Privacy policy (European countries)

Privacy Policy for the website https://watchdreamer.com/

Watchdreamer Germany GmbH, Selkamp 14, 44287 Dortmund (hereinafter referred to as “we” or “WD”) operates the website Watchdreamer, including an online store (hereinafter collectively referred to as the “website”), which can be accessed on the Internet at https://watchdreamer.com/ and its respective subdirectories.

This privacy policy informs you on the personal data we collect when you visit our website and buy our products and how we process it. With this privacy policy, we also fulfil our obligation to inform you pursuant to Art. 13 GDPR.

I. Identity and contact details of the controller

The controller is the

Watchdreamer Germany GmbH

Selkamp 14

44287 Dortmund

E-mail: info-de@watchdreamer.com

II. Purposes of processing, its legal basis and the period for which the data will be stored

1. General use of the website

Our webserver registers all connections to the website automatically and collects the following technical information about your visit:

Your IP address
Content that was accessed
Information about data transmissions
Date and time of retrieval
The amount of data transmitted
Your provider
The referrer and
Your used web browser/user agent

We process this data to establish a connection with your device over the Internet. The respective purposes of the processing also constitute our legitimate interests we pursue with it (Art. 6 par. 1 lit. f) GDPR). After your visit, your IP address will be anonymized and the remaining data will be stored in so-called log files. We keep our log files for 60 days and delete them afterwards.

2. Contact

We offer you the possibility to contact us, for example by e-mail, by phone, by post or via our e-mail address mentioned above. In this case you provide us with data such as, for example, when contacting us by e-mail automatically your e-mail address and, if applicable, your name, a subject and the content of the message. We process this data in each case in order to be able to answer your inquiry. For this purpose, we also have a legitimate interest in data processing (Art. 6 para. 1 lit. f) GDPR). The storage period of your inquiry depends on the reason and the context of your inquiry. Inquiries in connection with orders are stored for the duration of the processing of the order and as long as statutory retention periods apply. Otherwise, we will store your inquiries for a maximum period of three (3) months and delete them afterwards.

3. Orders

In order to process an order, you must specifically provide your first and last name, title, billing and shipping address, zip code, phone number, email address, desired payment method and related information. We process these data for the purpose of executing the purchase contract or, in the case of uncompleted orders, for the preparation thereof.

We use third party services for payment and shipping of orders. For example, depending on the payment method you choose, you will be redirected to the website of the payment service provider that carries out the payment. We only pass those data on to these third parties that are necessary for the transactions they carry out. Such additional data is used solely for the purpose of immediate payment processing and is not stored permanently. For payment processing via the payment service provider, the data protection regulations of the respective provider apply.

The processing of order, inventory and billing data is based on Art. 6 para. 1 lit. b) GDPR.

We are also required by law to store certain data such as invoices, contracts and other information relevant to accounting for a certain period of time. This data is regularly stored for ten (10) years; data relating to uncompleted orders is stored for three (3) months and then deleted.

4. Financing

Sie haben im Rahmen Ihrer Bestellung die Möglichkeit, eine Finanzierung durch unseren Partner Solarisbank AG anzufragen. Die in diesem Zusammenhang angegebenen Daten werden für die Prüfung, ob eine solche Finanzierung möglich ist, und im Falle einer positiven Kreditentschei-dung für die Verwaltung des Darlehens verarbeitet. Die Solarisbank AG benötigt zu diesem Zweck weitere personenbezogene Angaben. Zu diesen Informationen gehören insbesondere Ihre berufliche Situation (beispielsweise: arbeitslos, unbefristetes Arbeitsverhältnis, befristetes Arbeitsverhältnis, Arbeitsunfähigkeit, Selbstständigkeit) und Ihre Bonität, die ggf. durch Dritte (Auskunfteien) verifiziert wird. Darüber hinaus werden Sie von der Solarisbank AG gebeten, Ihr Alter und Ihre Identität rechtssicher zu verifizieren. Bei alledem fungieren wir und die Solarisbank AG als gemeinsame Verantwortliche gemäß Art. 26 DSGVO. Das bedeutet, wir und die Solaris-bank AG legen gemeinsam Zwecke und Mittel der Verarbeitung Ihrer personenbezogenen Da-ten fest. WD ist dabei Ihr Ansprechpartner für alle Anliegen und Fragen.

Über weitere Einzelheiten der im Rahmen der Finanzierung stattfindenden Datenverarbeitung unterrichtet Sie die Solarisbank AG im Zuge der Kreditprüfung. Darüber hinaus gehende Infor-mationen über die Solarisbank AG können Sie der unter [www.solarisbank.de](http://www.solarisbank.de/) abrufbaren Web-site entnehmen.

Die Verarbeitung zu Zwecken der Finanzierung erfolgt aufgrund von Art. 6 Abs. 1 lit. b) DSGVO.

If you think that the financing partner‘s decision is unfounded, you must address any complaints directly to the financing partner. WD has no influence on the financing partner’s reasons for a refusal of financing.

5. Newsletter

You have the possibility to subscribe to our newsletter via a double opt-in procedure. By subscribing, you agree to receive our regular newsletter, which may contain current information about WD, references to special product offers, and advertising for other WD services and benefits. Your e-mail address will be used by us for our own advertising purposes after registration. You may unsubscribe at any time by using the function provided for this purpose in the newsletter or by sending an e-mail to info-de@watchdreamer.com. Your e-mail address will be saved to enable the newsletter to be sent. The legal basis for the corresponding processing of your data is Art. 6 para. 1 lit. a) GDPR.

We also process the time of registration and your double opt-in confirmation. We process your data in order to pursue our legitimate interest and to prove legal compliance. The legal basis for this is Art. 6 para. 1 lit. f) GDPR and Art. 6 para. 1 lit. c) GDPR in connection with Art. 5 para. 2 GDPR. We also analyze your use of our newsletter, e.g. whether you have opened it or clicked on certain links, and process this data to optimize and improve our newsletter. This purpose also corresponds to our legitimate interest, which we pursue with this processing, Art. 6 para. 1 lit. f) GDPR.

We will only use your e-mail address for advertising purposes with your consent. However, we reserve the right to send you advertising by e-mail for products even without your express consent if you have already purchased a similar product via our website, if we have received your e-mail address from you in connection with this purchase, if you have not objected to the corresponding use of your e-mail address and if you have been informed of your right to object when the data was collected. You can object to the use of your e-mail address at any time by sending an e-mail to info-de@watchdreamer.com. This will not incur any costs other than the transmission costs that you may have to pay for sending e-mails. The legal basis for the corresponding processing of your data is Art. 6 para. 1 lit. f) GDPR and Art. 95 GDPR in conjunction with § 7 para. 3 German German Act against Unfair Competition, whereby the legitimate interest of us is the possibility to advertise certain sales offers.

III. Recipients and transfers to third countries

Your data is primarily transmitted to WD and may also be transmitted to our parent company in Switzerland Watchdreamer SA, Chemin du Pré-de-la-Tour 7, 1009 Pully. Our parent company is located in Switzerland and therefore outside the European Union. The European Commission has decided by means of a so-called adequacy decision pursuant to Art. 45 GDPR that Switzerland offers an adequate level of protection for personal data.

Within WD, the departments responsible for handling your data will have access to your data. We also use external service providers if we are unable to provide services ourselves or if it would be unreasonable to do so. These external service providers are primarily providers of IT services, such as our hosting company, e-mail providers or telecommunications providers.

If you wish to obtain financing, we will transfer the necessary personal data to our financing partner in order to fulfill your request. The financing partner is located in Germany.

In all other respects a transfer to third countries outside the European Union does not take place and if it does, then only to the extent that the requirements of the GDPR for a secure transfer to the third country are fulfilled.

IV. Storage duration

Log files are stored for 60 days.

We will store your e-mails and contacts for as long as necessary to process your request and for a period of three (3) months if you contact us again with regard to your initial question.

This does not apply to data which is processed in the context of orders and which we are entitled to process for the purpose of processing these orders and which we still need or which we are legally obliged to keep. Due to legal obligations, certain information, especially concerning the contractual relationship with you, must be kept for at least 10 years.

Your e-mail address will be processed for sending the newsletter until you have revoked your corresponding consent.

In all other respects, the periods of time already arranged above shall apply.

V. Rights of data subject

If the respective requirements are met, the GDPR grants you certain rights as a data subject.

Art. 15 GDPR – Right of access: You shall have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain information.

Art. 16 GDPR – Right to rectification: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Art. 17 GDPR – Right to erasure: You shall have the right to obtain from us the erasure of personal data concerning you without undue delay.

Art. 18 GDPR – Right to restriction of processing: You shall have the right to obtain from us the restriction of processing.

Art. 20 GDPR – Right to data portability: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you shall have the right to transmit those data to another controller without hindrance from us. You shall also have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

Art. 77 GDPR – Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Right to object and right to withdraw your consent:

Art. 21 GDPR – Right to object: You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on legitimate interests or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

In such case, we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms or where the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you shall have the right to object at any time for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Right to withdraw your consent: Where the processing is based on your informed consent, you shall have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Therefore, you may click on a link in any newsletter e-mail or send us a message to one of our e-mail addresses. If you inform us in this message that you do not wish to receive any future e-mails, we will not send any more messages to the e-mail address you have provided.

VI. Obligation to provide us with personal data

You have no statutory or contractual obligation to provide us with any personal data. However, we may not be able to provide you with our services if you decide not to do so.

VII. Existence of automated decision-making (including profiling)

We do not use any automated decision making processes that may have legal effects on you or affect you.

If you wish to finance your order through an external financing partner, it may be the case that the financing partner use automated decision-making e.g. to do credit check. The decision to grant financing will be made without the involvement of WD.

VIII. Internet-specific data processing or use of personal data

1. Cookies

Within the framework of our website, we also use cookies that are set on your terminal device either by us or by third parties. Cookies do not execute any programs and cannot infect your end device with viruses or other malware. We use so-called session cookies, which are automatically deleted after you end your browser session, as well as cookies which only delete themselves after a certain amount of time has elapsed. How long this duration is in individual cases can be displayed in your browser. We use cookies for various purposes, for example to provide you with certain technical functions that make your use of our site more convenient and enjoyable or to analyze how you use our site. Usually cookies do not contain any personal data. If this is nevertheless the case, this data processing is justified on the basis of Art. 6 para. 1 lit. f) GDPR, as the above-mentioned purposes are in our legitimate interest.

We also use certain technologies on our website that also rely on the use of cookies or similar technologies such as pixels or tags. Below you will find more detailed information on this and for what purposes these technologies are used in practice.

If you want to generally prevent the use of cookies, your browser has the option of preventing the acceptance and storage of new cookies. To find out how this works with the browser you use, you can use the help function of your browser or contact the manufacturer. Please note that in this case our website may not be able to be used to its full extent.

The following cookies are used:

A. Cookies which are essential to the operation of the Website

The required cookies make the website usable by providing basic functions such as page navigation and access to secure areas. Without these cookies, the website cannot function properly.

Name: _cfduid
Provider: Cloudflare
Purpose / Description: The _cfduid Cookie helps Cloudflare detect malicious visitors to the website and minimises the blocking of legitimate users.
Information recorded / processed: The _cfduid Cookie collects and anonymises the IP addresses of end users by using a unidirectional hashing of certain values so that they cannot be personally identified.
Duration and expiry: 30 days
Type: HTTP Cookie

Name : SSESS+hash
Provider: Watch Dreamer SA
Purpose / Description: Stores the information entered during check-out between the various steps and the sessions of the visitor
Information recorded / processed: Single session ID
Duration and expiry: 21 days
Type : HTTP Cookie

Name: cookie-agreed
Owner: Watch Dreamer SA
Purpose / Description: Records the user’s choice when choosing to accept the use of cookies.
Information recorded / processed: Visitor's choice
Duration and expiry: 7 days
Type: HTTP Cookie

Name: WDStoreMismatch
Owner: Watch Dreamer SA
Purpose / Description: Records the user’s choice to be in the wrong store depending on his location based on the IP address.
Information recorded / processed: Visitor’s choice to display the warning message
Duration and expiry: 1 day
Type: Preferences

B. Preferential/functional Cookies

Preference cookies / functional cookies are useful for the operation of the website, especially to remember your interactions and actions etc. In particular, they enable the storage of information that influences the behaviour or appearance of the website.

Name: WDStoreLang
Owner: Watch Dreamer SA
Purpose / Description: Records the country / language preferences of the visitor. Detection of the country by IP address.
Information recorded / processed: Country code and language code
Duration and expiry: 90 days
Type: Preferences

C. Marketing Cookies

Marketing cookies are specifically used to serve ads that are relevant and attractive to you based on your preferences.

Name: _fbp
Owner: Facebook
Purpose / Description: This Cookie is set by Facebook to advertise when the user is on Facebook or a digital platform operated by Facebook
Information recorded / processed: Login identification
Duration and expiry: 60 days
Type: HTTP Cookie

Name: _pin_unauth
Owner: Pinterest
Purpose / Description: This is a first party cookie placed by the Pinterest tag when they are unable to match the user. It contains a unique UUID to group actions across pages.
Information recorded / processed: Unique identification of the visitor
Duration and expiry: 365 days
Type: HTTP Cookie

Name: _tt_enable_cookie, _ttp
Owner: TikTok
Purpose / Description: We use TikTok to market ourselves using the TikTok cookie that collects data about behaviour and purchases on our website and to measure the effect of our advertising. This tracking is used to evaluate and measure how different campaigns and marketing strategies perform on TikTok.
Information recorded / processed: Unique identification of the visitor
Duration and expiry: 13 months
Type: HTTP Cookie

Name: WdAnalyticsUtmCollection
Owner: Watch Dreamer SA
Purpose / Description: Records advertising campaign tracking data
Information recorded / processed: Source, medium, campaign, keywords
Duration and expiry: 90 days
Type: HTTP Cookie

Name: WdAnalyticsClickld & ken_gclid
Owner: Watch Dreamer SA
Purpose / Description: Records the tracking parameter that enables information links between Google Ads and Google Analytics
Information recorded / processed: Unique identification of the visitor
Duration and expiry: 90 days
Type: HTTP Cookie

Name: outbrain.com
Owner: Outbrain
Purpose / Description: Records and tracks conversions
Information recorded / processed: Unique identification of the visitor
Duration and expiry: 24 hours
Type: HTTP Request

Name: teads.tv
Owner: Teads
Purpose / Description: Identify a user in order to provide the same level of services, such as reporting and targeting information to users, segmenting users, and capping the number of times the same ad is shown to the same user
Information recorded / processed: Teads uses an identification methodology based on IP address non-reversible encryption, browser, and device characteristics.
Duration and expiry: 365 days
Type: HTTP Request

Name: adnxs.com
Owner: AppNexus
Purpose / Description: Collects data from a range of online and sometimes offline sources and provides data to advertisers directly or via its exchange
Information recorded / processed: Unique identification of the visitor
Duration and expiry: 365 days
Type: HTTP Request

D. Statistical / productivity Cookies

Statistical cookies / productivity cookies, e.g. in connection with Google Analytics, help us understand how users interact with the website by collecting and reporting anonymous information.

Name: _gcl_au
Owner: Google
Purpose / Description: Used by Google Analytics to understand user interaction with the Website.
Information recorded / processed: Internal identification
Duration and expiry: 90 days
Type: Analytics

Name: _ga
Owner: Google Analytics
Purpose / Description: Used to compute visitor, session, campaign data and to keep track of the use of the Website for Website analysis reporting.
Information recorded / processed: Number generated randomly to identify unique visitors
Duration and expiry: 2 years
Type: HTTP Cookie

Name: _gid
Owner: Google Analytics
Purpose / Description: Used to store information about the use of a website by visitors and creates an analytical report on the functioning of the website
Information recorded / processed: Number of visitors, their source and the page visited in pseudonymised form.
Duration and expiry: 1 day
Type: HTTP Cookie

Name: _gat_UA-126103277-1
Owner: Google
Purpose / Description: Attribute Cookie. Contains the unique identification number of the account or website to which it relates.
Information recorded / processed: This is a variant of the gat_cookie which is used to limit the amount of data stored by Google on high traffic websites.
Duration and expiry: 1 minute
Type: HTTP Cookie

Name: _hjid & _hjIncludedInSample
Owner: Hotjar
Purpose / Description: This Cookie is created when the customer first arrives on a page containing the Hotjar script. It is used to keep the random user ID, unique to this site on the browser. This ensures that user behaviour during subsequent visits to the same site will be assigned to the same user ID.
Information recorded / processed: Single random identifier per session
Duration and expiry: Per session
Type: HTTP Cookie

Name: tangiblee:widget:user, tangiblee_user_flow, tangiblee_widget_open_last_date, _ga_tng_gid, _ga_tng & _gat_tangiblee
Owner: Tangiblee
Purpose / Description: Records the user behaviour with the Tangiblee pop-in and augmented reality mobile application.
Information recorded / processed: Unique identification of the visitor
Duration and expiry: 365 days
Type: HTTP Cookie

2. Campaign Monitor

We use Campaign Monitor for our newsletter service. The provider is Campaign Monitor, Level 38/201 Elizabeth Street, Sydney NSW 2000, Australia (“Campaign Monitor”).

Campaign Monitor is a service that among other things can be used to organize and analyze the sending of newsletters. When you enter data for the purpose of receiving newsletters (e.g. e-mail address), this data is stored on Campaign Monitor's servers in the USA.

Campaign Monitor allows us to analyze our newsletter campaigns. When you open an e-mail sent with Campaign Monitor, a file contained in the e-mail (called a web beacon) connects to Campaign Monitor’s servers in the USA. This allows us to determine whether a newsletter message has been opened and which links have been clicked on, if any. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

The data processing is based on your consent (Art. 6 para. 1 lit. a) GDPR). You can revoke this consent at any time by unsubscribing the newsletter.

We have concluded standard contracutal clauses with Campaign Monitor, available at: https://www.campaignmonitor.com/policies/#terms-of-use.

In this context, Campaign Monitor’s privacy policy applies. It is available at https://www.campaignmonitor.com/trust/gdpr-compliance/.

3. Stripe

We offer payments via Stripe on our website. Stripe is a payment service provided by Stripe Payments Europe, Limited, C/O A&L Goodbody, Ifsc, North Wall Quay Dublin 1., Dublin 1, Dublin (“Stripe”).

After completing your order, you will be redirected to a Stripe website to complete your payment. Data (such as your name, your address, and other data that are necessary for the payment) entered by you in the course of the order is therefore transmitted to Stripe. After completing your payment at Stripe, Stripe informs us that your payment has been successfully completed.

The transfer of your data is exclusively for the purpose of payment processing with the Stripe. The transfer of your data to Stripe is based on Art. 6 par. 1 lit b) GDPR.

In this context, Stripe’ privacy policy applies. It is available at https://stripe.com/de/privacy.

4. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (”Google LLC”). Google Analytics uses ”cookies”, which are text files placed on your computer, to help the website analyze how users use the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The IP address is made anonymous by shortening before transmission to the USA. We have concluded standard contracutal clauses with Google LLC, available at: https://privacy.google.com/businesses/processorterms/. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services related to the use of the website and the internet. Google will not merge your IP address with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Opt-out- objection against web analytics

If you do not agree with the storage and use of usage data by Google Analytics as described above, you can deactivate the web analysis and in this way declare your objection to the data collection and use that takes place during these web analysis measures.

To deactivate Google Analytics, you need an appropriate browser add-on from Google LLC. The add-on tells the JavaScript of Google Analytics that you do not want information about your website visit to be transmitted to Google Analytics. You must download and install the add-on. For more information on how to disable Google Analytics and all information on downloading the add-on, please visit https://tools.google.com/dlpage/gaoptout?hl=de.

Web analytics will remain disabled as long as the Google add-on is not disabled or deleted by you. Therefore, please do not delete the add-on as long as web analytics is not wanted. If you access sparwelt.de from different computers or with different browsers, you must add the add-on separately for each computer or browser used.

5. Google Marketing Platform (formerly DoubleClick)

This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (”Google Ltd.”). DoubleClick uses cookies to serve ads that are relevant to you. This involves assigning a pseudonymous identification number (ID) to your browser or device in order to verify which ads were shown in your browser and which ads were viewed. This can improve campaign performance or, for example, prevent you from seeing the same ad more than once. Google Ltd. may also use cookie IDs to track conversions related to ad requests. For example, when a user sees a Campaign Manager ad and later visits the advertiser's website using the same browser and makes a purchase. Google Ltd. states that the cookies do not contain any personally identifiable information.

Due to the technology used, your browser automatically establishes a direct connection with the server of Google Ltd. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google Ltd. receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google Ltd. service, Google Ltd. can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address. In doing so, data may be transmitted to Google LLC. in the USA.

We have concluded standard contractual clauses with Google LLC, available at: https://privacy.google.com/businesses/processorterms/.

You can object to the processing of the data in our cookie settings.

You can find more information on data protection at Google at https://policies.google.com/privacy.

6. Hotjar

This website uses Hotjar, a web analytics service provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians STJ 1000, Malta (“Hotjar”). Hotjar uses cookies. The information generated by the cookies about your use of the website is typically transferred to and stored on a Hotjar server. Hotjar will use this information to evaluate your use of the website and to compile reports on website activity. The following information is stored in particular: IP address in anonymized form; web pages viewed and movement patterns on these pages; number and position of clicks on links; browser type and version; screen size of the end device used.

According to Hotjar, personal data or movements on profile pages that contain personal data are not stored. In particular, according to Hotjar, IP addresses are only stored in anonymous form.

Further information about data protection and Hotjar can be found in Hotjar 's privacy policy: https://www.hotjar.com/privacy.

In addition, Hotjar offers the possibility to object to data processing by the cookie for the future by observing the “Do Not Track” function of browsers.

You can find out how to activate this function here: https://www.hotjar.com/opt-out.

7. Cloudflare

We use the Cloudflare service to improve the security of the website and to protect it from attacks by third parties. Cloudflare is an offer of Cloudflare, Inc, 101 Townsend St., San Francisco, CA 94107, USA (”Cloudflare”).

Cloudflare operates a content delivery network to deliver and protect this website over its own server and network infrastructure. This serves for example to defend against so-called DDoS attacks.

We concluded with the Cloudflare standard contractual clauses, available under: https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa.pdf.

Further information about Cloudflare and data protection at Cloudflare can be found here: https://www.cloudflare.com/security-policy/ as well as https://www.cloudflare.com/privacyshield/

8. Facebook Website Custom Audience

This website also uses the product Website Custom Audiences of the social network Facebook. This product is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). By calling up this pixel and the cookies set by Facebook or third parties from your browser, Facebook can subsequently recognize whether a Facebook advertisement was successful, e.g. whether it led to an online purchase. We receive exclusively statistical data from Facebook for this purpose without reference to a specific person. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. In addition, the data collected from the pixel is used in certain situations to play out target group-specific advertising. In particular, if you are logged in to Facebook, we refer you to their privacy information https://www.facebook.com/about/privacy/.

For more information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your options for privacy settings, please refer to the Facebook privacy policy, which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation.

We have concluded standard contractual clauses with Facebook, available at https://www.facebook.com/about/privacyshield & https://www.facebook.com/help/566994660333381.