Data protection

Privacy policy and information on any consents you may have given

As the controller within the meaning of the data protection regulations, we inform you below about the processing of your personal data by us.

I. The concept of personal data and other important terms

In simple terms, personal data is all information that relates to you personally as a data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the controller; contact details of the data protection officer

In simple terms, the controller is the person who alone or jointly with others decides on the purposes and means of processing personal data. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our legal notice.

III. Purposes of processing your personal data; legal bases for processing

We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases stated in each case.

In order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) GDPR.
Your personal data is processed on the basis of Article 6(1)(b) GDPR in order to take steps at your request prior to entering into a contract.
In order to safeguard our legitimate interest in responding to enquiries and taking other measures in response to your enquiry, your personal data is processed on the basis of Article 6(1)(f) GDPR.
For the fulfilment of a contract to which you are a party, your personal data is processed on the basis of Article 6(1)(b) GDPR.
For the implementation of measures for the purpose of advertising, your personal data will be processed either on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.
In order to fulfil legal obligations to which we are subject, your personal data is processed on the basis of Article 6(1)(c) GDPR.
In order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

Our systems are secured by state-of-the-art technical and organisational measures to protect your personal data from access, modification or dissemination by unauthorised persons and from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in this privacy policy.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

Insofar as this is necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information in this privacy policy. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

V. Scope of the processing of your personal data for the individual processing purposes

In the following, we will inform you in detail about the processing of your personal data for the various processing purposes.

1. Use of our website for information purposes

Our website is hosted by: maxcluster GmbH, Lise-Meitner-Str. 1b, D-33104 Paderborn

If you visit our website without transmitting information to us, we only process the personal data that your browser transmits to our server. This is the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

the page you have called up
Date and time of the enquiry
Amount of data transferred
Source or reference from where you reached the page
Browser used by you
the operating system you use
Your IP address

Your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website.

Your personal data will be deleted after 6 months, unless they are still required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion will take place immediately after the conclusion of the corresponding proceedings.

You are not obliged to provide your personal data. However, if you do not provide your personal data, you will not be able to view our website.

2. Processing of enquiries

If you contact us with an enquiry or request, we will process the personal data and information/documents you provide. Irrespective of the way in which you send us your enquiry or request, these may be

Date and time of contact
Name data
Contact details
Data on enquiry/request
Information/documents provided

The processing of your personal data and the information/documents transmitted is carried out - depending on the content of your enquiry or request - on the basis of Article 6(1)(b) GDPR for the implementation of pre-contractual measures or on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in responding to enquiries/requests and in carrying out other measures in connection with the processing of enquiries/requests.

Insofar as this is necessary for processing your enquiry/request, we will transfer your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted once your enquiry/request has been clarified, but at the earliest after expiry of the retention periods of 6 or 10 years under tax and commercial law, unless we are permitted to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to process your enquiry or request.

3. fulfilment of contracts

If you transmit personal data to us for the purpose of concluding a contract or in connection with a contract, we process the data you transmit for the purpose of processing the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract as well as payment and delivery information).

Your personal data is processed on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party.

Insofar as this is necessary for the fulfilment of the contract with you, we transfer your personal data to third parties within the framework of the legal requirements. This transfer takes place to the service providers involved in the fulfilment of the contract. These are the providers of the processing tools we use, the companies commissioned with transport and the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal for the processing of payment transactions, we expressly point out that the PayPal data protection declaration applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after the retention periods under tax and commercial law of 6 or 10 years have expired, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

The provision of your personal data is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you.

4. Shipping information

4.1 Address validation

We want to make sure that your shipping address is valid. We use the service provider endereco UG, Balthasar-Neumann-Straße 4b, 97236 Randersacker, Germany, to provide these functions. The service provider processes the data exclusively in accordance with our instructions. The legal basis for the transmission, processing and temporary storage of the data by the service provider is Art. 6 para. 1 lit. b GDPR, as it is absolutely necessary for the fulfilment of the contract or for the implementation of pre-contractual measures that some of the data you enter in the input mask is checked for correctness. The following data is processed by the service provider

Address (country, town, postcode, street, house number if applicable)

The data is processed separately by the service provider and is not merged. The enquiries are deleted by the service provider as soon as the status of the data entered has been determined and storage in the web shop has been completed, but at the latest after 30 days.

4.2 Transport service provider

We work with various shipping service providers such as DHL, DPD, GLS and UPS to ship our products. For larger consignments, we also use forwarding agents such as DB Schenker, Geis, Raaben and Dachser. To ensure smooth delivery by the carriers, we pass on the customer's telephone number if required. This serves to give advance notice of the delivery and, if necessary, to arrange delivery details.

5. Payment provider

5.1 Adyen

We work with the payment service provider Adyen N.V. (hereinafter referred to as "Adyen"), Simon Carmiggeltstraat 6-50, 1011 DJ, Amsterdam, Netherlands. Adyen is a full payment service provider that handles payment processing, among other things.

The data required for the respective payment method (e.g. credit card) are transmitted to Adyen, unless they are collected directly by the respective payment service (e.g. PayPal) itself.

The transfer serves to verify identity, process payments, check creditworthiness and prevent fraud. If this is necessary for the fulfilment of contractual obligations, Adyen also passes on the personal data to service providers or subcontractors. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b and f GDPR. Further information on the processing of your data by Adyen can be found at: https://www.adyen.com/de_DE/privacy-policy

5.2 PayPal

If you use PayPal for payment, we transmit the contract data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

PayPal reserves the right to obtain a credit report for certain payment methods (credit card, direct debit, "purchase on account via PayPal") for the purpose of deciding on the provision of the respective payment method. This may contain so-called score values (probability values). The score values, insofar as they are included in the credit report, are based on a scientifically recognised mathematical-statistical procedure. The calculation includes data such as the customer's address. You can find more information on data processing at PayPal in their privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

5.3 Klarna

We work together with Klarna Bank Ab (publ) Sveavägen 46, 11134 Stockholm Sweden, hereinafter referred to as "Klarna". When using the payment methods offered (e.g. purchase on account), we forward the contract information to Klarna. Further information on data processing by Klarna can be found in their privacy policy: https://www.klarna.com/de/datenschutz-und-sicherheit/

5.3 Additional information

We do not collect any payment data as part of the online ordering process. Your data such as name, e-mail address and other payment information will be forwarded to the relevant credit institution depending on the payment method. This is done on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR.

6. Newsletter

6.1 Advertising by newsletter

If you register for our newsletter, we will process the email address you provide - and, if you provide further personal data, this too - in order to send you information about our offers by email. In this respect, only the provision of your email address is mandatory. If you voluntarily provide further personal data, we may process this data in order to address you personally in the newsletter.

When you register for our newsletter, you give your consent with the following content: "I agree to be informed by e-mail about interesting offers and therefore consent to the processing of my e-mail address and the other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."

The registration for our newsletter takes place in the so-called double opt-in procedure. This means: After registering, you will first receive an e-mail with a message about the registration for the newsletter together with a request for confirmation of the registration. Your confirmation of the registration is necessary to document the required consent to the sending of the newsletter and to be able to recognise registrations to third-party e-mail addresses. In connection with the registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with the legal requirements if necessary.

Your personal data will be processed on the basis of the consent you have given in accordance with Article 6(1)(a) GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

In order to receive our newsletter, it is at least necessary to provide your email address. You are not obliged to provide your email address. However, if you do not provide your email address, you will not be able to subscribe to our newsletter.

6.2 Newsletter tracking

Our newsletter contains links that are equipped with tracking technologies. These enable us to analyse the behaviour of newsletter recipients, such as whether an email has been opened and which links in it have been clicked on. This allows us to measure the effectiveness of our newsletter content and campaigns and to analyse which of our websites have been visited or whether certain actions, such as a purchase, have taken place. We use the information obtained to optimise our offers and to better adapt our content to the interests of our users. This data is stored and analysed in our on-premise instance of Matomo. The data is not passed on to third parties.
If you do not agree to this type of data collection, you must unsubscribe from our newsletter.

7. Analysis & advertising tools

7.1 Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool with which we can integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and deliver the tools integrated via it. However, Google Tag Manager records your IP address (anonymised), which may also be transmitted to Google's parent company in the USA. We have concluded a data processing addendum with Google.

The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Further information can be found in the terms and conditions for the use of Google Tag Manager at: https://support.google.com/tagmanager/answer/7157428

7.2 Matomo

This website uses the open source web analysis service Matomo.

With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which pages were accessed and from which region. We also record various log files (e.g. IP address, referrer, browser and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

This analysis tool is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

7.2.1 IP anonymisation

We use IP anonymisation for the analysis with Matomo. This means that your IP address is shortened before it is analysed so that it can no longer be clearly assigned to you.

7.2.2 Hosting

We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

7.3 Google Ads

The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to place adverts in the Google search engine or on third-party websites when users enter certain search terms in Google. In addition, adverts can be targeted on the basis of user data available to Google (e.g. location data and interests). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the delivery of our advertisements and how many advertisements led to corresponding clicks.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDSG. Consent can be revoked at any time.

Data is transferred to the USA on the basis of the EU Commission's standard contractual clauses. Details can be found at https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780

7.3.1 Google Ads conversion tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, we and Google can recognise whether the user has carried out certain actions. For example, we can analyse which products are viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out how many users have clicked on our adverts in total and what actions they have subsequently taken. We do not receive any information that enables us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Further information on Google conversion tracking can be found in Google's privacy policy: https://policies.google.com/privacy

7.3.2 Google Ads Remarketing

This website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Remarketing enables us to assign people who interact with our online offering to specific target groups in order to subsequently show them interest-based advertising in Google's advertising network (remarketing or retargeting).

In addition, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalised advertising messages that have been tailored to you based on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have a Google account, you can object to personalised advertising at the following link: https://myadcenter.google.com/personalizationoff

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/technologies/ads

7.4 Microsoft Advertising

The operator of the website uses Microsoft Advertising. Microsoft Advertising is an online advertising programme of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising enables us to place adverts in the Bing search engine (and partner search engines in the Microsoft advertising network) or on third-party websites when the user enters certain search terms in Bing. In addition, adverts can be targeted based on the user data available to Microsoft (e.g. location or interests). As website operators, we can evaluate this data quantitatively, for example by analysing which search terms led to the delivery of our advertisements and how many advertisements led to corresponding clicks.

We use Universal Event Tracking (UET) from Microsoft Advertising on this website. Pseudonymised data is collected to track the actions you take on our websites after you have clicked on a Microsoft Advertising ad. UET collects your IP address (anonymised), device identifiers, information about device and browser settings, Microsoft Click ID, time spent on the website, which areas of the website were accessed, which advertisement brought you to the website and which keywords were clicked on.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDSG. Consent can be revoked at any time.

Data is transferred to the USA on the basis of the EU Commission's standard contractual clauses. You can find details here: https://learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses.

The company is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/

8. Further tools

8.1 Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service at the following links:

https://policies.google.com/privacy and https://policies.google.com/terms

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

9. Fulfilment of legal obligations to which we are subject

We process your personal data to fulfil legal obligations to which we are subject within the framework of the relevant requirements.

In order to fulfil legal obligations to which we are subject, your personal data is processed on the basis of Article 6(1)(c) GDPR.

Insofar as this is necessary to fulfil legal obligations to which we are subject, we will transfer your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted if it is no longer required for the fulfilment of legal obligations to which we are subject, unless we are permitted to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

10. Enforcement of our rights and defence against claims asserted against us

If necessary, we process your personal data to protect our legitimate interest in the enforcement of our rights and in the defence against claims made against us.

In this case, your personal data will be processed on the basis of Article 6(1)(f) GDPR.

If this is necessary to safeguard our legitimate interests, we will transfer your personal data to third parties in accordance with the statutory provisions. This transfer takes place to the providers of debt collection services involved or to our lawyers.

In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are authorised to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

11. Use of cookies and other technologies

We may use cookies on our website so that you can use the functions we offer, so that we can analyse the use of the functions we offer and, if necessary, so that we can present advertising that is as tailored as possible to your needs. Below we inform you about the cookies and other technologies we use.

Cookies are small files that are stored on your device and through which certain information is transmitted to us. Cookies are used to enable you to use certain functions and to make our website more user-friendly overall.

11.1 Technically required cookies and technologies:

In some cases, the use of cookies and technologies on our website is technically necessary in order to provide you with the functions of our service you have requested and to document the consent you have given. For this reason, you cannot deselect the use of the corresponding cookies and technologies (opt-out). You can prevent the storage of cookies by selecting the appropriate settings in your browser software. You can delete stored cookies via the corresponding settings. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

11.1.1 Consent tool

We use a so-called consent tool on our website, with which we inform you in accordance with our data protection obligations in this regard pursuant to Art. 5 para. 2 GDPR in conjunction with Art. 6 para. 1 letter c) GDPR. Art. 6 para. 1 letter c) GDPR about the cookies we use and with which we document whether and to what extent you have decided in favour of processing your data.

Responsible person:

Processing purposes and legal basis:

Fulfilment of data protection obligations to inform about cookies used and storage/documentation of consents granted in accordance with Art. 5 para. 2 GDPR in conjunction with Art. 6 para. 1 letter c) GDPR. Art. 6 para. 1 letter c) GDPR

Provider of the consent tool used:

"Cookie-Script", a product of: Objectis Ltd, Laisves st. 60, LT-05120 Vilnius, Lithuania

You can find data protection information from the provider of the consent tool we use here:

https://cookie-script.com/legal/privacy-policy

Name/description of the cookie:

"CookieScriptConsent"

The cookie is used by the Cookie-Script.com service to store the consent settings for visitor cookies.

Cookie runtime:

1 month

11.1.2 Technically required cookies:

Technically necessary cookies are cookies that are required so that you can use the functions of our service that you have requested (to complete an order). This concerns, for example, the storage of entries in connection with the use of the shopping basket function or the storage of entries after registration in connection with the creation of a customer account.

Responsible person:

Your personal data is processed by us as the controller. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our legal notice. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.

Processing purposes and legal basis:

In this respect, your personal data is processed on the basis of Article 6(1)(b) GDPR for the performance of pre-contractual measures taken at your request as the data subject or on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party.

Name / Designation	Provider / Domain	Validity / Duration	Description of the
X-Magento-Vary	Adobe Inc.	1 day	The X-Magento Vary cookie is used by the Magento 2 system to highlight that the version of a page requested by a user has been changed. It allows different versions of the same page to be stored in the cache, e.g. Varnish.
user_allowed_save_cookie	Adobe Inc.	1 day	Indicates whether a customer is authorised to use cookies.
login_redirect	Adobe Inc.	2 days	Magento 2 System Cookie
CookieScriptConsent	CookieScript	1 month	This cookie is used by the Cookie-Script.com service to store the consent settings for visitor cookies. The cookie banner of Cookie-Script.com must function properly.
mage-cache-sessid	Adobe Inc.	4 hours	The value of this cookie triggers the clean-up of the local cache memory. If the cookie is removed from the backend application, the administrator cleans up the local memory and sets the cookie value to true.
form_key	Adobe Inc.	4 hours	This cookie is used to facilitate the caching of content in the browser and to speed up the loading of pages.
PHPSESSID	PHP.net	4 hours	Cookie generated by applications based on the PHP language. This is a common identifier used to manage user session variables. It is usually a randomly generated number. The way it is used can be specific to the site. However, a good example is maintaining the login status for a user between pages.
last_visited_store	Adobe Inc.	4 hours	Magento 2 System Cookie
VISITOR_PRIVACY_METADATA	YouTube .youtube.com	6 months	This cookie is used to store the user's consent and privacy settings for their interaction with the website. It collects data about the visitor's consent to various privacy policies and settings to ensure that their preferences are honoured in future sessions.

11.2 Other cookies and technologies; right to withdraw consent given

In some cases, the use of cookies and technologies on our website is not technically necessary in order to provide you with the functions of our service that you require. These other cookies and technologies are only used on our website with your consent (opt-in). In order to enable you to make an informed decision in this respect, we will inform you below about the relevant cookies and technologies. You can give your consent to the use of the relevant cookies and technologies via the consent tool we use. You can revoke your consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.

Responsible person:

Processing purposes and legal basis:

Insofar as we use other cookies and technologies on our website, they are used to optimise the use of our website (preference cookies), to analyse the use of our website (statistics cookies) and to initiate advertising that is as needs-based as possible (marketing cookies). In this respect, your personal data is processed on the basis of the consent you have given in accordance with Article 6(1)(a) GDPR.

11.2.1 Performance cookies

Name / Designation	Provider / Domain	Validity / Duration	Description of the
_pk_id.10.bf8c	Matomo / Piwik	1 year	This cookie name is associated with Piwik's open source web analytics platform. It is used to help website owners track visitor behaviour and measure website performance. It is a pattern cookie where the prefix _pk_id is followed by a short series of numbers and letters which are assumed to be a reference code for the domain in which the cookie is set.
_pk_ses.10.bf8c	Matomo / Piwik	30 minutes	This cookie name is associated with Piwik's open source web analytics platform. It is used to help website owners track visitor behaviour and measure website performance. It is a pattern cookie where the prefix _pk_ses is followed by a short series of numbers and letters that are assumed to be a reference code for the domain that sets the cookie.

11.2.2 Targeting cookies

Name / Designation	Provider / Domain	Validity / Duration	Description of the
_glc_au	Google LLC.	3 months	This cookie is set by Doubleclick and contains information about how the end user uses the website and about adverts that the end user may have seen before visiting this website. Personal data may be collected and used for personalised advertising. For more information on how Google uses personal data, please visit https://business.safety.google/privacy/.
MUID	Microsoft Corporation .bing.com	1 year	This cookie is often used by Microsoft as a unique user ID. It can be set by embedded Microsoft scripts. It is generally assumed that synchronisation is possible across many different Microsoft domains to enable user tracking.
_uetsid	Microsoft Corporation	1 day	This cookie is used by Bing to determine which adverts to display that may be relevant to the end user browsing the website.
MSPTC	Microsoft Corporation .bing.com	1 year	This cookie is used to track user engagement and interaction with the website to improve customer experience and website functionality. It can collect information about how users navigate and use the website, help identify preferences and improve service delivery.
IDE	Google LLC. .doubleclick.net	1 year	This cookie is set by Doubleclick and contains information about how the end user uses the website and about adverts that the end user may have seen before visiting this website. Personal data may be collected and used for personalised advertising. For more information on how Google uses personal data, please visit https://business.safety.google/privacy/.
_uetvid	Microsoft Corporation	1 year	This is a cookie used by Microsoft Bing Ads and is a tracking cookie. It enables us to contact a user who has previously visited our website.
VISITOR_INFO1_LIVE	Google LLC. .youtube.com	6 months	This cookie is set by Youtube to track user preferences for Youtube videos embedded in websites. It can also determine whether the website visitor is using the new or old version of the YouTube interface.

11.2.3 Functionality cookies

Name / Designation

Provider / Domain

Validity / Duration

Description of the

YSC

Google LLC.

.youtube.com

Session

This cookie is set by YouTube to track views of embedded videos.

VI. Duration for which your personal data will be stored or criteria for determining this duration

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy. Information on the duration for which your personal data is stored or the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.

VII. Your rights

Overview

In order to ensure fair and transparent processing of personal data, you as the data subject are entitled to the following rights in accordance with data protection legislation:

the right to information in accordance with Article 15 GDPR,
the right to rectification in accordance with Article 16 GDPR,
the right to erasure in accordance with Article 17 GDPR,
the right to restriction of processing in accordance with Article 18 GDPR,
the right to data portability in accordance with Article 20 GDPR
the right to withdraw consent at any time in accordance with Art. 7 (3) GDPR,
the right to object to processing in accordance with Article 21 GDPR, about which we will inform you separately below
and the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR, about which we will inform you separately below.

Your right to object to the processing

The processing of personal data is permitted if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, Art. 6 (1) (f) GDPR.

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR, including profiling based on those provisions.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject or for the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you as the data subject have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you as the data subject object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Your right to lodge a complaint with the supervisory authority

As a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR, without prejudice to any other administrative or judicial remedy.

VIII. Information on the basis for the provision of your personal data and possible consequences of non-provision

Insofar as this is necessary to ensure fair and transparent processing, you will find information on the basis for the provision of your personal data and on possible consequences of non-provision in the information on the processing of your personal data for the individual processing purposes.

As the person responsible within the meaning of data protection regulations, we will inform you below about the processing of your personal data by us.

I. The term personal data and other important terms

In simplified terms, personal data is all information that relates to you personally as the data subject. Provisions on what the term "personal data" means and what other important terms mean for the following data protection information can be found in Art. 4 of the DS-GVO (Datenschutz-Grundverordnung).

II. Name and contact details of the person responsible; contact details of the data protection officer

In simplified terms, the person responsible is the person who alone or jointly with others decides on the purposes and means of the processing of personal data. The name and contact details of the person responsible (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / Legal Notice.

III. Purposes of the processing of your personal data; legal bases for the processing

We process your personal data within the scope of our activities for the purposes listed below in accordance with the respective legal bases.

1. To carry out pre-contractual measures based on a request from you, your personal data will be processed on the basis of your consent according to Article 6 para. 1 letter a) DS-GVO or on the basis of Article 6 para. 1 letter b) DS-GVO.

2. In order to safeguard our legitimate interest in responding to enquiries and taking other action in response to a request from you, your personal data will be processed on the basis of your consent according to Article 6 (1) (a) DS-GVO or on the basis of Article 6 (1) (f) DS-GVO.

3. For the performance of a contract to which you are a party, your personal data will be processed on the basis of your consent according to Article 6 para. 1 letter a) DS-GVO or on the basis of Article 6 para. 1 letter b) DS-GVO.

4. For the purpose of implementing advertising measures, your personal data will be processed either on the basis of your consent according to Article 6 (1) (a) DS-GVO or on the basis of Article 6 (1) (f) D-GVO.

5. In order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing functions that are as user-friendly as possible and in analysing the use of our website, your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO.

6. In order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us, your personal data will be processed on the basis of Article 6 para. 1 letter f) DS-GVO.

Our systems are protected by state-of-the-art technical and organisational measures to protect your personal data against access, alteration or distribution by unauthorised persons and against loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in the context of this data protection declaration.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

Insofar as this is necessary to achieve the purposes of processing your personal data, we will transfer your personal data to third parties within the framework of the statutory provisions. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information in the context of this data protection declaration. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the necessary minimum.

V. Scope of the processing of your personal data for the individual processing purposes

In the following we inform you in detail about the processing of your personal data for the different processing purposes.

Your personal data will be deleted when they are no longer required for processing for the respective purpose, unless we are allowed to use the data for another purpose within the scope of the legal requirements and correspondingly.

1. Use of our internet presence for information purposes

If you visit our website without providing us with any information, we only process the personal data of you that your browser sends to our server. These are the following data which are technically necessary to display our website and to guarantee stability and security:

- the page you are visiting
- date and time of the request
- transferred data volume
- source or reference from where you came to the page
- browser used by you
- operating system you are using
- your IP address

Your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO in order to safeguard our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless they are further required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case the deletion takes place immediately after completion of the appropriate procedure.

2. Processing of inquiries

If you contact us with an inquiry or a request, we process the personal data and information/documents transmitted by you. Irrespective of the way in which you send us your enquiry or request, this may be the case:

- date and time of contact
- name data
- contact details
- data to inquiry/request
- information/documents provided

Depending on the content of your enquiry or request, your personal data and the information/documents transmitted will be processed on the basis of your consent according to Article 6 (1) (a) of the DS-GVO to respond to your enquiry or on the basis of Article 6 (1) (b) of the DS-GVO to implement pre-contractual measures or on the basis of Article 6 (1) (b) of the DS-GVO to implement pre-contractual measures or on the basis of Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party or on the basis of Article 6 (1) (f) DS-GVO to safeguard our legitimate interest in responding to enquiries/concerns and in taking other measures in connection with the processing of enquiries/concerns.

If we provide a contact form and you contact us via this contact form, by sending us your message you consent to the following content, about which you will be informed separately in the contact form:

"I consent to the processing of my e-mail address and other personal data provided by me for the purpose of replying to my message. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to notify the responsible person accordingly, whose contact details you can find in the information on the responsible person. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.

Insofar as this is necessary for the processing of your enquiry/concern, we will transfer your personal data to third parties within the framework of the statutory provisions. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the necessary minimum.

Your personal data will be deleted when your enquiry/concern has been clarified, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

3. Fulfilment of contracts

If you provide us with personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data you provide for the execution of the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. information on the products covered by the contract as well as payment and delivery information).

Your personal data will be processed on the basis of Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party.

Insofar as this is necessary for the fulfilment of the contract with you, we will transfer your personal data to third parties within the framework of the statutory provisions. This transfer is made to the service providers involved in the contract. These are the providers of the processing tools used by us. These are also the companies commissioned with the transport. In all other respects these are the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal for the processing of payment transactions, we expressly point out that for all PayPal transactions the PayPal data protection declaration applies: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_EN_DE

In cases where your personal data is transmitted to third parties, the scope of the data transmitted is limited to the necessary minimum.

Your personal data will be deleted after the expiry of the tax and commercial retention periods of 6 and 10 years, respectively, unless we may continue to process the data for another processing purpose within the framework of the statutory provisions and in accordance with the information in this data protection declaration.

4. Advertising by newsletter

When you subscribe to our newsletter, we process the email address you provide us with - and any other personal data you provide - to send you information about our products and services by email. In this respect, only the indication of your email address is obligatory. If you voluntarily provide further personal data, we may process this data to address you personally in the newsletter.

If you register for our newsletter, you give your consent with the following content: "I agree to be informed by e-mail about interesting offers and therefore consent to the processing of my e-mail address and other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation".

The registration for our newsletter takes place in the so-called double opt-in procedure. This means: After the registration you receive first an email with a message about the registration to the newsletter connected with a request for confirmation of the registration. Your confirmation of registration is required in order to document the required consent to the sending of the newsletter and to be able to recognize registrations to external e-mail addresses. In connection with the registrations to the newsletter and the confirmations the IP address as well as date and time are logged, in order to be able to prove the granting of the consent according to the legal defaults if necessary.

Your personal data will be processed on the basis of your consent in accordance with Article 6 Paragraph 1 Letter a) DS-GVO.

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to inform the responsible person accordingly, whose contact details can be found in the information on the responsible person. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this data protection declaration.

5. Advertising by letter post

We process the personal data transmitted by you to first and last name and address if necessary for the transmission of information to our offers by letter post.

In this respect, your personal data will be processed on the basis of Article 6 para. 1 letter f) DS-GVO in order to safeguard our legitimate interest in the implementation of advertising measures by letter post.

You may object at any time to the processing of your personal data for the purpose of advertising measures by letter post. For this purpose, it is sufficient to inform the responsible person accordingly, whose contact details you can find in the information on the responsible person.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided on first name, last name and address will be deleted immediately, unless we may continue to process the data for another processing purpose within the framework of the statutory provisions and in accordance with the information in this data protection declaration.

6. Use of cookies

We use so-called cookies in our Internet presence. These are small files which are stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our website more user-friendly.

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after closing your browser, and enable us or our partner companies (cookies from third parties) to recognize you the next time you visit our website (so-called persistent cookies).

Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of entries in connection with the use of the shopping cart function. In this respect, your personal data will be processed on the basis of Article 6 para. 1 letter b) DS-GVO for the purpose of implementing pre-contractual measures which are taken at your request as the person concerned or on the basis of Article 6 para. 1 letter b) DS-GVO for the fulfilment of a contract to which you are a party or on the basis of Article 6 para. 1 letter f) DS-GVO for the purpose of safeguarding our legitimate interest in providing functions which are as user-friendly as possible. If we or our partner companies use cookies for the purpose of range measurement or for marketing purposes, you may find detailed information on this in the corresponding further information within the scope of this data protection declaration.

You can prevent the storage of cookies by setting your browser software accordingly. If necessary, please refer to the program help for the browser you are using to find out how the corresponding setting can be made. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. As an example, we refer you to the information on the following common browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/kb/ph21411?locale=en_DE

7. Use of Google Analytics

In our Internet presence we use Google Analytics, a web analysis service of Google Inc. ("Google").

In this respect, your personal data is processed on the basis of Article 6 (1) (f) DS-GVO in order to safeguard our legitimate interest in the analysis of the use of our website.

Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of our website. The information generated by the cookie about your use of our website is usually transferred to a Google server in the USA and stored there. In this context, we would like to point out that the code "anonymizeIp" has been added to our website Google Analytics. This ensures an anonymous collection of IP addresses (so-called IP masking) that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area in order to exclude a personal reference. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us, as website operators, with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

You can prevent the storage of cookies by setting your browser software accordingly. Please refer to the program help for the browser you are using to see how the corresponding setting can be made. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of our website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link. The current link is https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, you can prevent Google Analytics from collecting your data in the future by setting an opt-out cookie. You set this cookie by clicking on this link. Please note that the opt-out cookie only works in this browser and for this website. If you delete the cookies in your browser, you must click on the link again.

You can find more information about the terms of use between us and Google on privacy at https://www.google.com/analytics/terms/de.html and more information about Google's privacy policy at https://policies.google.com/?hl=en .

Google is certified under the Privacy Shield Agreement, which guarantees compliance with European data protection legislation.

8. Enforcement of our rights and defence against claims directed against us

If necessary, we process your personal data to protect our legitimate interest in the enforcement of our rights and in the defense against claims directed against us.

In this case, your personal data will be processed on the basis of Article 6 (1) (f) DS-GVO.

Insofar as this is necessary to safeguard our legitimate interest, we will transfer your personal data to third parties within the framework of the statutory provisions. This transfer is made to the providers of debt collection services involved or to our lawyers.

In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the necessary minimum.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial retention periods of 6 or 10 years, respectively, unless we may continue to process the data for another processing purpose within the framework of the statutory requirements and in accordance with the information in this data protection declaration.

VI. Duration for which your personal data is stored or criteria for determining this duration

Your personal data will be deleted when it is no longer required for processing for the purpose for which it was collected, unless we may continue to process the data for a different purpose within the scope of the statutory provisions and in accordance with the information contained in this data protection declaration. You can find information on the duration for which your personal data is stored or on the criteria for determining this duration in the information on the processing of your personal data for the individual processing purposes in this data protection declaration.

VII. Your rights

1. overview

In order to guarantee fair and transparent processing of personal data, you as the data subject are entitled to the following rights in accordance with data protection regulations:

the right to information according to Article 15 DS-GVO,

the right to rectification according to Article 16 DS-GVO,

the right to cancellation according to Article 17 DS-GVO,

the right to restrict processing according to Article 18 DS-GVO,

the right to data transferability according to Article 20 DS-GVO

the right to revoke a given consent at any time in accordance with Art. 7 para. 3 DS-GVO,

the right to object to processing in accordance with Article 21 DS-GVO, about which we will inform you separately below

and the right to complain to the supervisory authority according to Art. 77 DS-GVO, about which we will inform you separately below.

2. your right to object to the processing

THE PROCESSING OF PERSONAL DATA IS PERMITTED IF SUCH PROCESSING IS NECESSARY TO SAFEGUARD THE LEGITIMATE INTERESTS OF THE DATA CONTROLLER OR OF A THIRD PARTY, UNLESS THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT, WHICH REQUIRE THE PROTECTION OF PERSONAL DATA, PREVAIL, IN PARTICULAR IF THE DATA SUBJECT IS A CHILD, ACCORDING TO ARTICLE 6 PAR. 1 LETTER F) DS-GVO.

AS A DATA SUBJECT, YOU HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU THAT ARE PROCESSED ON THE BASIS OF ART. 6 PAR. 1 LETTER F) DS-GVO; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.

IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR THE PROCESSING, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS AS THE PERSON CONCERNED, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT ADVERTISING, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF, AS A DATA SUBJECT, YOU OBJECT TO THE PROCESSING FOR THE PURPOSES OF DIRECT ADVERTISING, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THOSE PURPOSES.

3. Your right of appeal to the supervisory authority

As a data subject, and without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State in which you reside, your place of work or the place where the alleged infringement was committed, if you believe that the processing of your personal data violates the requirements of the DS-GVO.

VIII. Information on the basis for the provision of your personal data

If you wish to conclude a contract with us or contact us with an inquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your inquiry. You are not obliged to provide your personal data. If we do not provide your personal data, however, we will not enter into a contract with you or process your request.