Data privacy

1.1
We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified.

1.2
The controller in charge of data processing on this website, within the meaning of the Swiss Data Protection Act (DPA), is mofakult AG, Im Buchfeld 20, 8500 Frauenfeld, Switzerland, Tel.: 0041 52 730 05 30, E-Mail: info@mofakult.ch. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2.1
When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our website visited
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you accessed the page
• Browser used
• Operating system used
• IP address used (anonymised if applicable)
• Server log files are collected.in anonymised form)

The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2
This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser line.

We use a content delivery network from the following provider: Amazon Web Services, Inc, 410 Terry Avenue North, Seattle, WA 98109, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website. We have concluded an order processing contract with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for longer and enable page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

Cookies used by us:

Functional, necessary cookies

• BEARER, c-expiry (mofakult Shop): these cookies store an authentication token (bearer token) that is used to identify the logged-in user and maintain their session. They allow the user to access their account and perform actions in the online shop, such as adding items to the shopping basket, placing orders or managing their account settings.
• thx_guid, tmx_guid (CembraPay): these cookies contain unique identifiers that are used by CembraPay's Threatmetrix service during the checkout of our online shop. They enable the detection and prevention of potential fraudulent activity, ensuring the security of the payment process and the integrity of the shopping experience.
• GRECAPTCHA, NID (Google): these cookies are used by reCAPTCHA, a Google service, to prevent spam and malicious bots from interacting with your website. They are used to verify that the user is human before they can perform certain actions, such as submitting forms. This helps to ensure the security and integrity of the website.
• ts, X-pp-s, x-csrf-jwt, fn_dt, ddi, enforce_policy, LANG, cookie_prefs, tsrce, nsid, d id, ts c, 17_az, TLTSID, cookie_check (Paypal): during the payment process, PayPal uses various cookies for smooth, secure transactions. Some are used for security and identity verification, others collect device information and privacy preferences. Language settings, data traffic, user ID and data synchronisation are also covered. These cookies aim to improve security, user experience and privacy during the PayPal payment process.
• GRECAPTCHA, cookie_checksum, kdid (Klarna): When using the Klarna payment method, cookies are used to ensure a smooth and secure payment process. The "_GRECAPTCHA" cookie is used to prevent spam and malicious bots, while "cookie_checksum" and "kdid" help to record data protection preferences and technical information. These cookies work together to optimise security, user experience and privacy during the Klarna payment process.
• fw_crm_v, _x_w, _x_m, _helpkit_session, helpdesk_node_session, user_credentials, wf_order, wf_order_type, wf_filter (Freshdesk): Freshdesk is used by us for live support and FAQs. These cookies serve various purposes, including determining user identity, organising chat sessions, managing shard information, authentication, and organising and filtering tickets.

Cookies for statistics and market analysis

• ga, gid (Google): the _ga and _gid cookies are used by Google Analytics to gain insights into website usage and generate reports on visitor activity. These cookies collect information about pages visited, interactions and time spent. This helps website operators to analyse user behaviour, evaluate website performance and make improvements. The information collected is used to gain aggregated statistical insights and optimise the overall user experience.
• uetsid, SRCHHPGUSR, _EDGE_S, SRCHD, SRCHUSR, SRCHUID, MUID (Bing): These cookies collect information about your interactions on Bing and its partner sites. They store data about your search queries, the search results pages visited and technical details of your browser session. This collected information is used to personalise your search experience on Bing by presenting you with more relevant search results and ads. It also allows us to identify your device and track your search activity across different sessions to provide customised services and optimise the performance of Bing services.
• fbp, fr, tr (Facebook): used to customise user experiences. The _fbp cookie records website activity such as content views, shopping basket actions and purchases. The fr cookie optimises ads outside of Facebook through an encrypted user ID and browser information. The tr cookie measures the success of advertising campaigns, captures conversions and improves ad performance. Together, these cookies enable more precise targeting and analysis of advertising measures.

Cookies used by us:

Functional, necessary cookies

• BEARER, c-expiry (mofakult Shop): these cookies store an authentication token (bearer token) that is used to identify the logged-in user and maintain their session. They allow the user to access their account and perform actions in the online shop, such as adding items to the shopping basket, placing orders or managing their account settings.
• thx_guid, tmx_guid (CembraPay): these cookies contain unique identifiers that are used by CembraPay's Threatmetrix service during checkout of our online shop. They enable the detection and prevention of potential fraudulent activity, ensuring the security of the payment process and the integrity of the shopping experience.
• _GRECAPTCHA, NID (Google): these cookies are used by reCAPTCHA, a Google service, to keep spam and malicious bots from interacting with your website. They are used to verify that the user is human before they can perform certain actions, such as submitting forms. This helps to ensure the security and integrity of the website.
• ts, X-pp-s, x-csrf-jwt, fn_dt, ddi, enforce_policy, LANG, cookie_prefs, tsrce, nsid, d id, ts c, 17_az, TLTSID, cookie_check (Paypal): during the payment process, PayPal uses various cookies for smooth, secure transactions. Some are used for security and identity verification, others collect device information and privacy preferences. Language settings, data traffic, user ID and data synchronisation are also covered. These cookies aim to improve security, user experience and privacy during the PayPal payment process.
• _GRECAPTCHA, cookie_checksum, kdid (Klarna): When using the Klarna payment method, cookies are used to ensure a smooth and secure payment process. The "_GRECAPTCHA" cookie is used to prevent spam and malicious bots, while "cookie_checksum" and "kdid" help to record data protection preferences and technical information. These cookies work together to optimise security, user experience and privacy during the Klarna payment process.
• _fw_crm_v, _x_w, _x_m, _helpkit_session, helpdesk_node_session, user_credentials, wf_order, wf_order_type, wf_filter (Freshdesk): Freshdesk is used by us for live support and FAQs. These cookies serve various purposes, including determining user identity, organising chat sessions, managing shard information, authentication, and organising and filtering tickets.

Cookies for statistics and market analysis

• _ga, gid (Google): the _ga and _gid cookies are used by Google Analytics to gain insights into website usage and generate reports on visitor activity. These cookies collect information about pages visited, interactions and time spent. This helps website operators to analyse user behaviour, evaluate website performance and make improvements. The information collected is used to gain aggregated statistical insights and optimise the overall user experience.
• _uetsid, SRCHHPGUSR, _EDGE_S, SRCHD, SRCHUSR, SRCHUID, MUID (Bing): These cookies collect information about your interactions on Bing and its partner sites. They store data about your search queries, the search results pages visited and technical details of your browser session. This collected information is used to personalise your search experience on Bing by presenting you with more relevant search results and ads. It also allows us to identify your device and track your search activity across different sessions to provide customised services and optimise the performance of Bing services.
• _fbp, fr, tr (Facebook): used to customise user experiences. The _fbp cookie records website activities such as content views, shopping basket actions and purchases. The fr cookie optimises ads outside of Facebook through an encrypted user ID and browser information. The tr cookie measures the success of advertising campaigns, tracks conversions and improves ad performance. Together, these cookies enable more precise targeting and analysis of advertising measures.

5.1
Personal data is collected when you contact us (e.g. via contact form or email). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. Your data will be deleted once your enquiry has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5.2
Freshdesk

We use the email ticketing system of the following provider to process customer enquiries: Freshworks, Inc, 2950 S. Delaware Street, Suite 201, San Mateo, California 94403, USA

If you submit contact requests by email via our website, these are stored and organised in the ticket system to enable chronological processing and improve the service experience. You can always view the current status of the processing of your request via the individually assigned ticket number.

For the organisation and processing of enquiries, personal data is collected according to the scope of its provision, but in any case surname, first name and e-mail address, transmitted to the provider, stored there and read out.

The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in answering your request as quickly as possible and in optimising our service offer in accordance with Art. 6 para. 1 lit. f GDPR. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Personal data is collected and processed if you provide it to us for the fulfilment of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be cancelled at any time by sending a message to our address. We store and use the data you provide for contract processing. After deletion of your customer account, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless we can prove an overriding interest in further processing within the meaning of Art. 31 para. 2 FADP or justification by law.

7.1
Subscribing to our email newsletter

If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you will only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named at the beginning. Once you have cancelled your subscription, your email address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

7.2
Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services to those you have already purchased from our range by email. In accordance with Section 7 (3) UWG, we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the controller named at the beginning. You will only incur transmission costs for this in accordance with the basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will be discontinued immediately.

7.3
Amazon SES

Our e-mail newsletters are sent via this provider: Amazon Web Services, Inc, 410 Terry Avenue North, Seattle WA 98109, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter to this provider in accordance with Art. 6 para. 1 lit. f GDPR so that they can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the content of the newsletter. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing contract with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7.4
MailChimp

Our email newsletters are sent via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when you register for the newsletter to this provider in accordance with Art. 6 para. 1 lit. f GDPR so that it can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the content of the newsletter. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing contract with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7.5
WhatsApp newsletter

If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information for sending the newsletter is your mobile phone number.

To send the newsletter, enter our mobile phone number in the address contacts of your mobile device and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of sending the newsletter. We will then add you to our newsletter mailing list.

The data collected by us when you register for the newsletter will be processed exclusively for the purposes of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. Once you have unsubscribed, your mobile phone number will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.

We therefore use a mobile device in whose address book only the WhatsApp contact data of our newsletter recipients are stored in order to send our WhatsApp newsletter. This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR when using the app on their device for the first time by accepting the WhatsApp terms of use. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

The purpose and scope of data collection and the further processing and use of the data by WhatsApp as well as your rights in this regard and setting options to protect your privacy can be found in WhatsApp's data protection information: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded an order processing contract with WhatsApp that protects the data of our newsletter recipients and prohibits disclosure to third parties.

Data may be transferred to Meta Platforms Inc. servers in the USA as part of the above-mentioned processing.

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7.6
Goods availability notification by e-mail

You can register to receive e-mail goods availability notifications for items that are temporarily unavailable. We will send you a one-off e-mail message about the availability of the item you have selected. Only your e-mail address is required to receive this notification. The provision of further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for our e-mail notification service for the availability of goods is used strictly for the intended purpose.

You can unsubscribe from the availability notifications at any time by sending a corresponding message to the person responsible named at the beginning. After unsubscribing, your email address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

8.1
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If special service providers are used for order processing, we will provide explicit information about this below.

8.2
Forwarding of personal data to shipping service providers

• Post CH or notime
  If the goods are delivered by the transport service provider Post CH (Schweizerische PostAG, Switzerland, Wankdorfallee 4, 3030 Bern) or by notime (notime AG, Pfingstweidstrasse 60b, 8005 Zurich), we will pass on your e-mail address to Post CH before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification. to Post CH before delivery of the goods, provided that you have given your express consent to this during the ordering process.Otherwise, we will only pass on the name of the recipient and the delivery address to Post CH or notime for the purpose of delivery. The information will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Post CH or the transmission of status information of the shipment delivery is not possible.
  The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned person responsible or vis-à-vis the transport service provider Post CH or notime.

8.3
Use of payment service providers (payment services)

• Adyen
  One or more online payment methods of the following provider are available on this website: Adyen, Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, The Netherlands
  When you select a payment method of the provider for which you make an advance payment (such as credit card payment), the payment data you provide during the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this purpose.
• Klarna
  If you select the payment method "Klarna invoice purchase" or (if offered) the payment method "Klarna instalment purchase", payment will be processed via Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable payment processing, your personal data (first and last name, street, house number, postcode, city, gender, email address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this during the ordering process. You can view the credit agencies to which your data may be forwarded here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_ch/credit_rating_agencies
  The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship.
  You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be authorised to process your personal data if this is necessary to process payments in accordance with the contract.
  Your personal data will be treated in accordance with the applicable data protection regulations. For more information on how Klarna handles personal data, please refer to Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_ch/privacy_bp
• Mollie
  If you choose a payment method from the payment service provider Mollie, payment will be processed via the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, to whom we will pass on the information you provided during the ordering process along with information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number). Your data will only be passed on for the purpose of payment processing with the payment service provider Mollie and only to the extent that it is necessary for this purpose.
• Paypal
  For payment via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The data will only be passed on to the extent that this is necessary for payment processing.
  PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
  You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary to process payments in accordance with the contract.
  - PostFinance
  If you choose a payment method from the payment service provider "PostFinance", the payment will be processed via the payment service provider PostFinance AG (MIngerstrasse 20, CH-3030 Bern, hereinafter Postfinance), to whom we will pass on the information you provided during the ordering process in addition to the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number). Your data will only be passed on for the purpose of payment processing with the payment service provider PostFinance and only to the extent that it is necessary for this purpose.
• TWINT
  If you choose a payment method from the payment service provider "TWINT", the payment will be processed via the payment service provider TWINT AG (Stauffacherstrasse 31, CH-8004 Zurich, hereinafter "TWINT"), to whom we will pass on the information you provide during the ordering process along with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number). Your data will only be passed on for the purpose of payment processing with the payment service provider TWINT and only to the extent that it is necessary for this purpose.
   

8.4
Conducting credit checks

General debtor and collection service
If we make advance payments (e.g. delivery on account), we will retain the right to charge you a fee.If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a credit check to the following service provider:
A credit check is carried out by Intrum AG as part of the upcoming purchase transaction. The purpose of this credit check is to avoid credit defaults and fraud and thus prevent over-indebtedness or unauthorised claims. The personal data required for this purpose, such as name, address, date of birth, contact details (e-mail, telephone number) are transmitted to Intrum AG. In addition, data from the Internet protocol (IP address, proxy server used, etc.) is read out using a script and transmitted to Intrum AG. Information on which personal data Intrum AG has stored can be requested from Intrum under Request for information.

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. We use the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the establishment, execution or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be authorised to process your personal data if this is necessary to process payments in accordance with the contract.

Rating reminder by Trusted Shops

If you have given us your express consent to this during or after your order, we will transmit your e-mail address to the rating platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, so that they can send you a review reminder by email.

You can revoke your consent at any time by sending a message to us or to the review platform.

We are jointly responsible with the provider for the processing described above. The joint controllership agreement can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

10.1
Facebook plugins

Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland ("Facebook"). The plugins are labelled with a Facebook logo or the addition "Social plugin from Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Meta Platforms Inc. server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also object to the loading of Facebook plugins and thus the data processing operations described above with add-ons for your browser for the future, e.g. with the script blocker "NoScript" (http://noscript.net/).

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options for protecting your privacy can be found in Facebook's data protection information:
http://www.facebook.com/policy.php

10.2
Instagram plugins

Our website uses so-called social plugins ("plugins") of the online service Instagram, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland ("Instagram"). The plugins are labelled with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to a Meta Platforms Inc. server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts.

If you do not want Instagram to associate the data collected via our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also prevent the Instagram plugins from loading and thus the data processing operations described above with add-ons for your browser for the future, e.g. with the script blocker "NoScript" (http://noscript.net/).

For the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights in this regard and setting options to protect your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. If playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behaviour. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. As part of the use of YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Independent of the playback of the embedded videos, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence.

Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

12.1
Google Marketing Platform

This website uses "Google Marketing Platform", a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The service uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once.

In addition, the service can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Google-based advert and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, these cookies do not contain any personal information.
The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC. in the USA.

Because of the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of "Google Marketing Platform", Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

If you wish to object to participation in this tracking process, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies. Alternatively, you can obtain information about the setting of cookies from the Digital Advertising Alliance at the Internet address www.aboutads.info and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

You can find more information about Google's privacy policy at the following Internet address: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

12.2 Google AdSense

This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analysed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC. in the USA.

Google uses the information obtained in this way to evaluate your usage behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

You can find more information about Google's privacy policy at the following Internet address: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by preventing them by setting your browser software accordingly or by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=en

Please note that you may not be able to use certain functions of this website or only to a limited extent if you have deactivated the use of cookies.

12.3 Use of Google Ads Conversion Tracking

This website uses the online advertising programme "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an Ads advert placed by Google. Cookies are small text files that are stored on your computer system. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

You can find more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by preventing them by setting your browser software accordingly or by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables your use of our website to be analysed.

By default, Google Analytics 4 sets cookies when you visit the website, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude a direct personal reference.

The information is transferred to Google servers and processed there. Transmission to Google LLC, based in the USA, is also possible.

Google uses the information collected on our behalf to analyse your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The abbreviated IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All the processing described above, in particular the setting of cookies on the end device used, will only take place if you have given us your express consent to do so.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/ and at https://policies.google.com/privacy?hl=de&gl=en and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to generate cross-device reports. If you have activated personalised ads and have linked your devices to your Google account, Google can analyse your usage behaviour across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics. We do not receive any personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalised advertising" function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information about Google Signals, see the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analysed across devices.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with the Swiss level of data protection.

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, which we use to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit.

Further data processing only takes place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalise ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to create target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can permanently deactivate the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?

Alternatively, you can obtain information about the setting of cookies from the Digital Advertising Alliance at the Internet address www.aboutads.info and make settings for this purpose. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Further information and the data protection provisions regarding advertising and Google can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.com/policies/technologies/ads/

Freshchat

This website uses a live chat system from the following provider: Freshworks, Inc, 2950 S. Delaware Street, Suite 201, San Mateo, California 94403, USA

The processing of personal data transmitted via the chat takes place either because it is necessary for the initiation or execution of the contract or because of our legitimate interest in the effective support of our site visitors.
Your data transmitted in this way will be deleted, subject to conflicting statutory retention periods, once the matter in question has been conclusively clarified.

In addition, further information may be collected and evaluated using cookies for the purpose of creating pseudonymised user profiles, but this information is not used to identify you personally and is not merged with other data records. If this information has a personal reference, it is processed on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.

The setting of cookies can be prevented by appropriate browser settings. In this case, however, the functionality of our website may be restricted. You can object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

16.1
Cookie consent tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users when they access the website in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by ticking the appropriate box. This ensures that such cookies are only set on the user's end device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Furthermore, as the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

16.2
ChannelPilot

This website uses ChannelPilot, an online marketing tool from Channel Pilot Solutions GmbH, Lilienstrasse 5-9, Semperhaus C, 20095 Hamburg, Germany. ChannelPilot uses so-called "cookies", text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of the website, such as browser type/version, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server enquiry, is generally transmitted to a ChannelPilot server in Germany and stored there. The IP address transmitted by your browser within the framework of ChannelPilot is not merged with other ChannelPilot data. In addition, the IP address is only temporarily stored by ChannelPilot for a short period of time (usually a maximum of 24 hours) and then made unrecognisable. Intermediate storage takes place without exception to recognise possible click fraud (bot detection).

On behalf of the operator of this website, ChannelPilot will use this information to evaluate the performance of connected online marketing channels such as idealo.de or Google Shopping. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to ChannelPilot and the processing of this data by ChannelPilot by using the opt-out option available at the following link: www.channelpilot.de/optout. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in the last browser used. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with ChannelPilot can be found at www.channelpilot.de/datenschutz

16.3
Google reCAPTCHA

We also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") on this website. This function is primarily used to differentiate whether an entry is made by a natural person or abusively by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA.

We have concluded an order processing contract with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://business.safety.google/intl/de/privacy/ and https://www.google.com/intl/de/policies/privacy/

16.4
Google Customer Reviews (formerly Google Certified Merchant Programme)

We work with Google as part of the "Google Customer Reviews" programme, the provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The programme gives us the opportunity to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to take part in an e-mail survey from Google. If you give your consent, we will send your e-mail address to Google. You will receive an email from Google Customer Reviews asking you to rate the shopping experience on our website. The review you submit will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Centre dashboard, as well as being used for Google seller reviews. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

Further information on Google's data protection in connection with the Google Customer Reviews programme can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de

For more information about Google Seller Ratings privacy, please visit this link: https://support.google.com/google-ads/answer/2375474

Further information about Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

16.5
Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visualise geographical information. By using this service, our location is displayed to you and any directions are made easier.

When you access those subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
For detailed information on data protection in connection with the use of Google Maps, please visit the Google website ("Google Privacy Policy"): https://business.safety.google/intl/de/privacy/ and https://www.google.de/intl/de/policies/privacy/

16.6
Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after an order.

The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit to the site.

Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

16.7
Applications for job advertisements by e-mail

We advertise currently vacant positions on our website in a separate section, for which interested parties can apply by e-mail to the contact address provided.

Inclusion in the application process requires that applicants provide us with all personal data necessary for a well-founded and informed assessment and selection together with the application by e-mail.
The required information includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific proof of the qualifications required for a position. In addition, health-related information may be required, which must be given special consideration under labour and social law in the interests of social protection in the person of the applicant.

The components that an application must contain in individual cases in order to be considered and the form in which these components are to be sent by e-mail can be found in the respective job advertisement.

After receipt of the application sent using the e-mail contact address provided, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For any queries arising in the course of processing, we use either the email address provided by the applicant with their application or a telephone number provided, at our discretion.

The legal basis for this processing is the completion of the application process to initiate an employment contract.

If special categories of personal data (e.g. health data such as information on severe disability) are requested from applicants as part of the application process, the processing is carried out so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be carried out for the purposes of preventive or occupational health care, for the assessment of the applicant's fitness for work, for medical diagnosis, health or social care or treatment, or for the management of health or social care systems and services.

If the applicant is not selected in the course of the evaluation described above, or if an applicant withdraws their application prematurely, their data transmitted by email and all electronic correspondence, including the original application email, will be deleted after 6 months at the latest following a corresponding notification. This period is based on our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to fulfil our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will continue to be processed for the purposes of implementing the employment relationship.

16.8
Elasticsearch
This website uses the "Elasticsearch" service of ELASTIC, 800 West El Camino Real, Suite 350, Mountain View, California 94040, USA to provide a search function for articles via the search field and for navigation and filters.

For this purpose, Elasticsearch collects and stores certain user information (such as the user or session ID) in anonymised form. If personal data is also processed in this context, the processing is based on our legitimate interest in providing an error-tolerant search for articles and making it easier to find our products in the shop and thus in optimising the marketing of our offer.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (FDPIC), which are intended to ensure compliance with the Swiss level of data protection.

Further information on Elasticsearch's data protection provisions can be found here: https://www.elastic.co/de/legal/privacy-statement

The applicable data protection law grants you the following data subject rights (information and intervention rights) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

• Right of access pursuant to Art. 25 FADP
• Right to data disclosure or transfer pursuant to Art. 28 FADP
• Right to rectification pursuant to Art. 32 para. 1 FADP

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if relevant - additionally by the respective statutory retention period (e.g. retention periods under the law of obligations).

When personal data is processed on the basis of express consent, the data concerned is stored until you withdraw your consent.

If there are statutory retention periods for data, this data will be retained for the period stipulated by law.

In other respects, personal data will be processed for as long as you do not expressly prohibit processing, unless we can demonstrate an overriding interest in further processing within the meaning of Art. 31 para. 2 FADP or justification in accordance with the law.