Data protection

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1
We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can personally identify you.

1.2
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ing. Wolfgang Kanduth, MBA MPA MSc, Meisterdrucke, Kärntner Strasse 46, 9586 Finkenstein am Faaker See, Austria, Tel.: +43 4257 29415, E-Mail: office@meisterdrucke.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When you use our website purely for information purposes, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited
  
• Date and time of access
  
• Amount of data sent in bytes
  
• Source/reference from which you reached the page
  
• Browser used
  
• Operating system used
  
• IP address used (possibly in anonymized form)
  

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Content Delivery Network

AWS-CloudFront (Amazon)
We use the Content Delivery Network ("CDN") "AWS CloudFront" from the service provider "Amazon" (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg) on our website.

A content delivery network is an online service that allows, in particular, large media files (such as graphics, page content, or scripts) to be delivered via a network of regionally distributed servers connected via the internet. The use of Amazon’s content delivery network helps us to optimize the loading speed of our website.

Processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.

Further information can be found in Amazon’s privacy policy at:
https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to a certain extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the storage period for each cookie in your browser’s cookie settings overview.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If personal data is also processed by individual cookies we use, processing takes place either for the performance of a contract in accordance with Art. 6 (1) lit. b GDPR, in the event of consent given in accordance with Art. 6 (1) lit. a GDPR, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can set your browser to notify you when cookies are set and to allow you to decide individually about accepting them, or to exclude the acceptance of cookies for certain cases or in general. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find information for the respective browsers at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When contacting us (e.g., via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the related technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your inquiry has been finally processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations.

6) Data Processing When Opening a Customer Account and for Contract Processing

According to Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the address of the controller mentioned above. We store and use the data you provide for contract processing. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further legally permissible data use.

7) Use of Single Sign-On Procedures

7.1 Facebook Connect
On our website, you can register for a customer account or log in using the social plugin “Facebook Connect” of the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), using the so-called single sign-on technology, provided you have a Facebook profile. You can recognize the "Facebook Connect" social plugins on our website by the blue button with the Facebook logo and the caption "Sign in with Facebook" or "Connect with Facebook" or "Log in with Facebook".

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. These processing operations are carried out according to Art. 6 (1) lit. f GDPR based on Facebook’s legitimate interest in displaying personalized advertising based on your surfing behavior.

By using the "Facebook Connect" button on our website, you also have the option of logging in to or registering on our website using your Facebook user data. Only if you give your express consent prior to the registration process based on a corresponding notice about the exchange of data with Facebook, we receive from Facebook, depending on your personally set privacy settings on Facebook, the general and publicly accessible information stored in their profile. This information includes user ID, name, profile picture, age, and gender.

Please note that after changes to Facebook’s data protection and usage policies, granting consent may also result in the transfer of your profile pictures, user IDs of your friends, and friend list if they are marked as "public" in your Facebook privacy settings. The data transmitted by Facebook is used by us to create a user account with the required data (salutation, first name, last name, address data, country, e-mail address, date of birth), if these were released by you on Facebook. Conversely, data (e.g., information on your surfing or purchasing behavior) can be transferred from us to your Facebook profile based on your consent.

The consent granted can be revoked at any time by sending a message to the controller named at the beginning of this privacy policy.

For details on the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and settings options to protect your privacy, please refer to Facebook’s privacy policy: https://www.facebook.com/policy.php

If you do not want Facebook to directly associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely block the loading of Facebook plugins with add-ons for your browser, e.g., "Adblock Plus" (https://adblockplus.org/de/).

7.2 Google Sign-In
On our website, you can register for a customer account or log in via the "Google Sign-In" service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) using the so-called single sign-on technology, provided you have a Google profile. The Google login function can be recognized by the button "Sign in with Google account" or "Sign in with Google".

When you access a page of our website containing a Google login function, your browser establishes a direct connection to the servers of Google. The content of the login button is transmitted by Google directly to your browser and integrated into the page. Through this integration, Google receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Google profile or are not currently logged in to Google. This information (including your IP address) is transmitted directly from your browser to a Google server and stored there, and may also be transferred to servers of Google LLC. in the USA. These processing operations are carried out pursuant to Art. 6 (1) lit. f GDPR based on Google’s legitimate interest in displaying personalized advertising based on your browsing behavior.

By using the Google login button on our website, you also have the option of logging in or registering on our website using your Google user data. Only if you give your express consent prior to the registration process based on a corresponding notice about the exchange of data with Google, we receive from Google, depending on your personally set privacy settings, the general and publicly accessible information stored in their profile. This includes user ID, name, profile picture, age, and gender.

Please note that after changes to Google’s data protection and usage policies, granting consent may also result in the transfer of your profile pictures, user IDs of your friends, and friend list if they are marked as "public" in your Google privacy settings. The data transmitted by Google is used by us to create a user account with the required data (salutation, first name, last name, address data, country, e-mail address, date of birth), if these were released by you on Google. Conversely, data (e.g., information about your browsing or purchasing behavior) can be transferred from us to your Google profile based on your consent.

The consent granted can be revoked at any time by sending a message to the controller named at the beginning of this privacy policy.

For details on the purpose and scope of data collection and the further processing and use of the data by Google, as well as your rights and settings options to protect your privacy, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de

The terms of use for "Google Sign-In" can be found here: https://policies.google.com/terms

If you do not want Google to directly associate the data collected via our website with your Google profile, you must log out of Google before visiting our website. You can also completely block the loading of Google plugins with add-ons for your browser, e.g., "Adblock Plus" (https://adblockplus.org/de/).

8) Data Processing for Order Fulfillment

8.1 – Transmission of Image Files for Order Fulfillment via Upload Function
We offer customers the possibility to order the personalization of products by transmitting image files via an upload function on our website. The submitted image motif is used as a template for the personalization of the selected product.

Via the upload form on the website, the customer can transmit one or more image files directly from the storage of the used device to us via automated, encrypted data transmission. We collect, store, and use the transmitted files exclusively for the production of the personalized product as described in the respective service description on our website. If the transmitted image files are forwarded to specific service providers for order fulfillment, you will be explicitly informed about this in the following sections. There will be no further transfer. If the transmitted files or digital motifs contain personal data (especially images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) lit. b GDPR. After the order has been completed, the transmitted image files are automatically and completely deleted.

8.2 For the processing of your order, we work with the following service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the information below.

The personal data collected by us will be passed on to the transport company entrusted with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the commissioned credit institution within the framework of payment processing, if this is necessary for payment processing. If payment service providers are used, we will explicitly inform you below. The legal basis for passing on the data is Art. 6 (1) lit. b GDPR.

8.3 Transfer of Personal Data to Shipping Service Providers
- DHL
If delivery is made by the shipping service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will forward your e-mail address pursuant to Art. 6 (1) lit. a GDPR before delivery for the purpose of coordinating a delivery date or delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we only transfer the name of the recipient and the delivery address to DHL for the purpose of delivery pursuant to Art. 6 (1) lit. b GDPR. Data transfer only occurs as far as necessary for the delivery of goods. In this case, it is not possible to arrange a delivery date with DHL or delivery notification.
Consent can be withdrawn at any time with effect for the future from the controller mentioned above or from DHL.
- DPD
If delivery is made by the shipping service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will forward your e-mail address and your telephone number before delivery in accordance with Art. 6 (1) lit. a GDPR for the purpose of arranging a delivery date or delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we only transfer the name of the recipient and the delivery address to DPD for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. Data transfer only occurs as far as necessary for the delivery of goods. In this case, it is not possible to arrange a delivery date with DPD or delivery notification.
Consent can be withdrawn at any time with effect for the future from the controller mentioned above or from DPD.
- FedEx
If delivery is made by FedEx (FedEx Express Germany GmbH, Langer Kornweg 34 k,65451 Kelsterbach), we will forward your e-mail address and telephone number before delivery in accordance with Art. 6 (1) lit. a GDPR for the purpose of arranging a delivery date or delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we only transfer the name of the recipient and the delivery address to FedEx for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. Data transfer only occurs as far as necessary for the delivery of goods. In this case, it is not possible to arrange a delivery date with FedEx or delivery notification.
Consent can be withdrawn at any time with effect for the future from the controller mentioned above or from FedEx.
- GLS
If delivery is made by GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein), we will forward your e-mail address in accordance with Art. 6 (1) lit. a GDPR before delivery for the purpose of arranging a delivery date or delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we only transfer the name of the recipient and the delivery address to GLS for the purpose of delivery pursuant to Art. 6 (1) lit. b GDPR. Data transfer only occurs as far as necessary for the delivery of goods. In this case, it is not possible to arrange a delivery date with GLS or receive status updates on the delivery.
Consent can be withdrawn at any time with effect for the future from the controller mentioned above or from GLS.
- Austrian Post
If delivery is made by the Austrian Post (Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria), we will forward your e-mail address before delivery in accordance with Art. 6 (1) lit. a GDPR for the purpose of arranging a delivery date or delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we only transfer the name of the recipient and the delivery address to Austrian Post for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. Data transfer only occurs as far as necessary for the delivery of goods. In this case, it is not possible to arrange a delivery date or receive status updates.
Consent can be withdrawn at any time with effect for the future from the controller mentioned above or from Austrian Post.
- TNT
If delivery is made by TNT (TNT Express GmbH, Haberstraße 2, 53842 Troisdorf), we will forward your e-mail address before delivery in accordance with Art. 6 (1) lit. a GDPR for the purpose of arranging a delivery date or delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we only transfer the name of the recipient and the delivery address to TNT for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. Data transfer only occurs as far as necessary for the delivery of goods. In this case, it is not possible to arrange a delivery date with TNT or receive status updates.
Consent can be withdrawn at any time with effect for the future from the controller mentioned above or from TNT.
- UPS
If delivery is made by UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will forward your e-mail address before delivery in accordance with Art. 6 (1) lit. a GDPR for the purpose of arranging a delivery date or delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we only transfer the name of the recipient and the delivery address to UPS for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. Data transfer only occurs as far as necessary for the delivery of goods. In this case, it is not possible to arrange a delivery date with UPS or receive status updates.
Consent can be withdrawn at any time with effect for the future from the controller mentioned above or from UPS.

8.4 Use of Payment Service Providers
- Mollie
If you choose a payment method offered by the payment service provider Mollie, payment processing will be carried out via Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, to whom we transmit the information provided during the ordering process together with information about your order (name, address, IBAN, BIC, invoice amount, currency, and transaction number) pursuant to Art. 6 (1) lit. b GDPR. Your data will only be transferred to the extent necessary for payment processing.

- Paypal
For payments via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"), within the scope of payment processing in accordance with Art. 6 (1) lit. b GDPR and only to the extent required for payment processing.
PayPal reserves the right to conduct a credit check for certain payment methods. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal’s legitimate interest in determining your ability to pay. The result of the credit check with respect to the statistical probability of default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain score values. Score values are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. For further data protection information, including on the credit agencies used, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by notifying PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

- SOFORT
If you select the "SOFORT" payment method, payment processing will be carried out via SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we transmit the information provided during the ordering process together with information about your order in accordance with Art. 6 (1) lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Data will only be transferred for the purpose of payment processing and only to the extent necessary. Further information on SOFORT’s data protection provisions can be found at: https://www.klarna.com/sofort/datenschutz.

9) Web Analytics Services

Google (Universal) Analytics with Google Signals

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files stored on your device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a server of Google and stored there, which may also involve transmission to Google LLC servers in the USA.

This website uses Google (Universal) Analytics only with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a server of Google LLC. in the USA and shortened there.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.

Google Analytics enables the creation of statistics about the age, gender, and interests of website visitors via the special function "demographic characteristics", based on an evaluation of interest-based advertising and the inclusion of third-party information. This allows the definition and differentiation of user groups for targeted marketing measures. Data sets collected via "demographic characteristics" cannot be assigned to a specific person.

All processing described above, especially the setting of Google Analytics cookies for reading information on the device used, will only take place if you have given us your express consent pursuant to Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics will not be used during your website visit.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website. We have entered into a data processing agreement with Google for the use of Google Analytics, obliging Google to protect the data of our site visitors and not to pass it on to third parties. For data transfers from the EU to the USA, Google relies on so-called Standard Contractual Clauses of the European Commission to ensure compliance with European data protection standards in the USA.

For more information about Google (Universal) Analytics, see: https://policies.google.com/privacy?hl=de&gl=de

This website also uses Google Signals as an extension to Google Analytics. With Google Signals, we can have Google generate cross-device reports (so-called “Cross Device Tracking”). If you have activated "personalized ads" in your Google account settings and have linked your internet-enabled devices with your Google account, Google may analyze user behavior across devices and create database models based on this with your consent to the use of Google Analytics in accordance with Art. 6 (1) lit. a GDPR. This considers the logins and device types of all visitors who were logged into a Google account and completed a conversion. The data shows, for example, on which device you first clicked on an ad and on which device the associated conversion took place. We do not receive any personal data from Google, only statistics based on Google Signals. You can disable the “personalized ads” function in your Google account settings and thus turn off cross-device analysis. See the instructions here: https://support.google.com/ads/answer/2662922?hl=de

For more information about Google Signals, see: https://support.google.com/analytics/answer/7532985?hl=de

10) Retargeting / Remarketing / Referral Advertising

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, which allows us to advertise this website in Google search results and on third-party websites. Provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in your browser that automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. The processing is based on our legitimate interest in optimal marketing of our website according to Art. 6 (1) lit. f GDPR.

Further data processing only takes place if you have agreed with Google that your web and app browsing history will be linked to your Google account and information from your Google account will be used to personalize ads you see on the web. If you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this, your personal data is temporarily linked by Google with Google Analytics data to form target groups. Using Google Ads Remarketing may involve the transmission of personal data to Google LLC servers in the USA.

You can permanently opt out of setting cookies by Google Ads Remarketing by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/onweb/

Further information and the privacy policy regarding advertising and Google can be found at:
https://www.google.com/policies/technologies/ads/

If legally required, we have obtained your consent for the data processing described above in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie consent tool provided on the website or follow the aforementioned objection procedure.

11) Tools and Miscellaneous

11.1 - FontAwesome
This site uses so-called web fonts for uniform display of fonts, provided by FontAwesome (Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA). When you access a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly.

For this purpose, the browser you use must connect to the servers of FontAwesome, which may also result in the transfer of personal data to FontAwesome servers in the USA. In this way, FontAwesome becomes aware that our website has been accessed via your IP address. The use of FontAwesome fonts is in the interest of a uniform and attractive presentation of our online offers and is based on our legitimate interest according to Art. 6 (1) lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer.

More information on FontAwesome: https://fontawesome.com/privacy

- Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). When you visit a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly.

For this purpose, the browser you use must connect to Google's servers, which may also involve transferring personal data to Google LLC servers in the USA. In this way, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers and is based on our legitimate interest according to Art. 6 (1) lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer.

More info on Google Web Fonts: https://developers.google.com/fonts/faq
Google privacy policy: https://www.google.com/policies/privacy/

11.2 Google reCAPTCHA
On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is being abused by automated processing. The service includes the transmission of the IP address and, if necessary, other data required by Google for the reCAPTCHA service and is carried out based on our legitimate interest according to Art. 6 (1) lit. f GDPR to establish individual responsibility on the internet and prevent misuse and spam. The use of Google reCAPTCHA may involve the transmission of personal data to Google LLC servers in the USA.

Further information on Google reCAPTCHA and Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/
If legally required, we have obtained your consent for the processing described above in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please use the objection procedure described above.

11.3 - Elasticsearch
This website uses the “Elasticsearch” service of ELASTIC, 800 West El Camino Real, Suite 350, Mountain View, California 94040, USA, to provide a search function for articles via the search box and for navigation and filters.

For this purpose, Elasticsearch collects and stores certain user information (such as the user or session ID) in anonymized form.
If personal data is processed in this context, processing is carried out on the basis of our legitimate interest in providing a fault-tolerant article search and making it easier to find our products in the shop and thus optimal marketing of our offer, according to Art. 6 (1) lit. f GDPR.
More information on Elasticsearch’s privacy policy: https://www.elastic.co/de/legal/privacy-statement

12) Rights of the Data Subject

Current data protection law grants you comprehensive rights as a data subject vis-à-vis the controller regarding the processing of your personal data (rights to information and intervention), about which we inform you below:

- Right to information according to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the guarantees under Art. 46 GDPR if your data is transferred to third countries;

- Right to rectification according to Art. 16 GDPR: You have the right to have incorrect data concerning you corrected without delay and/or your incomplete data stored by us completed;

- Right to erasure according to Art. 17 GDPR: You have the right to request erasure of your personal data where the requirements of Art. 17 (1) GDPR are met. This right does not apply in particular if the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

- Right to restriction of processing according to Art. 18 GDPR: You have the right to request restriction of processing of your personal data as long as the accuracy of your data contested by you is checked, if you refuse deletion of your data due to unlawful data processing and instead request restriction of processing, if you need your data to assert, exercise, or defend legal claims after we no longer need this data once the purpose has been achieved, or if you have objected for reasons relating to your particular situation, as long as it is not yet clear whether our legitimate reasons outweigh yours;

- Right to be informed according to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, he/she is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

- Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transmission to another controller where technically feasible;

- Right to withdraw consent given according to Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal;

- Right to lodge a complaint according to Art. 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work, or place of the alleged infringement.