Privacy policy

Privacy policy

The data controller is:

MARY ROSE GmbH

4 Schillerstraße

6850 Dornbirn

Email: maryrose@paptex.at

Phone: 43 (0)5572 26858

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. access data and hosting

You can visit our website without providing any personal information. Each time you access a webpage, the web server automatically saves a so-called server log file that contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), and documents the request. This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offerings. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in the correct presentation of our offerings in accordance with Art. 6(1)(f) GDPR. All access data is deleted no later than two weeks after the end of your visit to the site. All access data is processed only for as long as is necessary to achieve the aforementioned processing purposes.

 Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in the forms provided on this website will be processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Canada, New Zealand, Japan, United Kingdom, USA.

The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Until certification by our service providers, the data transfer continues to be based on this basis: standard data protection clauses of the European Commission.

Our service providers are located and/or use servers in these countries: Australia, India, Singapore.
There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on these guarantees: Standard data protection clauses of the European Commission

2. data processing for contract processing and for establishing contact

2.1 Data processing for contract processing

For the purpose of contract fulfillment (including inquiries regarding and the handling of any existing claims arising from warranty, breach of contract, and right of withdrawal, as well as any statutory obligations to provide updates) in accordance with Article 6(1)(b) of the GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, as we require this data for contract fulfillment in these cases and cannot ship the order without it. The data collected is indicated in the respective input forms.

Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After completion of the contract, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Merchandise management system

We use merchandise management systems from external service providers to process orders and contracts. Our service providers work for us within the framework of order processing. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2.2 Customer account

If you have given your consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account and storing your data for further future orders on our website. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

 Contact Us

As part of our customer communications, we collect personal data to process your inquiries in accordance with Article 6(1)(b) of the GDPR if you voluntarily provide it to us when contacting us (e.g., via the contact form, live chat tool, or email). Required fields are marked as such, as we absolutely need this data to process your inquiry in these cases. The data collected is indicated in the respective input forms. Once your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

3. data processing for the purpose of dispatch processing

In order to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

 Data transfer to shipping service providers for the purpose of shipping notification

If you have given us your explicit consent to do so during or after your order, we will, pursuant to Article 6(1)(a) of the GDPR, share your email address with the selected shipping provider so that they can contact you prior to delivery to notify you of the shipment or coordinate delivery details.
You may revoke your consent at any time by sending a message to the contact information provided in this Privacy Policy. Upon revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact information provided in this Privacy Policy.

4. data processing for payment processing

We work with the following partners to process payments in our online store: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we will share the data necessary to process the payment transaction with our technical service providers, the designated financial institutions, or the selected payment service provider, to the extent necessary to process the payment. This is done for the purpose of fulfilling the contract in accordance with Article 6(1)(b) of the GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g., on their own website or through technical integration into the ordering process. In such cases, the privacy policy of the respective payment service provider applies.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists. To the extent that data is transferred to third countries outside the EU/EEA for which the European Commission has not issued a decision on an adequate level of data protection, the cooperation is based on the European Commission’s Standard Data Protection Clauses.

If you have any questions about our payment processing partners or the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

4.2 Data processing for the purpose of fraud prevention and optimization of our payment processes

Where necessary, we provide the aforementioned service providers with additional data, which they use—along with the data required to process the payment—for the purposes of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, and supporting accounting). This serves, in accordance with Art. 6(1)(f) of the GDPR, to safeguard our legitimate interests—which prevail following a balancing of interests—in protecting ourselves against fraud and in ensuring efficient payment management.

4.3 Identity and credit checks when selecting Klarna payment services

Klarna Direct Debit, Purchase on Account via Klarna
If you choose to use the payment services provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”), we ask for your consent pursuant to Art. 6(1)(a) GDPR to allow us to transfer the data necessary for processing the payment and conducting an identity and credit check to Klarna. In Germany, the credit bureaus listed in Klarna’s privacy policy may be used for identity and credit checks. Klarna uses the information received regarding the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You may revoke your consent at any time by sending a message to the contact information provided in this privacy policy. This may result in us no longer being able to offer you certain payment options. You may also revoke your consent to this use of personal data at any time directly with Klarna.

4.4 Identity and credit checks when selecting "Purchase on Account" via PayPal and Ratepay

If you choose to pay by invoice (offered by Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter “Ratepay”) and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter “PayPal”)), we ask for your consent pursuant to Art. 6(1)(a) of the GDPR to allow us to transfer the data necessary for processing the payment and conducting an identity and credit check to Ratepay. In Germany, the credit reporting agencies listed in Ratepay’s privacy policy may be used for identity and credit checks. Ratepay uses the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You may revoke your consent at any time by sending a message to the contact information provided in this Privacy Policy. This may result in us no longer being able to offer you certain payment options. Additional information regarding data protection at PayPal can be found here.

5. advertising by e-mail

5.1 E-mail newsletter with registration and newsletter tracking

When you subscribe to our newsletter, we use the data required for this purpose or data you have provided separately to send you our email newsletter on a regular basis based on your consent in accordance with Article 6(1)(a) of the GDPR. You may unsubscribe from the newsletter at any time by either sending a message to the contact address provided below or by clicking the unsubscribe link included in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

We would like to point out that we evaluate your user behavior when sending the newsletter. For this purpose, we also analyze your interaction with our newsletter by measuring, storing and evaluating opening rates and click rates for the purpose of designing future newsletter campaigns ("newsletter tracking").

For this analysis, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. In particular, we link the following "newsletter data" for the evaluations

• the page from which the page was requested (so-called referrer URL),
• the date and time of the call,
• the description of the type of web browser used,
• the IP address of the requesting computer,
• the e-mail address,
• the date and time of registration and confirmation

and single-pixel technologies with your e-mail address or IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID.

If you do not wish to receive newsletter tracking, you can unsubscribe from the newsletter at any time as described above.

The information will be stored for as long as you are subscribed to the newsletter.

5.2 Newsletter Distribution

The newsletter and the newsletter tracking described above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: the United States, the United Kingdom.

The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.

Our service providers are located in and/or use servers in the following countries: Australia and Singapore. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

6. cookies and other technologies

6.1 General information

To make your visit to our website more enjoyable and to enable the use of certain features, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find the storage duration in the overview in your web browser’s cookie settings.

Privacy protection for end devices

When you use our online services, we employ technologies that are strictly necessary to provide the digital service you have specifically requested. In this regard, the storage of information on your device or access to information already stored on your device does not require your consent.

For functions that are not absolutely necessary, the storage of information in your end device or access to information that is already stored in your end device requires your consent. We would like to point out that if you do not give your consent, parts of the website may not be fully usable. Any consent you have given will remain in place until you adjust or reset the respective settings on your device.

Any downstream data processing by cookies and other technologies

We use technologies that are strictly necessary for the use of certain features of our website. These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information about your use of our website. This is based on a balancing of interests, where our legitimate interest in optimizing the presentation of our website prevails, in accordance with Article 6(1)(f) of the GDPR.

We also use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

Cookie settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of these technologies in accordance with Article 6(1)(a) of the GDPR, you may withdraw your consent at any time by contacting us using the contact information provided in the Privacy Policy. Alternatively, you can click the privacy button. If you do not accept cookies, the functionality of our website may be limited.

6.2 Cookiebot Consent Management Platform

We use Cookiebot on our website to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your consent—where required—to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1)(c) of the GDPR to fulfill our legal obligation under Art. 7(1) of the GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject. Cookiebot is a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf.
After you submit your cookie consent on our website, the Cookiebot web server stores your anonymized IP address, the date and time of your consent, browser information, the URL from which the consent was sent, information regarding your consent behavior, and an anonymous random key. In addition, a cookie is used that contains the information regarding your consent behavior and the key. Your data will be deleted after twelve months, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data beyond this period, which is permitted by law and about which we inform you in this statement.

Our service providers are located in and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: the United States.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the respective service provider is certified. Until certification by our service providers, data transfers continue to be based on the following: Standard Data Protection Clauses of the European Commission.

7. use of cookies and other technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for the individual technologies, this is done on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. After the end of the purpose and the end of the use of the respective technology by us, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information on your revocation options can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

7.1 Use of Google services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google’s technologies regarding your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise specified for the individual technologies, data processing is based on an agreement concluded between joint controllers for the respective technology in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission. 

 Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server located in the EU to derive location data and then deleted immediately before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of an agreement on order processing by Google.

To optimize the marketing of our website, we have enabled data sharing settings for "Google products and services . " This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google under these settings is based on a separate agreement between the data controllers. We have no influence over the subsequent data processing by Google.

To optimize the marketing of our website, we use the so-called user ID feature. This feature allows us to assign a unique, permanent ID to your interaction data from one or more sessions on our websites, enabling us to analyze your user behavior across devices and sessions.

For web analytics purposes, the Google Signals extension for Google Analytics enables “cross-device tracking.” If your internet-enabled devices are linked to your Google Account and you have enabled the “personalized ads” setting in your Google Account, Google can generate reports on your usage behavior (particularly cross-device user metrics), even if you switch devices. We do not process any personal data in this regard; we merely receive statistics generated based on Google Signals.

For web analytics and advertising purposes, the Google Analytics extension enables the so-called DoubleClick cookie to recognize your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.

 Google AdSense

Our website markets space for third-party advertisements via Google AdSense. These ads are displayed to you in various places on this website. The so-called DoubleClick cookie enables the display of interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information as well as information about your use of our website) and the automatic assignment of a pseudonymous UserID, which is used to determine interests based on visits to this and other websites.

 Google Ads

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior if you arrived at our website via a Google Ads advertisement. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, as well as information regarding your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms.

 Google Maps

For the visual presentation of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google and then processes it. We have no influence on this subsequent data processing.

7.2 Use of meta-services

 Use of Meta Pixel

We use the Meta Pixel in connection with the technologies described below from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter), from which usage profiles are created using pseudonyms. To this end, when you visit our website, the Meta Pixel automatically sets a cookie that enables your browser to be recognized when visiting other websites via a pseudonymous cookie ID. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalized and group-based advertising.
The information automatically collected by Meta Platforms Ireland’s technologies regarding your use of our website is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information regarding data processing by Meta Platforms Ireland can be found in Meta Platforms Ireland’s privacy policy.

Our service providers are located in and/or use servers in the following countries for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is in place.

Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico. No adequacy decision has been issued by the European Commission for these countries. Our cooperation with them is based on the following safeguards: Standard Data Protection Clauses of the European Commission.

 Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) and other platforms. We determine the parameters of each advertising campaign. Meta Platforms Ireland is responsible for the actual implementation, particularly for deciding where to place ads for individual users. Unless otherwise specified for each technology, data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this.

Based on statistics about visitor activity on our website generated by Meta Pixel, we use Custom Audiences to run group-based advertising on Facebook (by Meta) by identifying the characteristics of the respective target audience.

Based on the pseudonymous cookie ID set by Meta Pixel and the data collected about your usage behavior on our website, we use Custom Audiences to deliver personalized advertising.

We use conversions (via Meta Pixel or the Conversations API) to track your subsequent usage behavior for web analytics and event tracking purposes when you visit our website via an ad from Meta Ads Manager. Data processing is carried out on the basis of a data processing agreement with Meta Platforms Ireland.

8. social media

 Social media buttons for Facebook (by Meta), Instagram (by Meta), and Pinterest

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that no connection is established with the servers of the respective provider when our website is accessed. If you click on one of the buttons, the website of the respective social network will open in a new window of your browser where you can click on the Like or Share button, for example.

 Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest, and LinkedIn

If you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media mentioned above, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator as well as a contact option and your rights and settings options for protecting your privacy, please refer to the providers' data protection notices linked below. If you still need help in this regard, you can contact us.

Facebook ( by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Facebook (by Meta) is generally transmitted to a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing in connection with a visit to a Facebook (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 of the GDPR. Further information (information on Insights data) can be found here.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.

Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico.
The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transmitted to a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and stored there. Data processing in connection with a visit to an Instagram (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil, the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.

Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico.
The European Commission has not issued an adequacy decision for these countries. Our cooperation with you is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google regarding your use of our online presence on YouTube is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission. 

Pinterest is a service provided by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland (“Pinterest”). The information automatically collected by Pinterest regarding your use of our online presence on Pinterest is generally transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission. 

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is generally transmitted to and stored on a server operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.

The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.

9. contact options and your rights

9.1 Your rights

As the data subject, you have the following rights:

• in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• in accordance with Art. 16 GDPR, the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, the right to demand the deletion of your personal data stored by us, unless further processing is necessary.
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • for reasons of public interest or
  • is necessary for the establishment, exercise or defense of legal claims;
• in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
  • the accuracy of the data is disputed by you;
  • the processing is unlawful, but you object to its erasure;
  • we no longer need the data, but you need it to assert, exercise or defend legal claims, or
  • you have objected to the processing pursuant to Art. 21 GDPR;
• in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;
• in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Right of objection Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which predominate in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation. Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims. This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.

9.2 Contact options

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of consents granted or objection to a specific use of data, please contact us directly via the contact details in our imprint.