Data protection declaration of Emergent-Production.com

I. General information on data processing

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Your privacy and the handling of your personal data are of paramount importance to all of us at Emergent-Production.com and Emergent-Production UG (haftungsbeschraenkt). We process your data solely in accordance with the requirements of the EU General Data Protection Regulation (GDPR) in conjunction with the German Federal Data Protection Act (BDSG). Personal data that is required by all departments (referred to as "master data") is available to the entire Group. If data is only needed to provide specific services in individual departments, it is only available to the employees there and then only to the extent they are responsible for performing the respective tasks.

II. Name and address of the controller

For Emergent-Production.com and Emergent-Production UG (haftungsbeschraenkt), the controller within the meaning of the GDPR is

Emergent-Production UG (haftungsbeschraenkt)
Leopoldstr. 2-8
Building P-C-171
32051 Herford
Germany
Phone: +49(0)123 - 456 789
E-mail: Datenschutz@Emergent-Production.com
Website: https://Emergent-Production.com

III. Contact details for the data protection officer

You can contact the data protection officer at:

Matthias Busse
c/o Emergent-Production UG (haftungsbeschraenkt)
Leopoldstr. 2-8
Building P-C-171
32051 Herford
Germany
Phone: +49(0)123 - 456 789
E-mail: Datenschutz@Emergent-Production.com
Website: https://Emergent-Production.com

IV. Data transfer

1. Under data processing agreements

As a rule, your data will not be transferred. However, in special cases (e.g. credit checks; using the product customization tools), this may be necessary and contractually stipulated in our Standard Terms and Conditions. We transfer data to our service providers (e.g., shipping and payment service providers; provision of shipping updates; customization tool providers) on the basis of data processing agreements in accordance with Article 28 GDPR.

2. Conditions for transferring personal data to third countries

Your personal data may be transferred or disclosed to third-party companies in the context of our business relationships. These may also be located outside the European Economic Area (EEA), in other words in third countries. Such processing takes place for the sole purpose of meeting contractual and business obligations and maintaining your business relationship with us. Please see the relevant points below for the respective details of the transfer. For some third countries, the European Commission adopts an adequacy decision certifying that their level of data protection is comparable to the EEA standard (a list of these countries and a copy of the adequacy decisions can be found here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. However, other third countries, to which personal data may be transferred, may lack a consistently high level of data protection due to the absence of legal provisions. In this case, we make sure that data protection is adequately guaranteed. This can be done by means of binding corporate rules, the European Commission's standard contractual clauses, certificates, or recognised codes of conduct.

V. Making the website available and creation of log files

1. Every time you visit our website, our system automatically collects data and information concerning your computer system.

The data collected includes the following:

Information on the browser type and the version used
Your operating system
Your IP address
Date and time of access
Websites from which your system accesses our website

This data is saved in our system's log files. The data referred to above is not saved together with other personal data.
Our system has to save your IP address temporarily so that the website can be displayed on your computer. Your IP address has to remain saved for the duration of your visit to the website. This means that storage in log files enhances the functionality of the website. We also use this data to optimise our website and protect our IT systems. The data is not used for marketing purposes within this context. The legal basis for the temporary storage of the data and the log files is Article 6(1)(f) GDPR.
The data is stored for as long as is necessary to achieve the purpose for which it was collected. If data is required to make the website available, this data is deemed to no longer be required when the session in question ends. The data is then deleted automatically. As far as the storage of data in log files is concerned, this data is no longer required after 180 days at the latest. If, however, we continue to save the data referred to above, your IP address will be erased or modified so that it can no longer be matched with the Internet connection that accessed the site.
The recording of data to make the website available and the storage of data in log files are absolutely essential for the operation of the website.

2. Emergent-Production UG (haftungsbeschraenkt) processes your data for the following purposes only:

To provide the service requested by customers and users, which also includes:

Registering on our website (if you decide to do so) in order to save your data for future transactions.
Managing orders: editing orders already placed, shipping the order and managing invoicing and payment. This is all based on compliance with the Standard Terms and Conditions of the online store.

To manage the relationship with the customer and users, which comprises:

Customer service and processing of messages required for the provision of products and enquiries from customers and users.
Management of complaints and requests for information connected with products purchased via the online store.
Customer loyalty activities, including sending customer satisfaction surveys and reminders about online sales not yet finalised.
Statistical analysis of transactions and complaints as part of the process of continually improving our services.

This is all based on the legitimate interest of Emergent-Production UG (haftungsbeschraenkt) in ensuring the continuity of its business activities and maintaining a relationship with our customers and users that is as satisfactory as possible for them. This also applies to the accounting and tax management of the business activities, as this is necessary to fulfil the statutory obligations incumbent on the owner of the online store.

VI. Use of cookies and other technologies (web analytics/tracking)

If, and only if, you have given your consent, we will also process your data to send marketing communications about the online store and associated products, including by electronic means and using profiling, and to conduct subsequent statistical analysis. The data is also processed to analyse the usage of and web traffic in the online store, since this is required for the purpose of our legitimate interest in improving the online store, the user experience and the products and services on offer. In addition, and in exceptional cases only, Emergent-Production UG (haftungsbeschraenkt) may also, process your data for monitoring and security purposes, for legal counsel and to comply with the law, since this is required for the purpose of our legitimate interest in defending our interests and rights and to comply with the legal obligations incumbent on us. If you have consented to the use of cookies via the website, please also note that your data will be processed for the purposes stated in our cookie policy for each type of cookie.
We use what are known as "cookies" on our website. Cookies are text files that are stored in/by your Internet browser on your computer system. When you access our website, a cookie may be stored on your system.
This streamlines navigation and improves the user experience. Cookies also help us identify particularly popular areas of our website. Cookies are text files that are stored in/by your Internet browser on your computer system. When you access our website, a cookie may be stored on your system. These contain a custom character string that enables information to be stored for a specific period of time and to identify your end device.
Sections 1 ("Necessary cookies"), 2 ("Statistical technologies") and 3 ("Marketing technologies") below provide details on the types of cookies that we use and the data processed in each case. Unless the sections below refer to different deletion periods, the following applies in summary to the storage period, irrespective of the type and purpose of the cookies:
You have full control over the use of cookies. They are saved on your computer and the data is then transmitted from your computer to us. While most browsers are configured to accept cookies by default, you can change your browser settings to deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. You can also change your browser settings so that cookies are deleted automatically. If cookies are generally deactivated for our website, you may no longer be able to use all of the website functions in full. When you visit our website, an information banner will draw your attention to the aforementioned use of cookies and to this privacy policy. We would ask you to consent to the use of cookies by clicking on the "I agree" button. You can object to the use of cookies at any time. You can do this either by not agreeing to the use of cookies when the banner is displayed in the first place, or by changing your browser settings accordingly.
You can find out how to manage (including deactivating) cookies in the most important browsers by clicking on the links below:
Chrome Browser: https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DDesktop
Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
Mozilla Firefox: https://support.mozilla.org/en-US/kb/third-party-cookies-firefox-tracking-protection
Safari: https://help.apple.com/safari/mac/8.0/en.lproj/sfri11471.html

1. Necessary cookies / Functional

These services, technologies and cookies are necessary to guarantee the core functions of the website and to perform contracts with customers and cooperation partners. The cookies save and transmit the following data:

Session ID
Login ID
Shopping basket ID

Cookies are a technical requirement for the following purposes:

Personalised salutation
To keep items in your shopping basket across multiple browser sessions. The data collected by technically necessary cookies is not used to create user profiles. The legal basis for their use is Article 6(1) sentence 1(b) (steps prior to entering into/performance of a contract), (c) (if there is a legal obligation) and/or (f) GDPR (overriding legitimate interest). The legitimate interest referred to above lies in particular in monitoring the technical performance of the website and our interest in the cost-effective use of partner sales channels. As such, they cannot be deactivated via our consent management system or by you as a website user. If you object to the use of these cookies or configure your browser accordingly, our website will not recognise your browser and you may not be able to access certain content, or data (e.g. from an input mask) may be lost. The information set out in section II. applies with regard to the storage period for technically necessary cookies.

1.1 Technically necessary website technologies

The processing operations within this category are used to ensure smooth use of the website and its functions. Without them, it is not possible to use functions such as the shopping basket summary.
The following technologies and service providers are used:

Own website cookies

1.2 Payment settlement with cooperation/affiliate partners

The processing operations within this category enable an exchange of information with cooperation partners for the purposes of settling payments and fees. Statistical transaction data is collected and processed for this purpose.
The following technologies and service providers are used:

1.3 Basic web analytics (excl. customer IDs)

The processing operations within this category are used for the following purposes: for non-personal traffic analysis, incident monitoring and alerts, fraud detection, IT management, audience measurement, product development and improvement, and navigation tracking.
The following technologies and service providers are used:

1.3.1 Google Analytics

see below for more information about Google Analytics

1.3.2 Microsoft Clarity

see below for more information about Microsoft Clarity

2. Statistical technologies

Our website also uses cookies that allow your browsing behaviour to be analysed. Technical measures are in place to pseudonymise the data collected by these cookies. This means that the data can no longer be traced back to you. This data is not saved together with your other personal data.
The following data can be transmitted within this context:

Frequency of page views
Use of website functions

We use analysis cookies to improve the quality of our website and its content. The analysis cookies show us how the website is being used, allowing us to optimise the products and services we offer on an ongoing basis. These purposes also establish our legitimate interest in the processing of the personal data pursuant to Article 6(1)(f) GDPR.
If you object to the use of these cookies or configure your browser accordingly, this will not have any disadvantages for you. All of the website functions will remain available.
The information set out in section VI. applies with regard to the storage period for cookies to analyse browsing behaviour.

2.1 Tag management system

The processing operations within this category control the delivery of services, technologies and cookies, without storing the data collected in the context of those services. At the same time, the tag management systems themselves do not collect or store data. The system is used to implement your choice of privacy settings. The following technologies and service providers are used:

2.1.1 Google Tag Manager

We use the Google Tag Manager on our website. The Google Tag Manager is offered by Google and is a solution with which we can manage so-called website tags via an interface (and thus integrate e.g. Google Analytics and other Google marketing services into our online online offer). The Tag Manager itself does not process any personal data. However, when you visit our website, a connection to Google is established and your IP address is also processed there. The use of the Google Tag Manager is necessary for the technical realization of our online offers. This constitutes a legitimate interest within the meaning of Article 6 Paragraph 1 Sentence 1 f) GDPR. To protect your personal data, we use the Google Tag Manager with the anonymization Manager with the anonymization function.
Insofar as we integrate third-party tools via the Google Tag Manager which themselves process personal data, we refer to these separately in this separately in this privacy policy. Further information about Google Tag Manager can be found at: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/

2.1.2 Bing Universal Event Tracking (UET) - implemented via Google Tag Manager

Data is collected and stored on our website using Bing Ads technologies, from which user profiles are created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website if they have reached our website via ads from Bing Ads. If you reach our website via such an ad, a cookie is placed on your computer via Google Tag Manager. A Bing UET tag is integrated on our website. This is a code that is used in conjunction with the cookie to store some non-personal data about the use of the website. This includes, among other things, the time spent on the website, which areas of the website were accessed and which ad the user used to access the website. Information about your identity is not recorded.
The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website as well as the processing of this data by deactivating the setting of cookies. This may limit the functionality of the website under certain circumstances.
In addition, Microsoft may be able to track your usage behavior across several of your electronic devices through so-called cross-device tracking and is thus able to display personalized advertising on or in Microsoft websites and apps. You can deactivate this behavior at https://account.microsoft.com/privacy/ad-settings/signedout.
You can find more information about Bing's analytics services on the Bing Ads website (https://help.ads.microsoft.com/#apex/3/en/53056/2). You can find more information on data protection at Microsoft and Bing in Microsoft's privacy policy (https://www.microsoft.com/en-us/privacy/privacystatement).

2.2 Website statistics and analytics

Expanding on the basic web analytics, subject to your consent the advanced web analytics also involves collecting pseudonymised usage profiles. These are profiles, pseudonymised by means of IP anonymisation, that can be linked with online transaction data from the online store in a way that can identify natural persons.
During your website visit, your user behavior is recorded in the form of "events" by Google Analytics and Microsoft Clarity. Events can be:

Page views First visit to the website Start of the session Your "click path", interaction with the website Scrolls (whenever a user scrolls to the end of the page (90%)) Clicks on external links Internal search queries Interaction with videos File downloads Viewed / clicked ads Language setting They also record:

Your approximate location (region)
Your IP address (in abbreviated form)
Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
A video of your entire visit / session on our online store which is accessable to us for review and analysis
Your internet provider
The referrer URL (via which website/advertising medium you came to this website)

2.2.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google, 1600 Amphitheatre Parkway , Mountain View, CA 94043, USA (hereinafter referred to as: "Google"). This service uses cookies. Data generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there.
Google will use this information on our behalf to evaluate the use of our website, to compile reports on the activities within this website and to provide us with further services relating to the use of this website and the use of the Internet. Pseudonymous user profiles can be created using the data that is processed within this context.
We only use Google Analytics with IP anonymisation enabled. This means that Google truncates your IP address within Member States of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted from your browser is not merged with other data from Google.
You can prevent the storage of cookies by configuring your browser software accordingly; you can also prevent Google from storing the data relating to your use of the website generated by the cookie and from processing this data by downloading and installing the browser plug-in that is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You can find further information on how Google uses data for advertising purposes, as well as on your options for configuring your settings and for raising objections, on Google's website: https://policies.google.com/technologies/partner-sites?hl=en ("How Google uses information from sites or apps that use our services"), https://policies.google.com/technologies/ads ("How Google uses cookies in advertising"), https://adssettings.google.de/anonymous?hl=en ("Manage the information Google uses to show you ads") and https://www.google.com/ads/preferences/ ("Choose which ads Google shows you").
As an alternative to the browser add-on or within browsers on mobile devices, please follow this link https://tools.google.com/dlpage/gaoptout?hl=en to prevent Google Analytics from collecting data on this website in the future. This will store an opt-out cookie on your device. The opt-out cookie stores the information that we are not allowed to use your data for Google Analytics. If you delete the cookies you have saved, you will need to click on this link again.
If you click here, you can set the opt-out cookie: Deactivate Google Analytics.
Further information on terms of use and data protection can be found at https://www.google.de/analytics/terms/ or at https://policies.google.com/?hl=en&gl=en.
The information set out in section VI. applies with regard to the storage period for the cookies.

2.2.2 Microsoft Clarity

We work with Microsoft Clarity and Microsoft Advertising to understand how you use and interact with our website. We do so using behavioural matrices, heatmaps and session recordings for the purpose of improving and marketing our products and services. Microsoft Clarity collects data on website users' behaviour that may potentially contain personal data. This includes IP addresses, click paths, mouse movements, etc. Data about the use of the website is collected using cookies provided by initial and third-party providers and other tracking technologies for the purpose of determining the popularity of products/services and online activities. We also use this information to optimise our website, to prevent fraud/for security purposes, and for advertising. Please refer to the Microsoft privacy policy for further information on how Microsoft collects and uses your data: https://www.microsoft.com/en-us/privacy/privacystatement.
Microsoft Clarity is integrated via the Google Tags Manager. If you click here, you can set the opt-out cookie to deactivate Google Tags: Deactivate Google Tags.

2.2.3 Facebook Pixel

see below for more information about Facebook Pixel

2.2.4 TikTok Pixel

see below for more information about TikTok Pixel

2.2.5 Pinterest tracking

see below for more information about Pinterest tracking

3. Marketing technologies

We use third-party cookies to learn more about your browsing behaviour (web tracking), so that we only show you the advertisements that you actually want to see. Within this context, the processing of your data is based on a legitimate interest and on Article 6(1)(f) GDPR.
When you access our website, you will see a banner asking for your permission. This means that Article 6(1)(a) GDPR is an additional legal basis.

3.1 Personalised advertising and remarketing on third-party sites, social media, search engines or the websites of cooperation partners

The processing operations within this category are used to display advertising on third-party websites, social media, search engines or the websites of cooperation partners that is personalised to users' specific interests. This is aimed at increasing the relevance of the advertising to our users.

3.1.1 Google Ads

Our website uses Google AdWords, an online advertising tool developed by Google.
We only use Google AdWords with IP anonymisation enabled. This means that Google truncates your IP address within Member States of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted from your browser is not merged with other data from Google.
Google Consent Mode v2 is a significant update aimed at improving user privacy and data conformity. It is an interface that notifies Google what consent the website user had given for the use of cookies. This interface will only be active if the user has refused cookies on our website. If they consent, Google will use its cookies as usual for tracking purposes.
You can prevent the storage of cookies by configuring your browser software accordingly; you can also prevent Google from storing the data relating to your use of the website generated by the cookie and from processing this data by downloading and installing the browser plug-in that is available at the following link: https://policies.google.com/technologies/ads?hl=en.

3.1.1.1 Use of the remarketing or "similar target groups" function of Google Inc.

We use the remarketing or "similar target groups" function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. This function serves the purpose of analyzing visitor behavior and visitor interests.
Google uses cookies to carry out the analysis of website usage, which forms the basis for the creation of interest-based advertisements. Cookies are used to record visits to the website and anonymized data on the use of the website. No personal data of visitors to the website is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.
Your data may also be transferred to the USA. The European Commission has issued an adequacy decision for data transfers to the USA.
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR for the legitimate interest of targeting visitors to the website with advertising by displaying personalized, interest-based ads to visitors to the provider's website when they visit other websites in the Google Display Network.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) f GDPR.
You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=en
Alternatively, you can deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at https://optout.networkadvertising.org/ and implementing the further information on opting out mentioned there.
You can find more information about Google Remarketing and the associated privacy policy at https://policies.google.com/technologies/ads.

3.1.1.2 Use of Google Adwords conversion tracking

We also use what is known as "conversion tracking", which is also part of Google AdWords on our website and in this context conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been redirected to this page. Each Google AdWords customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of AdWords customers.
The information collected with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from the legitimate interest in targeted advertising and the analysis of the impact and efficiency of this advertising.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) f GDPR.
You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics.
You can also deactivate personalized advertising for you in the Google advertising settings. You can find instructions on how to do this at https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en. In addition, you can deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opt-out mentioned there. Further information and Google's privacy policy can be found at: https://policies.google.com/privacy.
Cookies for conversion tracking by Google AdWords become inactive after 30 days. You can find information on how to disable personalised advertising and conversion tracking by Google here: https://support.google.com/google-ads/answer/9606827?hl=en&sjid=9500828998095096209-EU.

3.1.1.3 Use of Google AdSense

We use the AdSense function of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website.
The purpose of this function is to rent out advertising space on the website and to target visitors to the website with interest-based advertising.
This function is used to display personalized, interest-based advertisements from the Google Display Network to visitors to the provider's website. Google uses cookies that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR for the legitimate interest in the above-mentioned purpose.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) f GDPR.
You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=en.
Furthermore, you can deactivate the use of cookies by third-party providers by accessing the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opting out mentioned there.
You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can find more information and Google's privacy policy at: https://policies.google.com/technologies/ads, https://policies.google.com/privacy.

3.1.2 Facebook

We use Facebook Pixel, a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, as a further conversion tracking and remarketing tool to evaluate our advertising activities on Facebook.
This service enables us and also Facebook to track user behaviour once they have clicked on an ad on Facebook. This makes it possible for us to model and assess the effectiveness of ads for statistical and market research purposes so that we can optimise future advertising methods.
The data collected is anonymous for us, and as such provides no means of identifying the user. However, the data is stored and processed by Facebook, meaning that a link to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook privacy policy (https://www.facebook.com/about/privacy/). They may therefore enable Facebook and its partners to activate ads on Facebook and elsewhere. Furthermore, a cookie can be stored on your computer for these purposes.
We use Facebook Pixel if, and only if, you have given us your express consent to do so. Consent for the use of Pixel can only be given by users aged 13 or older. If you are younger, please ask your parent or guardian for permission. If you grant your consent, the legal basis for data processing is Article 6(1)(a) GDPR.
You have the right to withdraw your consent at any time with effect for the future.

3.1.3 Microsoft Bing Ads

Our website uses Bing Ads technology to collect and store data from which usage profiles are then created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. It enables us to track the activities of users who have been redirected to our website from ads displayed by Bing Ads. If you are redirected to our website by such an ad, a cookie will be placed on your device. A Bing UET tag is integrated into our website. This is a code used together with the cookie to store some non-personal data about how our website is used, including time spent on the website, the areas of the website accessed and the ad that redirected the user to the website. No information about your identity is collected.
The information collected is transmitted to a Microsoft server in the USA and stored there in principle for a maximum of 180 days. You can prevent the collection and processing of the data generated by the cookie concerning your use of the website by disabling cookies. Doing so may limit the functionality of the website, however.
In addition, Microsoft may be able to track your usage behaviour across multiple devices by means of cross-device tracing, enabling it to place personalised ads on or in Microsoft websites and apps. You can deactivate this at https://choice.microsoft.com/en-us/opt-out.
Please visit the Bing Ads website for further information on Bing analysis services (https://help.ads.microsoft.com/#apex/3/en/53056/2). Please refer to the Microsoft privacy policy for further information on data protection at Microsoft and Bing (https://www.microsoft.com/en-us/privacy/privacystatement).

3.1.4 TikTok Ads

We use another conversion-tracking and remarketing tool to assess the ads we place on TikTok: TikTok Pixel. The service provider is the Chinese company TikTok. TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) is responsible for activities in Europe.
This service enables us and TikTok to track user behaviour once they have clicked on an ad in TikTok. This makes it possible for us to model and assess the effectiveness of ads for statistical and market research purposes so that we can optimise future advertising methods.
The information collected is processed by TikTok in the United States, among other locations. We note that in the opinion of the European Court of Justice, data transfers to the United States currently do not enjoy an appropriate level of protection. You can prevent the collection and processing of the data generated by the cookie concerning your use of the website by disabling cookies. Doing so may limit the functionality of the website, however.
TikTok uses standard contractual clauses (Article 46(2) and (3) GDPR) as the basis for processing the data of recipients domiciled in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e., the United States in particular) or the transfer of data to such countries. Standard contractual clauses are templates provided by the European Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the United States). Through these clauses, TikTok undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the United States. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
You can find out more about the standard contractual clauses and the data that is processed when TikTok Pixel is used in the privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/en or https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

3.1.5 Pinterest tracking

Our website uses the conversion tracking technology of the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland), which enables us to show our website visitors who have already shown an interest in our website and our content/offers and who are Pinterest members relevant advertisements and offers on Pinterest. For this purpose, a conversion tracking pixel from Pinterest is integrated on our pages, via which Pinterest is notified when you visit our website that you have accessed our website and which parts of our offering you were interested in. For example, if you have shown an interest in our subscriptions on our website, you may be shown an advertisement for our subscriptions on Pinterest.
You can deactivate the collection of data for the display of interest-based advertising on Pinterest at any time in your Pinterest account settings at https://www.pinterest.com/settings (under "Customisation" the button "Use information from our partners to better tailor the recommendations and ads on Pinterest to you") or at https://help.pinterest.com/en/article/personalization-and-data#info-ad (deactivate the checkbox under "Disable customisation").
The legal basis for the processing of personal data is Article 6(1)(a) and (f) GDPR.

3.2 Links to social media services

On our website you will find links to the social media services X, Facebook, YouTube, Pinterest and Instagram. You can recognise links to the websites of the social media services by the respective corporate logo. If you follow these links, you will reach Emergent-Production.com's corporate presence on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the social media service's servers that you have visited our website. In addition, further data is transmitted to the provider of the social media service. This includes, for example:

the address of the website where the activated link is located
the date and time the website was accessed or the link activated
information about your browser and operating system
your IP address

If you are already logged in to the relevant social media service when you activate the link, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can prevent this information from being associated with your personal user account if you log out of your user account beforehand. The servers of the social media services are located in the United States and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union. Please note that we have no influence on the scope, type or purpose of data processing by the provider of the social media service. You can find more information on the use of your data by the social media services integrated on our website in the privacy policy of the respective social media service.

a. Type and purpose of processing

Social plug-ins from the providers listed below are used on our websites. You can recognise the plug-ins by the fact that they are marked with the corresponding logo.
Under certain circumstances, information – which may also include personal data – is sent to the service provider via these plug-ins and may be used by them. We prevent the unconscious and unwanted collection and transmission of data to the service provider by means of a "Shariff solution". Information is not collected and forwarded to the service provider until you click on the plug-in. We do not collect any personal data ourselves via the social plug-ins or the use thereof.
We have no influence on what data an activated plug-in collects or how it is used by the provider. At present, it must be assumed that a direct connection to the provider's services is established and that at least the IP address and device-related information is collected and used. It is also possible that the service providers may attempt to store cookies on the computer used.

b. Legal basis of the processing

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the functionality of our website.

c. Social Media Providers; Privacy Policies; Data categories

You can find out which specific data is collected and how it is used by accessing the privacy policy of the respective service provider:

Use of X plug-ins

The functions of the X service are integrated on our website. X is a social media portal of the company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, (USA).
We use X plug-ins. If you call up a corresponding page that contains such a plug-in, data is exchanged with the X servers located in the USA. Even in the case of interactions that are possible with the various X plug-ins, the corresponding information about you is collected and transmitted to X and stored. If you are also a member of X and are logged in to X at the time you use the plug-in, the information collected about your website visit will be linked to your X account and made known to other users.
If you do not want X to link and merge the information with the data from your X account, you must log out of X before visiting our website.
Further information on the collection and use of data by X can be found at https://x.com/en/privacy.

Use of Pinterest plug-ins

This website uses plug-ins from the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest").
You can view the various logos that contain the plug-in (e.g. "Pin-it button" or the "P″ button) at the following link: https://business.pinterest.com/pin-it-button/
If you call up a corresponding page on our website that contains such a plug-in, a link is established between your computer and the Pinterest servers and the plug-in is displayed on the page by notifying your browser. Both your IP address and the information about which of our pages you have visited are transmitted to the Pinterest server in the USA. This applies regardless of whether you are registered with Pinterest or logged in. Transmission also takes place for users who are not registered or not logged in.
If you are also a Pinterest member and logged in to Pinterest at the time you use the plug-in, the information collected about your page visit will be linked to your Pinterest account and disclosed to other users. Even in the case of interactions that are possible with the various Pinterest plug-ins, the corresponding information about you is collected and transmitted to Pinterest and stored.
If you do not want Pinterest to link and merge the information with your Pinterest account data, you must log out of Pinterest before visiting our website. Further information on the collection and use of data by Pinterest can be found at https://policy.pinterest.com/en/privacy-policy.

Use of Instagram plug-ins

This website uses plug-ins from the online service Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").
When you access pages of our website that contain such a plug-in, a connection to the Instagram servers is established and the plug-in is displayed on the page by notifying your browser. As a result, both your IP address and the information about which of our pages you have visited are transmitted to the Instagram servers.
If you are logged in to Instagram, Instagram assigns this information to your personal user account. When using the plug-in functions (e.g. clicking the "Instagram" button), this information is also assigned to your Instagram account, which you can only prevent by logging out before using the plug-in.
If you do not want Instagram to assign the information collected directly to your Instagram account, you must either log out of Instagram before visiting our website or block the Instagram plug-in from loading on our website by using an add-on, e.g. the script blocker "NoScript" (noscript.net) for your browser.
For more information on the collection and use of data by Instagram, your rights in this regard and ways to protect your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388.

Use of Facebook plug-ins

This website uses the plug-ins of the social network facebook.com, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). When you access pages of our website that have such a plug-in, a connection to the Facebook servers is established and the plug-in is displayed on the page by notifying your browser. This tells the Facebook server which of our pages you have visited. If you are logged in to Facebook as a member, Facebook assigns this information to your personal Facebook user account. When using the plug-in functions (e.g. clicking the "Like" button, posting a comment), this information is also assigned to your Facebook account, which you can only prevent by logging out before using the plug-in.
If you do not want Facebook to assign the collected information directly to your Facebook profile, you must either log out of Facebook before visiting our website or block the loading of Facebook plug-ins on our pages by using a "Facebook blocker".
For more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/privacy/policy/.

Use of YouTube plug-ins

This website uses plug-ins from the online service YouTube from YouTube LLC. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube").
YouTube is a company affiliated with Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
You can find more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in Google's / YouTube's privacy policy: https://policies.google.com/privacy?hl=en.

d. Recipients

Employees of the IT department
Facebook
YouTube (Google)
Pinterest
X

e. Storage periods

The data collected directly by us via the social media plug-ins is deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, you revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions – in particular retention periods – remain unaffected.
We have no influence on how long the operators of social networks store your data for their own purposes. For details, please contact the operators of the social networks directly (e.g., in their privacy policy (see above)).

f. Statutory/contractual requirement

The provision of your personal data is voluntary. We cannot grant you access to the content and services we offer if you do not provide us with your data.

g. Transfer to third countries

The servers of the social media services are located in the United States and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union.

h. Withdrawal of consent

You can withdraw your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this privacy policy. Please kindly note that we can't delete your data at any social media provider that you have provided already, for doing so please contact the operators of the social networks directly (e.g., in their privacy policy (see above)).

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling when we process your data.

4. Comfort features

4.1 YouTube iFrame video player

On our website, we use the function for embedding YouTube videos from YouTube LLC. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube").
YouTube is a company affiliated with Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
When you visit one of our websites on which a YouTube video is displayed, your browser establishes a connection to the YouTube servers. For technical reasons, the YouTube server is also informed which of our pages you have visited. If you are logged into your YouTube account, you also enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube and the possible transfer of data to the USA and thus to an insecure third country is based on your consent in accordance with Art. 49 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the 'cookie settings' provided on the website.
You can find more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in Google's / YouTube's privacy policy: https://policies.google.com/privacy?hl=en.

4.2 YouTube Data API

The embedded YouTube iFrame video player may also integrate the Data API from YouTube LLC. (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube") in some cases. YouTube Data API is a video content visualization service provided by Google Ireland Limited that allows this Application to incorporate functions normally executed on YouTube so that Users can watch, find, and manage YouTube content directly on this Application.
YouTube is a company affiliated with Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
Through this Service, this Application may collect Data directly or indirectly on or from Users’ devices, including by making use of Trackers. Users may restrict such access to their Data via the security settings page provided by Google: https://security.google.com/settings/security/permissions. Users may ask the Owner for further information about these privacy settings at any time through the contact details provided in this document.
Data collected through the Service may also be used to help third parties deliver interest-based advertising. Users can opt out of third-party interest-based advertising through their device settings or by visiting the Network Advertising Initiative opt-out page: http://optout.networkadvertising.org/?c=1
Personal Data processed: Data communicated while using the service; Trackers; Usage Data.
Place of processing: The information generated by YouTube is usually transmitted to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You can find more information about Google / YouTube and the associated privacy policy https://policies.google.com/privacy

VII. Online store (placing orders as a guest)

You can browse a significant portion of our online store and product range without registering or logging in, which makes access to our range as straightforward and simple as possible. You can buy our products without creating a customer account. For this purpose, you can uncheck the box "Create a customer account." during the ordering process.
In order to process your order, we need your personal data, which you enter in the input mask provided for this purpose. Your personal data is transmitted to, and saved by, us. The following data is collected as part of the order process:

Personal details (name, address)
E-mail address
Telephone number

In addition, the following data is saved when you place an order:

Your IP address
Date and time at which your order was sent

The processing of your data serves the entry into and performance of purchase, work and work delivery contracts in connection with our online store's products. In this respect, the legal basis is Article 6(1)(b) GDPR. In order for us to satisfy our obligations arising from the contracts entered into with you, the processing of the above-mentioned data is absolutely necessary. If you decide not to provide the aforementioned data, we will not be able to

enter into contracts with you,
send you goods or
send you invoices for our services,
send you customised offers,
inform you of special offers and discounts.

Your data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the performance of a contract or the implementation of pre-contractual measures if the data is no longer required for the performance of the contract. We may be under a contractual or statutory obligation to save data even after a contract has been terminated (e.g., for tax-related reasons). The storage periods that apply in this respect vary depending on the individual contracts and contracting parties.
When you place an order, we collect and use your personal data only to the extent necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the fulfilment of a contract with you. Your data will not be passed on to third parties without your express consent. The only exceptions to this are our service partners that we need to fulfil the contractual relationship or service providers that we use as part of order processing. In addition to the recipients named in the respective clauses of this privacy policy, these are, for example, recipients of the following categories shipping service providers, service providers for order processing, web hosts, IT service providers and dropshipping retailers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
Please kindly note that when ordering, an email will get generated and be sent to you and us. Furthermore we will forward your personal informtion to the a shipping company to fulfill your order. Please kind refer to our policies regarding e-mails and forward of data to shipping companies below, for more information on the matter.

VIII. Online store (placing orders with registration)

In addition to guest access without registration, we also offer you the option of voluntarily registering for the online store. Registering means you only have to enter your data once and can simply log on for subsequent purchases using your e-mail address and a password of your choosing. In order to do so, you have to enter your data in the input mask provided. The data is transmitted to, and saved by, us. The following data is collected as part of the registration process:

Personal details (name, address)
E-mail address
Telephone number

In addition, the following data is saved when you register:

Your IP address
Date and time at which your order was sent

Registering at our online store primarily serves the entry into and performance of purchase, work and work delivery contracts in connection with our online store's products. In this respect, the legal basis is also Article 6(1)(b) GDPR. If you decide not to provide the aforementioned data by registering, we will not be able to

automatically fill in your data for subsequent purchases,
send you customised offers,
inform you of special offers and discounts.

Your data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. As far as the data collected in connection with your registration is concerned, this is generally the case if you cancel your registration/delete your account.
If this data is also required for the performance of a contract or in order to take steps prior to entering into a contract, however, the data can only be erased prematurely if this is permitted on the basis of contractual or statutory obligations. We may be under a contractual or statutory obligation to save data even after a contract has been terminated (e.g., for tax-related reasons). The storage periods that apply in this respect vary depending on the individual contracts and contracting parties.
When you place an order, we collect and use your personal data only to the extent necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the fulfilment of a contract with you. Your data will not be passed on to third parties without your express consent. The only exceptions to this are our service partners that we need to fulfil the contractual relationship or service providers that we use as part of order processing. In addition to the recipients named in the respective clauses of this privacy policy, these are, for example, recipients of the following categories shipping service providers, service providers for order processing, web hosts, IT service providers and dropshipping retailers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
Please kindly note that when ordering, an email will get generated and be sent to you and us. Furthermore we will forward your personal informtion to the a shipping company to fulfill your order. Please kind refer to our policies regarding e-mails and forward of data to shipping companies below, for more information on the matter.

IX. Forwarding personal data to shipping companies

We will pass on your salutation, name, address and e-mail address to the transport company as part of the contract processing if you have expressly consented to this during the ordering process. The purpose of forwarding is to send you your order and to inform you by e-mail about the shipping status. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us or the transport company without affecting the lawfulness of processing based on consent before its withdrawal.
The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.
Where personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards to ensure that the provisions of the GDPR are adhered to at the level of these recipients as well.
Your data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. As far as the data collected in connection with your order is concerned, this is generally the case if you cancel your registration/delete your account or latest after 180 days when ordering as a guest.
If the data is required for the performance of a contract or in order to take steps prior to entering into a contract, the data can only be erased prematurely if this is permitted on the basis of contractual or statutory obligations. The storage periods that apply in this respect vary depending on the individual contracts and contracting parties.

XI. Online customization of products; Using augmented and virtual reality tools

Our website uses plugins from UpCommerce S.p.a., Via Copernico 38, 20125 Milano IT in the following reffered to as "UpCommerce". When you visit one of our pages equipped with the UpCommerce plugin, a connection to the UpCommerce servers is established. Whenever you can design the product yourself with own text and images, you are on a page using the UpCommerce plugin. Also when you have an option to see the product in augmented or virtual reality, you will be using the plugin from UpCommerce. Images and texts are transmitted to us via the UpCommerce server and stored temporarily.
If you don't want to use the plugin from UpCommerce, please don't open the plugin from UpCommerce by pressing the 'Customize' button on the products detail page and get in touch with us via phone or email, instead.
If you wish to delete your data which is already on the UpCommerce servers stored by using our services, please get in touch with our data protection officer using the contact details set out on part III.
You can find more information on the collection and use of data by UpCommerce, your rights in this regard and options for protecting your privacy in UpCommerce' privacy policy behin this link.

XII. Credit check

In order to be able to correctly assess the economic risks of purchase and work contracts or certain payment terms, we carry out credit checks and, if necessary, also check changes in your creditworthiness. For this purpose, we exchange address and creditworthiness data with credit service providers.
For the purpose of deciding on the establishment, execution or termination of the contractual relationship, we use information on your previous payment behaviour and probability values on your future behaviour on the basis of mathematical-statistical procedures using address data.
We obtain this information from the following providers:

Novalnet AG

see below for more information about Novalnet AG

Stripe Payments Europe, Limited

see below for more information about Stripe Payments Europe, Limited

PayPal (Europe) S.à r.l. et Cie, S.C.A.

see below for more information about PayPal (Europe) S.à r.l. et Cie, S.C.A.

In order to obtain this data, it is necessary for us to forward your personal details and order data to these companies.
The legal basis for the transmission and other processing of your data is our legitimate interest and thus Article 6(1)(f) GDPR.
You can object to the processing of your data on the basis of the legitimate interest in this respect. In order to do so, simply send us an informal message to this effect using the contact details set out on page 1.
In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If we no longer process your data, this may mean that we are unable to assess the economic risk of contracts with you and therefore refuse to conclude individual contracts or only offer payment terms that minimise the risk of non-payment.
Your data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for creditworthiness data when the decision on the establishment, execution or termination of the contractual relationship has been completed. In case of doubt, at a minimum the decision to terminate the contractual relationship is possible until its actual termination, which is why your creditworthiness data will remain stored until this time.

XIII. Payment services

If you enter into contracts with us via our online store, we integrate third-party payment services, depending on which payment method you choose. Since the payment is related to the contractual relationship with you, the legal basis for all payment methods is Article 6(1)(b) GDPR.
The payment service providers you can identify by the name of the payment service on the checkout page. The ones you can choose from are:

Use of payments via Novalnet

We have integrated components from Novalnet AG on this website. Novalnet AG is a full payment service provider that handles payment processing, among other things. If the data subject selects a payment method during the ordering process in the online store, the data of the data subject is automatically transmitted to Novalnet AG. By selecting a payment option, the data subject consents to the transfer of personal data for the purpose of processing the payment.
The personal data transmitted to Novalnet is usually first name, surname, address, gender, e-mail address, IP address and, if applicable, date of birth, telephone number, cell phone number and other data required to process a payment. Personal data relating to the respective order is also required to process the purchase contract. In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiry date and CVC code, data on goods and services, prices.
The transmission of data is intended in particular for identity verification, payment administration and fraud prevention. The controller will transfer personal data to Novalnet AG in particular if there is a legitimate interest in the transfer. The personal data exchanged between Novalnet AG and the controller may be transmitted by Novalnet AG to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness.
Novalnet AG also passes on personal data to service providers or subcontractors if this is necessary to fulfill contractual obligations or if the data is to be processed. Further information on the data protection guidelines of Novalnet AG can be found here: https://www.novalnet.com/privacy-policy/.
The data subject has the option of withdrawing consent to the handling of personal data at any time from Novalnet AG: https://www.novalnet.com/imprint/. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

Use of payments via Stripe

We have integrated components from Stripe Payments Europe, Limited on this website. Stripe Payments Europe, Limited is a full payment service provider that handles payment processing, among other things. If the data subject selects a payment method during the ordering process in the online store, the data of the data subject is automatically transmitted to Stripe Payments Europe, Limited. By selecting a payment option, the data subject consents to the transfer of personal data for the purpose of processing the payment.
The personal data transmitted to Stripe is usually first name, surname, address, gender, e-mail address, IP address and, if applicable, date of birth, telephone number, cell phone number and other data required to process a payment. Personal data relating to the respective order is also required to process the purchase contract. In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiry date and CVC code, data on goods and services, prices.
The transmission of data is intended in particular for identity verification, payment administration and fraud prevention. The controller will transfer personal data to Stripe Payments Europe, Limited in particular if there is a legitimate interest in the transfer. The personal data exchanged between Stripe Payments Europe, Limited and the controller may be transmitted by Stripe Payments Europe, Limited to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness.
Stripe Payments Europe, Limited also passes on personal data to service providers or subcontractors if this is necessary to fulfill contractual obligations or if the data is to be processed. Further information on the data protection guidelines of Stripe Payments Europe, Limited can be found here: https://stripe.com/privacy.
The data subject has the option of withdrawing consent to the handling of personal data at any time from Stripe Payments Europe, Limited: https://stripe.com/legal/imprint. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

Use of payments via PayPal

We have integrated components from PayPal (Europe) S.à r.l. et Cie, S.C.A. on this website. PayPal (Europe) S.à r.l. et Cie, S.C.A. is a full payment service provider that handles payment processing, among other things. If the data subject selects a payment method during the ordering process in the online store, the data of the data subject is automatically transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A.. By selecting a payment option, the data subject consents to the transfer of personal data for the purpose of processing the payment.
The personal data transmitted to PayPal is usually first name, surname, address, gender, e-mail address, IP address and, if applicable, date of birth, telephone number, cell phone number and other data required to process a payment. Personal data relating to the respective order is also required to process the purchase contract. In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiry date and CVC code, data on goods and services, prices.
The transmission of data is intended in particular for identity verification, payment administration and fraud prevention. The controller will transfer personal data to PayPal (Europe) S.à r.l. et Cie, S.C.A. in particular if there is a legitimate interest in the transfer. The personal data exchanged between PayPal (Europe) S.à r.l. et Cie, S.C.A. and the controller may be transmitted by PayPal (Europe) S.à r.l. et Cie, S.C.A. to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness.
PayPal (Europe) S.à r.l. et Cie, S.C.A. also passes on personal data to service providers or subcontractors if this is necessary to fulfill contractual obligations or if the data is to be processed. Further information on the data protection guidelines of PayPal (Europe) S.à r.l. et Cie, S.C.A. can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_US.
The data subject has the option of withdrawing consent to the handling of personal data at any time from PayPal (Europe) S.à r.l. et Cie, S.C.A.: https://www.paypal.com/de/webapps/mpp/imprint. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

XII. Contact form and e-mail contact

You can contact us using various contact forms on our website or by sending us an e-mail.
If you enter data in the input mask provided for this purpose on the contact form and send it to us, this data will be transmitted to, and processed by us. This includes the following data:

Name
E-mail address
Telephone number
Subject
Message
Your IP address
Date and time of registration

Please kindly note that when using the various contact forms, an email will get generated and be sent to you and us.
For all email services (i.e. emails generated by contact forms, receiving emails you sent us and emails we are sending to you) we are using Gmail, an email service provided by Google, 1600 Amphitheatre Parkway , Mountain View, CA 94043, USA (hereinafter referred to as: "Google"). The information generated by the e-mail is usually transmitted to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address or e-mail content with any other data held by Google. You can find more information about Google Gmail and the associated privacy policy https://policies.google.com/privacy
To enable the processing of data for correspondence purposes, we ask for your consent before the message is sent and draw your attention to this privacy policy. In this respect, the legal basis for the data processing is Article 6(1)(a) GDPR.
The processing of other data (e.g. connection data) during the sending process is designed to prevent the misuse of the contact form and to ensure the security of our IT systems. In this respect, the legal basis is Article 6(1)(f) GDPR.
If you contact us using the e-mail address provided, the personal data transmitted along with your e-mail will be saved. In this respect, the legal basis for the processing of your data is Article 6(1)(f) GDPR, as we have a legitimate interest in this regard. If you contact us using the form or by e-mail in connection with the conclusion of a contract, Article 6(1)(b) GDPR also forms the basis for the processing.
We only process personal data from the input mask or e-mails in order to process your enquiry.
Your data is erased as soon as it is no longer required to achieve the purpose for which it was collected. In cases involving personal data from the contact form input mask and data transmitted by e-mail, this applies when the correspondence with you has ended. The correspondence is deemed to have ended when the circumstances indicate that the matter in question has been resolved with definitive effect.
Additional personal data collected during the sending process is erased after a period of 180 days at the latest.
You can withdraw your consent to the processing of the personal data at any time. If you contact us by e-mail, you can object to your personal data being saved at any time. In order to do so, simply send us an informal message to this effect using the contact details set out on part III.
If you object, however, we will not be able to process your e-mail for any other purpose than deleting your data.
If the data is required for the performance of a contract or in order to take steps prior to entering into a contract, the data can only be erased prematurely if this is permitted on the basis of contractual or statutory obligations. The storage periods that apply in this respect vary depending on the individual contracts and contracting parties.

XIV. Newsletter

You can sign up for our free newsletter. To do so, you enter your data in the input mask provided and your data is transmitted to us. Your e-mail address is recorded when you sign up for the newsletter.
As soon as your message is sent, the following other data is also saved:

Name
E-mail address
Your IP address
Date and time of registration

Before you submit your data, we ask you to consent to the processing of your data and draw your attention to this privacy policy. Your data is processed with your consent. In this respect, the legal basis is Article 6(1)(a) GDPR.
After you sign up, you will receive an e-mail asking you to confirm your subscription. This confirmation is necessary to ensure that nobody can subscribe using e-mail addresses that are not their own. Newsletter subscriptions are logged in order to be able to furnish evidence of the subscription process in accordance with the legal requirements. This includes saving the time of registration and confirmation.
Please kindly note that when signing up for our newsletter, emails will get generated and be sent to you and us.
For all email services (i.e. emails generated for the newsletter, receiving emails you sent us and emails we are sending to you) we are using Gmail, an email service provided by Google, 1600 Amphitheatre Parkway , Mountain View, CA 94043, USA (hereinafter referred to as: "Google"). The information generated by the e-mail is usually transmitted to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address or e-mail content with any other data held by Google. You can find more information about Google Gmail and the associated privacy policy https://policies.google.com/privacy
No data is transmitted to other third parties than Google in connection with the data processing for the purpose of sending newsletters. You can cancel your subscription to the newsletter at any time or object to receiving further newsletters. Each newsletter contains a link to the form allowing you to unsubscribe. This means that we also allow you to withdraw your consent to the storage of your data at the same time. You can also, however, withdraw your consent by sending us an informal message to this effect using the contact details set out on part III.
Since the processing of the data is also necessary in order to deliver the newsletter you have subscribed to, Article 6(1)(b) and Article 6(1)(f) GDPR also serve as the legal basis.
The collection of other personal data in the registration process serves to prevent misuse of the services or the e-mail address used. This processing is therefore also permissible on the basis of Article 6(1)(f) GDPR.
The data is used exclusively for the purpose of sending the newsletter.
Your data is erased as soon as it is no longer required to achieve the purpose for which it was collected. Your e-mail address is stored for as long as you remain subscribed to the newsletter.
If the data is required for the performance of a contract or in order to take steps prior to entering into a contract, however, the data can only be erased prematurely if this is permitted on the basis of contractual or statutory obligations. We may be under a contractual or statutory obligation to save data even after a contract has been terminated (e.g., for tax-related reasons). The storage periods that apply in this respect vary depending on the individual contracts and contracting parties.

XV. Dissemination within the company

Provided that you grant us your consent, address and order data will also be collected and processed for our own marketing purposes and for those of the company Emergent-Production UG (haftungsbeschraenkt); Leopoldstr. 2-8; D-32051 Herford as stated in part II. The legal basis in this respect is Article 6(1)(a) GDPR.
In certain circumstances, we can also process your data within the Group based on a legitimate interest. In this respect, the legal basis is Article 6(1)(f) GDPR.
You can object to the data processing based on the legitimate interest and/or withdraw your consent to data processing. In order to do so, simply send us an informal message to this effect using the contact details set out on part III.
Your data is erased as soon as it is no longer required to achieve the purpose for which it was collected.

XVI. Your rights

The information below summarises your rights under the General Data Protection Regulation.
On request, please contact our data protection officer, whose contact information can be found in part III.

1. Right to withdraw consent to data processing (Article 7(3) GDPR)

You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, you will be informed thereof.

2. Right of access (Article 15 GDPR)

Pursuant to Article 15 GDPR, you have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed. If this is the case, you have the right to access the personal data and the following information:

the purposes of the processing;
the categories of personal data concerned;
to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you by us, or to object to such processing by us;
the right to lodge a complaint with a supervisory authority;
where the personal data is not collected from you, any available information as to its source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and – in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Where personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards to ensure that the provisions of the GDPR are adhered to at the level of these recipients as well.

3. Right to rectification (Article 16 GDPR)

You can request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

4. Right to erasure/"right to be forgotten" (Article 17 GDPR)

You have the right to ask us to erase data where one of the following grounds applies:

The data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
You withdraw the consent on which the processing is based and there is no other legal ground for the processing.
You object to the processing pursuant to Article 21(1) GDPR on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing.
You object to the process for direct marketing purposes pursuant to Article 21(2) GDPR.
The data has been unlawfully processed.
The erasure of the data is required to comply with a legal obligation under European or German law.
The personal data was collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If we have made your data public and are obliged to erase it, then, taking account of available technology and the cost of implementation, we shall take reasonable steps to inform the controllers that you have requested the erasure.

5. Right to restriction of processing (Article 18 GDPR)

Pursuant to Article 18 GDPR, we may only process data subject to restrictions in the following cases. This is the case if:

you contest the accuracy of your data, for a period enabling us to verify the accuracy of the data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
we no longer need the data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or
you objected to processing pursuant to Article 21(1) GDPR on grounds relating to your particular situation pending the verification whether our legitimate grounds for processing override your interests.

If processing has been restricted, we may only save this data. Data may then only be processed further with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
You can withdraw your consent granted in this regard at any time.
We will inform you before the restriction is lifted.

6. Right to object (Article 19 GDPR)

We are obliged to communicate any rectification or erasure of your data or restriction of processing to all recipients to whom your data has been disclosed, unless this proves impossible or involves disproportionate effort.
We shall inform you about those recipients if you request this.

7. Right to data portability (Article 20 GDPR)

You have the right to receive the data concerning you which you have provided to us in a structured, commonly used and machine-readable format. You also have the right to ask us to transmit this data to a third party where

the processing is based on consent or on a contract and
the processing is carried out by automated means.

You have the right to have the data transmitted directly to the third party where technically feasible. This right shall not adversely affect the rights and freedoms of others.

8. Automated individual decision-making, including profiling (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This does not apply if:

you have previously given your express consent to this; or
the decision is necessary for the entry into or performance of a contract between us; or
applicable legal provisions permit this and these provisions contain appropriate measures to safeguard your rights, freedoms and legitimate interests.

In the first two cases, we will take appropriate measures to safeguard your rights, freedoms and legitimate interests. This includes your right to explain your own position, challenge the automated decision and request the intervention of one of our persons.

9. Right to object (Article 21 GDPR)

If we process your data based on a legitimate interest (Article 6(1)(f) GDPR), you have the right to object to this on grounds relating to your particular situation. This also applies to profiling based on these provisions. In such cases, we will no longer process your data unless we demonstrate compelling legitimate grounds for doing so. These must override your interests, rights and freedoms, or the processing must serve the establishment, exercise or defence of legal claims.
Where we process your data for direct marketing purposes, you have the right to object to the processing of the data. This includes profiling to the extent that it is related to such direct marketing.
After you object, your data will no longer be processed for such purposes.
In order to object, simply send us an informal message to this effect using the contact details set out above.

10. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of the data relating to you infringes the General Data Protection Regulation. This shall not affect any other administrative or judicial redress to which you may be entitled.

last update: D-Herford, 2024-11-24