Home
Data Privacy

Privacy Policy

Data Protection Declaration

Unless otherwise specified below, providing your personal data is neither legally nor contractually obligatory, nor required to conclude a contract. You are not obligated to provide your data. Not providing it will have no consequences, unless processing procedures described below state otherwise. “Personal data” is any information relating to an identified or identifiable natural person.

Server Log Files

You can use our website without submitting personal data. Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data can include: name of the site called up, date and time of the request, IP address, amount of data transferred, and the provider making the request. The processing is carried out on the basis of Art. 6(1)(f) of the GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.

Contact

Responsible Person

The person responsible for data processing is:

Sunday Natural Products GmbH
Potsdamer Straße 83
10785 Berlin
Germany
Email: service@sunday.de
Telefax: +49 (0)30 2574 2918

Our data protection manager is:

HB E-Commerce Rechtsanwaltsgesellschaft mbH
Kohlgartenstraße 11-13
04315 Leipzig
Email: datenschutz@sunday.de

Proactive Contact of the Customer by Email

If you contact us via email, we will only collect your personal data (name, email address, message content) to the extent provided by you. The purpose of processing this data is to manage and respond to your contact request.

If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, data processing takes place on the basis of Art. 6(1)(b) of the GDPR.

If the initial contact occurs for any other reason, data processing takes place on the basis of Art. 6(1)(f) of the GDPR. This is done for the purpose of our overriding, legitimate interest in handling and responding to your request. In such a case, on grounds relating to your particular situation, you have the right to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) of the GDPR.

We will only use your email address for processing your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When you use the contact form, we will only collect your personal data (name, email address, message content) to the extent provided by you. The purpose of processing this data is to make contact.

If the initial contact occurs for any other reason, data processing takes place on the basis of Art. 6(1)(f) of the GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In such a case, on grounds relating to your particular situation, you have the right to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) of the GDPR.

We will only use your email address for processing your request. Your data will subsequently be deleted, unless you have consented to further processing and use.

Customer Account Orders

Customer Account

When you create a customer account, we collect your personal data within the scope specified. Processing this data is for the purpose of improving your shopping experience and simplifying order processing and will be carried out in accordance with Art. 6(1)(a) of the GDPR, with your consent. You can withdraw your consent at any time without affecting the legality of the processing that occurred with your consent prior to the withdrawal. If you withdraw your consent, your customer account will be deleted.

Collection, Processing, and Transfer of Personal Data in Orders

When you submit an order, we only collect and use your personal data insofar as this is necessary to fulfill and handle the order as well as address any queries. Providing personal data is necessary to conclude a contract. Data processing occurs on the basis of Art. 6(1)(b) of the GDPR. Failure to provide the necessary personal data will prevent the conclusion of any contract.

Your data is then transferred to the e.g. shipping carriers and drop shipping providers, payment service providers, service providers for handling the order, and IT service providers that you have selected. We comply strictly with legal requirements in all cases. The scope of data transmission is kept to a minimum.

Transmission to Yoshi en GmbH

If you sign up for a customer account with our cooperation partner Yoshi en GmbH (yoshien.com), you have the option to use your customer account information from Sunday (such as your email address, name, address book, and newsletter preferences) for registration and/or ordering purposes on yoshien.com. To make the registration and ordering process smoother on yoshien.com, we might send a hashed version of your email address to Yoshi en GmbH. This hashed value is solely used for the purpose mentioned above. Your personal data will not be shared without your consent. We process this information based on Art. 6(1)(f) of the DSGVO, as it aligns with our legitimate interest in facilitating an easier registration and ordering experience on the yoshien.com website.

Advertising

Use of eKomi

For the purpose of gathering customer evaluations of our products and of Sunday Natural as a provider, as well as for our own quality management purposes, we utilise the services of eKomi Ltd. (Zimmerstraße 11, 10969 Berlin, "eKomi").

We send feedback requests via email. If you give your express consent, you will subsequently receive an email from eKomi with the evaluation request. For this purpose, personal data, including your name, email address, and order details, will be shared with eKomi in accordance with a contractual agreement for order processing.

We process your data with your consent based on Art. 6(1)(a) of the DSGVO. You can withdraw your consent at any time by clicking the unsubscribe link provided in eKomi’s email or by contacting us. Your email address will then be removed from the distribution list. Withdrawing your consent does not affect the legality of the processing conducted with your consent prior to its withdrawal.

Further information on data protection at eKomi can be found at https://www.ekomi.co.uk/uk/privacy/.

Use of Bloomreach/Expose

We use the service of Bloomreach Inc. (BloomReach, Inc. 82 Pioneer Way, Mountain View, CA 94041, “Bloomreach”) for newsletter dispatch as part of an order processing.We pass on the information you provide during the newsletter registration (e-mail address, first and last name, if applicable) to Bloomreach. The data processing serves the purpose of sending the newsletter and its statistical evaluation.

In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked any integrated links. Within this context, we collect your personal data such as IP address, browser type and device as well as the time. A usage profile can be generated from this data under a pseudonym. The data collected will not be used to identify you personally. The collected data is only used for statistical analysis to improve newsletter campaigns.

The information generated by this about your use of this website is usually transferred to a Bloomreach server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Bloomreach has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a targeted, effective advertising and user-friendly newsletter system. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.

You can find more information and Bloomreach's privacy policy at: Bloomreach, Bloomreach Services Privacy Notice | Bloomreach and Bloomreach CCPA Privacy Policy Addendum | Bloomreach.

Use of MentionMe

We use MentionMe to manage referrals on our website. Users can recommend our services to their friends. The provider is Mention Me Limited, 20-22 Wenlock Road, London, N1 7GU, United Kingdom. The provider processes content data (e.g. entries in online forms), contact data (e.g. email addresses, telephone numbers), meta/communication data (e.g. device information, IP addresses) and master data (e.g. names, addresses) in the United Kingdom.

The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.

The data will be deleted when the purpose of its collection has ceased to apply and there is no obligation to retain it. Further information is available in the provider's privacy policy.

Use of Your Personal Data for Sending Advertising Mail

We use the personal data (name, address) that we receive in the process of the sale of goods or services to send you advertising mail, unless you have objected to this use. Providing personal data is necessary to conclude a contract, and failure to provide the necessary personal data will prevent the conclusion of any contract.

We process your data on the basis of Art. 6(1)(f) of the GDPR for the purpose of our legitimate interest in direct advertising. You can object to this use of your address information at any time by contacting us. You will find the necessary contact details in our imprint.

Use of Your Email Address for Sending Newsletters

Outside of contractual processing, we only use your email address if you have given us your explicit consent to send you a newsletter for our own marketing purposes. Your data will then be processed according to Article 6(1)(a) of the GDPR. You can withdraw your consent at any time without affecting the legality of the processing that occurred with your consent prior to the withdrawal. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by contacting us. This does not incur any costs other than transmission costs in accordance with the basic rates. We will then remove your email address from our mailing list.

Your data will be forwarded to a service provider for email marketing in the course of order processing. It will not be shared with any other third parties.

Use of Your Email Address for Sending Newsletters

Your data will be forwarded to a service provider for email marketing in the course of order processing. It will not be shared with any other third parties.

Use of Your Email Address for Direct Marketing

We may use your email address, which we obtained in the course of selling a good or service, for the purpose of electronically marketing our goods or services to you which are similar to those you have already purchased from us, unless you have objected to this use. This direct advertising is allowed under the conditions of section 7(3) of the UWG. Providing your email address is necessary to conclude a contract. Failure to provide it will prevent the conclusion of any contract. Processing will be carried out on the basis of Art. 6(1)(f) of the GDPR for the purpose of our legitimate interest in direct marketing. You can object to this use of your email address at any time by contacting us. You will find the necessary contact details in our imprint. You can also use the link provided in the marketing email. This does not incur any costs other than transmission costs in accordance with the basic rates.

Shipping Carriers

Forwarding of Your Email Address to Shipping Carriers

Provided you have given us your explicit consent in the order process, we forward your email address to the shipping carrier in the course of contractual processing. This is done to keep you informed via email about the shipping status of your order. The data is processed according to Art. 6(1)(a) of the GDPR. You can withdraw your consent at any time by contacting us or the shipping carrier without affecting the legality of the processing that occurred with your consent prior to the withdrawal.

Payment Service Providers

Use of personal data when selecting PayPal

All PayPal transactions are subject to the PayPal data protection declaration. You can find this at https://www.paypal.com/myaccount/privacy/privacyhub

Use of PayPal Express

Our website uses the PayPal Express payment service by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal").

To integrate this payment service, PayPal collects, stores, and analyses data from your device when you access the website (e.g. IP address, device type, operating system, browser type, device location). Cookies may be used for this purpose, which allow your internet browser to be recognised.

The processing of your personal data is carried out in accordance with Art. 6(1)(f) of the GDPR for the purpose of our overriding, legitimate interest in offering our customers a variety of different payment methods. On grounds relating to your particular situation, you have the right to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) of the GDPR.

The data needed to process your payment will be submitted to PayPal upon selecting and using the PayPal Express payment method, in order to fulfill the agreement with you using the chosen payment method. The data is processed according to Art. 6(1)(b) of the GDPR.

Further information on data processing when using the Paypal Express payment service can be found here in the associated privacy policy.

Payment Options from Klarna

In order to provide Klarna's payment services to you, we provide Klarna with personal data such as your contact details and order information. This allows Klarna to determine whether you can make use of their payment options as well as to tailor them to your needs. General information about Klarna can be found here. Klarna will process your personal data in accordance with the applicable data protection regulations and in accordance with the information in Klarna's Privacy Policy.

Use of personal data when selecting Unzer

In order to offer you Unzer's payment options, we will transfer personal data, such as contact and order data and dates of birth, to Unzer. This enables Unzer to assess whether you can use the payment options offered by Unzer and to adapt the payment options to your needs. General information about Unzer can be found at: https://www.unzer.com/en Your personal data will be treated by Unzer in accordance with the applicable data protection regulations and in accordance with the information in Unzer's data protection regulations at https://www.unzer.com/en/data-protection/.

Cookies

Our website uses cookies, which are small text files saved by a user's internet browser either in the browser itself or in the user’s computer system. When a user visits a website, the browser may save a cookie containing a unique character string that allows the browser to be identified when the website is visited again.

Since cookies are stored on your computer, you have full control over their use. You can set your internet browser to notify you before a cookie is set, allowing you to choose whether to accept or reject it. You can also delete existing cookies at any time. Note, however, that rejecting or deleting cookies may prevent you from using all the features of this website.
Learn how to manage cookies in popular browsers using the links below:

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Some cookies enable our systems to recognize your browser after page changes, which allows us to offer enhanced services. We use these and other technically necessary cookies to make our website more user-friendly, effective, and secure. Certain functions of our website cannot be provided without the use of cookies, as they require your browser to be recognized after a page change.

The use of cookies or similar technologies is carried out on the basis of Art. 25(2) of the TDDDG. Your personal data is processed according to Art. 6(1)(f) of the GDPR for the purpose of our largely justified interest in ensuring the optimal functionality of our website as well as a user-friendly and effective design for our range of services. On grounds relating to your particular situation, you have the right to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) of the GDPR.

Use of Consentmanager

Our website uses Consentmanager, a consent management tool by Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager").

This tool enables you to grant consents for data processing via the website, in particular the use of cookies, and to exercise your right of revocation for consents already given.

In this case, the processing of data serves the purpose of obtaining the necessary consents for data processing and to document these, thereby complying with statutory obligations.
Cookies may be used for this purpose. Information collected and transmitted to Consentmanager in the course of this process may include: date and time of page retrieval, information about the browser and device in use, anonymised IP address, and opt-in/opt-out data. This data will not be shared with any other third parties.

The data processing is carried out on the basis of Art. 6(1)(c) of the GDPR in compliance with legal requirements.

More information on data protection at Consentmanager is available at: https://www.consentmanager.net/privacy.php.

Analysis Advertising Tracking Communication

Use of Google Analytics 4

We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google may have about you.

The IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TDDDG in conjunction with. Art. 6 para. 1 lit. a DSGVO.

The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

Both Google and US government agencies have access to your data.

For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.

Use of Google Ads conversion tracking

Our website uses the online marketing program "Google Ads", including conversion tracking (evaluation of user actions). Google conversion tracking is a service operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").

If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a different cookie. It is therefore not possible to track cookies relating to the websites of Ads customers.

The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. We use the extended implementation of the consent mode (Advanced Consent Mode). In this case, user data is transmitted to Google in the form of "pings" even if consent has not been granted. These pings may contain the following information, among others: IP address to derive the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website from which you accessed our website) or information about the triggering of website events such as a conversion. On the basis of this information, Google models user data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent.

Your data may be transmitted to Google LLC servers in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.You will find more information as well as Google’s data privacy policy at: https://www.google.com/policies/privacy/

Klar Attribution

We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar, collects, processes and stores data on this website and its subpages for reach measurement, statistical analysis. This collection takes place on the following legal basis:

If there is no consent from the user, the data is collected anonymously, i.e. without collecting personal or personally identifiable data, and in groups, i.e. by randomly assigning the collected data to groups of users. It is therefore not possible to draw conclusions about individual users. This anonymous collection is mandatory according to § 25 para. 2 no. 2 TDDDG in order to optimize business costs and thus ensure the desired service.

If the user has given his consent in accordance with Article 6 (1) sentence 1 a GDPR and Section 25 (1) sentence 1 TDDDG, the data to be processed will be collected on a user-specific basis.

For the aforementioned different types of collection, different cookies are used to ensure the respective type of collection.

Objection

To object to the use of Klar in principle, please use this Link. This will set a cookie with the name "do_not_track" from the domain "https://sunday.de ". Please do not delete it, otherwise we cannot guarantee that you will not be tracked by Klar. Information on data protection and data use can be found on the following website of Klar: https://www.getklar.com/data-protection.

Use of Hotjar

On our website we use the analysis tool provided by Hotjar Ldt. (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; "Hotjar").

The data processing serves the purpose of designing, optimising and analysing our website according to your needs.

The tool is used to randomly record the movements of visitors to the website. This creates a protocol of mouse movements, scrolling behaviour, dwell time and clicks on the website (what is known as the heat map).

For this purpose Hotjar uses, among other things, cookies. These can involve the collection of, among other things, the following information: IP address (in anonymous form), information about the device you are using (screen size, devices, unique device identifier), information about the browser you are using, location data (country only), preferred language for displaying the website, operating system used. Detailed information on the cookies used and the function and the storage period of these can be found here:

https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies

This data is used to create user profiles under a pseudonym. The data is not used to personally identify the visitor of the website and is not merged with personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties.

Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not certified under the TAPF. The data transfer takes place on the basis of appropriate protective measures, among other things. Hotjar will provide you with further information on the measures taken upon request.

For more information about data protection when using Hotjar, please visit: https://www.hotjar.com/legal/policies/privacy/#enduserenglish

Use of Meta Pixel

We use Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are jointly responsible for the collection of your data and the transfer of this data to Meta when the service is integrated. The basis for this is an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for the fulfilment of the information obligations in accordance with Arts 13 and 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations in accordance with Arts 33 and 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Meta is responsible for enabling the rights of the data subject in accordance with Arts 15-20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations of Arts 33 and 34 GDPR, insofar as a breach of personal data protection concerns Meta's obligations under the joint processing agreement.

The application serves to address the visitor to the website with interest-related advertising on the social networks Facebook and Instagram. We have implemented Meta’s remarketing tag on our website for this purpose. This tag sets up a direct connection to Meta’s servers when you visit our website. This informs the Meta server which of our web pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalised, interest-related ads.

The application also serves the purpose of creating conversion statistics. This allows us to find out the total number of users who have clicked our adverts and were forwarded to a page equipped with a conversion tracking tag as well as what actions are taken after being redirected to this website. However, they do not receive any information which could be used to personally identify users.

Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.

For this purpose, you can deactivate the remarketing function “Custom Audiences”. You can find more detailed information on Meta’s collection and use of data and your associated rights and options for protecting your privacy in Meta’s privacy policy:

https://www.facebook.com/about/privacy/.

Use of the remarketing or "similar target groups" function by Google Inc.

Our website uses the remarketing or "similar target groups" function by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").

This application serves to analyse visitor behaviour and visitor interests.

Google uses cookies to analyse website use, forming the basis for producing interest-related adverts. Cookies allow for the recording of website visits as well as anonymised data on the use of the website. The personal data of website visitors is not saved. If you then visit another website in the Google display network you will then be shown adverts which are more likely to take previous areas of product and information interest into account.

Your data may be transmitted to Google LLC servers in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

You can find more detailed information on Google remarketing as well as the associated data privacy policy at: https://www.google.com/privacy/ads/

Use of the "Zendesk Chat" Live Chat System

Our website uses Zendesk Inc.’s live chat system (1019 Market Street, 6th Floor, San Francisco, California 94103, USA; "Zendesk").

The system serves to facilitate communication between you and us in our role as provider. A usage profile can be generated from this data under a pseudonym. Cookies are used for this purpose. Cookies facilitate recognition of your internet browser.

Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Zendesk has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

You can find more detailed information on Zendesk’s collection and use of data and your associated rights and options for protecting your privacy in Zendesk’s privacy policy at: https://www.zendesk.com/company/customers-partners/privacy-policy/.

Use of the Tradedoubler Affiliate Programme

Our website uses the Tradedoubler affiliate programme by Tradedoubler GmbH (Mainzer Str. 13, 80804 Munich; "Tradedoubler").

When you click on our affiliate advertisements, Tradedoubler places a conversion tracking cookie on your computer. The cookie tracks the ads’ success by recognising resulting orders and attributing them to the appropriate advertiser. This also ensures correct billing within the affiliate programme.

Tradedoubler also uses fingerprinting, which enables recognition of your device and can track that you viewed or clicked a partner link. The information recorded by Tradedoubler includes order details (such as value, contents, sales channel, and voucher use) and user ID. User IDs are numeric sequences that anonymise user identities while tracking user actions and the end device.

Your data may be transferred to third countries such as the United States. The European Commission has not issued an adequacy decision regarding data transfers to the U.S. As such, data is transferred under standard contractual clauses that safeguard personal data. For more information, see: : https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

We only use cookies or similar technologies with your consent, as required by Section 25(1) sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. Your personal data is also only processed with your consent, as per Article 6(1)(a) of the GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

Detailed information about the use of data in Tradedoubler’s privacy policy is available at: https://www.tradedoubler.com/de/privacy-policy/ and https://www.tradedoubler.com/de/gdpr-compliance/.

Plugins

Use of the Google Tag Manager

Our website uses Google Tag Manager by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").

This application manages JavaScript and HTML tags, which are used to implement tracking and analysis tools. Data processing is performed here to optimise the functionality of our website and its design.

Google Tag Manager does not store cookies or process personal data. However, it does enable the triggering of further tags that may collect and process personal data. For more detailed information on its terms and conditions of use and data protection, see: https://www.google.com/intl/de/tagmanager/use-policy.html.

Use of Social Plugins

Our website uses social network plug-ins. The integration of social plug-ins and the data processing associated with this serves the purpose of optimising the advertising for our products.

The integration of social plug-ins involves a connection between your computer and the servers of the service provider of the social network which then instructs your web browser to display the plug-in on that web page, provided you have expressly consented to this. In this process, both your IP address as well as the information on which web pages you have visited will be transmitted to the provider’s servers. This happens regardless of whether you are registered with or logged into the social network. The information is transferred even if users are not registered or logged in. Should you be connected simultaneously with one or more of your social network accounts, the collected information may also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the appropriate button), this information will also be assigned to your user account. You can therefore prevent this assignment by logging yourself out before visiting our website and before activating the button for your social media accounts.

The following social networks are integrated in our website through social plug-ins. You can find more detailed information on the scope and purpose of collection and use of the data and your associated rights and options for protecting your privacy in the provider’s privacy policy via the link.

Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transfer of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible in particular for the fulfilment of the information obligations in accordance with Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations in accordance with Art. 33, 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Meta Platforms Ireland is responsible for enabling the rights of the data subject in accordance with articles 15-20 of the GDPR, for complying with the security requirements of article 32 of the GDPR with regard to the security of the service, and for complying with the obligations of articles 33, 34 of the GDPR, insofar as a breach of personal data protection concerns Meta Platforms Ireland's obligations under the joint processing agreement.

For more information about data protection, see: https://www.facebook.com/about/privacy/.

Instagram by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):https://help.instagram.com/155833707900388

Use of Facebook Connect

Our website uses the single sign-on function Facebook Connect from Meta Platforms Ireland Ltd. (Grand Canal Harbour, Dublin, D02, Ireland; "Facebook").

This function enables website visitors to log on to the website via their already existing Facebook account. The processing of data serves the purpose of verification during registration, personalisation and for interest-related advertising. To offer this function on the website a connection to the Facebook servers is established. Cookies are used for this purpose. In this process the following information, inter alia, can be collected and transmitted to Facebook: IP address, browser information, referrer URL (website via which you accessed our website), location data. This happens regardless of whether you are registered with or logged into the social network. The information is transferred even if users are not registered or logged in. Should you be connected simultaneously with one or more of your social network accounts, the collected information may also be assigned to your corresponding profiles. You can therefore prevent this assignment by logging yourself out before visiting our website and before activating the button for your social media accounts. Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

When using the single sign-on function the Facebook profile of the website visitor is connected with a customer account for this website. In this case we receive personal data of the user through Facebook, as stated in the login process. This can include the following information, inter alia: Name, address, public profile information (e,g, name profile picture, age, gender), email address, friends list, "Likes" information.

Use of Cloudfront

Our website uses the Cloudfront CDN content delivery network provided by Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855, Luxembourg; ""Cloudfront"").

This is a supra-regional network of servers in various data centers to which our web server connects and through which certain content on our website is delivered.
The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly.

The following information, among others, may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).

Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudfront has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

Processing is carried out on the basis of Article 6(1)(f) GDPR for the purposes of our legitimate interest in needs-based and targeted design of the website. On grounds relating to your particular situation, you have the right to object at any time to this processing of your personal data and carried out on the basis of Article 6(1)(f) GDPR.

For more information on data protection when using Cloudfront, please visit https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html and https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

Use of YouTube

Our website uses the function for embedding YouTube videos by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

This feature shows YouTube videos in an iFrame on the website. The option "advanced privacy mode" is enabled here. This prevents YouTube from storing information on visitors to the website. It is only if you watch a video that information is transmitted to and stored by YouTube. Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

Further information on the data collected and used by YouTube and Google and your associated rights and options for protecting your privacy can be found in YouTube’s privacy policy (https://www.youtube.com/t/privacy).

Use of Vimeo

Our website uses plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; "Vimeo") to integrate videos into the "Vimeo" portal.

If you access pages on our website that contain this kind of plug-in, this will generate a connection to the Vimeo server and indicate the plug-in on the site by means of a message in your browser. Information such as your IP address and which websites you have visited will be transmitted to the Vimeo server.

Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

Further information on the purpose and scope of enquiry and continued use and processing of the data by Vimeo and your associated rights and options for protecting your privacy can be found in the Vimeo data privacy policy: https://vimeo.com/privacy

Use of Google Fonts

Our website uses Google Optimize by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").

Data processing is used for A/B testing to track the effects of various changes made to a website, such as changes to input fields and design. Cookies are placed on your end device for these testing purposes. Only pseudonymous user data is processed, which may include your IP address and information about the browser you are using. This data may be transmitted to Google, but it is not linked to your Google account.

The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.

We only use cookies or similar technologies with your consent, as required by Section 25(1) sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. Your personal data is also only processed with your consent, as per Article 6(1)(a) of the GDPR. You can withdraw your consent at any time without affecting the legality of the processing that occurred with your consent prior to the withdrawal.

You can find more detailed information on the data processing and data protection at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

Use of CND

Our website uses the Motion Media Analytics tracking script by CND (CND Motion Media GmbH, Holzstr. 2, 80469 Munich, Germany) in order to measure the effects of our TV spots through the use of our websites.

The CND tracking script can generally work without cookies. However, with your consent and on our behalf, CND sets a session cookie to register all page requests as well as a cookie with the time of your first visit which is deleted after 28 days.

Within the scope of the survey, users are recorded as a statistical variable. This means that visitor events are recorded solely for statistical purposes. All IP addresses and hashed email addresses collected in the process are therefore anonymised, making it impossible to retrieve any data about individual households or persons. CND does not collect or permanently store any personal data.

We only use cookies or similar technologies with your consent, as required by Section 25(1) sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. Your personal data is also only processed with your consent, as per Article 6(1)(a) of the GDPR. You can withdraw your consent at any time without affecting the legality of the processing that occurred with your consent prior to the withdrawal.

If you would like to prevent CND from collecting data during your visit to our website, you can deactivate CND directly with the provider here: https://analytics.cnd-motionmedia.de/web/function/optout.

You can find more information on data processing and data protection at: https://www.cnd-motionmedia.de/media/pdf/datenschutz.pdf.

Use of Webflow

We use the Webflow service from Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103 USA to create our website. The data processing is used for the purpose of displaying the website, providing certain website functions and hosting our website. The following information, among other things, may be collected: various log files including IP address, contact details, website accesses and other data generated by a website. The information generated in this way is usually also processed and stored in the USA. The EU Commission has issued an adequacy decision for the US, the Trans-Atlantic Data Privacy Framework (TADPF). Webflow has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.

The use of Webflow is based on Art. 6 Sect. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.

For more information on terms of use and data protection, please visit https://webflow.com/legal/privacy.

Rights of Persons Affected and Storage Duration

Duration of Storage

Once contractual processing is complete, data will be stored initially for the duration of the warranty period, then in accordance with retention periods prescribed by law (primarily tax and commercial law). The data will then be deleted, unless you have consented to further processing and use.

Rights of the Affected Person

If the legal requirements are met, you have the following rights according to Art. 15–20 of the GDPR: the right to information, correction, deletion, restriction of processing, and data portability. You also have the right to object to processing on the basis of Art. 6(1) of the GDPR, and the right to object to processing for the purposes of direct marketing on the basis of Art. 21(1) of the GDPR.

Right to Lodge a Complaint

If you believe that your data is not being processed legally, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 of the GDPR.You can contact the supervisory authority responsible for us here:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
Tel.: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
Email: mailbox@datenschutz-berlin.de

Right to Object

If the data processing outlined here is based on our legitimate interests in accordance with Art. 6(1)(f) of the GDPR, you have the right to object at any time to the processing of your data with future effect, on grounds relating to your particular situation.

If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or rights and freedoms, or if the processing is necessary for the assertion, exercise, or defense of legal claims.

If we process your personal data for direct advertising purposes, you have the right to object at any time by notifying us. If the objection is successful, we will no longer process your personal data for the purposes of direct advertising.

Amendments to the data protection policy

We reserve the right to make changes at any time to ensure that our data protection information always complies with current legal requirements. This also applies in the event that the data protection information has to be adapted due to new or revised offers or services.

Last updated: 8 January 2025