Data protection

1. Data protection at a glance

Data collection on our website

KONKRUA takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person. This includes information such as civil name, address, telephone number and date of birth. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Who is responsible for the data collection on this website?

The data processing on this website is carried out by KONKRUA. You can find our contact details in the imprint of this website.

What data do we collect?

We only collect, store and process data provided by the user in the context of his or her details for processing enquiries and, if necessary, for processing orders/contracts or when registering for a free membership. Depending on the purpose of the data collection, this may include, for example, title, name, address, e-mail address, telephone number, fax number, bank details or IP address.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. In particular, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format (right to data portability). If you request the direct transfer of the data to another person responsible, this will only be done insofar as it is technically feasible.

You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint with regard to this and other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Third-party analysis tools and tools

When visiting our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this and the options for objecting below.

2 General notes and mandatory information

Note on the responsible body

The data controller for this website is:

KONKRUA by Pornpim Ampikitpanich

Silberburgstr. 42

70176 Stuttgart

T: +49 176 134 21540

team@konkrua.com

Managing director authorised to represent: Pornpim Ampikitpanich

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Contract processing

With the complete processing of the contract, the user's data will be blocked by us for further use and deleted after the expiry of the tax and commercial law regulations, unless the user has expressly consented to the further use of his data.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. The user can object to both the storage and the use of their data, which is logged by us in accordance with the legal requirements, at any time with effect for the future, whereby the objection is also logged accordingly. For this purpose, an informal notification by e-mail to team@konkrua.com is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

E-mail advertising without subscribing to the newsletter and your right to object

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right, on the basis of Section 7 (3) of the German Unfair Competition Act (UWG), to regularly send you offers by e-mail for similar products to those you have already purchased from our range. This serves to protect our legitimate interests in addressing our customers in an advertising manner, which outweigh our interests in the context of a balancing of interests. You can object to this use of your e-mail address at any time by sending a message to team@konkrua.com or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If, after the conclusion of a contract with costs, there is an obligation to provide us with your payment data (e.g. account number in the case of direct debit authorisation), this data is required for the processing of payments.

Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Anonymous / pseudonymous use of the website

It is possible to visit this site without providing personal data. No pseudonymous user profiles are created. In particular, there is no allocation of pseudonymised usage data with the data of the pseudonym.

Statistical analysis of visits to this website

We process and store the following data when this website or individual files on the website are accessed: Website from which the file was accessed, name of the file, date and time of the access, amount of data transferred and report on the success of the access (so-called web log). This access data is used exclusively in non-personalised form for the continuous improvement of this website and for statistical purposes.

Objection to advertising e-mails

The use of contact data published within the scope of the imprint obligation to send advertising and information material that has not been expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

3. Data protection officer

Appointment of a data protection officer

We have appointed a data protection officer for our company. If you have any queries regarding data protection, please contact him or her. You can reach our data protection officer at the following e-mail address:

E-mail: team@konkrua.com

4. Data collection on our website

Cookies

Some of the Internet pages use so-called cookies. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these will be treated separately in this data protection declaration.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.

Registration on this website

You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full.

For important changes, for example in the scope of the offer or in the case of technically necessary changes, we use the e-mail address provided during registration to inform you in this way.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

Comment function on this website

For the comment function on this page, in addition to your comment, details of when the comment was created and, if you do not post anonymously, the user name you have chosen will be stored.

Storage period of the comments

Legal basis

The storage of comments is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

Processing data (customer and contract data)

We collect, process and use personal data only to the extent that it is necessary for the establishment, content or amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transmission upon conclusion of a contract for online shops, traders and dispatch of goods

We only transmit personal data to third parties if this is necessary in the context of processing the contract, for example to the companies entrusted with the delivery of the goods or to the credit institution entrusted with the processing of payments. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data transmission upon conclusion of a contract for services and digital content

We only transmit personal data to third parties if this is necessary for the processing of the contract, for example to the credit institution commissioned with the processing of payments. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

5. social plugins

Active Java script content from external providers is used on this website. By calling up this website, these external providers may receive personal information about the user's visit to this website. This may involve the processing of data outside the EU. The user can prevent this by installing a JavaScript blocker such as the browser plug-in "NoScript" (www.noscript.net) or by deactivating JavaScript in his browser. However, this may result in functional restrictions on Internet pages that the user visits.

Use of Pinterest plug-ins

Our website uses so-called social plugins ("plugins") of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest"). The plugins are marked with a Pinterest logo.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The content of the plugin is transmitted by Pinterest directly to your browser and integrated into the page. Through this integration, Pinterest receives the information that your browser has called up the corresponding page of our website, even if you do not have a Pinterest profile or are not currently logged into Pinterest. This information (including your IP address) is transmitted by your browser directly to a Pinterest server in the USA and stored there.

If you are logged in to Pinterest, Pinterest can directly assign your visit to our website to your Pinterest profile. If you interact with the plugins, for example by clicking the "Pin it" button or leaving a comment, this information is also transmitted directly to a Pinterest server and stored there. The information may also be published on your Pinterest profile and displayed to your Pinterest followers.

For the purpose and scope of the data collection and the further processing and use of the data by Pinterest, as well as your rights in this respect and setting options for protecting your privacy, please refer to the Pinterest data protection information: https://about.pinterest.com/de/privacy-policy

If you do not want Pinterest to assign the data collected via our website directly to your Pinterest profile, you must log out of Pinterest before visiting our website. You can also completely prevent the loading of Pinterest plugins with add-ons for your browser, e.g. a script blocker.

6. analysis tools and advertising

Web analysis through Google Analytics

1. scope of the processing of personal data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies on the user's computer (for cookies, see above) and enables us to analyse your use of our website. The information generated by the cookies about your use of our website (including your IP address) is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymisation (On our website, Google Analytics has been extended by the code "gat._anonymizeIp();" to ensure anonymised collection of IP addresses), the IP address of the user will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA in exceptional cases and shortened there. In cases where personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

This information is used by Google on our behalf to evaluate your use of our website, to compile reports on website activity and to provide other services related to the use of our website and the internet. We use Google Analytics with the integration and use of the tool Google Optimize, which enables us to carry out so-called A/B tests of our homepage. This enables us to display different versions (e.g. a different layout) of our homepage to different users and to compare the usage data. For this purpose, the data is aggregated with the findings of Google Analytics. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The IP address determined by Google Analytics will not be merged with other Google data.

2. legal basis for the processing of personal data

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DSGVO

3. purpose of the data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness and to test and compare the acceptance of new or modified functionalities. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. The anonymisation of the IP address sufficiently takes into account the interest of users in the protection of their personal data.

4. duration of the storage

The data will be deleted as soon as it is no longer required for our recording purposes.

5. possibility of objection and removal

You can prevent cookies from being stored on your computer by setting your browser software accordingly. In this case, you may not be able to use all the functions of our website to their full extent. To prevent the collection of data generated by the cookies and related to your use of our website (including your IP address) by Google, as well as the processing of this data by Google, a browser plug-in is available for download and subsequent installation at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Adwords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google Ads and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you log in with your Google account.

To support this feature, Google Analytics collects Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device ad advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google account is based exclusively on your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a DSGVO). In the case of data collection processes that are not merged in your Google Account (e.g. because you do not have a Google Account or have objected to the merging), the collection of data is based on Art. 6 (1) lit. f DSGVO. The legitimate interest results from the fact that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes.

Further information and the data protection provisions can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/.

Cookies used: APISID, SSID, NID, SID, SAPISID, HSID, IDE, id

Google Ads and Google Conversion Tracking

This website uses Google Ads. Google Ads is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

Within the scope of Google Ads, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.

Each Google Ads client receives a different cookie. The cookies cannot be tracked via the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

If you visit our site via a mobile device (e.g. smartphone or tablet), you can use this link to object to the use of Google Analytics for the future. By activating the deactivate Google Analytics on smartphone or tablet link, we set a cookie in your browser, which signals to us to prevent the use of Google Analytics for your end device. Please note that the objection must be carried out again by you if you remove the cookies in your browser.

The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

You can find more information about Google Ads and Google Conversion Tracking in Google's privacy policy: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies used: _gid, _gcl_au

Facebook Pixel

Our website uses the visitor action pixel from Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA or Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") for conversion measurement.

In this way, the behaviour of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This allows Facebook to serve advertisements on Facebook pages as well as outside of Facebook. This use of data cannot be influenced by us as the site operator.

You can find more information about protecting your privacy in Facebook's privacy policy: https://www.facebook.com/about/privacy/. You can also deactivate the "Custom Audiences" remarketing function in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Cookies used: AA003, ATN, datr, fr, lu

7. newsletter

Newsletter data

With the newsletter we inform you about us and our offers.

If you would like to receive the newsletter, we require a valid email address from you as well as information that allows us to verify that you are the owner of the email address provided or that the owner agrees to receive the newsletter. This data will only be used for sending the newsletter.

When you register for the newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorised person.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter or by sending us a message. The legality of the data processing operations already carried out remains unaffected by the revocation.

We use the list providers MailChimp and Emarsys to send our newsletter. The data stored when registering to receive the newsletter is transmitted to and stored by both Rocket and Emarsys. The data entered when registering to receive the newsletter is not transmitted to other third parties.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp and Emarsys after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. email addresses for the member area) remain unaffected by this.

8. plugins and tools

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Cookies used: SID, HSID, VISITOR_INFO1_LIVE, PREF, APISID, LOGIN_INFO,GPS, SSID, YSC,SAPISID, LOGIN_INFO, CheckConnectionTempCookie395

9. affiliate programmes

PostAffiliatePro

We participate in the affiliate programme "PostAffiliatePro" of Quality Unit, s.r.o. Tomanova 80/c, SK-83107 Bratislava, Slovakia (European Union). Quality Unit uses cookies to track the origin of orders generated through affiliate links. Among other things, Quality Unit can track that you have clicked on the affiliate link on our affiliate partner's website. You can find more information on the use of data by Quality Unit at https://www.postaffiliatepro.com/privacy-policy-post-affiliate-pro/.

Cookies used: PAPVisitorId, PAPAffiliateId

10. payment provider

Credit assessment and scoring

If we make advance payments, e.g. in the case of a purchase on account, we may obtain a credit check on the basis of mathematical-statistical procedures from [SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden] in order to protect our legitimate interests. For this purpose, we transmit the personal data required for a credit check to [SCHUFA Holding AG] and use the information received about the statistical probability of a payment default for a weighed decision about the establishment, implementation or termination of the contractual relationship. The creditworthiness information may include probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures and in the calculation of which, among other things, address data are included. Your interests worthy of protection are taken into account in accordance with the legal provisions.

PayPal

On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

Amazon Pay

On our website we offer, among other things, payment via Amazon Pay. The primary provider of this payment service is Amazon Payments Europe s.c.a., and the secondary providers are Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all located at 5 Rue Plaetis, 2338 Luxembourg.

If you select payment via Amazon Pay, the payment data you entered will be transmitted to Amazon Pay. The transmission of your data to Amazon Pay is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations. For details on payment with Amazon Pay, please see the following link: https://pay.amazon.com/de/help/201751600.

Klarna

On our website we offer, among other things, payment with the services of Klarna. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). Klarna offers various payment options (e.g. hire purchase). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. You can read details about this in Klarna's privacy policy under the following link: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimise the use of the Klarna checkout solution. The optimisation of the checkout solution constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. Cookies are small text files that are stored on your end device and do not cause any damage. They remain on your end device until you delete them. Details on the use of Klarna cookies are covered in Klarna's privacy policy for Germany / Austria.

In order to assess which payment methods Klarna can offer you, Klarna reserves the right to carry out internal and external credit checks. The legal basis for this is Art. 6 (1) lit b) DSGVO. Further information on credit assessments and your right to object can be found in Klarna's privacy policy: http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

The transfer of your data to Klarna is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

Instant bank transfer

On our website we offer, among other things, payment by "Sofortüberweisung". The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH").

With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfil our obligations.

If you have chosen the payment method "Sofortüberweisung", you transmit the PIN and a valid TAN to Sofort GmbH, which can then log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have transmitted. It then immediately sends us a transaction confirmation. After logging in, it also automatically checks your turnover, the credit line of the overdraft facility and the existence of other accounts and their balances.

In addition to the PIN and the TAN, the payment data you have entered as well as your personal data will be transmitted to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and, if applicable, other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud attempts.

The transfer of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

For details on payment by Sofortüberweisung, please see the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

11. handling of applicant data

Purposes of data processing and legal basis

We process personal data about applicants for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Section 26 (1) in conjunction with (8) sentence 2 BDSG.

Furthermore, we may process personal data about applicants insofar as this is necessary to defend asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1, letter f DSGVO; the legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Insofar as an employment relationship is established between an applicant and us, we may further process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).

Categories of personal data

We process data related to your application. This may be general personal data (such as name, address and contact details), information on your professional qualifications and school education or information on further professional training or other information that you provide to us in connection with your application. We may also process job-related information that you have made publicly available, such as a profile on professional social media networks like Xing or LinkedIn.

Passing on data

We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3. Furthermore, personal data is processed on our behalf on the basis of contracts in accordance with Art. 28 DSGVO, in particular by host providers or providers of applicant management systems. A transfer to a third country is not intended.

Duration of data storage

We store your personal data for as long as is necessary to make a decision about your application. Insofar as an employment relationship between you and us does not come about, we may also continue to store data insofar as this is necessary for the defence against possible legal claims.

Necessity of providing personal data

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of an employment contract with us. This means that if you do not provide us with personal data when applying for a job, we will not enter into an employment relationship with you.

12. changes to this privacy policy

New legal requirements, corporate decisions or technical developments may require changes to our privacy policy. The data protection statement will then be adapted accordingly. You will always find the latest version on our website.

Status: 26 August 2021