1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy listed below.

Who is responsible for data collection on this website?

How do we collect your data?

The data processing on this website is carried out by the website operator. Their contact details can be found in the section “Notice on the Responsible Party” in this privacy policy.

What do we use your data for?

Some of your data is collected when you provide it to us, for example, data you enter into a contact form. Other data is collected automatically or after your consent when you visit the website through our IT systems. This primarily includes technical data (e.g., web browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you access this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.
For this purpose and for further questions regarding data protection, you can contact us at any time.

Analyse-Tools und Tools von Dritt­anbietern

When you visit this website, your browsing behavior may be statistically analyzed. This is mainly done using so-called analytics programs. Detailed information about these analytics programs can be found in the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

Externes Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host(s). This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website visits, and other data generated through a website.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). If consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, as far as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Our host(s) will process your data only to the extent necessary to fulfill their service obligations and will follow our instructions regarding this data.
We use the following host(s):
OVH GmbH Pariser Platz 4A 10117 Berlin

3. General Information and Mandatory Disclosures

Data protection

The operators of these sites take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with legal data protection regulations as well as this privacy policy. When you use this website, various personal data are collected. Personal data are data that can be used to personally identify you. This privacy policy explains which data we collect and how we use it. It also explains how and for what purpose this takes place. Please note that data transmission over the Internet (e.g., communication via email) can have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Notice Regarding the Responsible Entity

The responsible entity for data processing on this website is: Deja Vu Museum GmbH Rochstrasse 14 C 10178 Berlin Phone: +49 172 927 29 74 Email: kontakt@dejavumuseum.de The responsible entity is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Data Retention Period

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons to retain your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will occur after these reasons no longer apply.

General Notes on the Legal Bases for Data Processing on this Website

If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed under Art. 9(1) GDPR. In the case of explicit consent for the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on § 25(1) TTDSG. Consent can be revoked at any time. If your data is necessary for the fulfillment of a contract or for pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if required to fulfill a legal obligation under Art. 6(1)(c) GDPR. Data processing can also be based on our legitimate interests according to Art. 6(1)(f) GDPR. The specific legal basis applicable in each case is described in the following sections of this privacy policy.

Data Transfer to the USA and Other Third Countries

We use tools from companies based in the USA or other countries without an adequate level of data protection. When these tools are active, your personal data may be transferred to and processed in these third countries. Please note that these countries may not guarantee a level of data protection comparable to the EU. For example, US companies are required to provide personal data to security authorities without the possibility for you, as the data subject, to legally challenge this. It cannot be ruled out that US authorities (e.g., intelligence services) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Revocation of Your Consent to Data Processing

Many processing activities are only possible with your explicit consent. You can revoke any previously given consent at any time. The legality of the data processing carried out before the revocation remains unaffected.

Right to Object in Certain Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The specific legal basis for each processing activity is provided in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims (objection under Art. 21(1) GDPR). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling to the extent it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of their habitual residence, workplace, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or to fulfill a contract, either to yourself or to a third party, in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be carried out to the extent technically feasible.

Access, Rectification, and Deletion

Under applicable laws, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of data processing. You also have the right to request the correction or deletion of this data. For this purpose, or for any other questions regarding personal data, you may contact us at any time.

Right to Restrict Processing

You have the right to request the restriction of processing of your personal data. You can exercise this right at any time. The right to restrict processing applies in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request a restriction of the processing of your personal data.
  
  
• If the processing of your personal data is unlawful, you may request restriction instead of deletion.
  
  
• If we no longer need your personal data, but you need it to assert, exercise, or defend legal claims, you have the right to request restriction instead of deletion.
• If you have lodged an objection under Art. 21(1) GDPR, a balancing of interests must be carried out between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request restriction of the processing of your personal data.
  
  

If you have restricted the processing of your personal data, such data may only be processed – apart from storage – with your consent, for asserting, exercising, or defending legal claims, to protect the rights of another natural or legal person, or for important public interest reasons of the European Union or a member state.

SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. A secure connection is indicated by the browser changing from “http://” to “https://” and by the lock symbol in your browser’s address bar. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

4. Data Collection on this Website – Cookies

Cookies

Our websites use so-called “cookies.” Cookies are small data packages and do not harm your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain on your device until you delete them yourself or they are automatically removed by your web browser. Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party providers within websites (e.g., cookies for processing payment services). Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., shopping cart functionality or video playback). Other cookies can be used to analyze user behavior or for advertising purposes. Cookies that are necessary for carrying out electronic communications, providing certain functions requested by you (e.g., shopping cart functionality), or optimizing the website (e.g., cookies for measuring web traffic) are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services technically error-free and optimized. If consent has been requested for the storage of cookies and similar recognition technologies, processing occurs exclusively on the basis of this consent (Art. 6(1)(a) GDPR and §25(1) TTDSG); consent can be withdrawn at any time. You can configure your browser to be informed about the setting of cookies and to allow cookies only on a case-by-case basis, to block cookies for specific cases or entirely, or to enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website. Which cookies and services are used on this website can be found in this privacy policy.

Consent with Usercentrics

This website uses the consent technology from Usercentrics to obtain your consent for storing certain cookies on your device or using specific technologies and to document this in compliance with data protection laws. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Website: https://usercentrics.com/de/ When you visit our website, the following personal data is transmitted to Usercentrics:

• Your consent(s) or the withdrawal of your consent(s)
• Your IP address
• Information about your browser
• Information about your device
• Time of your visit to the website

Usercentrics also stores a cookie in your browser to link the given consents or their withdrawal. The data collected in this way is stored until you request deletion, delete the Usercentrics cookie yourself, or the purpose for data storage ceases to exist. Mandatory legal retention obligations remain unaffected. The use of Usercentrics is intended to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6(1)(c) GDPR.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the above service. This is a legally required agreement that ensures that the personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.

Contact For

If you send us inquiries via the contact form, the information you provide in the form, including your contact details, will be stored with us for the purpose of processing your inquiry and in case of follow-up questions. This data will not be shared without your consent. The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or required for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested; consent can be revoked at any time. The data you enter in the contact form remains with us until you request its deletion, withdraw your consent for storage, or the purpose for data storage ceases to exist (e.g., after your inquiry has been fully processed). Mandatory legal provisions—particularly retention periods—remain unaffected.

Inquiry via Email, Phone, or Fax

If you contact us via email, phone, or fax, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed for the purpose of handling your request. These data will not be shared without your consent. The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or required for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested; consent can be revoked at any time.
The data you send to us via contact inquiries will remain with us until you request its deletion, withdraw your consent for storage, or the purpose for data storage ceases to exist (e.g., after your request has been fully processed). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.

5. Analytics Tools and Advertising

Google Tag Manager

We use the Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies on our website. The Tag Manager itself does not create user profiles, store cookies, or perform any independent analyses. It is solely used to manage and deploy the tools integrated through it. However, the Google Tag Manager may collect your IP address, which can also be transmitted to Google’s parent company in the United States. The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in quickly and efficiently integrating and managing various tools on the website. If consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TTDSG, to the extent the consent covers cookie storage or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

Google Analytics

This website uses functions of the web analytics service Google Analytics. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior of website visitors. The operator receives various usage data, such as page views, time spent on pages, operating systems used, and user origin. These data are assigned to the user’s device, but no assignment to a User-ID occurs. Additionally, Google Analytics may record mouse movements, scroll behavior, and clicks. Google Analytics also uses modeling approaches to supplement the collected data sets and applies machine learning technologies for data analysis.
Google Analytics uses technologies that allow user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about your use of this website is generally transmitted to a Google server in the USA and stored there. The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de. More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Google Ads

The website operator uses Google Ads, an online advertising program by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display advertisements on the Google search engine or on third-party websites when a user enters specific search terms on Google (keyword targeting). Additionally, targeted advertisements can be served based on user data available to Google, such as location information and interests (audience targeting).
As the website operator, we can analyze this data quantitatively—for example, by examining which search terms triggered the display of our ads and how many clicks each ad received. The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time. Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier: https://policies.google.com/privacy/frameworks und https://privacy.google.com/businesses/controllerterms/mccs/.

Google AdSense (Non-Personalized)

This website uses Google AdSense, a service for displaying advertisements. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use Google AdSense in the “non-personalized” mode. Unlike the personalized mode, ads are not based on your past user behavior, and no user profile is created. Instead, “contextual information” is used to select the ads. The chosen advertisements may be based on your location, the content of the website you are visiting, or your current search terms. More information on the differences between personalized and non-personalized targeting with Google AdSense can be found here: https://support.google.com/adsense/answer/9007336. Please note that even when using Google AdSense in non-personalized mode, cookies or similar tracking technologies (e.g., device fingerprinting) may still be used. According to Google, these are used to prevent fraud and abuse. The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/. You can adjust your ad preferences directly in your Google account. To do so, click the following link and log in: https://adssettings.google.com/authenticated. For more information about Google’s advertising technologies, visit: https://policies.google.com/technologies/ads and https://www.google.de/intl/de/policies/privacy/.

Google Ads Remarketing

This website uses Google Ads Remarketing, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads Remarketing allows us to categorize users who interact with our online offerings into specific audiences, so that interest-based ads can be displayed to them across the Google advertising network (remarketing or retargeting). Additionally, remarketing audiences created with Google Ads can be linked across devices. This allows personalized, interest-based ads—tailored to your previous usage and browsing behavior on one device (e.g., smartphone)—to be shown on another device of yours (e.g., tablet or PC). If you have a Google account, you can opt out of personalized advertising via this link: https://www.google.com/settings/ads/onweb/. The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time. Further Information and Privacy Policy More information and Google’s privacy policy can be found here: https://policies.google.com/technologies/ads?hl=de.

Audience Building with Customer Match

For audience building, we also use Google Ads Remarketing’s Customer Match. In this process, we provide certain customer data (e.g., email addresses) from our customer lists to Google. If the customers are Google users and logged into their Google accounts, they may see relevant ads within the Google network (e.g., on YouTube, Gmail, or in search results).

Meta Pixel (formerly Facebook Pixel)

This website uses visitor action pixels from Facebook/Meta for conversion measurement. The service provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected may also be transferred to the USA and other third countries. These pixels allow tracking of visitor behavior after they click on a Facebook ad and are redirected to this website. This enables evaluation of the effectiveness of Facebook ads for statistical and market research purposes and helps optimize future advertising campaigns. The data collected is anonymized for us as the website operator, meaning we cannot identify individual users. However, Facebook stores and processes this data, so a connection to the user’s profile is possible. Facebook may also use the data for its own advertising purposes according to the Facebook Data Policy (https://de-de.facebook.com/about/privacy/). This allows Facebook to display ads both on and off its platform. The website operator cannot influence this use of data. The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time. We use the Advanced Matching feature within the Meta Pixel. The advanced matching feature allows us to send various types of customer and prospect data collected through our website (e.g., city, state, postal code, hashed email addresses, names, gender, date of birth, or phone number) to Meta (Facebook). By activating this feature, we can tailor our advertising campaigns on Facebook more precisely to people interested in our offers. Additionally, advanced matching improves the attribution of website conversions and expands Custom Audiences. Where personal data is collected on our website and transmitted to Facebook using this tool, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited solely to the collection and transmission of the data to Facebook. The subsequent processing by Facebook is not part of this joint responsibility. Our joint obligations are outlined in a joint processing agreement, available here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Facebook tool and for implementing it in compliance with data protection laws. Facebook is responsible for the security of Facebook products. Data subject rights (e.g., requests for information) regarding data processed by Facebook can be exercised directly with Facebook. If you exercise your rights with us, we are required to forward your request to Facebook. Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. Further information on Facebook’s privacy practices can be found here: https://de-de.facebook.com/about/privacy/. You can also disable the remarketing feature “Custom Audiences” in your Facebook ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do this. If you do not have a Facebook account, you can disable behavior-based advertising from Facebook via the European Interactive Digital Advertising Alliance here: http://www.youronlinechoices.com/de/praferenzmanagement/.

6. Newsletter

Newsletter Data

If you wish to subscribe to the newsletter offered on our website, we require your email address and information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No additional data is collected, except voluntarily. This data is used exclusively to send the requested information and is not shared with third parties. The processing of data entered in the newsletter registration form is based solely on your consent (Art. 6(1)(a) GDPR). You may revoke your consent for storing your data, including your email address, and for receiving the newsletter at any time, for example via the “Unsubscribe” link in the newsletter. The legality of any data processing that occurred before the withdrawal remains unaffected.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter or by the newsletter service provider and will be deleted from the newsletter distribution list after unsubscribing or once the purpose ceases to exist. We reserve the right to delete or block email addresses from our newsletter list at our discretion within the framework of our legitimate interest under Art. 6(1)(f) GDPR. Data stored for other purposes remains unaffected. After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider on a blacklist if this is necessary to prevent future mailings. The data in the blacklist will be used solely for this purpose and will not be combined with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

7. Plugins und Tools

YouTube

This website embeds videos from YouTube. The operator of YouTube is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our web pages containing YouTube, a connection to YouTube’s servers is established. In this process, the YouTube server is informed which of our pages you have visited. Furthermore, YouTube may store various cookies on your device or use comparable technologies for user recognition (e.g., device fingerprinting). This allows YouTube to obtain information about visitors to this website. These data are used, among other things, to collect video statistics, improve user experience, and prevent fraud. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If consent has been requested, processing occurs solely on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Further information on handling user data can be found in YouTube’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Fonts (local hosting)

This site uses Google Fonts to ensure a consistent display of fonts. The Google Fonts are installed locally. No connection to Google servers is established. Further information on Google Fonts is available at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The website operator has no influence over this data transfer. When Google Maps is activated, Google may use Google Fonts for a uniform display of fonts. When accessing Google Maps, your browser loads the required web fonts into its cache to display texts and fonts correctly. The use of Google Maps is in the interest of an appealing presentation of our online offerings and easy accessibility of the locations provided on the website. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If consent has been requested, processing occurs solely on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ More information about handling user data can be found in Google’s Privacy Policy:
https://policies.google.com/privacy?hl=de

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to verify whether data input on this website (e.g., in a contact form) is performed by a human or an automated program. For this purpose, reCAPTCHA analyzes the behavior of website visitors using various characteristics. The analysis starts automatically as soon as a visitor enters the website. Information such as IP address, time spent on the website, and mouse movements may be evaluated. The data collected during this analysis is transmitted to Google. The reCAPTCHA analysis runs entirely in the background, and website visitors are not notified that an analysis is taking place. The storage and analysis of data are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting their website from abusive automated scraping and spam. If consent has been requested, processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, as far as consent includes the storage of cookies or access to information on the user’s device. Consent can be revoked at any time. More information about Google reCAPTCHA can be found here:
Privacy Policy: https://policies.google.com/privacy?hl=de
Terms of Service: https://policies.google.com/terms?hl=de

8. eCommerce and Payment Providers

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data to establish, structure, and modify our contractual relationships. Personal data regarding the use of this website (usage data) are only collected, processed, and used as far as necessary to enable or bill the user for the use of the service. The legal basis for this is Art. 6(1)(b) GDPR. Collected customer data will be deleted after the order is completed or the business relationship ends, and after any statutory retention periods have expired. Legal retention periods remain unaffected.

Data Transmission Upon Contract Conclusion for Online Shops, Retailers, and Shipping

When you order goods from us, we transmit your personal data to the shipping company responsible for delivery and the payment service provider responsible for processing payments. Only data required to perform these tasks are shared. The legal basis is Art. 6(1)(b) GDPR, which allows data processing for contract fulfillment or pre-contractual measures. If you have given consent under Art. 6(1)(a) GDPR, we transmit your email address to the delivery service so they can notify you about the shipping status. Consent can be revoked at any time.

Payment Services

Wir binden Zahlungsdienste von Drittunternehmen auf unserer Website ein. Wenn Sie einen Kauf bei uns tätigen, werden Ihre Zahlungsdaten (z. B. Name, Zahlungssumme, Kontoverbindung, Kreditkartennummer) vom Zahlungsdienstleister zum Zwecke der Zahlungsabwicklung verarbeitet. Für diese Transaktionen gelten die jeweiligen Vertrags- und Datenschutzbestimmungen der jeweiligen Anbieter. Der Einsatz der Zahlungsdienstleister erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO (Vertragsabwicklung) sowie im Interesse eines möglichst reibungslosen, komfortablen und sicheren Zahlungsvorgangs (Art. 6 Abs. 1 lit. f DSGVO). Soweit für bestimmte Handlungen Ihre Einwilligung abgefragt wird, ist Art. 6 Abs. 1 lit. a DSGVO Rechtsgrundlage der Datenverarbeitung; Einwilligungen sind jederzeit für die Zukunft widerrufbar. The following payment services/providers are used on this website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full Further details are available in PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe

For customers within the EU, the provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”). Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here:
https://stripe.com/de/privacy
https://stripe.com/de/guides/general-data-protection-regulation Further details can be found in Stripe’s Privacy Policy here:
https://stripe.com/de/privacy