Use of advertising tracking tools/other
Use of Google Analytics
With your consent, we use the Google Analytics web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Google Ireland Limited is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Accordingly, Google Ireland Limited is the company affiliated with Google that is responsible for processing your data and ensuring compliance with applicable data protection laws. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The information generated by this about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The use of cookies or similar technologies takes place with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. For more information on terms of use and data protection, please visit
https://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/
https://policies.google.com/technologies/cookies?hl=de.
Use of Google Ads incl. conversion tracking
With your consent, we use the Google Ads offer from Google to draw attention to our attractive offers with the help of advertising media on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns.
These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually lose their validity after 6 0 days and are not intended to identify you. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of a Google Ads customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Google Ads customer. We only receive statistical evaluations from Google to measure the success of our advertising media.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO (consent). The storage period at Google is a maximum of eighteen months . Further information on data protection at Google can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html .
Use of Google Remarketing
In addition to Ads with Conversion, we use the Google Remarketing application from Google. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behavior when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be processed by Google. In particular, according to Google, pseudonymization is used in remarketing.
The legal basis for the processing is your consent - Art. 6 para. 1 lit. a DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.
Use of Facebook Custom Audience
Furthermore, with your consent, we use the "Website Custom Audiences" function of Meta (provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: "Meta"). Via so-called web beacons, such as the "Facebook pixel", statistical information about you is collected, which is processed by Facebook. This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the Facebook social network or other websites that also use the procedure.
With the help of the "Facebook Pixel", your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of the "Facebook Pixel", Facebook receives the information that you have called up the corresponding website of our Internet presence or clicked on an ad from us. In doing so, Facebook receives the information that you have called up certain parts of our website. For this purpose, Facebook uses tracking technologies such as web beacons (tracking pixels) to set a cookie on your computer. Among other things, the data mentioned in the section "Access data" is transmitted. If you are registered with a Meta service, Meta can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.
The legal basis for the processing of your data is your consent Art. 6 para. 1 lit. a DSGVO . In this case, we do not store any personal data from you. We have no knowledge of the storage period at Meta and no possibility to influence it.
For more information about Meta's processing, please visit https://www.facebook.com/about/privacy.
Use of Facebook Analytics
With your consent, we also use the "Facebook Analytics" tool from Meta (provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: "Meta"). For the use of Facebook Analytics, we use the so-called "Facebook Pixel" to measure the reach of our advertisements. For this purpose, Meta uses tracking technologies such as web beacons (tracking pixels) to set a cookie on your computer. Among other things, the data mentioned in the section "Access data" is transmitted.
The information obtained with the help of the "Facebook cookie" is used solely for statistical purposes, is transmitted to us anonymously by Meta and does not provide any information about the person of the user. It is processed by Meta in accordance with their privacy policy with your Facebook account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.
The processing of your data takes place with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. In this case, we do not store any personal data from you. We have no knowledge of the storage period at Meta and no possibility to influence it.
For more information on Meta's privacy policy, please refer to the associated privacy policy at https://de-de.facebook.com/about/privacy/.
Use Captchas
We use a "Google reCAPTCHA" (hereinafter referred to as reCAPTCHA) in our webshop to verify data entry. The service is offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). With reCAPTCHA, we can check whether file entries (e.g. in contact forms) have been made by a human or by an automated program. The behavior of the website visitor is analyzed by the reCAPTCHA and starts when entering the webshop. Various information (e.g. IP address, time spent by the visitor in the webshop or mouse movements made by the user) are used as analysis features, which are evaluated by reCAPTCHA. The data collected in this process is forwarded to Google.
The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offerings from improper automated spying or improper use.
Further information on Google reCAPTCHA as well as Google's privacy policy can be found here: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html .
Use of web fonts
For the uniform presentation of our pages, we use web fonts that are hosted locally. No data is transferred to third parties.
Payment service provider
PayPal
On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").
If payment via PayPal is selected, the payment data entered by you will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. b DSGVO (contract performance). If the data is not provided, it may be impossible to conclude or perform the contract. We have no knowledge of the storage period at PayPal and no possibility to influence this.
Payment via Stripe
The payment service provider Stripe (Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland) is still available as a payment method. Your data will be transmitted to Stripe, whereby Stripe may perform an identity and creditworthiness check based on the data you provide (name, address, account number, bank routing number, credit card number, if applicable, invoice amount, currency and transaction number). The details can be found in the information displayed in our booking process. The legal basis for processing for payment processing is Art. 6 para. 1 lit. b DSGVO. The data processing is necessary for the performance of the contract. If the data is not provided, it may be impossible to conclude or perform the contract.
In the context of an identity and credit check based on your data, Stripe and we have a legitimate interest in the transmission of the personal data of the user concerned. Stripe and we require this in order to obtain information from credit agencies for the purpose of identity and credit checks on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO). This may be the credit agencies mentioned at https://stripe.com/de/privacy.
We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are legal retention obligations.
Further information on the privacy policy of the Stripe service can be found at: www.stripe.com/de/privacy.
Social media presences
Use of our meta services
We are jointly responsible for the use of our Facebook and Instagram offers with Meta Platforms Ireland Limited - hereinafter referred to as Meta - , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, https://www.facebook.com/help/contact/540977946302970 , as joint controller pursuant to Art. 26 DSGVO and the Facebook Page Insights Supplement (https://www.facebook.com/legal/terms/page_controller_addendum ).
Meta processes (personal) data when using Meta products - including when visiting our Facebook or Instagram page - even from persons who are not registered with any of the Meta services. Which (personal) data these are in detail, how, for which purposes and on which legal basis they are processed, is described by Meta in its data policy. (https://www.facebook.com/privacy/policy/?section_id=13-HowToContactMeta ) which applies to all Meta products. Information on how to contact Meta and on the settings options for advertisements, cookies, etc. can also be found there. The data may be transferred to countries outside the European Union.
For more information about the cookies Meta uses when having a Facebook account, using Meta Products (including the Website and Apps), or visiting other websites and apps that use Meta Products (including the "Like" button or other Facebook technologies), Meta provides the Cookie Policy (https://www.facebook.com/policies/cookies/ ). Information on how to manage information available about you can also be found at this link: https://www.facebook.com/policies/cookies/ .
When you visit our Facebook or Instagram page, Meta collects, among other things, your IP address. Together with other information that Meta receives through cookies, Meta provides us, as the operator of the Meta service, with statistical information about the use of the respective service (so-called page insights). These are aggregated data that show how users interact with the site. These Page Insights may be based on personal data collected by Meta in connection with a user's visit to or interaction with our respective Meta service and its content. Meta provides more information about this here: https://www.facebook.com/about/privacy .
We can use Page Insights to anonymously evaluate reach, page views, time spent on video posts, actions (likes, comments, sharing of posts), and by age, gender, and location (as indicated by users in their respective Facebook (meta) profiles). In this context, settings can be made for the evaluation of the reach or corresponding filters can be set with regard to the selection of a time period, the consideration of a specific post as well as demographic groupings (e.g. female, 20-30 years old). This data is anonymized, aggregated and abstracted. These settings therefore do not allow us to draw conclusions about individuals. The evaluation serves to optimize the offer on our pages for the purpose of public relations.
The legal basis for this data processing is Art. 6 para. 1 lit. a and f DSGVO.
We, as the provider of the information service, do not collect or process any other data from the use of the pages.
You have a right of appeal to the Irish Data Protection Commission (responsible for Meta Platforms Ireland Limited), (Art. 77 GDPR), irrespective of the rights against us.
If you have specific questions about the protection of your data, please contact our Data Protection Officer or the Data Protection Officer of Meta Platforms Ireland Limited https://www.facebook.com/help/contact/540977946302970.
Use of our Twitter service
We use the technical platform and services of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. for the short message service offered here. The responsible party for the data processing of persons living outside the United States is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
We would like to point out that you use the Twitter short message service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).
Information about which data is processed by Twitter and for which purposes can be found in Twitter's privacy policy: https://twitter.com/de/privacy
We have no influence on the type and scope of the data processed by Twitter, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect.
With the use of Twitter, your personal data will be processed by Twitter Inc. regardless of your residence in the United States, Ireland, and any other country in which Twitter Inc. conducts business.
On the one hand, Twitter processes your voluntarily entered data such as name and user name, e-mail address, telephone number or the contacts of your address book when you upload or synchronize it.
On the other hand, Twitter also evaluates the content you share to determine what topics you are interested in. Stores and processes confidential messages that you send directly to other users and can determine your location based on location data, wireless network information, or your IP address in order to send you advertising or other content.
Twitter Inc. may use analysis tools such as Twitter Analytics or Google Analytics for evaluation purposes. We have no influence on the use of such tools by Twitter Inc. If tools of this type are used by Twitter Inc., we have neither commissioned this nor approved or supported this in any other way. Nor are the data obtained from this analysis made available to us. Only certain non-personal information about tweet activity, such as the number of profile or link clicks through a particular tweet, is viewable in our account. We have no way to prevent or disable the use of such tools on their Twitter account.
Since Twitter Inc. is a non-European provider with a European branch only in Ireland, it is bound by European data protection regulations. This concerns, for example, your rights to information, blocking or deletion of data or the possibility to object to the use of usage data for advertising purposes.
You have options for restricting the processing of your data in the general settings of your Twitter account and under the item "Privacy and security". In addition, you can restrict Twitter's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used.
More information on these items is available on the following Twitter support pages:
- https://support.twitter.com/articles/105576#
- https://help.twitter.com/de/search?q=datenschut z
You can find out about the possibility of viewing your own data on Twitter here: https://support.twitter.com/articles/20172711#
Information about the inferences Twitter makes about you can be found here: https://twitter.com/your_twitter_data
Information on the available personalization and privacy setting options can be found here (with further references):
- https://twitter.com/personalization
Furthermore, you have the option to request information via the Twitter privacy form or the archive requests:
- https://support.twitter.com/forms/privacy
- https://support.twitter.com/articles/20170320#
We do not collect any data ourselves via your Twitter account. However, the data you enter on Twitter, in particular your username and the content published under your account, will be processed by us insofar as we retweet or reply to your tweets, if applicable, or also compose tweets from us that refer to your account. The data you freely publish and distribute on Twitter is thus included by us in our offer and made available to our followers.
You can also find more information about Twitter and other social networks and how to protect your data at www.youngdata.de.
Twitter usage concept:
Our public relations work also takes place on Twitter. With this usage concept, we assume responsibility as a non-public body for the use of social media. Please also refer to our privacy policy.
Twitter (English for "twitter") is a social network for short messages, photos and videos. Registered users can publish short messages free of charge via this service. These tweets have a limited length and are usually visible to everyone.
Users can "follow" other users so that they can read their messages in their own Twitter feed.
The advantages of Twitter are its wide reach and - in contrast to some other social networks - its readability without the need for the user to register, as well as its usability without the use of a real name.
You can find more information about Twitter here: https://about.twitter.com/de.html
The Twitter channels are a useful addition to our existing communication channels, such as our website, press releases, print products and events. The Twitter channels primarily inform users about current news from our business operations.
For some target groups, the "classic" instruments alone (print, website, mailing) were no longer sufficient. We found that Twitter allows us to reach a wide circle of interested parties much more directly, quickly and on a daily basis, especially since interested recipients can subscribe to corresponding tweets. The Twitter channel enables us to disseminate our messages far and wide, to network better with other institutions and information sources, and to respond immediately to what is happening at the time.
Furthermore, direct dialog with readers allows us to gather opinions and receive feedback in order to optimize our business activities.
With our Twitter account we inform users about news from our business operations.
Responsibility for editorial support lies with our management and the associated communications and media team.
We would like to point out to users that the Twitter channel is merely an additional option for contacting us or receiving information from us. Alternatively, the information offered via Twitter can also be accessed via the corresponding links on our website or on the other linked websites.
In principle, you can contact us with all inquiries. Please use the information provided above.
We evaluate this usage concept once a year with regard to whether and how it is used. This evaluation of the usage concept takes into account the usage figures and reach as well as the target group structure of the networks.
Use of our LinkedIn services
We manage our account according to the principles regulated below:
We are jointly responsible with LinkedIn Ireland Unlimited Company,Wilton Place, Dublin 2, Ireland https://www.linkedin.com/help/linkedin/answer/1581/hilfe-erhalten-und-den-linkedin-kundenservice-kontaktieren?lang=de hereinafter referred to as the "Platform Operator".
We process your personal data, such as your surname and first name, your e-mail address and IP address, etc., only if there is a legal basis for doing so. More detailed information about the processing by the platform operator can be found in the privacy policy of the platform operator.
Therefore, data is only passed on to third parties if there is a legal basis for the processing. For example, we disclose personal data to persons or companies that act for us as processors pursuant to Art. 28 DSGVO. A processor is anyone who processes personal data on our behalf - i.e., in particular in a relationship of instruction and control with us
In accordance with the requirements of the GDPR, we conclude a contract with each of our order processors to oblige them to comply with data protection regulations and thus provide your data with comprehensive protection.
We would like to point out that your data may also be passed on to third parties by the platform operator. However, we have no influence on this.
More detailed information about the processing by the platform operator can be found in the privacy policy of the platform operator.
We store all personal data that you transmit to us only as long as they are needed to fulfill the purposes for which these data were transmitted or as long as this is required by law. Upon fulfillment of the purpose and/or expiration of the legal storage periods, the data will be deleted or blocked by us, provided that this is technically possible for us.
Information on data storage by the platform operator can be found in its privacy policy, see above.
This platform uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us or the platform operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. There is no separate indication within apps that SSL encryption is available.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
Collection and storage of personal data as well as their type and purpose of use
When you access the website of the platform operator, information is automatically sent to the server of the platform operator by the browser used on your end device or by the app. This information is temporarily stored by the platform operator in a so-called log file.
However, this data is only available to the platform operator. It is not possible for us to access this data. For further information, please refer to the platform operator's privacy policy, see above.
We do not collect any personal data about you. However, it is possible to obtain pseudonymized data in the form of statistics about the users of our site over a certain period of time. The software for analyzing user statistics is usually provided by the platform operator itself, but in some cases it is also possible to integrate third-party software (e.g. Google Analytics). Here, data about the users of the site can be collected, such as age, gender, country of origin, browser used and interests.
However, this data is always pseudonymized and it is not possible for us to make statements about individual users based on this data alone. We use this data exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO.
Furthermore, it is possible for you to interact with our account. You can do this, for example, by marking a post with "Like", sharing or commenting on it, or by writing to us directly.
When you interact with us, there is usually inevitably some data processing by us, as this allows us to see your account and thus gives us access to personal data about you; for example, your username, your profile picture, or the date or time of the interaction.
This data is used by us exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the above-mentioned reason of optimizing the content provided by us on our profile. Furthermore, the collected data is information that is only made available to us through an interaction by you with our profile. This establishes a relevant and appropriate relationship between you and our profile.
If deletion is possible by us, personal data will be deleted by us after 28 days at the latest, unless there is a legal basis for further processing beyond this period.
Further information on data processing by the platform operator can be found in its privacy policy, see above.
This platform uses cookies. We have no influence on which cookies the platform operator uses. You can find more information in the privacy policy of the platform operator under the following link: https://www.linkedin.com/legal/privacy-policy?_l=de_DE
In order to enforce your rights, you can contact the platform operator directly, provided that the processing is carried out by the platform operator. We have provided you with the contact details of the platform operator as the data controller at the beginning of this document. Of course, you can also contact us to enforce your rights.
Regarding changes to the privacy policy by the platform operator, please refer to the platform operator's privacy policy, see above.
Youtube services
We also use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our online offers in some cases. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos deposited with YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA. The use of cookies or similar technologies takes place with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
For more information about the collection and use of data by YouTube and Google, about your rights in this respect and options for protecting your privacy, please refer to YouTube's privacy policy at https://www.youtube.com/t/privacy .
Data subject rights and storage period
Duration of storage
After complete processing of the contract, the data will initially be stored for the duration of the warranty period, thereafter taking into account statutory, in particular tax and commercial law retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 DSGVO: the right to information, to correction, to deletion, to restriction of processing, to data portability. In addition, you have the right to object to processing based on Art. 6 (1) f DSGVO and to processing for the purposes of direct marketing in accordance with Art. 21 (1) DSGVO.
Right of complaint to the supervisory authority
In accordance with Art. 77 DSGVO, you have the right to complain to a supervisory authority if you believe that the processing of your personal data is not lawful. The supervisory authority of the Federal State of Lower Saxony is responsible for Hahnemühle.
Right of objection
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f DSGVO, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation. After the objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims. If personal data processing is carried out for direct marketing purposes, you may object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for the purpose of direct marketing.
Last update: 22.12.2022