is certified. A certification exists.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico.
There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on these guarantees: Standard data protection clauses of the European Commission.

YouTube is an offer from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is typically transferred to a Google LLC server, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has established an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and EEA. For these countries, there is no adequacy decision from the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. 

Xing is an offer from New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and EEA. For these countries, there is no adequacy decision from the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. 

10. Contact Options and Your Rights

10.1 Your Rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• in accordance with Art. 16 GDPR, the right to demand the immediate rectification of incorrect personal data stored with us or the completion of your personal data;
• in accordance with Art. 17 GDPR, the right to demand the erasure of your personal data stored with us, insofar as the further processing is not
  • necessary for the exercise of the right to freedom of expression and information;
  • necessary for the fulfillment of a legal obligation;
  • necessary in the public interest, or
  • necessary for the establishment, exercise or defence of legal claims;
• in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
  • the accuracy of the data is disputed by you;
  • the processing is unlawful, but you refuse their erasure;
  • we no longer need the data, but you need them for the establishment, exercise or defence of legal claims, or
  • you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request the transfer to another controller;
• in accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you can contact the supervisory authority at your place of usual residence or place of work, or at our company headquarters.

Right of Objection If we process personal data to safeguard our overriding legitimate interests within the framework of a balancing of interests, as explained above, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right of objection if there are grounds arising from your particular situation. After exercising your right of objection, we will not process your personal data further for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. This does not apply if the processing is carried out for direct marketing purposes. In that case, we will not process your personal data further for this purpose.

10.2 Contact Options

Data Protection Officer:
Martina Demmel
Seeseitener Str. 2
82402 Seeshaupt
Germany

M.Demmel@speer-it.com

For questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data, as well as withdrawal of any granted consents or objection to specific data usage, please contact:

Sabrina Hantzaras
Ulmenstraße 4
85445 Schwaig/Oberding
Germany
0049 8122 6898-0
info@sks-gmbh.com