1) Information about the collection of personal data and contact details of the responsible person
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data here are all data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is
LUSINI International GmbH
Hettlinger Straße 9
86637 Wertingen
Germany
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 The responsible party has appointed a data protection officer, who can be reached as follows:
Herrn Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
E-Mail: datenschutz.de@lusini.com
1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the person responsible). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
2) Data collection when visiting our website
During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:
Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
3) Hosting & Content Delivery Network
3.1 Hosting by Netlify
We use the system of Netlify, Inc, 2325 3rd St #215, San Francisco, USA ("Netlify"), for the purpose of hosting and displaying the site content on the basis of processing on our behalf. All data collected on our website is processed on Netlify's servers. As part of the aforementioned services, data may also be transferred to Netlify's servers in the USA as part of further processing on our behalf. We have concluded an order processing agreement with Netlify ("Data Processing Agreement", viewable at https://www.netlify.com/v3/static/pdf/netlify-dpa.pdf), in which we oblige the provider to protect our users' data and not to pass it on to third parties.
Further processing on servers other than the aforementioned of Netlify will only take place within the framework communicated below.
3.2 Shopware eCommerce software from metaways
Our webshop is a Shopware eCommerce solution from Metaways Infosystems GmbH, Schlosstraße 49 in 22967 Tremsbüttel, Germany. Shopware stores cookies in your browser to ensure the basic functions of the store. By means of the cookies, e.g. the shopping cart content, the login state and also the CSRF protection is enabled. Without having cookies allowed in the browser, Shopware cannot be used. Shopware only stores IDs in your browser, the assignment to the respective information is done in the application area.
Based on the session cookie, Shopware decides whether you have an active shopping cart and whether you are logged in. It therefore serves as identification between your browser and the server. No other information is stored in the browser except for the session ID. The handling of session cookies is controlled on the server side via PHP and is independent of Shopware.
In addition, Shopware generates an individual CSRF cookie when you visit the store, so that you can operate the individual areas of the store.
In addition, an SLT cookie is set, which allows us to recognize you when you return to our online store, even if the session has already expired. The SLT cookie can be deactivated in the basic settings of your browser.With Metaways Infosystems GmbH we have concluded a contract for order processing in accordance with Art. 28 GDPR.
3.3 Cloudinary
On our website we use a so-called Content Delivery Network ("CDN") of Cloudinary Ltd, 3400 Central Expressway, Suite 110, Santa Clara, CA 95051, USA ("Cloudinary"). A content delivery network is an online service that is used in particular to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. The use of Cloudinary's Content Delivery Network helps us optimize the loading speeds of our website.
The processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
We have concluded an order processing agreement with Cloudinary (Data Processing Addendum, available at https://cloudinary-res.cloudinary.com/image/upload/Cloudinary_Customer_Data_Processing_Addendum_December_2019.pdf), which obliges Cloudinary to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA Cloudinary relies on so-called standard data protection clauses of the European Commission, which are supposed to ensure compliance with the European level of data protection in the USA.
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your terminal device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), in other cases, these cookies remain on your end device for a longer period of time and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
We also involve partners based in third countries, including the USA. The data transfer is based on EU standard contractual clauses. Details can be found with the corresponding processing or with the partner within the scope of this privacy policy.
You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
5.1 Freshdesk
We use the email ticketing system of Freshworks, Inc, 2950 S. Delaware Street, Suite 201, San Mateo, California 94403, USA ("Freshdesk"). If users of our website make contact requests by mail, these are stored and organized in the ticket system to enable chronological processing and to improve the service experience. Users can always view the current status of the processing of their request via the individually assigned ticket number.
Exclusively for the organization of the requests and their processing, personal data is collected as far as provided in the request, but in any case name, first name and e-mail address, transmitted to Freshdesk, stored there and read out.
The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in the fastest possible response to your request and the optimization of our service offering in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded an order processing agreement with Freshdesk ("Data Processing Addendum", available at https://www.freshworks.com/data-processing-addendum/), with which we oblige Freshdesk to protect our customers' data and not to pass it on to third parties. For the transfer of data outside the European Economic Area, Freshdesk relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5.2 In the context of contacting us (e.g. via contact form or e-mail) personal data will be processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. If your contact aims at a contract, additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5.3 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.
If you contact us via WhatsApp on the occasion of a specific transaction (for example, an order placed), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name pursuant to Art. 6 para. 1 lit. b. GDPR to process and respond to your request. On the basis of the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (such as about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and - if provided - your first name and surname in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information.
Your data will only be used to respond to your request via WhatsApp. A transfer to third parties does not take place.
Please note that WhatsApp Business obtains access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact data of those users who have also contacted us via WhatsApp are stored.
This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of his WhatsApp telephone number from the address books of his chat contacts pursuant to Art. 6 (1) lit. a GDPR when using the app on his device for the first time by accepting the WhatsApp terms of use. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.
For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy
6) Data processing when opening a customer account
Pursuant to Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary in each case if you provide us with this data when opening a customer account. You can find out which data is required for opening an account from the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the responsible person. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.
7) Use of customer data for direct advertising
7.1 Registration for our e-mail newsletter
If you register for our e-mail newsletter, we will send you regular information about our offers. Mandatory data for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified e-mail address.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for any other purpose that is permitted by law and about which we inform you in this declaration.
7.2 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you e-mail offers for similar goods or services to those already purchased from our range. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. For this, you will only incur transmission costs according to the prime rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
7.3 Newsletter dispatch via Emarsys eMarketing Systems AG
Our e-mail newsletters are sent via the technical service provider Emarsys eMarketing Systems AG Märzstrasse 1, A-1150 Vienna ("Emarsys"), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on Emarsys servers in the EU.
Emarsys uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.
In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively pseudonymously and is not linked to your other personal data. A direct reference to a person is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
We have concluded an order processing contract with Emarsys, with which we oblige Emarsys to protect our customers' data and not to pass it on to third parties.
7.4 Advertising by letter mail
On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 (1) lit. f GDPR and to use it to send you interesting offers and information about our products by letter post.
You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible.
7.5 In the event that you cancel your purchase with us before completing the order, you will have the option to receive a one-time email reminder of the contents of your virtual shopping cart.
Mandatory information for sending this reminder is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For the mail dispatch, we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent in this regard by activating a verification link sent to the specified mail address.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR for the sending of a shopping cart reminder. In doing so, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later date. The data we collect when you register for our e-mail notification service is used strictly for the intended purpose. You can unsubscribe from the shopping cart reminders at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.
8) Data processing for order processing
8.1 Transmission of image files for order processing by e-mail
On our website, we offer customers the option to order the personalization of products by sending image files by e-mail. In doing so, the submitted image motif is used as a template for the personalization of the selected product.
The customer can transmit one or more image files from the memory of the end device used to us via the e-mail address provided on the website. We then collect, store and use the files transmitted in this way exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further transfer will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b GDPR. After final processing of the order, the transmitted image files will be automatically and completely deleted.
8.2 As far as necessary for the contract execution for delivery and payment purposes, the personal data collected by us will be passed on to the contracted transport company and the contracted credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period of time within the scope of our legal information obligations pursuant to Art. 6 (1) lit. c GDPR by suitable means of communication (e.g. by mail or e-mail). Your contact data will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
In order to process your order, we also work together with the following service provider(s), which support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8.3 In order to fulfill our contractual obligations to our customers, we work together with external shipping partners. We pass on your name as well as your delivery address and, if necessary for the delivery, your telephone number, exclusively for the purposes of the delivery of goods Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.
8.4 Disclosure of personal data to shipping service providers
Deutsche Post
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will forward your e-mail address to Deutsche Post in accordance with Art. 6 (1) (a) of the General Data Protection Regulation (GDPR) prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible.
Consent may be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis Deutsche Post.
DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.
GLS
If the delivery of the goods is carried out by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 - 7, 36286 Neuenstein, Germany), we will pass on your e-mail address to GLS in accordance with Art. 6 Para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer will only take place insofar as this is necessary for the delivery of goods. In this case, a prior coordination of the delivery date with GLS or the transmission of status information of the shipment delivery is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider GLS.
UPS
If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany), we will pass on your e-mail address to UPS prior to delivery of the goods in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The disclosure is made only to the extent necessary for the delivery of goods. In this case, a prior coordination of the delivery date with UPS or the transmission of status information of the shipment delivery is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider UPS.
8.5 Use of payment service providers (payment services)
Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for the payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/legalhub-full?locale.x=en_DE
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
Credit card
When paying via Wordline, the information you provide during the ordering process, together with information about your order, will be passed on to Wordline Schweiz AG, Hardturmstrasse 201, CH-8005 Zurich, for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Wordline and only to the extent that it is necessary for this purpose. Further information on data protection can be found on the Wordline website at https://de.worldline.com/de/home/privacy.html
8.6 Credit assessment
If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical methods in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a credit check to the following service provider in accordance with Art. 6 Para. 1 lit. f GDPR:
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. We use the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the establishment, implementation or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
8.7 If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical methods in order to protect our legitimate interest in determining the solvency of our customers. In accordance with Art. 6 Para. 1 lit. f GDPR, we may also transfer the personal data required for a credit check to the following service provider:
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. We use the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the establishment, implementation or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
8.8 If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical methods in order to protect our legitimate interest in determining the solvency of our customers. In accordance with Art. 6 Para. 1 lit. f GDPR, we may also transfer the personal data required for a credit check to the following service provider:
Creditsafe Deutschland GmbH, Schreiberhauer Strasse 30, 10117 Berlin, Germany
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. We use the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the establishment, implementation or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
8.9 We reserve the right to transfer your data to the collection service provider
to the extent that our payment claim has not been settled despite a previous reminder. In this case, the debt will be collected directly by the collection service provider. The transfer of your data serves the fulfillment of the contract according to Art. 6 para. 1 p. 1 lit. b GDPR as well as the protection of our legitimate interests in an effective enforcement of our payment claim according to Art. 6 para. 1 p. 1 lit. f GDPR.
9) Online Marketing
9.1 Facebook Pixel for the creation of Custom Audiences (with Cookie Consent Tool)
Within our online offer, the so-called "Facebook pixel" with activated automatic advanced matching of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an ad placed by us that is played on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. If our site allows data to be shared with Facebook via Pixel, this URL parameter is inscribed in the user's browser via a cookie that our linked site sets itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads") and to process additional data, such as hashed e-mails, names, gender, city, state, postal code and date of birth or telephone number, provided that they have made this data available.
Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further evaluate the effectiveness of the Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The data collected is anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside of Facebook.
The data processing associated with the use of the Facebook Pixel is only carried out with your express consent pursuant to Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
9.2 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and within the framework of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.
The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In order to address users whose data we have received in the context of business or business-like relationships in a more interest-oriented advertising manner, we use a customer matching function in the context of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily mail addresses and telephone numbers) electronically to Google. Google does not gain access to any clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables personalized advertising to be played via all Google services linked to the respective Google account.
We have also set up Enhanced Conversions. Enhanced Conversions is a feature that improves the accuracy of conversion tracking, but protects user privacy by supplementing existing conversion tags with the hashed first-party conversion data from the website. Hashing the first-party data before sending it to Google Ads ensures privacy by converting personal information such as name and email address into a hashed string.
To optimize our website content and measure the success of advertising campaigns, we perform tracking via Google Analytics and Google Ads and thus track the behavior of our website visitors.
Of course, tracking only takes place if you have given your consent to this via the cookie banner.
In addition, we would like to point out that unless consent has been given for personal tracking, non-personal and cookie-free analysis takes place. The following data is processed in the process:
Function-related information (such as headers added passively by the browser):
Timestamp
user agent
Referral URL
Aggregate or non-personal data:
Indication of whether the current page or a previous page in the user's navigation history on the site contains ad click information in the URL (e.g., GCLID/DCLID)
Boolean information about consent status
Random number generated when the respective page is loaded
This allows us to track the flow of visitors to our website (but not individual usage patterns).
The transmission of customer data to Google will only take place if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Via a cookie ID, Google records which ads are served in which browser and can thus prevent them from being displayed more than once. In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, calls up the advertiser's website and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address. In the context of the use of GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Microsoft Advertising
This website uses the conversion tracking technology "Microsoft Advertising" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft sets a cookie on your computer if you have accessed our website via a Microsoft Adveristing ad. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognize that the user clicked on the ad and was redirected to this page (conversion page).
The information collected using the conversion cookie is used to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR.
You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
9.3 Use of Affiliate Programs
AWIN Performance Advertising Network
We participate in the performance advertising network of AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany (hereinafter "AWIN"). As part of its tracking services, AWIN stores cookies for the documentation of transactions (e.g., of "sales leads") on end devices of users who visit or use websites or other online offers of its customers (e.g., register subscription to a newsletter or submit an online order). These cookies serve the sole purpose of a correct allocation of the success of an advertising medium and the corresponding billing within the framework of its network.
In a cookie, only the information about when a certain advertising medium was clicked on by an end device is placed. In the AWIN tracking cookies, an individual sequence of numbers, which cannot be assigned to the individual user, is stored with which the partner program of an advertiser, the publisher, and the time of the user's action (click or view) are documented. AWIN also collects information about the end device from which a transaction is carried out, e.g. the operating system and the calling browser.
All processing described above, in particular the reading of information on the terminal device used, only takes place if you have given your express consent to this in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
RECOVA
This website uses the software solution of the visitor recovery service provider Exceed Solutions GmbH, Schanzenstr. 12b 20357 Hamburg, Germany.
We process your session data (URL, referrer URL, time of page view and redirection, content information about the user session (e.g. products in the shopping cart; product price; categories, delivery price, time of purchase, etc.), session ID for identification) in order to present you with other products that may be of interest to you. If we store this information on your end device or retrieve it from it, this is done on the basis of your consent. The data is stored for 40 days.
If we process your data on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future. This means that the lawfulness of the processing that has taken place on the basis of the consent until the revocation is not affected. The declaration of revocation can be made informally and does not require any justification. You can adjust and manage your data protection consent preferences at any time here: Data protection LUSINI International
10.1 Google (Universal) Analytics with Google Signals
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening and excludes a direct personal reference. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google LLC.server in the USA and shortened there.
On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information via a special function, the so-called "demographic characteristics". This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures. However, data records collected via the "demographic characteristics" cannot be assigned to a specific person.
All processing described above, in particular the setting of Google Analytics cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
This website also uses the Google Signals service as an extension of Google Analytics. With Google Signals, we can have Google create cross-device reports (so-called "cross-device tracking"). If you have activated "personalized ads" in your Google account settings and you have linked your Internet-enabled devices to your Google account, Google can analyze user behavior across devices and create database models based on this if you have given your consent to the use of Google Analytics in accordance with Art. 6 (1) a GDPR (see above). The logins and device types of all page visitors who were logged into a Google account and executed a conversion are taken into account. The data shows, among other things, on which device you first clicked on an ad and on which device the associated conversion took place. We do not receive any personal data from Google in this regard, only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalized ads" function in the settings of your Google account and thus turning off the cross-device analysis.
10.2 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the use of websites.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, which is based in the USA, and further processing of the information there.
When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed by default and automatically only in an anonymized manner, so that a direct personal reference of the collected information is excluded. This automatic anonymization is carried out by shortening the IP address transmitted by your terminal device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports about your website activities or your usage behavior and to provide us with other services related to your website and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be retained for 26 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish user groups of the website for the purpose of targeting marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic characteristics" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent once given at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
As an extension of Google Analytics 4, the Google Signals service can also be used on this website. With Google Signals, we can have Google create cross-device reports (so-called "cross-device tracking"). If you have activated "personalized ads" in your Google account settings and linked your Internet-enabled end devices to your Google account, Google can analyze usage behavior across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) a GDPR. This takes into account the logins and device types of all website users who were logged into a Google account and executed a conversion. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place. We do not receive any personal data from Google in the case of the use of Google Signals, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalized ads" function in the settings of your Google account and thus turning off the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
As an extension of Google Analytics, the "UserIDs" function can also be used on this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behavior can also be analyzed across devices if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the relevant conversion took place.
We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with the European level of data protection also in the event of any transfer of data from the EU or the EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
10.3 This website uses "Google Tag Manager ", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and linking them to conditions via a uniform user interface.
Google Tag Manager itself does not store any information on user devices or read them. The service also does not perform any independent data analyses.
However, your IP address is transmitted to Google by the Google Tag Manager when you access the page and may be stored there. Also a transmission to servers of Google LLC. In the USA is possible.
This processing is only carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. Without this consent, Google Tag Manager will not be used during your visit to our website.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google invokes so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
For privacy-related services and applications that have been merged in Google Tag Manager, you will find separate information in the relevant sections of this privacy statement.
Bing Ads (Microsoft Corporation)
This website uses the conversion tracking technology "Bing Ads" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads sets a cookie on your computer if you have accessed our website via a Microsoft Bing ad. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognize that the user clicked on the ad and was redirected to this page (conversion page). If personal data is processed in the process, this is done in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in effective marketing.
The information collected using the conversion cookie is used to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking, you can object to this by deactivating the Bing Ads conversion tracking cookie via your internet browser under user settings. They will then not be included in the conversion tracking statistics. Alternatively, you can check whether Microsoft advertising cookies are set in your browser and deactivate them using the deactivation page for EU consumers http://www.youronlinechoices.com/de/praferenzmanagement/.
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection.
Criteo (Criteo SA).
On this website, the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo") uses cookie text files to collect, store and analyze information about the surfing behavior of website visitors in pseudonymized form. Criteo uses an algorithm to analyze the surfing behavior and can then display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). In no case can the collected data be used to personally identify the visitor to this website. No other use or disclosure to third parties will take place.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Dynamic Yield
This website uses the retargeting technology "Dynamic Yield" of Dynamic Yield GmbH, Theodor-Stern-Kai 1, 60596 Frankfurt am Main, Germany ("Dynamic Yield").
If you give us your consent, we analyze website visits from our users and place tailored content and product recommendations on our website, through personalized content.
Dynamic Yield records your usage activities on our website for this purpose. Cookies are used and settings are stored in your browser cache. Only pseudonymized information is stored under a randomly generated ID (pseudonym). Your IP address is stored exclusively by Dynamic Yield in pseudonymized form.
The following data may be transmitted:
Browser information (type, version number) as well as the IP address of your terminal device
Referrer URL (from which website you came)
Time of visit, e.g. date and time
Customer IDs (pseudonymized), e.g. if you log in with a customer account
Websites visited, content viewed and products purchased
Geographic location data (e.g., city, state, country) through your IP address
Since personal data is passed on by us to Dynamic Yield if you consent to data processing by Dynamic Yield, we have concluded a corresponding order processing agreement ("Data Processing Addendum", viewable at https://www.dynamicyield.com/dpa/) with this company in accordance with Art. 28 GDPR, obliging the provider to protect the data of our site visitors and not to pass it on to third parties. The legal basis for the processing of data by us and our order processor (Dynamic Yield) is based on Art. 6 para. 1 lit. a GDPR (explicit consent). You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website or by calling up the Consent banner again.
Use of Dynamic Yield without consent
If you do not give explicit consent for this service in the cookie settings (cookie consent tool), your activities on our website will not be processed or stored by Dynamic Yield. It is not possible to play out personalized content or product recommendations. However, the Dynamic Yield service is required to display non-personalized content and features, such as displaying product lists, text & image content, dynamic overlays and navigation elements. The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the appealing and error-free presentation and function of our website.
If content provided by Dynamic Yield is accessed on our website, service log files may be stored on the part of Dynamic Yield (e.g. IP address, date & time of access). This data cannot be analyzed and is automatically deleted by Dynamic Yield after seven days. This exchange of data is necessary for the presentation of the content.
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, with this we advertise for this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. Additional data processing only takes place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalize ads that you view on the web. In this case, if they are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups. In the context of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/ads/answer/7395996?
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Taboola
This website uses the retargeting technology of Taboola Inc, 16 Madison Square West 7th Floor, New York, NY 10010, USA ("Taboola"). This makes it possible to direct visitors to our website to further content of our own or of third parties in the form of banners, based on their usage behavior, which are likely to be of interest to the user in question. This content is displayed on the basis of a cookie-based analysis of previous user behavior, but no personal data is stored. For this interest-based content determination, a cookie is stored on your computer or mobile device to collect pseudonymized data about your surfing behavior and thus individually adapt the content to the stored information.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Web Extend from Emarsys
This website uses the "Web Extend" service of Emarsys Interactive Services GmbH, Stralauer Platz 34, 10243 Berlin, Germany for the management of customer contacts and the targeted playout of marketing measures.
"Web Extend" provides a central database of all customer contacts and allows them to be organized into specific groups. Here, information on orders placed by deposited customers is also stored and assigned to the respective customer.
For statistical and analysis purposes, the stored information on orders placed (including order value, quantity and amount) is transmitted to Emarsys in anonymized form and evaluated there for us. Web Extend" enriches the existing databases with further information on individual usage behavior on our website only if explicit consent has been given in accordance with Art. 6 Para. 1 lit a GDPR. On the basis of a cookie-based analysis, for example, certain information on orders already placed, but also on click-based product interests, can be collected, assigned to a stored contact and then evaluated. All this information is processed exclusively on a pseudonymous basis.
The evaluation by cookies from "Web Extend" allows, among other things, to play interest-based advertising to the respective contact on the basis of the analyzed usage behavior on our website. These cookies are small text files that are stored on your computer or mobile device. The contacts stored in the database can thus be shown advertising that is highly likely to correspond to their respective product and information interests.
The data processing associated with the use of Web Extend, which goes beyond the contact deposit in the database and the transmission of anonymized order data from the database, is only carried out with your express consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded an order processing agreement with Emarsys, by which we oblige Emarsys to protect the data of visitors to our website and not to pass it on to third parties.
12) Page functionalities
12.1 Use of social media: social media buttons with linking
No social media plugins are used on this website (e.g. Facebook, Instagram, Youtube). These are only buttons that link to the respective social media through your activation.
You can usually recognize the buttons by the respective social media logos. To ensure data protection on this website, we do not use plugins. Our application prevents data from being transferred to the respective provider on our website when you first enter the page.
Only when you activate the respective button by clicking on it, you will be forwarded to the provider's server (consent). Which data is processed by the social media is beyond our control. Detailed privacy policies can be found on the corresponding pages of the social media used.
Hootsuite
We manage our social media channels using Hootsuite, HootSuite Media Inc, 37 Dunlevy Ave, Vancouver, BC, Canada V6A 3A3. Hootsuite allows you to manage social media channels, schedule, publish and analyze posts. Hootsuite processes data uploaded by users on social media channels or shared and made public by sharing and liking posts. Further information as well as Hootsuite's currently applicable privacy policy can be found at https://hootsuite.com/de/legal/privacy and at https://hootsuite.com/de/legal/general-data-protection-regulation.
12.2 Trusted Shops Trustbadge
To display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after an order, the Trusted Shops Trustbadge is integrated on this website.
This serves to protect our legitimate interests in an optimal marketing of our offer, which prevail in the context of a balancing of interests, Art. 6 para. 1 lit. f GDPR. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.
Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.
12.3 Zenloop
This website cooperates with zenloop GmbH, Pappelallee 78/79 10437 Berlin, Germany ("zenloop"). Zenloop is a business-to-business software-as-a-service platform that allows us to collect and analyze feedback from our customers through various channels. This allows us to align and improve our offering to the needs of our customers.
Specific surveys on our services can be created via zenloop and sent to customers (respondents) by e-mail. The survey is only sent if the customer has given his explicit consent according to Art. 6 para. 1 lit. a GDPR.
In order to evaluate the survey, zenloop collects, on the one hand, the respondent's e-mail address, if the respondent has given his or her consent according to Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time with effect for the future.
On the other hand, zenloop collects and stores any responses from respondents, which, depending on the survey, may also contain personal data such as first and last names, and evaluates them on our behalf. If survey responses contain personal data, the processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the statistical evaluation of user satisfaction and the downstream optimization of our online offering.
We have concluded an order processing agreement with zenloop, by which we oblige zenloop to protect the data of visitors to our website and not to pass it on to third parties.
12.4 Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts is only carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font will be used by your computer.
12.5 Algolia Search
We use the search engine of Algolia SAS, 55 Rue d'Amsterdam, 75008 Paris, France ("Algolia") on this website to provide a search and filter function via the search box in our web store and to improve the search results. For this purpose, Algolia collects and processes the following data:
IP address,
search query via the search function,
filter options selected, if applicable,
clicked search result,
automatically transmitted connection data.
For the search function, the search query is sent to Algolia and matched with our provided products to return matching search results. With the filter function, for example, the product category or other filters can be set, with the help of which the search results are narrowed down. To improve the search results, an anonymized analysis of the search queries and the clicked search results is carried out. For this purpose, no assignment to an IP address or a token takes place.
The IP address transmitted when using the search and filter function is anonymized after a short time and stored for 7 days. Search queries and results without assignment to an IP address or token are stored for 90 days.
If personal data is processed in this context, the processing is carried out in accordance with Art. 6 (1) f) GDPR on the basis of our legitimate interest in providing an error-tolerant search for articles and easier location of our products in the web store and thus in customer-friendly marketing of our offer.
Only if you give us your consent in this regard, we also use insights about your use of our search and filter function by means of the Analytics function to understand what you are interested in and to personalize search results accordingly for you and to suggest suitable products to you. For this purpose, in addition to the data mentioned above, viewed products and filters as well as other interactions such as clicks on autocomplete search results, adding products to the shopping cart or checkout/purchase completion to a user token are stored and evaluated to find out which product filters are particularly relevant for you and how you interact with our webshop. Algolia also uses so-called A/B tests, as part of which we evaluate the success of different design variants of the search and filter function and can adjust them accordingly. The personalized user profiles are kept for the last 90 days in each case. To enable the evaluation and personalization, Algolia sets a cookie with the User Token ("_ALGOLIA") with a lifetime of twelve months.
The legal basis for the storage of the cookie on the terminal device and the reading of data from it is your consent, which may be revoked at any time, pursuant to Section 25 (1) TTDSG and the legal basis for the associated processing of personal data is your consent, which may be revoked at any time, pursuant to Article 6 (1) sentence 1 a) GDPR.
12.6 Hotjar
This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com).
Hotjar is a tool for analyzing your user behavior on this website. Hotjar allows us to record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you remain with the mouse pointer in a certain position. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website visitors prefer to look at.
Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your entries in a contact form (so-called conversion funnels). In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings.
Hotjar uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or the use of device fingerprinting). Since a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Please note that Hotjar must be deactivated separately for each browser or end device. For more information about Hotjar and the data collected, please refer to Hotjar's privacy policy at the following link:
https://www.hotjar.com/privacy
We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR with the above-mentioned provider. This is a contract prescribed by data protection law, which guarantees that the provider will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
12.7 New Relic
This website uses a plugin from the New Relic web analysis service. This service is provided by New Relic Inc, 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA and enables statistical evaluations of the speed of the website. The plugin provides New Relic with the information that a user has accessed the corresponding page of the website. If you are logged in to New Relic as a user, New Relic can assign the visit to your account there. If you are not a member of New Relic, it is still possible for New Relic to find out your IP address and save it. The purpose and scope of the data collection and information on the processing and use of the data by New Relic, as well as setting options for protecting the privacy of users, can be found in New Relic's data protection information: https://newrelic.com/privacy.
The legal basis for the processing of your data in this respect is also Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. This can be revoked at any time.
12.8 Wistia
We use the plugin of the video portal Wistia.
The provider is Wistia, Inc, 17 Tudor Street, Cambridge, Massachusetts, 02139, USA. When you click on a product video, a connection to the Wistia servers is established. Among other things, the Wistia server is informed which page you have visited. Your IP address is also processed and may be transmitted to the USA. The legal basis for the use of Wistia is your previously given consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, insofar as you gave us this consent when you first accessed our website via the consent banner. Wisita is not certified according to the Data Privacy Framework and therefore does not meet the requirements of the EU Commission. We have therefore agreed standard data protection clauses with Wistia in accordance with Art. 46 para. 2 lit. c GDPR.
Further information on the handling of user data can be found in Wistia's privacy policy at https://wistia.com/privacy
13) Tools and miscellaneous
Cookie Consent Tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when they call up the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. By using the tool, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by setting a check mark. This ensures that such cookies are only set on the respective user's end device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is not processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) f GDPRon the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
You can find more information about the operator and the setting options of the cookie consent tool directly in the corresponding user interface on our website.
14) Rights of the data subject
14.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:
Right to information pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT OF OBJECTION IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
15) Duration of the storage of personal data
The duration of the storage of personal data is measured on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) a GDPR, this data is stored until the data subject revokes his or her consent.
If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after expiry of the retention periods, insofar as it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no continued legitimate interest on our part in the continued storage.
When processing personal data on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
As of March 2024
LUSINI - Your reliable partner for gastronomy and hotel business
Prepayment
Subscribe to our newsletter and get a €20* voucher
Top offers & bargains
Novelties & promotions
Latest trends & tips
*Minimum order value 200€. Information on how LUSINI International handles your data can be found in our privacy policy. You can unsubscribe at any time free of charge.
Deliveries are possible worldwide. The delivery time depends on the country of delivery. The offer of LUSINI International GmbH is directed to companies and traders. No sale to private individuals. All prices plus VAT, shipping costs and customs duties if applicable.
Deliveries are possible worldwide. The delivery time depends on the country of delivery. The offer of LUSINI International GmbH is directed to companies and traders. No sale to private individuals. All prices plus VAT, shipping costs and customs duties if applicable.
