Privacy policy


Introduction and general information

Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on the handling of your data that is collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations.


Controller within the meaning of the GDPR

The controller responsible for data processing on this website is:

DICTUM GmbH
Gottlieb-Daimler-Str. 3
94447 Plattling
Germany
Phone: +49 (0)9931 4058-100
Email:
privacy@dictum.com


Contact details of the data protection officer


Proliance GmbH / www.datenschutzexperte.de

Data Protection Officer

Leopoldstr. 21

80802 Munich

datenschutzbeauftragter@datenschutzexperte.de


When contacting the data protection officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information, such as a copy of your ID, with your enquiry.



Definitions

Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this privacy policy. The official definitions are explained in Art. 4 GDPR.



SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser begins with "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.



Encrypted payment transactions on this website

If there is an obligation to provide us with your payment details (e.g. account number for direct debit authorisation) after the conclusion of a chargeable contract, this data is required for payment processing. Payment transactions via the usual means of payment (Visa/MasterCard/American Express, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser begins with "https://" and by the lock symbol in your browser line. With encrypted communication, the payment data you transmit to us cannot be read by third parties.



Access to and storage of information in end devices

When you use our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) sentence 1, (2) no. 2 TDDDG.

In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TDDDG with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.


Web hosting

This website is hosted by an external service provider (hoster). This website is hosted in Germany. Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website.

We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.



Server log files

When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

  • Date and time of the request

  • Name of the requested file

  • Page from which the file was requested

  • Access status

  • Web browser and operating system used

  • (Full) IP address of the requesting computer

  • Amount of data transferred

We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The log files are used to analyse system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. After 30 days at the latest, the data is anonymised by shortening the IP address at domain level so that it is no longer possible to establish a reference to the individual user.



Cookies

Our website uses so-called "cookies". Cookies are small text files that are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behaviour or display advertising.

The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the information on the specific data processing.

The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimisation purposes, we will inform you about this separately in this privacy policy and obtain your consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can set your browser so that you

  • be informed about the setting of cookies,

  • only allow cookies in individual cases,

  • exclude the acceptance of cookies for certain cases or in general

  • activate the automatic deletion of cookies when closing the browser.


The cookie settings can be managed for the respective browsers under the following links:


You can also manage cookies from many companies and functions that are used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.


Most browsers also offer a so-called "Do-Not-Track-Function ." If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be "tracked" for the purpose of behaviour-based advertising and the like.


Information and instructions on how to edit this function can be found under the following links, depending on your browser provider:


You can also prevent scripts from being loaded by default. "NoScript" only allows JavaScripts, Java and other plug-ins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).


Please note that deactivating cookies may limit the functionality of our website.


Changing cookie settings


You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again via this linkhttps://www.thegundogaffair.com/cookie/offcanvas again.


Local storage


In addition to cookies, we also use local storage technology (also known as "local data" and "local storage"). This involves storing data locally in your browser's cache, which continues to exist and can be read even after closing the browser window or exiting the programme - unless you delete the cache. With local storage, your preferences when using our websites are stored on your computer and used by you. The data from the local storage is used, for example, to provide you with recommendations based on your anonymous usage or to enable you to create a watch list.

The data stored in Local Storage cannot be accessed by third parties, nor is it passed on to third parties or used for advertising purposes. We use these technologies in our legitimate interest to provide you with a fully functional service on the basis of Article 6(1)(f) GDPR.

You can manage local storage content in the browser via the settings for "History" or "Local data", depending on which browser you are using. If the functions are restricted accordingly, there may be functional restrictions.


Contact form/ customer accounts


The following information applies equally to our two webshops Dictum.com (
https://www.dictum.com) and "The Gun Dog Affair" (https://www.thegundogaffair.com). Dictum GmbH is the controller for both sites within the meaning of the GDPR.



Contact form



If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR) and our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR. You can withdraw this consent at any time. All you need to do is send us an informal email. The lawfulness of the data processing operations carried out until the Right of withdrawal remains unaffected by the withdrawal.
If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.



"Product available again" form



This function is available to the website visitor if a product has an uncertain delivery time and therefore cannot be ordered. Under these conditions, you have the option of being informed by e-mail as soon as a product becomes available again and can therefore be ordered. The e-mail address you have entered will be stored by us for this purpose. We will not pass this on without your consent.
We use the so-called double opt-in procedure to send this notification. This means that we will only send you a corresponding notification once you have expressly confirmed to us that you consent to receiving such a message. We will then send you a confirmation e-mail asking you to confirm that you wish to receive such a notification by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw this consent at any time by sending us an informal email. Right of withdrawal does not affect the lawfulness of the data processing operations carried out up to the time of withdrawal.

We will retain the data you provide on the "Product available again" form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains. Mandatory statutory provisions - in particular retention periods - remain unaffected.



Registration on this website


You can register on our website in order to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration. We will use the email address provided during registration to inform you of important changes, such as changes to the scope of the offer or technically necessary changes.
The data entered during registration is processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. All you need to do is send us an informal email. Right of withdrawal does not affect the lawfulness of data processing that has already taken place.
The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.



Processing of data (customer and contract data)


We collect, process and use personal data only insofar as it is necessary for the establishment, content or amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only insofar as this is necessary to enable the user to use the service or for billing purposes. In addition, your data will be used for the purposes of advertising and market research by the controller.
The customer data collected will be deleted after termination of the business relationship or in accordance with the statutory retention periods.



Data processing for order processing


In order to process your order, we work together with the following service providers who support us in whole or in part in the fulfilment of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
We work with external shipping partners to fulfil our contractual obligations to our customers. We pass on your name and your delivery address and, if necessary for delivery, your telephone number to a shipping partner selected by us exclusively for the purpose of delivering goods in accordance with Art. 6 para. 1 lit. b GDPR.



Use of special service providers for order processing and fulfilment on platforms


Orders are processed by the service provider "magnalister" (RedGecko GmbH, Paul-Lincke-Ufer 20-22, 10999 Berlin). Name, address and, if applicable, other personal data will be passed on to magnalister in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the processing of the online order. Your data will only be passed on if this is actually necessary for processing the order. Details on magnalister's data protection and its privacy policy can be found on the magnalister website at https://www.magnalister.com/de/datenschutz.



Course surveys


After participating in one of our workshops, you will receive an access code for our online course survey. There you can voluntarily give your opinion on the course you attended. We store the data you enter for the purpose of continuously improving our offers and course processes. The data is processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time. All you need to do is send us an informal email. The lawfulness of the data processing operations carried out until the Right of withdrawal remains unaffected by the withdrawal.



Forwarding customer and contract data to manufacturers for the purpose of extending the warranty


As part of our offer, we work together with manufacturers who offer extended warranty services on condition of device registration. Information on extended warranty services can be found at www.dictum.com on the respective product page. If products from these manufacturers are purchased, we will register the devices with the Manufacturer free of charge on behalf of the customer as part of the purchase contract. When a purchase contract is concluded, the customer data stored in our company (name, address, e-mail address, as provided to us by the customer) is passed on to the Manufacturer for the purpose of device registration.
The legal basis for the collection and processing of your personal data in this context is Art. 6 para. 1 lit. b) GDPR in the context of contract fulfilment and implementation.



External services


Analysis tools and advertising


Google Analytics 4

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyse the use of websites.

When using Google Analytics 4, so-called "cookies" are used. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server, where it is stored and processed. Information may also be transmitted to the servers of Google LLC, based in the USA, where it is processed further.

When using Google Analytics 4, the IP address transmitted by your end device when you use the website is automatically collected and processed only in abbreviated form by default, so that the information collected cannot be directly linked to a person. This automatic anonymisation takes place by Google truncating the last digits of the IP address transmitted by your device within member states of the European Union (EU) or other signatory states to the Agreement on the European Economic Area (EEA).

We use Google Analytics for marketing purposes. Google uses this and other information on our behalf to evaluate your use of the website, to compile reports on your website activity and usage behaviour and to provide us with other services relating to your use of the website and the Internet. The abbreviated IP address transmitted by your device as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for 14 months and then deleted.

Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users based on an evaluation of interest-based advertising and with the use of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and differentiate between user groups of the website for the purpose of target group-optimised marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and therefore not to you personally. This data collected via the "demographic characteristics" function is stored for 14 months and then deleted.

All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the device you use to access the website, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website.

In connection with this website, the "UserIDs" function is also used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behaviour can also be analysed across devices if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, if you have set up a personal account by registering on this website and are logged in to your personal account on different devices with your relevant login data. The data collected in this way shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place.

We have concluded a so-called order processing contract with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.

As Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link https://policies.google.com/privacy

Details on the processing triggered by Google Analytics 4 and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites



Google AdSense

This website uses Google AdSense, a service for integrating adverts from Google Ireland Limited ("Google"),which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.


Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyse information such as visitor traffic on these pages.
The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to Google's contractual partners. However, Google will not merge your IP address with other data stored by you.
If you have given your consent to the storage of AdSense cookies, this is done on the basis of Art. 6 para. 1 lit. a GDPR.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https: //tools.google.com/dlpage/gaoptout?hl=de. You can also deactivate the cookie via this link.


As personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link
https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.



Further information on Google AdSense can be found in Google's privacy policy:
https://www.google.com/policies/privacy/




Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you have given us your consent, this function makes it possible to link the advertising target groups created with Google Ads Remarketing with the cross-device functions of Google Ads and Google Marketing Platform. The legal basis is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG. In this way, interest-related, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you sign in with your Google account.

To support this feature, Google Analytics collects authenticated user IDs that are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by disabling personalised advertising in your Google Account by following this link:https://adssettings.google.com/.

As Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further safeguards are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search.

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information and the data protection provisions can be found in Google's privacy policy athttps://www.google.com/policies/technologies/ads/.


Google Tag Manager

This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and only the user's IP address is transmitted to Google to establish a connection. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager.

We use Google Tag Manager on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further safeguards are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.



Cloudflare


We use the Content Delivery Network (CDN) of Cloudflare Inc, 101 Townsend St, San Francisco, CA 94107 USA (Cloudflare) to increase the security and delivery speed of our website. A content delivery network is an online service that is used in particular to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. For this purpose, the browser you are using must connect to Cloudflare's servers. As a result, Cloudflare becomes aware that our website has been accessed via your IP address. The data collected in this process is only used for the aforementioned purpose and to maintain the functionality and security of the CDN. For this purpose, Cloudflare may process personal data in the form of server log files. The name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider can be stored in the server log files. This data also helps Cloudflare to recognise new threats to websites, for example. This enables Cloudflare to ensure a high level of security protection for our website.

The processing of personal data in connection with the use of Cloudflare is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to increase the security and delivery speed of our website.

In general, Cloudflare stores data at user level for domains in the Free, Pro and Business versions for less than 24 hours. Cloudflare only stores server log files for as long as necessary and this data is also deleted within 24 hours in most cases. However, there is also information that Cloudflare retains indefinitely as part of its permanent logs in order to improve Cloudflare's overall performance and identify any security risks. You can find out exactly which permanent logs are stored athttps://developers.cloudflare.com/1.1.1.1/commitment-to-privacy/privacy-policy/privacy-policy/ to find out. According to Cloudflare, all data that Cloudflare permanently collects is cleansed of personal data and therefore anonymised.

Data is transferred to Cloudflare Inc. based in the USA. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Cloudflare Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: Participant Search (dataprivacyframework.gov).



We have concluded an order processing contract with Cloudflare.

You can find more detailed information about data protection and Cloudflare at: https://www.cloudflare.com/de-de/gdpr/introduction/ and https://www.cloudflare.com/privacypolicy/



Retargeting


This website uses retargeting technology from releva GmbH, Feilnerstr. 10, 10969 Berlin (www.releva.nz). This makes it possible to target visitors to our website with personalised, interest-based advertising. The advertising material is displayed on the basis of a cookie-based analysis of previous user behaviour, although no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests as part of a pseudonymised user profile and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. As a result, you are shown adverts that are highly likely to match your product and information interests. If the information collected has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in displaying personalised advertising and in market research. Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of revocation, please follow the option described in the "Cookies" section to make an objection. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. Further information and the data protection provisions regarding advertising and releva GmbH can be found at https://releva.nz/datenschutz.



hurra.com Ads Defender Click Fraud technology


On our website, we use the Ads Defender Click Fraud service from Hurra Communications GmbH, Wollgrasweg 27, 70599 Stuttgart, Germany, to analyse and prevent click fraud on our advertisements. Click fraud occurs when clicks on adverts are generated by automated Tools or multiple clicks on adverts are presumably not due to genuine user interest. The legal basis for the use of the service is Art. 6 para. 1 lit. f GDPR. There is a legitimate interest in monitoring and preventing fraudulent activities through click fraud and ensuring the proper functioning of our systems. When analysed by the service, the following personal data is collected and stored when you click on advertisements IP address, information about the browser used, information about the operating system, location information, referrer URL, other online identifiers such as click and cookie IDs, duration of use and time of access, and information about interactions with advertising material and our website. If the service detects conspicuous behaviour and there is a suspicion of click fraud, these IP addresses may be transmitted to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the case of Google services, data may be transferred to the USA.

Further protection mechanisms are therefore required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following linkhttps://www.dataprivacyframework.gov/s/participant-search

Further Information on data protection at hurra.com can be found at: https://privacy.hurra.com



Hotjar

Our website uses the Hotjar web analytics service provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe ("Hotjar").

Hotjar's technology helps us to gain a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, etc.). This helps us to tailor our offering to our users' feedback. Hotjar works with cookies and other technologies to collect data about the behaviour of our users and their end devices, in particular the IP address of the device (is only recorded and stored in anonymised form during your website use), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymised user profile.

We pay particular attention to the protection of your personal data when using this tool. For example, we can only track which buttons are clicked, the path of the mouse, how far the user scrolls, the screen size of the device, device type and browser information, geographical location (country only) and preferred language in order to display our website. Areas of the websites on which personal data about you or third parties is displayed are automatically hidden by Hotjar and are therefore not traceable at any time. The use of Hotjar and the associated processing of personal data takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Hotjar generally stores customer data in the European Union. However, personal data may also be transferred to third countries outside the EU and the EEA. In these cases, it is necessary to take further protective measures to ensure the level of data protection in accordance with the requirements of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient in the third country to process the data in accordance with the level of protection in the EU.

Hotjar offers every user the option of using a "Do Not Track header" to prevent the use of the Hotjar tool so that no data about the visit to the respective website is recorded. This is a setting that is supported by all standard browsers in current versions. To do this, your browser sends a request to Hotjar to deactivate the tracking of the respective user. If you use our websites with different browsers/computers, you must set up the "Do Not Track header" separately for each of these browsers/computers. You can prevent the use of Hotjar by going to the opt-out page https://www.hotjar.com/legal/compliance/opt-out and clicking on "Deactivate Hotjar".

You can find more information about Hotjar Ltd. and the Hotjar tool at:
https://www.hotjar.comThe privacy policy of Hotjar Ltd. can be found at:
https://www.hotjar.com/privacy



Mailjet


We use the email service Mailjet from the provider Sinch Email (formerly Mailjet SAS, 13-13 bis, rue de l'Aubrac, 75012 Paris, France) to send emails and newsletters.

The integration takes place on the basis of our legitimate interest in efficient and secure email communication as well as for contract fulfilment, insofar as emails are required for contract processing (Art. 6 para. 1 lit. f and Art. 6 para. 1 lit. b) GDPR).

If you have given us your consent for this (e.g. Newsletter), the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time with effect for the future.


Mailjet generally processes data within the EU and the EEA. A transfer to third countries cannot be completely ruled out in individual cases, e.g. by sub-processors. In such cases, we base the transfer on suitable guarantees in accordance with Art. 46 GDPR (in particular EU standard contractual clauses) and take additional technical and organisational measures. Information on the sub-processors can be found in the provider documentation.



Depending on use, we process the following personal data in particular


Inventory and contact data: E-mail address, if applicable name, title, company affiliation.

Communication data: time of dispatch, delivery and opening status, clicks, bounces, cancellations, technical logs (e.g. IP address and time stamp for double opt-in).

Content data: Content of the emails sent, Newsletter preferences, segment/list assignment. Legal bases are Art. 6 para. 1 lit. a GDPR (consent), lit. b (fulfilment of contract) and lit. f (legitimate interest in effective email delivery, performance measurement and system security).


Double opt-in and logging: We use the double opt-in procedure for newsletters. The registration, confirmation and time are logged in order to be able to prove consent. You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every email.


Tracking and performance measurement: Mailjet can measure openings and clicks in order to optimise our content and improve deliverability. The evaluation is pseudonymised; an assignment to individual recipients only takes place if this is necessary for the proof of consent, prevention of misuse, error analysis or the provision of the service. You can object to tracking at any time by using the unsubscribe link or by contacting us. Where technically possible, we also send newsletters without individual performance measurement.


Order processing: We have concluded an order processing contract with Mailjet in accordance with Art. 28 GDPR, which regulates, among other things, suitable technical and organisational measures, confidentiality and deletion.




Use of the Sovido plugin and the Sovido platform


(1) We use a plugin and a connection to the Sovido video platform to display audiovisual content. Sovido is a platform for the production, processing and distribution of audiovisual content and related services and is provided to us by Sovido GmbH, Vor dem Bardowicker Tore 6a, 21339 Lüneburg, Germany.

(2) Sovido GmbH collects the following data on our behalf for the use of the audiovisual content offered:

  • IP address (in pseudonymised form)

  • Timestamp (i.e. date and time of access to the video)

  • user agent

  • Format (i.e. resolution and quality) in which the video is played

(3) As part of this process, Sovido GmbH provides us with personal data, such as your IP address (in pseudonymised form) and other data that is not personal in itself and is necessary for statistical purposes.



YouTube

On our website, we integrate videos from "YouTube", a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The legal basis for the processing of your personal data in this context is your consent given in accordance with Art. 6 para. 1 lit. a GDPR.

If the playback of embedded YouTube videos is started by your consent, a server call is made, usually to a Google server in the USA. This tells the server which page you have accessed and the IP address of the browser of the visitor's end device is transmitted to Google and stored by Google.

If you have given your consent, the provider "YouTube" also uses cookies to collect information about user behaviour. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data may also be assigned to your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores this data as usage profiles and uses it for the purposes of advertising, market research and/or customising its websites. Such an analysis is carried out in particular (even for users who are not logged in) to display customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles by contacting Google directly.

As personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information on data protection and data use by Google can be found on the following Google website:https://policies.google.com/privacy?hl=de&gl=de





Advertising / Newsletter


Sendinblue


If you would like to receive the Newsletter offered on the website with regular information about our offers and products, we require your e-mail address as mandatory information.

Additional data may be provided in order to address you personally in the Newsletter and/or to identify you if you wish to exercise your rights as a data subject.

We use the so-called double opt-in procedure to send the Newsletter. This means that we will only send you our newsletter by email if you have expressly confirmed to us that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive newsletters in the future. By confirming, you give us your consent in accordance with Art. 6 para. 1 lit. a GDPR that we may use your personal data for the purpose of sending the desired newsletter.

When you subscribe to our newsletter, in addition to the e-mail address required for sending the newsletter, we store the IP address you used to subscribe to the newsletter as well as the date and time of subscription and confirmation in order to be able to trace possible misuse at a later date.

You can unsubscribe from the Newsletter at any time via the link included in every Newsletter or by sending an email to the controller named above. Once you have cancelled your subscription, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or the continued processing is otherwise permitted by law.

Our email newsletters are sent via a technical service provider to whom we pass on the data you provided when registering for the newsletter.

The service provider uses this information to send and statistically analyse the newsletters on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a Newsletter message has been opened and which links, if any, have been clicked on. Conversion tracking can also be used to analyse whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the Newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; direct personal identification is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.


Email service provider:


Service provider:Sendinblue GmbH
Address: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin
Privacy policy:https://de.sendinblue.com/legal/privacypolicy/.



Advertising by letter post


On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 para. 1 lit. f GDPR and to use them to send you interesting offers and information about our products by letter post.
You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible (e-mail address).





Catalogue dispatch


On the legal basis of our legitimate interest in personalised direct advertising and in providing information about our range of products, we reserve the right to process your personal data (first and last name, your postal address and - insofar as we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name) in accordance with Art. 6 para. 1 lit. f GDPR and to use it for the regular sending of product catalogues.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller (e-mail address)
.



Meta Pixel


We use "Meta Pixel" on our website, a service provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland(hereinafter referred to as: "Meta/Facebook").

If you have given us your consent in accordance with Art. 6 para. 1 lit. a GDPR, we use Meta Pixel for marketing and optimisation purposes, in particular to place relevant and interesting ads for you on Facebook and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.

Meta Pixel enables Meta to display our adverts on Facebook, so-called "Facebook Ads", only to those Facebook users who have visited our website, in particular those who have shown an interest in our online offering. In this case, Meta Pixel also makes it possible to check whether a user was redirected to our website after clicking on our Facebook ads. Among other things, Meta Pixel uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged in to Facebook with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about the identity of the user. However, this data can be linked by Facebook to your user account there. If you have a Facebook user account and are registered, Facebook can assign the visit to your user account.

As personal data may be transferred by Meta to affiliated companies and sub-service providers in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Meta Platforms, Inc. is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following linkhttps://www.dataprivacyframework.gov/s/participant-search.

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information from the third-party provider on data protection can be found on the following Facebook website: https://www.facebook.com/about/privacy.Information on Meta Pixel can be found on the following Facebook website: https://www.facebook.com/business/help/651294705016616.

You can make the relevant settings as to which types of adverts are displayed to you within Facebook on the following Facebook website: https://www.facebook.com/settings?tab=ads.

Please note that this setting will be deleted if you delete your cookies. In addition, you can deactivate cookies that are used for reach measurement and advertising purposes via the following websites:
http://optout.networkadvertising.org/, http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/


Please note that this setting will also be deleted if you delete your cookies.



Data processing in the context of competitions on social media platforms


We process your personal data for the proper execution and processing of competitions and, in particular, for sending the prize.
To run the competition, the profile name used on the relevant platform and, if available, the first name and surname of the respective participant are collected and stored. To determine the minimum age for participation, it may be necessary to enter the date of birth. In order to send the prize, we also collect the surname, first name and address of the winner(s) and pass this data on to a shipping company commissioned by us. Your data will not be passed on to third parties beyond this.
The legal basis for this processing of your personal data is Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures and fulfilment of a contract).
If participation in the competition is made dependent on consent to receive our newsletter, we will also collect your email address for the purpose of sending the newsletter (to avoid repetition, please refer to the section "Advertising/Newsletter").




Payment provider

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A. as part of the payment processing, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including the credit agencies used, please refer to PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.


Instant bank transfer

If you select the "SOFORT" payment method, payment will be processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only to the extent that it is necessary for this purpose. You can obtain further information about SOFORT's data protection provisions at the following Internet address: https://www.klarna.com/sofort/datenschutz.



Payment service provider "Mollie"

We use the payment service provider "Mollie" to process payments.
We can offer our customers various payment methods via Mollie, such as bank transfer, credit card, additional payment and other payment methods
.

The following of your personal data is processed by "Mollie" in the course of payment processing:



  • Your payment details (e.g. bank account number or credit card number);

  • Your IP address;

  • Your internet browser and device type;

  • In some cases, your first and last name;

  • In some cases, your address details;

  • In some cases, your email address and/or telephone number

  • In some cases, Information about the product or service you have purchased;

  • In some cases, or if you are a commercial customer, your Chamber of Commerce number and company name;


The legal basis for the processing and transfer of your personal data to "Mollie" is the fulfilment of the contract in accordance with Art. 6 para. 1 lit b) GDPR.

In addition, the processing of your personal data may also be based on our legitimate interest in secure and effective payment processing with our customers. The legal basis for this is Art. 6 (1) (f) GDPR.




External links

Social networks Instagram, Pinterest and Facebook are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been redirected. For information on the handling of your personal data when using these websites, please refer to the respective data protection regulations of the providers you use.




Applications for job advertisements by e-mail

We advertise current vacancies on our website in a separate section, for which interested parties can apply by e-mail to the contact address provided.
In order to be included in the application process, applicants must provide us with all personal data required for a well-founded and informed assessment and selection together with their application by e-mail.
The required information includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific proof of the qualifications required for a position. In addition, health-related information may be required, which must be given special consideration under labour and social law in the interests of social protection in the person of the applicant.
The components that an application must contain in individual cases in order to be considered and the form in which these components are to be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the e-mail contact address provided, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For any queries arising in the course of processing, we may choose to use either the email address provided by the applicant with their application or a telephone number provided.
The legal basis for this processing, including contacting for queries, is generally Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 BDSG. § Section 26 (1) BDSG, in the sense of which the application procedure is considered to be the initiation of an employment contract. Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application procedure, processing is carried out in accordance with Art. 9 para. 2 lit. b. GDPR. GDPR so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 1 lit. h GDPR if it is carried out for the purposes of preventive healthcare or to assess the applicant's ability to work. If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws their application prematurely, their data transmitted by email and all electronic correspondence, including the original application email, will be deleted after 6 months at the latest following a corresponding notification. This period is calculated on the basis of our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR in conjunction with Art. 26 para. 1 BDSG. § Section 26 (1) BDSG for the purposes of implementing the employment relationship.




Data transfer and recipients

Your personal data will not be transferred to third parties unless

- if we have explicitly indicated this in the description of the respective data processing,

- if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,

- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data

- in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and

- insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

We also use external service providers for the processing of our Services, which we have carefully selected, commissioned in writing and with whom we have concluded order processing contracts in accordance with Art. 28 GDPR if necessary. These service providers are bound by our instructions and are regularly monitored by us. These include service providers for hosting, sending emails, maintenance and servicing of our IT systems, etc. The service providers will not pass this data on to third parties.




Data security

We take appropriate technical and organisational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.




Duration of storage of personal data

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally relevant reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.




Your rights

Below you will find information on the data subject rights that the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the Category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us.

The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

The right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller in accordance with Art. 20 GDPR.

The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.

The right to withdraw consent granted in accordance with Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. Right of withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.



Right to object

If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the requirement to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@thegundogaffair.com.


Legal obligations

The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide personal data that is necessary for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.


Automated decision-making

Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.



Reservation of the right to make changes

We reserve the right to amend or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.



Status of this privacy policy: 22/08/2025