Privacy Policy

Privacy Policy

Unless otherwise specified below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies as far as no other indication is given in the following processing operations. "Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred, and the requesting provider. Processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering. Your data will be transmitted to Canada, among other countries. For data transfers to Canada, there is an adequacy decision by the European Commission.

Contact

Controller Contact us if you wish. The controller for data processing is: CospudProduction GmbH, Merseburgerstraße 200, 04178 Leipzig.: 0341 33205364, support@spawnd.eu

Initiative Contact by Customer via Email If you contact us by email to initiate business contact, we will only collect your personal data (name, email address, message text) to the extent provided by you. The data processing is for the purpose of processing and responding to your contact request. If the contact is for pre-contractual measures (e.g., consulting for purchase interest, quotation) or concerns an already concluded contract between you and us, this data processing is based on Article 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR due to our legitimate interest in processing and responding to your request. In this case, you have the right to object to such processing of your personal data based on Article 6(1)(f) GDPR, for reasons arising from your particular situation. We will only use your email address to process your request. Your data will be deleted after the statutory retention periods, unless you have consented to further processing and use.

Collection and Processing when Using the Contact Form When using the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing is for the purpose of contacting you. If the contact is for pre-contractual measures (e.g., consulting for purchase interest, quotation) or concerns an already concluded contract between you and us, this data processing is based on Article 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR due to our legitimate interest in processing and responding to your request. In this case, you have the right to object to such processing of your personal data based on Article 6(1)(f) GDPR, for reasons arising from your particular situation. We will only use your email address to process your request. Your data will be deleted after the statutory retention periods, unless you have consented to further processing and use.

Usage of Google Maps API Address Validation

We use the address validation service provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). The data processing is aimed at verifying your inputs in our address forms in real-time, checking for input and spelling errors, and supplementing missing data. In case of erroneous inputs, alternative suggestions for correction are displayed. For this purpose, the address data entered by you is transmitted to the provider, stored, and analyzed there. The following information may be transmitted to Google and processed there: postal addresses (country, city, postal code, street, house number), email address, telephone number. Your data may also be transferred to the USA. For data transfers to the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR, arising from our predominant legitimate interest in ensuring correct data for fulfilling our contractual obligations. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. The data is processed separately by the provider and not merged with other data. It will be deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days. For further information on terms of use and data protection at Google, please refer to: Google Maps Platform Terms and Google Privacy Policy.

Customer Account Orders

Customer Account When opening a customer account, we collect your personal data to the extent specified therein. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing based on the consent before its withdrawal. Your customer account will then be deleted.

Collection, Processing, and Transfer of Personal Data in Orders When ordering, we only collect and process your personal data to the extent necessary to fulfill and process your order and to handle your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in the contract not being concluded. The processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you. Your data will be disclosed to shipping companies and dropshipping providers, payment service providers, service providers for order processing, and IT service providers, for example, as part of the order processing. In all cases, we strictly observe legal requirements. The scope of data transmission is limited to a minimum. Your data will be transferred to Canada, among other places. For data transfers to Canada, there is an adequacy decision by the European Commission.

Advertising

Use of Email Address for Sending Newsletters We use your email address solely for our own advertising purposes for sending newsletters, regardless of the contractual processing, if you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Shipping Service Providers Warehouse Management

Disclosure of the Email Address to Shipping Companies for Information about the Shipping Status As part of the contract processing, we will forward your email address to the shipping company if you have expressly consented to this during the ordering process. The disclosure is for the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the legality of the processing carried out on the basis of the consent until revocation.

Use of an External Warehouse Management System We use a warehouse management system for contract processing as part of order processing. For this purpose, your personal data collected in the course of the order will be transmitted to Haufe-Lexware GmbH & Co. KG, a company of the Haufe Group. The processing of your personal data is for the purpose of fulfilling the contract with you and is based on Art. 6 para. 1 lit. b GDPR.

Payment Service Providers

Use of PayPal We use the PayPal payment service on our website provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing will be transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. All PayPal transactions are subject to the PayPal privacy policy. You can find this at PayPal Privacy Policy.

Use of PayPal Plus We use the PayPal Plus payment service on our website provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing will be transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain credit information based on mathematical-statistical procedures using credit agencies. To do this, PayPal will transfer the personal data required for a credit check to a credit agency and use the information obtained about the statistical probability of default for a balanced decision on the establishment, implementation, or termination of the contractual relationship. The credit report may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, including address data. Your legitimate interests will be taken into account in accordance with legal requirements. The data processing serves the purpose of credit checking for the initiation of a contract. The processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in protecting against payment default when PayPal makes advance payments. You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it will result in the contract not being concluded with the payment method you have chosen.

Use of PayPal Express We use the PayPal Express payment service on our website provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable recognition of your browser. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in offering a customer-oriented range of various payment methods. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at PayPal Privacy Policy.

 

Use of PayPal Check-Out

We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The processing of data is carried out for the purpose of offering you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data necessary for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR.

In this process, cookies may be stored that enable the recognition of your browser. The data processing that occurs as a result is based on Article 6(1)(f) of the GDPR, stemming from our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary. To do this, PayPal transmits the personal data required for a credit check to a credit agency and uses the information obtained about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, including address data in the calculation. Your legitimate interests will be taken into account in accordance with legal requirements. The data processing serves the purpose of credit assessment for contract initiation. Processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protecting against payment default when PayPal makes advance payments. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation by notifying PayPal. Providing the data is necessary for concluding the contract with the payment method you have chosen. Failure to provide it will result in the contract not being concluded with the payment method you have chosen.

Third-party providers When paying via a third-party payment method, the data necessary for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) of the GDPR. To execute this payment method, the data may then be forwarded by PayPal to the respective provider. This processing is based on Article 6(1)(b) of the GDPR. Local third-party providers may include:

  • Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
  • giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main) Invoice purchase via PayPal When paying via the invoice purchase payment method, the data necessary for payment processing is initially transmitted to PayPal. To execute this payment method, the data is then forwarded by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. Ratepay may conduct a credit check based on mathematical-statistical methods (probability or score values) using credit agencies following the process described above. The data processing serves the purpose of credit assessment for contract initiation. Processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protecting against payment default when Ratepay makes advance payments. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

For more information on data processing when using PayPal, please refer to the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Amazon Payments We use the Amazon Payments payment service provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments") on our website. The data processing is carried out for the purpose of offering you payment via the Amazon Payments payment service. To integrate this payment service, it is necessary for Amazon Payments to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser. The processing of your personal data is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. By selecting and using "Amazon Payments," the data necessary for payment processing is transmitted to Amazon Payments to fulfill the contract with you using the chosen payment method. This processing is based on Article 6(1)(b) of the GDPR. For more information on data processing when using the Amazon Payments payment service, please refer to the corresponding privacy policy at: https://pay.amazon.com/de/help/201212490.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide on a case-by-case basis whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Already stored cookies can be deleted at any time. However, we would like to point out that if you do this, you may not be able to use all the functions of this website to their full extent. You can find information on how to manage cookies in the most commonly used browsers (including how to disable them) at the following links: Chrome: https://support.google.com/accounts/answer/61416?hl=de Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognized even after a page change. The use of cookies or comparable technologies is based on Section 25(2) of the TTDSG. The processing of your personal data is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offering. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. Use of the Cookie Consent Manager CCM19 We use the Cookie Consent Manager CCM19 provided by Papoo Software & Media GmbH (Auguststr. 4, 53229 Bonn; "CCM19") on our website. The plug-in allows you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right of revocation for consents already given. The data processing is carried out for the purpose of obtaining necessary consents for data processing, documenting them, and thus complying with legal obligations. For this purpose, cookies are used. Among other things, the following information may be collected, stored, and possibly transmitted to CCM19: randomly assigned ID, consent status, date and time of consent/refusal. The data is stored for 1 year and 1 month and then deleted. This data is not passed on to any other third parties. The data processing is carried out to fulfill a legal obligation based on Article 6(1)(c) of the GDPR. For more information on data protection at CCM19, please visit: https://www.ccm19.de/datenschutzerklaerung.html.

 

### Plug-ins and Miscellaneous

#### Use of Social Plug-ins via "Shariff"

We use social media plug-ins on our website. To ensure that you have control over your data, we use the privacy-friendly "Shariff" buttons.

Without your explicit consent, no connections are made to the servers of social networks, and consequently, no data is transmitted.

"Shariff" is a development of the specialists at the computer magazine c't. It enables more privacy on the web and replaces the usual "Share" buttons of social networks. More information about the Shariff project can be found [here](https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html).

When you click the buttons, a pop-up window appears where you can log in with your data to the respective provider. Only after this active login by you is a direct connection to the social networks established.

By logging in, you consent to the transmission of your data to the respective social media provider. This includes, among other things, your IP address and information about which of our pages you have visited. If you are simultaneously connected to one or more of your social network accounts, the collected information will also be associated with your respective profiles. You can prevent this association by logging out of your social media accounts before visiting our website and before activating the buttons. The following named social networks are integrated using the "Shariff" function.

For more information about the scope and purpose of data collection and use, as well as your related rights and options for protecting your privacy, please refer to the linked privacy notices of the providers.

- Instagram by Meta Platforms Ireland Limited ([Privacy Policy](https://help.instagram.com/155833707900388))

#### Use of Social Plug-ins via the "2-Click Solution"

We use social media plug-ins on our website via the "2-click solution". Without your explicit consent, no connections are made to the servers of social networks, and consequently, no data is transmitted.

When plug-ins are integrated by default, when you visit pages of our website containing such a plug-in, a connection is made between your computer and the servers of the providers of the social network, and the plug-in is displayed on the page by notifying your browser. In doing so, both your IP address and information about which of our pages you have visited are transmitted to the provider's servers. This applies regardless of whether you are registered with the social network or logged in. Transmission also occurs for non-registered or non-logged-in users. Additionally, if you are logged into the Facebook social network, this information is associated with your personal user account. When using the plug-in functions (e.g., by pressing the button), this information is also associated with your user account, which you can only prevent by logging out before using the plug-in. To ensure that you have control over your data, we have chosen to initially deactivate the corresponding button. You can recognize this by the grayed-out button. Without your explicit consent - in the form of activating the button - no connection to the server of the social network is established, and consequently, no data is transmitted. Only when you activate the button does it become active (highlighted in color), and a direct connection to the server of the social network is established. By activating it, you consent to the transmission of your data to the respective provider of the social network. This includes, among other things, your IP address and information about which of our pages you have visited. If you are simultaneously connected to one or more of your social network accounts, the collected information will also be associated with your respective profiles. You can prevent this association by logging out of your user accounts on the social networks before visiting our website and before activating the buttons. The following named social networks are integrated using the "2-click function".

For more information about the scope and purpose of data collection and use, as well as your related rights and options for protecting your privacy, please refer to the linked privacy notices of the providers.

- Instagram by Meta Platforms Ireland Limited ([Privacy Policy](http://instagram.com/legal/privacy/))

#### Use of Google reCAPTCHA

We use the Google reCAPTCHA service on our website. The query serves the purpose of distinguishing input by a human from automated, machine processing. For this purpose, your input is transmitted to Google and used there. Additionally, the IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA.

The use of cookies or similar technologies is based on your consent in accordance with § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

For more information about Google reCAPTCHA and its privacy policy, please visit: [Google reCAPTCHA](https://www.google.com/recaptcha/intro/android.html) and [Google Privacy Policy](https://www.google.com/privacy).

#### Use of Cloudflare

We use the Cloudflare CDN (Content Delivery Network) service on our website provided by Cloudflare Inc. This is a regional network of servers in various data centers that our web server connects to and through which certain content of our website is delivered.

The data processing serves the purpose of optimizing the loading times of our website and thus making our offer more user-friendly.

The following information may be collected, among others: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).

Your data may be transferred to the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself according to the TADPF and thereby committed to complying with European data protection principles.

The processing of your personal data is based on Art. 6 para. 1 lit. f DSGVO out of our predominant legitimate interest in the needs-based and targeted design of the website. You have the right to object to processing based on Art. 6 para. 1 lit. f DSGVO at any time for reasons arising from your particular situation.

For more information on data protection when using Cloudflare, please visit: [Cloudflare Privacy Policy](https://www.cloudflare.com/de-de/privacypolicy/).

#### Use of Google Maps

We use the Google Maps embedding function on our website provided by Google Ireland Limited. The function enables the visual display of geographical information and interactive maps. When pages containing Google Maps are accessed, Google also collects, processes, and uses data from visitors to the websites.

Your data may also be transferred to the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and thereby committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a DSGVO. The processing of

your personal data is carried out with your consent based on Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

For more information on data collection and use by Google, please refer to Google's privacy policy at: [Google Privacy Policy](https://www.google.com/privacypolicy.html).

#### Use of Google Fonts

We use Google Fonts on our website provided by Google Ireland Limited. The data processing serves the purpose of a uniform display of fonts on our website. To load the fonts, a connection is made to servers of Google when the page is accessed. Cookies may be used in the process. Among other things, your IP address and information about the browser and operating system you are using are processed and transmitted to Google.

Your data may be transferred to the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and thereby committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

For more information on data processing and data protection, please visit: [Google Privacy Policy](https://www.google.de/intl/de/policies/) and [Google Fonts FAQ](https://developers.google.com/fonts/faq).

#### Use of Adobe Fonts

We use Adobe Fonts on our website provided by Adobe Systems Software Ireland Limited. The data processing serves the purpose of a uniform display of fonts on our website. To load the fonts, a connection is made to servers of Adobe when the page is accessed. Cookies may be used in the process. Among other things, your IP address and information about the browser and operating system you are using are processed and transmitted to Adobe.

Your data may be transferred to third countries such as the USA and India. For India, there is no adequacy decision of the European Commission. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Adobe has certified itself according to the TADPF and thereby committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

For more information on data processing and data protection, please visit: [Adobe Privacy Policy](https://www.adobe.com/de/privacy/policy.html) and [Adobe Fonts Privacy Policy](https://www.adobe.com/de/privacy/policies/adobe-fonts.html).

#### Use of Algolia

We use the Algolia search function on our website provided by Algolia SAS. The data processing serves the purpose of making the information contained on our website easier to find and user-friendly. Algolia uses technologies such as cookies. Among other things, the following information may be collected: IP address, date and time of page access, information about the browser and operating system you are using. The data is stored on Algolia's server for a period of 90 days.

Your data may be transferred to third countries such as the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Algolia is not certified under the TADPF. Data transfer is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: [Standard Contractual Clauses (SCC)](https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).

The use of cookies or similar technologies is based on your consent in accordance with § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

For more information on data protection and the use of cookies by Algolia, please visit: [Algolia Privacy Policy](https://www.algolia.com/policies/privacy/).

#### Use of Google Translate

We use the Google Translate translation service on our website via an API integration provided by Google Ireland Limited. The data processing serves the purpose of displaying the information provided on the website in other languages. To display the translation of your choice in a national language, your browser establishes a connection to Google's servers. Cookies may be used in the process. Among other things, the following information may be collected and processed: IP address, URL of the visited page, date and time.

Your data may be transferred to the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and thereby committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a DSGVO. The processing

of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

For more information on data collection and use by Google, please refer to Google's privacy policy at: [Google Privacy Policy](https://www.google.com/policies/privacy/).

Duration of Storage
After complete contract processing, the data will initially be stored for the duration of the warranty period and then, taking into account statutory retention periods, especially those under tax and commercial law, and then deleted after the deadline has expired, unless you have consented to further processing and use.

Rights of the Data Subject
Subject to the legal requirements, you have the following rights under Articles 15 to 20 of the GDPR: right to information, right to rectification, right to erasure, right to restriction of processing, right to data portability.
Furthermore, according to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purpose of direct marketing.

Right to Lodge a Complaint with the Supervisory Authority
Under Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among other places, with the supervisory authority responsible for us, which you can reach using the following contact details:

Saxon Data Protection and Transparency Commissioner
Devrientstraße 5
01067 Dresden
Tel.: +49 351 85471101
Fax: +49 351 85471109
Email: saechsdsb@slt.sachsen.de

Right to Object
If the personal data processing listed here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object at any time for reasons arising from your particular situation, with effect for the future.
Upon objection, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

Last Update: 04.08.2025