Privacy policy

Privacy policy

The controller responsible for data processing is:

Anio GmbH

Ludwig-Sütterlin-Str., 3

28355 Bremen

Email: info@anio.watch

Telephone: +49 421 336 19 347

Thank you for your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Whenever a webpage is accessed, the web server automatically stores only a server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documenting the request. These access data are evaluated exclusively to ensure the smooth operation of the website and to improve our offering. This serves our legitimate interests in the correct presentation of our offering, which prevail in a balancing of interests, pursuant to Article 6(1), first sentence, point (f) GDPR. All access data are deleted no later than thirty days after the end of your visit to the website. All access data are processed only for as long as necessary to achieve the processing purposes stated above.

1.1 Hosting

Some of the services for hosting and displaying the website are provided by our service providers as processors acting on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in the forms provided on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Canada, New Zealand, Japan, United Kingdom, USA.

The adequacy decision for the USA serves as the basis for transfers to that third country where the respective service provider is certified. Until our service providers are certified, data transfers continue to rely on the following basis: the European Commission’s standard contractual clauses.

Our service providers are located and/or use servers in the following countries: Australia, India, Singapore.
There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s standard contractual clauses.

1.2 Content Delivery Network

We use a Content Delivery Network (CDN) for some offerings to reduce loading times. With this service, content such as large media files is delivered through regionally distributed servers operated by external CDN service providers. Access data are therefore processed on the service providers’ servers. Our service providers act as processors on our behalf.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries.
Our cooperation with them is based on the European Commission’s standard contractual clauses. 

If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

2. Data processing for contract performance and communication

2.1 Data processing for contract performance

For the purpose of performing the contract (including enquiries concerning and the handling of any claims arising from statutory warranty rights, non-performance and the right of withdrawal, as well as any statutory updating obligations), pursuant to Article 6(1), first sentence, point (b) GDPR, we collect personal data that you voluntarily provide to us when placing your order. Mandatory fields are marked as such because, in these cases, we require the data to perform the contract and cannot dispatch the order without them. The data collected can be seen in the respective input forms.

Further information about the processing of your data, in particular disclosure to our service providers for order, payment and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully performed, your data will be restricted from further processing and deleted after expiry of the retention periods required by tax and commercial law, pursuant to Article 6(1), first sentence, point (c) GDPR, unless you have expressly consented to further use of your data pursuant to Article 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this as permitted by law and as explained in this policy.

Inventory management system

We use inventory management systems provided by external service providers to process orders and contracts. Our service providers act as processors on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

2.2 Customer account

If you have given your consent pursuant to Article 6(1), first sentence, point (a) GDPR by choosing to open a customer account, we use your data to open that account and store your data for future orders on our website. Your customer account can be deleted at any time, either by sending a message using the contact details provided in this privacy policy or by using the corresponding function in the customer account. After your customer account has been deleted, your data will be deleted unless you have expressly consented to further use of your data pursuant to Article 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this as permitted by law and as explained in this policy.

 Contacting us

As part of our customer communications, we collect personal data to handle your enquiries pursuant to Article 6(1), first sentence, point (b) GDPR if you voluntarily provide these data when contacting us (e.g. via a contact form, live chat tool or email). Mandatory fields are marked as such because, in these cases, we require the data to handle your contact request. The data collected can be seen in the respective input forms. After your enquiry has been fully handled, your data will be deleted unless you have expressly consented to further use of your data pursuant to Article 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this as permitted by law and as explained in this policy.

3. Data processing for shipping

To perform the contract pursuant to Article 6(1), first sentence, point (b) GDPR, we disclose your data to the shipping service provider commissioned with delivery to the extent necessary to deliver the goods ordered. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

 Disclosure of data to shipping service providers for delivery notifications

If you have given us your express consent during or after your order, we will disclose your email address and telephone number to the selected shipping service provider on the basis of that consent pursuant to Article 6(1), first sentence, point (a) GDPR, so that they can contact you before delivery to announce or coordinate delivery.
You may withdraw your consent at any time by sending a message using the contact details provided in this privacy policy. After withdrawal, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data, or we reserve the right to use data beyond this as permitted by law and as explained in this policy. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

4. Data processing for payment processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we disclose the data required to process the payment transaction to our technical service providers, the commissioned credit institutions or the selected payment service provider, to the extent necessary to process the payment. This serves the performance of the contract pursuant to Article 6(1), first sentence, point (b) GDPR. In some cases, payment service providers collect the data required for payment processing themselves, for example on their own website or through technical integration into the ordering process. The privacy policy of the respective payment service provider applies in this respect.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined an adequate level of data protection by decision. Where data are transferred to third countries outside the EU/EEA for which the European Commission has not issued an adequacy decision, the cooperation is based on the European Commission’s standard contractual clauses.

If you have questions about our payment processing partners or the basis of our cooperation with them, please use the contact details provided in this privacy policy.

4.2 Data processing for fraud prevention and optimisation of our payment processes

Where appropriate, we provide the aforementioned service providers with additional data, which they use together with the data required for payment processing to prevent fraud and optimise our payment processes (e.g. invoicing, handling disputed payments and assisting with accounting). Pursuant to Article 6(1), first sentence, point (f) GDPR, this serves our legitimate interests in protecting ourselves against fraud and in efficient payment management, which prevail in a balancing of interests.

4.3 Identity and credit checks when selecting Klarna payment services

Klarna direct debit, purchase on invoice through Klarna, Klarna instalment purchase
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we forward your data to Klarna as part of payment and contract processing pursuant to Article 6(1), first sentence, point (b) GDPR. These data are transferred so that Klarna can issue an invoice for your requested invoice processing and carry out an identity and credit check. Please understand that we can only offer you the respective Klarna payment method if the results of the credit check permit this. Detailed information on this and the credit reference agencies used can be found in the privacy information provided by Klarna.

4.4 Identity and credit checks when selecting purchase on invoice through PayOne

If you choose purchase on invoice (offered through PayOne GmbH, Lyoner Str. 9, 60528 Frankfurt a. M., Germany (hereinafter PayOne)), we forward your data to PayOne as part of payment and contract processing pursuant to Article 6(1), first sentence, point (b) GDPR. These data are transferred so that PayOne can issue an invoice for your requested invoice processing and carry out an identity and credit check. Please understand that we can only offer you purchase on invoice through PayOne if the results of the credit check permit this. Detailed information on this and the credit reference agencies used can be found in PayOne’s privacy information.

4.5 Identity and credit checks when selecting purchase on invoice through PayPal and Ratepay

If you choose purchase on invoice (offered through Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter Ratepay) and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter PayPal)), we forward your data to Ratepay as part of payment and contract processing pursuant to Article 6(1), first sentence, point (b) GDPR. These data are transferred so that Ratepay can issue an invoice for your requested invoice processing and carry out an identity and credit check. Please understand that we can only offer you purchase on invoice through Ratepay if the results of the credit check permit this. Detailed information on this and the credit reference agencies used can be found in Ratepay’s privacy information. Additional information on data protection at PayPal can be found here.

5. Email advertising

5.1 Email newsletter with subscription; newsletter tracking with separate consent

If you subscribe to our newsletter, we use the data required for this or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Article 6(1), first sentence, point (a) GDPR. You can unsubscribe from the newsletter at any time, either by sending a message using the contact details provided below or by using the designated link in the newsletter. After you unsubscribe, we will delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Article 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this as permitted by law and as explained in this policy.

If you have also given us your consent pursuant to Article 6(1), first sentence, point (a) GDPR to analyse our newsletters, we also analyse your interaction with our newsletter by measuring, storing and evaluating opening and click-through rates to design future newsletter campaigns ("newsletter tracking").

For this evaluation, the emails sent contain single-pixel technologies (e.g. web beacons or tracking pixels) stored on our website. For our evaluations, we link, in particular, the following "newsletter data":

• the page from which the page was requested (the referrer URL);
• the date and time of access;
• a description of the type of web browser used;
• the IP address of the requesting computer;
• the email address;
• the date and time of subscription and confirmation;

and the single-pixel technologies with your email address or IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID.

You can opt out of newsletter tracking at any time, either by sending a message using the contact details provided or by using the designated link in the newsletter.

The information is stored for as long as you remain subscribed to the newsletter.

5.2 Newsletter distribution

Where applicable, the newsletter and the newsletter tracking described above are also sent by our service providers as processors acting on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, United Kingdom.

The adequacy decision for the USA serves as the basis for transfers to that third country where the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in the following countries: Australia, Singapore. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s standard contractual clauses.

5.3 Sending review requests by email

If you have given us your express consent during or after your order pursuant to Article 6(1), first sentence, point (a) GDPR, we use your email address to ask you to review your order through the review system we use. You may withdraw this consent at any time by sending a message using the contact details provided in this privacy policy or by using the designated link in the review request. After you withdraw your consent, we will delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Article 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this as permitted by law and as explained in this policy.

Where applicable, review requests are also sent by our service providers as processors acting on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

6. Cookies and other technologies

6.1 General information

To make visiting our website appealing and enable the use of certain functions, we use technologies, including cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). You can find the storage duration in the overview in your web browser’s cookie settings.

Protection of privacy on devices

When you use our online offering, we use strictly necessary technologies to provide the digital service you have expressly requested. Storing information on your device or accessing information already stored on it does not require consent in this respect.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on it requires your consent. Please note that if you do not give consent, parts of the website may not be fully usable. Any consent you have given remains in effect until you adjust or reset the relevant settings on your device.

Any subsequent data processing through cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions on our website. These technologies collect and process your IP address, the time of your visit, device and browser information and information about your use of our website. This serves our legitimate interests in an optimised presentation of our offering, which prevail in a balancing of interests, pursuant to Article 6(1), first sentence, point (f) GDPR.

We also use technologies to fulfil our legal obligations (e.g. to provide evidence of consent to the processing of your personal data), as well as for web analytics and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

Cookie settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of technologies pursuant to Article 6(1), first sentence, point (a) GDPR, you may withdraw your consent at any time by sending a message using the contact details provided in this privacy policy. Alternatively, you can click the privacy button. If you do not accept cookies, the functionality of our website may be limited.

6.2 Consent Manager Platform (CMP)

We use a consent management service (Consent Manager Platform, or CMP) on our website to inform you about the cookies and other technologies we use on our website and to obtain, manage and document any consent required for the processing of your personal data through these technologies. Pursuant to Article 6(1), first sentence, point (c) GDPR, this is necessary to fulfil our legal obligation under Article 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data. The Consent Manager Platform (CMP) used is provided by Consentmo Ltd., "Professor Georgi Bradistilov" 3, 1756 Sofia, Bulgaria, which processes your data on our behalf.

After you submit your cookie declaration on our website, the web server stores the following data: IP address, device information, browser information, selected language, the webpage accessed or its URL, the date and time of your consent declaration and information about your consent choices.

The following technologies containing information about your consent choices are also used: cookies and log files.

Your data will be deleted after one year unless you have expressly consented to further use of your data pursuant to Article 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this as permitted by law and as explained in this policy.

7. Use of cookies and other technologies

We use the following third-party cookies and other technologies on our website. Unless otherwise specified for an individual technology, this takes place on the basis of your consent pursuant to Article 6(1), first sentence, point (a) GDPR. Once the purpose no longer applies and we stop using the respective technology, the data collected in this context will be deleted. You may withdraw your consent at any time with future effect. Further information about your withdrawal options can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with each provider, can be found under the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

7.1 Use of Adobe services

We use the technologies described below from Adobe Systems, Software Ireland Limited, Ireland, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). Information about your use of our website automatically collected through Adobe technologies is generally transferred to and stored on a server of Adobe, Inc., 345 Park Avenue San Jose, CA 95110-2704, USA. If your IP address is collected through Adobe technologies, the relevant settings are activated so that it is truncated or replaced entirely with a generic IP address before being stored on Adobe’s servers.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Canada, Japan, Switzerland, United Kingdom, USA.

The adequacy decision for the USA serves as the basis for transfers to that third country where the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses. 

 Adobe Fonts

To display content consistently on our website, the script code "Adobe Fonts" collects data (IP address, time of visit, device and browser information), transfers them to Adobe and Adobe subsequently processes them. We have no influence over this subsequent data processing. The data are processed on the basis of a joint controller agreement pursuant to Article 26 GDPR.

7.2 Use of Google services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information about your use of our website automatically collected through Google technologies is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Unless otherwise specified for an individual technology, the data are processed on the basis of a joint controller agreement concluded for that technology pursuant to Article 26 GDPR. Further information about data processing by Google can be found in Google’s privacy information.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses. 

 Google Analytics

For website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and then deleted immediately before the traffic is forwarded for processing on other Google servers. The data are processed on the basis of an agreement for processing by Google on our behalf.

To optimise the marketing of our website, we have enabled the data-sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and subsequently use them to improve Google services. Data are shared with Google under these data-sharing settings on the basis of an additional agreement between controllers. We have no influence over Google’s subsequent data processing.

To optimise the marketing of our website, we use the User-ID feature. This feature allows us to assign a unique, permanent ID to your interaction data from one or more sessions on our online presences, enabling us to analyse your usage behaviour across devices and sessions.

For web analytics, the Google Analytics extension Google Signals enables cross-device tracking. If your internet-enabled devices are linked to your Google account and you have enabled the "personalised advertising" setting in your Google account, Google can create reports about your usage behaviour (in particular cross-device user numbers), even if you change devices. We do not process personal data in this respect; we receive only statistics created on the basis of Google Signals.

For web analytics and advertising, the Google Analytics extension known as the DoubleClick cookie enables your browser to be recognised when you visit other websites. Google will use this information to compile reports on website activity and provide other services related to website use.

 Google AdSense

Our website markets advertising space to third parties through Google AdSense. These advertisements appear in various places on this website. The DoubleClick cookie enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information and information about your use of our website) and automatically assigning a pseudonymous UserID, which is used to identify interests based on visits to this and other websites.

 Google Ads

For advertising in Google search results and on third-party websites, when you visit our website the Google remarketing cookie is set. By automatically collecting and processing data (IP address, time of visit, device and browser information and information about your use of our website), using a pseudonymous CookieID and based on the pages you visit, this cookie enables interest-based advertising. Further data processing takes place only if you have enabled the "personalised advertising" setting in your Google account. If, in this case, you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads conversion tracking to measure your subsequent usage behaviour if you arrived at our website through a Google Ads advertisement. Cookies may be used for this purpose and data may be collected (IP address, time of visit, device and browser information and information about your use of our website based on events we specify, such as visiting a webpage or subscribing to the newsletter), from which usage profiles are created using pseudonyms.

If you do not give consent to the use of Google Ads pursuant to Article 6(1), first sentence, point (a) GDPR, no cookies are stored on or read from your device. The data processing described in the preceding paragraphs does not take place. To close gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information about your consent choices, screen resolution, IP address, page URL and information about ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

 Google Fonts

To display content consistently on our website, the "Google Fonts" script code collects data (IP address, time of visit, device and browser information), transfers them to Google and Google subsequently processes them. We have no influence over this subsequent data processing.

 Google Tag Manager

Google Tag Manager allows us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g. IP address and online identifiers, including cookies). The data are processed on the basis of an agreement for processing by Google on our behalf.

Google Tag Manager can be used to integrate various services and technologies.
If you do not wish individual tracking services to be used and have therefore disabled them, this disabling remains effective for all affected tracking tags integrated through Google Tag Manager.

7.3 Use of Microsoft services

We use the technologies described below from Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft"). The data are processed on the basis of a joint controller agreement pursuant to Article 26 GDPR. Information about your use of our website automatically collected through Microsoft technologies is generally transferred to and stored on a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Further information about data processing by Microsoft can be found in Microsoft’s privacy information.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses. 

For website analysis and event tracking, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behaviour if you arrived at our website through a Microsoft Advertising advertisement. Cookies may be used for this purpose and data may be collected (IP address, time of visit, device and browser information and information about your use of our website based on events we specify, such as visiting a webpage or subscribing to the newsletter), from which usage profiles are created using pseudonyms. If your internet-enabled devices are linked to your Microsoft account and you have not disabled the "interest-based advertising" setting in your Microsoft account, Microsoft can create reports about usage behaviour (in particular cross-device user numbers), even if you change devices (cross-device tracking). We do not process personal data in this respect; we receive only statistics created on the basis of Microsoft UET.

7.4 Use of Meta services

 Use of Meta Pixel

We use Meta Pixel as part of the technologies described below from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information and information about your use of our website based on events we specify, such as visiting a webpage or subscribing to the newsletter), from which usage profiles are created using pseudonyms. As part of advanced matching, information that can identify individuals (e.g. names, email addresses and telephone numbers) is also collected and stored in hashed form for matching purposes. For this purpose, Meta Pixel automatically sets a cookie when you visit our website, which automatically enables your browser to be recognised when you visit other websites by means of a pseudonymous CookieID. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and provide other services related to website use, in particular personalised and group-based advertising.
Information about your use of our website automatically collected through Meta Platforms Ireland technologies is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information about data processing by Meta Platforms Ireland can be found in Meta Platforms Ireland’s privacy information.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to that third country where the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s standard contractual clauses.

 Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) and other platforms. We define the parameters of each advertising campaign. Meta Platforms Ireland is responsible for the specific implementation, particularly decisions about placing advertisements with individual users. Unless otherwise specified for an individual technology, the data are processed on the basis of a joint controller agreement pursuant to Article 26 GDPR. Joint controllership is limited to the collection of the data and their transfer to Meta Platforms Ireland. It does not cover subsequent data processing by Meta Platforms Ireland.

Based on the statistics about visitor activity on our website generated through Meta Pixel, we use Custom Audiences to run group-based advertising on Facebook (by Meta) by defining the characteristics of the respective target audience. As part of the advanced matching carried out to define the respective target audience (see above), Meta Platforms Ireland acts as our processor.

Based on the pseudonymous CookieID set by Meta Pixel and the data collected about your usage behaviour on our website, we run personalised advertising through Custom Audiences.

Through Conversions (via Meta Pixel or Conversations API), we measure your subsequent usage behaviour for web analytics and event tracking if you arrived at our website through an advertisement from Meta Ads Manager. The data are processed on the basis of an agreement for processing by Meta Platforms Ireland on our behalf.

7.5 Other providers of web analytics and online marketing services

 Use of Hotjar for web analytics

For website analysis, technologies from Hotjar Ltd., Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta ("Hotjar") automatically collect and store data (IP address, time of visit, device and browser information and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymised usage profiles will not be combined with personal data about the individual behind the pseudonym without separate, express consent. Hotjar acts on our behalf.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses. 

 Use of AWIN for online marketing

Through the advertising partner AWIN AG, Otto-Ostrowski-Straße 1A, 10249 Berlin, Germany ("AWIN"), we market advertising space to third parties. These advertisements appear in various places on this website. Using cookies, AWIN can track the course of each order and, in particular, establish that you clicked the respective advertisement and subsequently ordered the product. For this purpose, data (IP address, time of visit, device and browser information and information about your use of our website) are collected, transferred to AWIN and processed by AWIN. We have no influence over this data processing. The data are processed on the basis of a joint controller agreement pursuant to Article 26 GDPR.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses. 

 Use of the Vimeo video plugin to embed third-party content

To embed third-party content, the video plugin from Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA ("Vimeo") collects data (IP address, time of visit, device and browser information), transfers them to Vimeo and Vimeo subsequently processes them. The data are processed on the basis of a joint controller agreement pursuant to Article 26 GDPR. Google Analytics is automatically integrated into the Vimeo video plugin. For website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information about your use of our website automatically collected by Google is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and then deleted immediately before the traffic is forwarded for processing on other Google servers. We have no influence over or access to Vimeo’s data processing, including the settings and results of Google Analytics.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses. 

8. Integration of the Trusted Shops Trustbadge and other widgets

Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. the trustmark and collected reviews) and to offer Trusted Shops products for buyers after an order.

This serves our legitimate interests in optimal marketing by enabling secure shopping, which prevail in a balancing of interests, pursuant to Article 6(1), first sentence, point (f) GDPR. The Trustbadge and the services advertised through it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Köln ("Trusted Shops"), with whom we are joint controllers under data protection law pursuant to Article 26 GDPR. Below, as part of this privacy information, we inform you of the essential contents of the agreement pursuant to Article 26(2) GDPR.

When you interact with Trustbadge AI+, session cookies are set to store your login status and display the welcome layer, which shows details of the respective online shop (company information, reviews and information about the existence of buyer protection) and the #trstd secret. To recognise logged-in users, a cookie is set and stored for a maximum of 400 days after login. Session cookies are also set to send push notifications when using the app, provided the user has allowed them. This is necessary for Trusted Shops to provide the digital service you have requested. Trusted Shops is responsible for data processing when you interact with Trustbadge AI+.

Within the joint controllership arrangement between us and Trusted Shops SE, for data protection questions and to exercise your rights, please preferably contact Trusted Shops using the contact details provided in the privacy information. Regardless of this, you may always contact the controller of your choice. Your request will then be forwarded to the other controller for a response if necessary.

8.1 Data processing when integrating the Trustbadge and other widgets

The Trustbadge is provided by a US-based CDN provider (Content Delivery Network). An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which for the USA can be accessed here. Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where the service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically stores a server log file, which also contains your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the request. The IP address is anonymised immediately after collection so that the stored data cannot be associated with you personally. The anonymised data are used in particular for statistical purposes and error analysis.

8.2 Data processing after completion of an order

If you have given your consent, after completion of the order the Trustbadge accesses order information (order total, order number and, where applicable, the product purchased) and your email address stored on your device, and your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information pursuant to Article 6(1), first sentence, point (a) GDPR.
This is used to check whether you are already registered for Trusted Shops services. If you are, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. For Germany, you can find this here; for Austria, here; and for Switzerland, here. If you are not yet registered for the services or do not give consent to automatic recognition through the Trustbadge, you will subsequently have the option of registering manually to use the services or of arranging protection under any existing user agreement.

For this purpose, after you have completed your order, the Trustbadge accesses the following information stored on the device you use: order total, order number and email address. This is necessary for us to offer you buyer protection. Data are transferred to Trusted Shops only when you actively choose to take out buyer protection by clicking the correspondingly labelled button in the Trustcard. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops pursuant to Article 6(1), point (b) GDPR, in order to complete your registration for buyer protection, protect the order and, where applicable, subsequently send you review invitations by email.

Trusted Shops uses service providers for hosting, monitoring and logging. The legal basis is Article 6(1), point (f) GDPR for the purpose of ensuring smooth operation. Processing may take place in third countries (USA, United Kingdom and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which for the USA can be accessed here, for the United Kingdom here and for Israel here. Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where the service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

9. Social media

9.1 Social buttons from Facebook (by Meta) and Instagram (by Meta)

Our website uses social buttons from social networks. These are embedded in the page only as HTML links, so no connection to the respective provider’s servers is established when you access our website. If you click one of the buttons, the website of the respective social network opens in a new browser window, where you can, for example, use the Like or Share button.

9.2 Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube and LinkedIn

If you have given your consent to the respective social media operator pursuant to Article 6(1), first sentence, point (a) GDPR, when you visit our online presences on the social media platforms named above, your data are automatically collected and stored for market research and advertising purposes, and usage profiles are created from these data using pseudonyms. These may be used, for example, to display advertisements inside and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information about how the respective social media operator processes and uses data, as well as contact details, your related rights and settings for protecting your privacy, please refer to the providers’ privacy information linked below. If you nevertheless need assistance in this regard, you can contact us.

Facebook (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information about your use of our online presence on Facebook (by Meta) automatically collected by Meta Platforms Ireland is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing when visiting a Facebook (by Meta) fan page takes place on the basis of a joint controller agreement pursuant to Article 26 GDPR. Further information (information about Insights data) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to that third country where the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico.
There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s standard contractual clauses.

Instagram (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information about your use of our online presence on Instagram automatically collected by Meta Platforms Ireland is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing when visiting an Instagram (by Meta) fan page takes place on the basis of a joint controller agreement pursuant to Article 26 GDPR. Further information (information about Insights data) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to that third country where the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico.
There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s standard contractual clauses.

YouTube is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information about your use of our online presence on YouTube automatically collected by Google is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no European Commission adequacy decision for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses. 

LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). Information about your use of our online presence on LinkedIn automatically collected by LinkedIn is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA.

The adequacy decision for the USA serves as the basis for transfers to that third country where the respective service provider is certified. Certification is in place.

10. Contact details and your rights

10.1 Your rights

As a data subject, you have the following rights:

• under Article 15 GDPR, the right to request information about your personal data processed by us to the extent specified in that article;
• under Article 16 GDPR, the right to request without delay the rectification of inaccurate personal data or completion of your personal data stored by us;
• under Article 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary
  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation;
  • for reasons of public interest; or
  • for the establishment, exercise or defence of legal claims;
• under Article 18 GDPR, the right to request restriction of processing of your personal data where
  • you contest the accuracy of the data;
  • the processing is unlawful but you oppose erasure;
  • we no longer need the data, but you require them for the establishment, exercise or defence of legal claims; or
  • you have objected to processing pursuant to Article 21 GDPR;
• under Article 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request their transmission to another controller;
• under Article 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you may contact the supervisory authority for your habitual residence, your place of work or our registered office.

Right to object Where we process personal data as explained above to safeguard our legitimate interests that prevail in a balancing of interests, you may object to this processing with future effect. If processing takes place for direct marketing purposes, you may exercise this right at any time as described above. Where processing is carried out for other purposes, you have a right to object only on grounds relating to your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. This does not apply where processing is for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

10.2 Contact details

Data protection officer:
Lawyer Stefan Lutz
Bachstr. 44
88214 Ravensburg
Germany
075127088530
dpo@anio.watch

If you have questions about the collection, processing or use of your personal data, requests for information, rectification, restriction or erasure of data, or wish to withdraw any consent you have given or object to a particular use of your data, please contact:

Lawyer Stefan Lutz
Bachstr. 44
88214 Ravensburg
Germany
075127088530
dpo@anio.watch