Legal

Privacy policy

Unless stated otherwise below, providing your personal data is neither required by law or contract, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Not providing it has no consequences. This applies only insofar as no other information is given in the processing operations described below.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing any information about yourself.

Each time you access our website, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the standard contractual clauses of the EU Commission.

Contact

Controller

Please contact us at any time. The controller responsible for data processing is: Miguel Zirkenbach-Jasper, Brachtstr. 4, 40223 Düsseldorf, Germany, +49 173 5327989, hola@gourmet-mallorca.com

Customer-initiated contact by email

If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves the purpose of handling and responding to your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice in case of purchase interest, preparation of a quotation) or relates to a contract already concluded between you and us, this processing is carried out on the basis of Art. 6(1)(b) GDPR.
If contact is made for other reasons, this processing is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address solely to handle your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves the purpose of making contact.
If the contact serves to carry out pre-contractual measures (e.g. advice in case of purchase interest, preparation of a quotation) or relates to a contract already concluded between you and us, this processing is carried out on the basis of Art. 6(1)(b) GDPR. If contact is made for other reasons, this processing is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR. We use your email address solely to handle your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the withdrawal button

If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your declaration of withdrawal directly.

When you use the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract you wish to withdraw from, and the time (date and time) at which the declaration of withdrawal was sent) only to the extent you provide it. The processing serves the purpose of providing you with the legally required means of withdrawing from your contract and of processing your withdrawal properly.

If the contact relates to a contract already concluded between you and us, this processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, the processing is carried out on the basis of Art. 6(1)(c) GDPR, in fulfilment of a legal obligation to provide you with a withdrawal function on our online presence.

We use your email address solely to process your declaration of withdrawal. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Disclosure to third-party providers (use of plug-ins)

For the technical provision and administration of the withdrawal function on our online presence, we use, within the framework of processing on our behalf, a software solution provided by the third-party provider Händlerbund Legal GmbH, Kohlgartenstraße 11-13, 04315 Leipzig, Germany. The plug-in enables you to submit your declaration of withdrawal directly via the withdrawal button if you have concluded a contract with us via our website. For this purpose, technically necessary cookies are used and the following information is collected: encrypted session ID.

Your data may be transferred to third countries such as the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Where providers are not certified under the TADPF, the data transfer to the USA takes place on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

When you use the withdrawal function, the personal data collected from you is transmitted to the servers of the third-party providers named above.

The processing of your personal data serves the purpose of meeting the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Art. 6(1)(c) GDPR. This data processing is also carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in being able to provide you with a user-friendly means of withdrawal. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.

Cookies and comparable technologies are used on the basis of Section 25(2) TDDDG (German Digital Services Data Protection Act). Further information on data protection can be found at: https://www.haendlerbund.de/de/datenschutzerklaerung

Customer account and orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data in the case of orders

When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and to handle your enquiries. Providing the data is necessary for the conclusion of the contract. If the data is not provided, no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data is disclosed, for example, to shipping companies, dropshipping and fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the statutory requirements. The scope of data transfer is limited to a minimum.

Reviews and advertising

Use of Judge.me

We use the review system "Judge.me" provided by Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me enables us to obtain customer reviews and display them on our website in order to give you an insight into the quality of our services.
After placing an order, you may receive an invitation from us or from Judge.me to submit a review and may then do so. In this context, the following data may be processed by us or by Judge.me: email address, name, telephone number, address, information about your device (IP address, information about your web browser and the operating system used), information about the product purchased or the service used (order number, product details), the content of your review and the star rating you give, your product photos or videos (if you have attached them to your product review). This data may also be used for the purpose of verifying your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision by the EU Commission exists for the United Kingdom.
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer takes place on the basis of specific contracts approved for use in the United Kingdom which offer the same protection that personal data enjoys in the United Kingdom.
Cookies and comparable technologies are used with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR, provided you have expressly consented to the transfer of your data and to receiving the review request. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.

Use of the email address for sending newsletters

We use your email address to send information and offers by newsletter, provided you have expressly consented to this. The processing serves exclusively the purpose of promotional communication. For this purpose we process your email address and, where applicable, further data you have voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of Klaviyo

For sending our newsletter as well as service and order notifications by email, we use, within the framework of processing on our behalf, the service "Klaviyo" provided by Klaviyo, Inc. (125 Summer Street, Boston, MA 02110, USA; "Klaviyo"). The processing serves the purpose of technically handling, statistically evaluating and optimising the sending of our emails.
The following data is transmitted to Klaviyo and stored there: your email address and, where applicable, further data you voluntarily provided when subscribing, the time of subscription and confirmation, your IP address at the time of subscription and — where a contractual relationship exists — order and customer data.

Subscription to our newsletter takes place using the so-called double opt-in procedure. After subscribing, you will receive an email in which you must confirm your subscription. This confirmation is necessary so that no one can subscribe using someone else's email address. Newsletter subscriptions are logged in order to be able to demonstrate the subscription process in accordance with legal requirements.

Our newsletters contain a so-called tracking pixel as well as individualised links. This allows us to identify whether and when an email has been opened and which links it contains have been clicked. This information is assigned to your email address and stored in a profile in order to be able to send you content matching your interests.

Your data is transferred to and processed in the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF).

Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us.

Further information on data protection at Klaviyo can be found at: https://www.klaviyo.com/legal/privacy-notice.

Shipping service providers

Disclosure of the email address to shipping companies for information about the shipping status

We disclose your email address to the transport company as part of the performance of the contract, provided you have expressly consented to this during the ordering process. The disclosure serves the purpose of informing you by email about the shipping status. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Payment service providers

Use of PayPal Express

We use the payment service PayPal Express provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The processing serves the purpose of enabling us to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at https://www.paypal.com/uk/legalhub/privacy-full.

Use of PayPal Checkout

We use the payment service PayPal Checkout provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The processing serves the purpose of enabling us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

Cookies may be stored in this context which enable your browser to be recognised. The data processing that takes place as a result is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report on the basis of mathematical and statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit assessment to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical and statistical procedures and in the calculation of which address data is included, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The processing serves the purpose of assessing creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in protection against payment default where PayPal makes advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. Providing the data is necessary for the conclusion of the contract using the payment method you have chosen. If the data is not provided, the contract cannot be concluded using the payment method you have chosen.

Third-party providers
If payment is made using a third-party provider's payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. In order to carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers may include, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on account via PayPal
If payment is made using the purchase on account payment method, the data required for payment processing is first transmitted to PayPal. In order to carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin, Germany; "Ratepay") in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may carry out a credit report on the basis of mathematical and statistical procedures (probability or score values) using credit agencies in accordance with the procedure described above. The processing serves the purpose of assessing creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in protection against payment default where Ratepay makes advance payment. Further information on data protection and on which credit agencies Ratepay uses can be found at https://www.ratepay.com/en/legal-payment-dataprivacy/ and https://www.ratepay.com/en/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the corresponding privacy policy at https://www.paypal.com/uk/legalhub/privacy-full.

Use of Shopify Payments

We use the payment service "Shopify Payments" provided by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment is processed by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The processing serves the purpose of enabling us to offer you payment via the Shopify Payments payment service. When you select and use a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Stripe reserves the right to obtain a credit report on the basis of mathematical and statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit assessment to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical and statistical procedures and in the calculation of which address data is included, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The processing serves the purpose of assessing creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in protection against payment default where Stripe makes advance payment. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying Stripe. Providing the data is necessary for the conclusion of the contract using the payment method you have chosen. If the data is not provided, the contract cannot be concluded using the payment method you have chosen. Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/legal/privacy. Further information on data processing when payment is handled by the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would point out that you may then not be able to use all functions of this website to their full extent.

You can find out how to manage (including deactivate) cookies in the most common browsers using the links below:

Chrome: https://support.google.com/accounts/answer/61416?hl=en
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless other information is provided in this privacy policy below, we use only these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after you move to another page and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after moving to another page.

Cookies and comparable technologies are used on the basis of Section 25(2) TDDDG (German Digital Services Data Protection Act). Your personal data is processed on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of the Shopify consent tool (Shopify Privacy & Compliance)

We use the consent tool "Shopify Privacy & Compliance" provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The processing serves the purpose of obtaining and documenting the required consent to data processing and thereby complying with legal obligations. Cookies may be used for this purpose. In this context, user information including your IP address is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the standard contractual clauses of the EU Commission.
The processing is carried out in fulfilment of a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/legal/privacy.

Web analytics and advertising

Use of Google Analytics 4

We use the web analytics service "Google Analytics 4" provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The processing serves the purpose of evaluating the use of our website, compiling reports on website activity and designing our offering to meet demand.
Cookies and comparable technologies are used for this purpose. In this context, the following information, among other things, may be collected and transmitted to Google: pages accessed, date and time of access, time spent, events triggered (e.g. viewing a product page, adding to cart, completing a purchase including order value), your shortened IP address, device and browser type, operating system, approximate location based on the IP address and a randomly generated identifier used to recognise your browser.
IP anonymisation is activated by default in Google Analytics 4; your IP address is shortened before any transmission.

Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.

Cookies and comparable technologies are used with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the privacy settings on our website, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

Further information on data processing and data protection at Google can be found at https://policies.google.com/privacy and at https://support.google.com/analytics/answer/12017362.

Use of Google Ads conversion tracking and remarketing

We use the online advertising programme "Google Ads" provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"), including conversion tracking and remarketing, on our website.
The processing serves the purpose of measuring whether an advertisement has led to an order or another action relevant to us, as well as the purpose of showing you advertisements tailored to your interests on websites and in services of third parties.
If you click on an advertisement placed by us, a cookie is stored on your device. Cookies and comparable technologies may also be used when you visit our website without having previously clicked on an advertisement. In this context, the following information, among other things, may be transmitted to Google: pages accessed, events triggered including completion of a purchase and order value, time of access, device and browser information, your IP address and a randomly generated identifier. Data is combined with your Google account if you are logged in to Google and have consented there to the linking of your web and app browsing history.

Further information on data processing and data protection at Google can be found at https://policies.google.com/privacy and at https://policies.google.com/technologies/ads.

Plug-ins and other services

Use of social plug-ins

We use plug-ins of social networks on our website. The integration of social plug-ins and the data processing that takes place in this context serves the purpose of optimising the advertising of our products.
When social plug-ins are integrated, a connection is established between your computer and the servers of the providers of the social network, and the plug-in is displayed on the page by means of a message to your browser, provided you have expressly consented to this. In this context, both your IP address and the information about which of our pages you have visited are transmitted to the provider's servers. This applies regardless of whether you are registered with or logged in to the social network. Transmission also takes place for users who are not registered or not logged in. If you are simultaneously connected to one or more of your social network accounts, the information collected may also be assigned to your corresponding profiles. When you use the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
Cookies and comparable technologies are used with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
The social networks named below are integrated on our website by means of a social plug-in. Further information on the scope and purpose of the collection and use of the data, as well as on your related rights and options for protecting your privacy, can be found in the providers' linked privacy notices.

Instagram, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.

Use of Cloudflare

We use the content delivery network Cloudflare CDN provided by Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare") on our website. This is a supra-regional network of servers in various data centres to which our web server connects and via which certain content of our website is delivered.
The processing serves the purpose of optimising the loading times of our website and thereby making our offering more user-friendly.
In this context, the following information, among other things, may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR on grounds of our overriding legitimate interest in designing the website to meet demand and in a targeted manner. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/privacypolicy/.

Use of Google Fonts

We use Google Fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The processing serves the purpose of displaying fonts consistently on our website. In order to load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this context. Among other things, your IP address and information about the browser you use is processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Cookies and comparable technologies are used with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
Further information on data processing and data protection can be found at https://policies.google.com/privacy and at https://developers.google.com/fonts/faq.

Data subject rights and retention period

Retention period

After the contract has been fully performed, the data is initially stored for the duration of the warranty period, thereafter taking into account statutory retention periods, in particular under tax and commercial law, and is then deleted once the period has expired, unless you have consented to further processing and use.

Rights of the data subject

Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing and to data portability.
In addition, under Art. 21(1) GDPR you have a right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is not being processed lawfully.

You may lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach using the following contact details:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de

Right to object

Where the personal data processing set out here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object to such processing at any time with effect for the future, on grounds relating to your particular situation.
Following an objection, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Language