Privacy Information for this Online Shop

I. Scope

As the responsible party, we hereby inform data subjects about the handling of personal data in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR). This document is effective as of January 2024. Due to potential future changes in data processing procedures or due to amended legal or regulatory requirements, it may be necessary to adapt this document. The current version is always available at https://www.klapster.de/en/datenschutz.

II. Who is responsible for data processing?

The controller responsible for data processing according to Article 4 No. 7 GDPR is: raumwert GmbH, Gwinnerstraße 46, Building 406, 60388 Frankfurt am Main, Phone: 069 1532011 80, Email: info@klapster.de. The complete imprint is available at the following link: https://www.klapster.de/en/impressum

III. Is there a Data Protection Officer?

We have not appointed a Data Protection Officer for our company as there is no legal obligation to do so.

IV. For what purposes do we process your data?

IV.1. Log Files / Server

Logs When you visit our website without registering or otherwise transmitting information to us, we only collect the following data that your browser transmits to our server (so-called "server log files"):

The individual pages of our website (URL)
Date and time of access
Amount of data sent in bytes
Source/referrer from which you came to the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

Our website is hosted by a hosting provider and made available for retrieval. The web server used stores the aforementioned server log files.

Purpose of processing: Hosting of the website Legal basis and legitimate interests: The processing is based on our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the security and stability of our website by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services. Data recipient: Timme Hosting GmbH & Co. KG, https://timmehosting.de/ Storage duration: 7 days

IV.2. Cookies

IV.2.a. General

(aa) Definitions

Below you will receive extensive information about so-called "cookies" and other storage technologies ("Web Storage"). This is information that is often stored in databases on your device. The term "cookie" or "web storage" may contain personal data. In many cases, however, the data is pseudonymized. The following terms may be used below:

First-party cookie: This cookie is stored or modified by the website you are currently browsing
Third-party cookie: This cookie is stored or modified by third parties with whom the website operator is associated (e.g., an advertising network, a social media platform, etc.)
Session cookie: This cookie is deleted from your device when you close the browser. Often, a session cookie only stores a session ID to associate multiple requests from a user on a page with their session Persistent cookie: This cookie is stored on your device for as long as its validity lasts or until you manually or automatically delete it in the browser Strictly necessary: Without this cookie and web storage, the service you requested cannot be provided
Optional: This cookie and web storage allows us to use additional functions and is only used if you give your consent
Local Storage: Belongs to the so-called "Web Storage". This information is also stored in your web browser until manually deleted.
Session Storage: Belongs to the so-called "Web Storage". This information is also stored in your web browser until the browser window is closed.

(bb) Legal bases

Strictly necessary cookies and web storage: The storage of information and access to this information are based on the legal basis of § 25 (2) No. 2 TTDSG.
Optional cookies and web storage: The storage of information and access to this information are based on the legal basis of your individual personal and voluntary consent according to § 25 (1) TTDSG in conjunction with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. The data processing up to the revocation remains lawful. Please note that if optional cookies are not accepted, individual functions of our website may be limited.

(cc) Data recipients / Access possibility

First-party cookies: Only we as the responsible party for data processing and website operator have access to these.
Third-party cookies: Only the third party that set these cookies has access to them and can read or modify them. For example, only Google has access to a cookie set by Google and can read or modify it.
Web Storage: Only we as the responsible party for data processing and website operator have access to this.

(dd) Storage duration

Session cookies: These remain stored in your browser only temporarily until the end of the browser session or can be deleted by you earlier.
Persistent cookies: These remain stored on your device for as long as specified for the respective cookie or can be deleted by you earlier.
Local Storage: This remains stored until manual deletion.
Session Storage: This remains stored until the browser window is closed.

The exact storage duration is specified under "Cookies and Web Storage Used".

(ee) Deletion options / Objection

Please note that you can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/

A general objection to the use of cookies used for online marketing purposes can be declared for many services, especially in the case of tracking, via the US website https://www.aboutads.info/choices/ or the EU website https://www.youronlinechoices.com/.

IV.2.b. Cookies and Web Storage Used

Please refer to the information in the Cookie Consent Management Tool from Cookiefirst (see link in the footer "Cookie Consent Solution").

IV.3. Cookie Consent Management

Cookies and Consent Management In addition to storing cookies (see separate section), we manage the consent declarations of our internet users using a cookie consent management tool.

Purpose of processing: Fulfillment of the legal obligation for consent management
Legal basis: Art. 6 para. 1 sentence 1 lit. c GDPR
Storage duration: Until the revocation of consent for cookie storage, at the longest until the expiration of the respective cookie. The storage duration of the respective cookies is listed in the cookie table.

As far as mentioned below, we have commissioned the following service provider with consent management:

Cookiefirst

This is a service of Digital Data Solutions B.V. (CookieFirst), Plantage Middenlaan 42a, 1018DH, Amsterdam, Netherlands, https://cookiefirst.com/de/

Privacy policy of Digital Data Solutions B.V.: https://cookiefirst.com/legal/privacy-policy/
Further information on data storage on the Consent Management Platform: https://cookiefirst.com/
Storage duration at Cookiefirst: 3 years

IV.4. Content Delivery Network (CDN)

Amazon CloudFront CDN

On our website, we use a so-called Content Delivery Network ("CDN") of the technology service provider Amazon Web Services ("Amazon"). A Content Delivery Network is an online service that delivers website data, especially static website data, through a network of servers distributed worldwide and connected via the Internet. Essentially, it involves your IP address and your browser data to transmit the website data to you. We ourselves have no access to the data collected by Amazon.

Purpose of processing: Optimization of the loading speeds of our website
Legal basis and legitimate interests: The processing is based on our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the speed, security, and stability of our website by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services.
Data recipient: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA
Privacy information from Amazon: Comprehensive information has been compiled by Amazon in its GDPR Center.
Third country transfer: If non-anonymized data is transferred to Amazon Web Services, Inc., data processing takes place in the USA.
Commission adequacy decision: Regarding data transfers to Amazon Web Services, Inc., we rely on the decision of 10.07.2023 for the EU-US Data Privacy Framework according to Art. 45 GDPR. The list of companies participating in the EU-US Data Privacy Framework is available at https://www.dataprivacyframework.gov/

IV.5.Contact

If you contact us (e.g., via contact form, email, telephone, fax), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used solely for the purpose of responding to your request or for contact and the associated technical administration. Without these mandatory details, we cannot process your request. All other information is voluntary.

Purpose of processing: Answering your request
Legal bases: Art. 6 para. 1 lit. b GDPR for pre-contractual or contractual matters. Art. 6 para. 1 lit. a GDPR for your voluntary information. Art. 6 para. 1 lit. f GDPR for all other inquiries and the use of our technical service providers.
Legitimate interests: The processing using service providers is based on our overriding legitimate interest in the secure, timely, and professional response to your request.
Data recipients: Hosting provider for contact form inquiries; Emails: Host Europe GmbH,https://www.hosteurope.de/
Storage duration: Your data will be deleted after your request has been conclusively processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no legal retention obligations prevent this. For pre-contractual and contractual matters, your request will be stored until the end of the contract and then restricted in processing. When there is no longer a legal basis for storage, the data will be deleted.

IV.6. Data processing in connection with our prospects

Purpose of processing: As a prospect, you will be stored with your contact details in our systems to be able to establish a business relationship with you. We process both company and professional employee data.
Legal bases: Art. 6 para. 1 lit. b GDPR for pre-contractual or contractual matters. Art. 6 para. 1 lit. a GDPR for your voluntary information. We process professional contact details of employees in companies according to Art. 6 para. 1 lit. f GDPR based on our predominantly legitimate interest in maintaining the business relationship.
Storage duration: Prospect data is stored for as long as it can be assumed that there is still an interest in cooperation with us. If we assume that there is no longer any interest, we delete the prospect data.

IV.7. Data processing in connection with our customers, suppliers, and other business partners

Purpose of processing: As a customer, supplier, or other business partner, you will be stored with your contact details in our systems to manage the business relationship with you. We process both company and professional employee data.
Legal bases and legitimate interests: Art. 6 para. 1 lit. b GDPR for pre-contractual or contractual matters. Art. 6 para. 1 lit. a GDPR for your voluntary information that is not strictly necessary for contract execution. We process professional contact details of employees in companies according to Art. 6 para. 1 lit. f GDPR based on our predominantly legitimate interest in maintaining the business relationship.
Data recipients: In the course of project implementation, those project participants receive your personal data who are necessarily required for project realization.
Storage duration: We delete your data three years after the end of the business relationship, unless there is a legal reason for further processing (e.g., retention obligations).

IV.8. Data collection when using comments

If you use the option to leave a comment on our website, we require the mandatory information visible in the comment form from you due to the usage agreement concluded with you. Without your mandatory information, we cannot publish your comment.

Purpose of processing: Publication of your personal comment on our website.
Legal basis: Usage agreement (Art. 6 para. 1 lit. b GDPR)
Storage duration: We store the comment and your other unpublished data until the end of the contract and then restrict processing. When there is no longer a legal basis for storage, the data will be deleted.

IV.9. Newsletter

We send newsletters via email to registered users with information about our company, our products, services, promotions, and offers. The newsletter is sent at most monthly.

Double opt-in procedure: Registration for our newsletter generally takes place with a so-called double opt-in procedure. After registration, you will receive an email asking you to confirm your registration. This confirmation is necessary to verify the correctness of your email address. Newsletter registrations are logged to be able to prove the registration process in accordance with legal requirements. This includes storing the registration and confirmation time as well as the IP address.
Purpose of processing: Direct marketing, customer communication
Legal basis: When registering for our newsletter, the registrant gives their consent (Art. 6 para. 1 S. 1 lit. a GDPR).
Right of withdrawal / Opt-out: You can cancel the receipt of our newsletter at any time, i.e., revoke your consent, by informing us by email (see above under "Who is responsible for data processing?") or by clicking the link found at the end of each newsletter. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Obligation to provide: To send the newsletter, we need at least your valid email address. Otherwise, sending is not possible.
Storage duration: Your data will be stored until your revocation. Afterwards, they will be restricted in processing and stored for up to three years to be able to legally prove a previously given consent. This is done on the basis of our legitimate interests (Art. 6 para. 1 S. 1 lit. f. GDPR) in proving data protection compliance.

If named below, we use the following service provider for this:

Klaviyo

Klaviyo, as our processor, uses personal data (email address, time of retrieval, IP address, browser type, and operating system) to send and statistically evaluate the newsletters on our behalf. This data allows an individual conclusion about the newsletter recipient and is processed by Klaviyo for the automated creation of a statistic that shows whether a specific recipient has opened a newsletter message. For evaluation purposes, the sent emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. With the help of the web beacons, Klaviyo automatically generates general, non-personal statistics about the response behavior to newsletter campaigns.

Data recipient/Processor: Klaviyo, Inc., 125 Summer St, Floor 6 Boston, MA 02111, USA,https://www.klaviyo.com/
Privacy policy of Klaviyo:https://www.klaviyo.com/legal/privacy-notice
Legal basis and legitimate interests: The data transfer takes place on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the security and stability of a legally compliant newsletter system including automated double opt-in and verifiability of user registrations.
Third country transfer: If non-anonymized data is transferred to Klaviyo, data processing takes place in the USA.
Commission adequacy decision: Regarding data transfers to Klaviyo, Inc., we rely on the decision of 10.07.2023 for the EU-US Data Privacy Framework according to Art. 45 GDPR. The list of companies participating in the EU-US Data Privacy Framework is available athttps://www.dataprivacyframework.gov/

IV.10. Web Analysis, Marketing

Google Analytics 4

(a) General: Our website uses Google Analytics, a web analysis service of Google Ireland Ltd. (Google), which can analyze the usage of websites. We receive various usage data, such as page views, duration of visit, operating systems used and origin of the user.

(b) Demographic characteristics: Google Analytics 4 enables, via a special function called "demographic characteristics", the creation of statistics with statements about your age, gender and interests based on an evaluation of interest-based advertising and including third-party information. This makes it possible to determine and distinguish user groups of the website for the purpose of target group-optimized marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally.

(c) E-commerce measurement: We use Google Analytics 4 with activated "e-commerce measurement". This allows us to analyze the purchasing behavior of our internet customers. This also serves to improve our online marketing activities. The following information is collected: orders placed, average order values, shipping costs and the time from viewing to purchasing a product. This data can be summarized by Google under a transaction ID that is assigned to the respective internet user or their device.

(d) Further details

Purposes of processing: Tracking (e.g. interest/behavior-based profiling), visitor action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to both us and Google and its parent company.
Legal bases and legitimate interests: For the use of Google Analytics, you may give us your consent according to Art. 6 para. 1 p. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting "Marketing" or "Google Analytics 4" in the cookie settings on our site. Without your consent, we use Google Analytics 4 with so-called "pings" based on our overriding legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR) to achieve the purposes of processing (see above).
Storage duration: We store the anonymized data thus obtained for a maximum period of 14 months. After that, the data will be automatically deleted. Regarding the storage duration by Google, we refer to their privacy policy. Data collected via the "demographic characteristics" function is stored for two months and then deleted.
Objection / Opt-Out: You can object to the collection of your data by installing a browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en Here you can determine yourself which data should be used by Google: https://g.co/privacytools You can also deactivate personalized advertising directly at Google: https://www.google.com/settings/ads/onweb/ Further information from Google on how you can block certain advertising and turn off cross-device analysis in connection with Google Signals can be found here: https://support.google.com/ads/answer/2662922?hl=en You can also set your preferences regarding online advertising across providers here: https://www.youronlinechoices.com/ Alternatively, you can use the management page of the Network Advertising Initiative: http://www.networkadvertising.org/consumer/opt_out.asp
Data recipients/processors: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google's privacy policy: https://policies.google.com/privacy Google's privacy information for Google Analytics: https://support.google.com/analytics/answer/6004245 Google's privacy information for Google Signals: https://support.google.com/analytics/answer/7532985?hl=en
Third country transfer: Insofar as non-anonymized data is transferred to Google LLC, data processing also takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Google LLC, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available at https://www.dataprivacyframework.gov/

Google Tag Manager

On our website we use Google Tag Manager from Google. Google Tag Manager is an online tool that allows us to integrate and manage website tags centrally and via a user interface. Tags are small code snippets that, for example, record your activities on our website. JavaScript code snippets are used in the source code of our website. The tags come from Google Ads or Google Analytics, for example, but tags from other companies can also be integrated and managed via the manager. Such tags perform different tasks. They can collect browser data, integrate buttons, set cookies and also track users across multiple websites. In the account settings of the Tag Manager, we have allowed Google to receive anonymized data from us. However, this only concerns the use of our Tag Manager and not your data that is stored via the code snippets.

Purposes of processing: Tracking (e.g. interest/behavior-based profiling), visitor action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to both us and Google and its parent company. As far as we know, Google also uses the data collected (anonymized) for its own purposes. In this respect, we refer to Google's privacy policy.
Legal bases and legitimate interests: The integration of Google Tag Manager on our website is based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes according to Art. 6 para. 1 lit. f GDPR. The use of the various tags then takes place in accordance with the separately described sections with the explicit consent of the user.
Storage duration: Regarding the storage duration by Google, we refer to their privacy policy.
Data recipients: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google's privacy policy: https://policies.google.com/privacy
Third country transfer: Insofar as non-anonymized data is transferred to Google LLC, data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Google LLC, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available athttps://www.dataprivacyframework.gov/

IV.11. Conversion Tracking, Remarketing

Bing Ads

On our website we use the following tools provided and operated by Microsoft Corporation ("Microsoft").

Bing Ads Conversion Tracking

This is a tool for measuring the reach of our advertisements. It determines how successful our advertising measures are on Bing and Yahoo. In this way, we only show advertisements that are of interest to the respective user. For this purpose, the UET Tag (Universal Event Tracking Tag) from Microsoft is integrated on our website. This JavaScript code enables Microsoft to collect pseudonymized data about the visit of users and the use of our website via cookies (e.g. about the browser session and the displayed website) and to provide us with aggregated, non-personal statistics (such as how many visitors have reached a specific target page) on this basis.

Microsoft Ads Remarketing

This is a tool that allows us to show relevant advertisements to users of our website after they have visited us, even when they are already on other websites. In this way, we want to show the respective user advertisements that are of interest to them. This is done via a cookie stored in the user's browser (see above), which records and evaluates the usage behavior. No personal information about individual website visitors is transmitted to us and website customer target groups can only be specifically advertised by us in ads if the customer target group has reached a critical mass in terms of numbers.

Purposes of processing: Marketing, remarketing, profiles with user-related information (creating user profiles)
Legal bases: For the use of Microsoft Ads, you may give us your consent according to Art. 6 para. 1 p. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting "Marketing" or "Microsoft Ads" in the cookie settings on our site.
Storage duration: Regarding the storage duration by Microsoft, we refer to their privacy policy.
Objection / Opt-Out: If you do not want information about your behavior to be used by Microsoft as described above, you can refuse to set a cookie required for this - for example via browser settings that generally deactivate the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by declaring your objection at the following link https://choice.microsoft.com/de-DE/opt-out. The deactivation of interest-based ads is also possible at advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads.
Data recipient: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Microsoft's privacy policy: https://privacy.microsoft.com/en-us/privacystatement.
Third country transfer: Insofar as non-anonymized data is transferred to Microsoft Corp., data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Microsoft Corporation, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available at https://www.dataprivacyframework.gov/

Facebook Pixel

On our website we use the Facebook pixel function, a product of Meta Platforms Ireland Ltd ("Facebook"). This enables Facebook to determine the visitors of our website as a target group for the display of advertisements (so-called "Facebook ads"). We use the Facebook pixel to display the Facebook ads we place only to those Facebook users and within the services of partners cooperating with Facebook (so-called "Audience Network" https://www.facebook.com/audiencenetwork/) who have also shown an interest in our online offer or who have certain characteristics (e.g. interest in certain topics or products that are apparent from the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). We also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion measurement").

Controllers / Data recipients: We are joint controllers for the processing of so-called "event data" with: Meta Platforms Ireland Ltd. (hereinafter referred to as "Facebook"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland according to Art. 4 No. 7, 26 GDPR. Parent company: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook. The processing by Facebook after forwarding is not part of the joint responsibility. Facebook is responsible for the data security of Facebook products. The essential contents of the agreement on joint responsibility according to Art. 26 GDPR can be accessed here: https://www.facebook.com/legal/controller_addendum
Purposes of processing: a) Display of content and advertising information that corresponds to the presumed interests of users; b) Delivery of commercial and transaction-related messages (e.g. addressing users via Facebook Messenger); c) Improvement of ad delivery and personalization of features and content (e.g. improving the recognition of which content or advertising information presumably corresponds to users' interests)
Legal bases: For the use of Facebook Conversion, you may give us your consent according to Art. 6 para. 1 p. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting "Marketing" or "Facebook/Meta" in the cookie settings on our site.
Storage duration: We store the anonymized data thus obtained for a maximum period of 14 months. After that, the data will be automatically deleted. Regarding the storage duration by Meta, we refer to their policy at https://www.facebook.com/policy
Facebook Privacy Center (setting privacy settings): https://www.facebook.com/privacy/center/ Facebook Data Policy (information on the handling of personal data): https://www.facebook.com/policy
Your rights towards Facebook: You can contact Facebook directly regarding the exercise of your data subject rights via this contact form.
Third country transfer: Insofar as non-anonymized data is transferred to the parent company (Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA), data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Meta Platforms, Inc., we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available at https://www.dataprivacyframework.gov/

Google Ads (formerly AdWords)

Our website uses "Google Ads" from Google Ireland Ltd. (Google) to advertise our products. On our website, we use conversion tracking for this purpose. This records which internet users clicked on our advertisement on external websites and then came to our website. We can also use this to record whether certain actions were triggered on our website by our advertisements (e.g. ordering in the shop, subscribing to a newsletter, etc.). However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a so-called "conversion tracking tag". We ourselves do not receive any information that allows users to be identified. However, in the context of so-called conversion measurements, we can check which of our online marketing procedures led to a so-called conversion, i.e. for example, to a contract conclusion with us. The conversion measurement is used solely to analyze the success of our marketing measures.

Responsibilities: We are responsible for the integration of Google's software products and the execution of the evaluations, insofar as we have access to them. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA are responsible for their own data processing, over which we have no influence.
Purposes of processing: Tracking (e.g. interest/behavior-based profiling), visitor action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to both us and Google and its parent company.
Legal bases: For the use of cookies for Google Ads and conversion tracking, you may give us your consent according to Art. 6 para. 1 p. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting "Marketing" or "Google Ads" in the cookie settings on our site. Our overriding legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR consists in advertising our products and services.
Storage duration: Regarding the storage duration by Google, we refer to their privacy policy.
Objection / Opt-Out: You can deactivate personalized advertising directly at Google: https://www.google.com/settings/ads/onweb/ Further information from Google on how you can block certain advertising can be found here: https://support.google.com/ads/answer/2662922?hl=en You can also set your preferences regarding online advertising across providers here: https://www.youronlinechoices.com/ Alternatively, you can use the management page of the Network Advertising Initiative: http://www.networkadvertising.org/consumer/opt_out.asp
Google's privacy policy: https://policies.google.com/privacy
Third country transfer: Insofar as non-anonymized data is transferred to Google LLC, data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Google LLC, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available athttps://www.dataprivacyframework.gov/

Google AdSense

Our website uses "AdSense" from Google Ireland Ltd. (Google) to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the ads. We also measure the conversion of the ads. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a so-called "conversion tracking tag". We ourselves do not receive any information that allows users to be identified. However, in the context of so-called conversion measurements, we can check which of our online marketing procedures led to a so-called conversion, i.e. for example, to a contract conclusion with us. The conversion measurement is used solely to analyze the success of our marketing measures.

Our website uses Google AdSense exclusively with anonymized IP addresses. Your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to Google's parent company in the USA and shortened there.

Responsibilities: We are responsible for the integration of Google's software products and the execution of the evaluations, insofar as we have access to them. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA are responsible for their own data processing, over which we have no influence.
Purposes of processing: Tracking (e.g. interest/behavior-based profiling), visitor action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to both us and Google and its parent company.
Legal bases: For the use of cookies for Google AdSense, you may give us your consent according to Art. 6 para. 1 p. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting "Marketing" or "Google AdSense" in the cookie settings on our site. Our overriding legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR consists in advertising our products and services.
Storage duration: Regarding the storage duration by Google, we refer to their privacy policy.
Objection / Opt-Out: You can deactivate personalized advertising directly at Google: https://www.google.com/settings/ads/onweb/ Further information from Google on how you can block certain advertising can be found here: https://support.google.com/ads/answer/2662922?hl=en You can also set your preferences regarding online advertising across providers here: https://www.youronlinechoices.com/ Alternatively, you can use the management page of the Network Advertising Initiative: http://www.networkadvertising.org/consumer/opt_out.asp
Google's privacy policy: https://policies.google.com/privacy
Third country transfer: Insofar as non-anonymized data is transferred to Google LLC, data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Google LLC, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available at https://www.dataprivacyframework.gov/

Remarketing via Email

In certain cases, we use your email address to send advertising for similar articles or services. For example, you may receive a reminder email if you are already a customer of ours and have aborted the ordering process in the shopping cart during a subsequent order.

Purpose and overriding legitimate interests: Direct advertising
Legal bases: Art. 6 para. 1 p. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG
Objection: You can object to the use of your contact address at any time by notification via email or by clicking on the unsubscribe link in our advertising emails. No costs other than the transmission costs according to the basic rates will be incurred by you.
Data recipients: Newsletter service provider (see there)

IV.12. Videos

Vimeo-Videos

Videos Our website uses the embedding function of Vimeo. When you access a page with an embedded Vimeo video, a connection to Vimeo's servers is established. Vimeo is informed which pages you visit. If you are logged into your Vimeo account, Vimeo can associate your browsing behavior with you personally. You can prevent this by logging out of your Vimeo account beforehand. When a Vimeo video is started, Vimeo uses cookies that collect information about user behavior. For further information on the purpose and scope of data collection and its processing by Vimeo, please refer to Vimeo's privacy policy.

Purposes of processing: Provision of a comprehensive and professional online offering including videos. User-friendly playback option without changing the website. Speed of video playback.
Legal bases: For the use of Vimeo, you may give us your consent according to Art. 6 para. 1 p. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting "External Media" or "Vimeo" in the cookie settings on our site. The evaluation by Vimeo is carried out according to Art. 6 para. 1 lit.f GDPR on the basis of Vimeo's legitimate interests in displaying personalized advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of user profiles, whereby you must contact Vimeo to exercise this right.
Storage duration: We store the anonymized data thus obtained for a maximum period of 14 months. After that, the data will be automatically deleted. Regarding the storage duration by Vimeo, we refer to their privacy policy.
Data recipient: Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA
Vimeo's privacy policy: https://vimeo.com/privacy
Third country transfer: Insofar as non-anonymized data is transferred to Vimeo Inc., data processing takes place in the USA.
Appropriate safeguards: We have concluded a Data Transfer Agreement (DTA) with Vimeo to protect your personal data. This contains the EU standard contractual clauses, which are considered appropriate safeguards according to Art. 46 para. 2 lit c) GDPR.

IV.13. Online Maps

Our website uses online map services provided by the respective provider. When calling up a page, your browser loads the required maps into its browser cache in order to display the map and navigation correctly.

For this purpose, the browser you use must establish a connection to the servers of the respective provider. This gives the provider knowledge that our website has been accessed via your IP address.

Purpose of processing: User-friendly graphical address data display and navigation
Legal basis and legitimate interests: The integration is based on our legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR) in a technically secure, maintenance-free and efficient use of online map services, their uniform presentation and taking into account possible license restrictions for their integration.

We use online map services from the following provider:

Google

Joint responsibility: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA together with the controller (see above)
Google's privacy information: https://policies.google.com/privacy
Agreement on Joint Responsibility according to Art. 26 GDPR: https://privacy.google.com/businesses/controllerterms/
Third country transfer: Insofar as non-anonymized data is transferred to Google LLC, data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Google LLC, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available at https://www.dataprivacyframework.gov/

IV.14. Social Media

Our website uses social buttons from various social networks. To increase the protection of your data when visiting our website, these buttons are not unrestricted as plugins, but are only integrated using an HTML link. This type of integration ensures that when you call up a page on our website that contains such buttons, no connection is yet established with the servers of the respective social network. If you click on the button, a new browser window opens and calls up the page of the social network. After entering your login data, you can then execute the provided function (e.g. "like" or "share").

By clicking on the respective plugin, you give us your personal consent to the data transfer to the respective social network. In particular, your IP address is transmitted to the respective social network. The legal basis for this is Art. 6 para. 1 lit. a GDPR. You have the right to revoke your consent at any time. The data processing up to the revocation remains lawful. The revocation only applies to the future.

The following social networks are used:

Pinterest

Data recipient: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"), Parent company: Pinterest Inc., 505 Brannan Street San Francisco, CA 94107, USA
Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy
Third country transfer: Insofar as non-anonymized data is transferred to Pinterest Inc., data processing takes place in the USA.

IV.15. Spam Protection

Google reCAPTCHA

Our website uses Google reCAPTCHA, a service of Google Ireland Ltd. (Google) to protect against misuse of our web forms and spam. The service monitors the behavior of the user when filling out the web form in order to distinguish humans from bots. If a bot is detected, the web form is blocked and misuse is prevented. For this purpose, a code embedded in the website, a so-called JavaScript, must be executed. Individual user inputs are not required. Cookies are not set for this purpose. Personal data is neither stored by the controller nor by Google. Google WebFonts are also loaded to execute the service.

Purposes of processing: Protection against misuse of web forms and spam
Legal bases: The processing is carried out according to Art. 6 para. 1 lit. f GDPR on the basis of our overriding legitimate interest in improving the security and functionality of our website.
Automated decision-making: Google determines a score to distinguish a human input from an abusive bot input. If the score does not reach a certain threshold, the request is considered a bot input and the web form is not submitted. If you are erroneously unable to submit the web form, there are several alternatives to contact the controller (e.g. letter, fax, email). There is no significant impairment associated with this.
Storage duration: We do not store any data in connection with this service.
Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google's privacy policy: https://policies.google.com/privacy
Third country transfer: Insofar as non-anonymized data is transferred to Google LLC, data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Google LLC, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available at https://www.dataprivacyframework.gov/

IV.16. Buyer Reviews

Google Customer Reviews

On our website, we use the "Google Customer Reviews" program from Google. This program gives us the opportunity to obtain customer reviews from users of our website. Here, after a purchase in our shop, you are asked if you would like to participate in an email survey from Google. If you give your consent according to Art. 6 para. 1 lit. a GDPR, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience in our online shop. The rating you submit will then be summarized with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. In addition, your rating is used for Google Seller Ratings. Google may also use cookies for this purpose.

Responsibilities: We are responsible for the integration of Google's software products and the execution of the evaluations, insofar as we have access to them. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA are responsible for their own data processing, over which we have no influence.
Purpose of processing: Product marketing, advertising, customer surveys
Legal basis: For the use of Google Customer Reviews, you may give us your consent according to Art. 6 para. 1 p. 1 lit. a GDPR, which you can revoke at any time with effect for the future. You can set your preferences for Google's use of cookies here: https://www.google.com/policies/privacy/ads/. Alternatively, you can object to the use of cookies by a third party for the purpose of interest-based advertising on the deactivation page of the Network Advertising Initiative (NAI).
Google's privacy policy: https://policies.google.com/privacy
Third country transfer: Insofar as non-anonymized data is transferred to Google LLC, data processing takes place in the USA.
Adequacy decision of the Commission: With regard to data transfers to Google LLC, we rely on the decision of 10.07.2023 for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. The list of companies participating in the EU-U.S. Data Privacy Framework is available at https://www.dataprivacyframework.gov/

IV.17. Opening a Customer Account

If you open a personal customer account with us for future orders, the following provisions apply:

Purpose of processing: Usage contract for the personal customer account.
Legal basis: Contract acc. to Art. 6 para. 1 lit. b GDPR. For the data you provide voluntarily, your consent applies acc. to Art. 6 para. 1 lit. a GDPR.
Obligation to provide: The mandatory information is derived from the registration form. Without this data, we cannot open an account for you.
Data recipient: The customer account is managed via our online shop. It is operated by our web host (see above).
Storage duration: Your data in the customer account will be stored for as long as the usage contract with us exists. Voluntary information will be stored until you revoke it. After that, they will be restricted in processing and stored for up to three years in order to be able to legally prove a previously given consent. This is done on the basis of our legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR) in the verifiability of data protection compliance.

IV.18. Ordering of Goods or Services

IV.18.a. General

Purpose of processing: Execution of your order.
Legal bases: Contract acc. to Art. 6 para. 1 lit. b GDPR. For the data you provide voluntarily, your consent applies acc. to Art. 6 para. 1 lit. a GDPR. For other processing, Art. 6 para. 1 lit. f GDPR applies.
Legitimate interests: Debt collection and enforcement; measures for business management and further development of services and products
Data recipients: Web host of the online shop (see above). Shipping and payment service providers. Lawyer, debt collection company, business consultant.

xentral

Purposes of processing: Professional ERP software
Service provider: Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg,https://xentral.com/en
Privacy policy of xentral: https://xentral.com/en/legal/privacy

IV.18.b. Payment Processing

Purpose of processing: Execution of the order. Processing of payment.
Legal basis: Contract acc. to Art. 6 para. 1 lit. b GDPR.
Obligation to provide: Depending on the chosen payment method, you must provide us or the payment service provider with the necessary payment data.
Data recipients: The payment service providers used are listed below:

PayPal

Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, https://www.paypal.com/uk
PayPal's privacy policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
Credit check: PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probaFirstity of payment default to decide on providing the respective payment method. The credit report may contain probaFirstity values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among others but not exclusively, are included in the calculation of the score values.

IV.18.c. Shipping Processing

Purpose of processing: Execution of the order. Delivery of goods. Notification of delivery. Shipment tracking.
Legal basis: Name, address and telephone number if applicable: Contract acc. to Art. 6 para. 1 lit. b GDPR. Disclosure of email address to shipping service providers: Consent acc. to Art. 6 para. 1 lit. a GDPR.
Obligation to provide: Without name, address and telephone number if applicable, the respective shipping company cannot deliver the goods to you. Without consent to disclose the email address to shipping service providers, you will not receive any information on shipment tracking from there.
Data recipients: The shipping service providers used are listed [[lastname_lastname_179]]:
DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn)

IV.18.d. Direct Marketing

Purpose of processing: Direct marketing, sales promotion
Legal basis: Our overriding legitimate interest acc. to Art. 6 para. 1 lit. f GDPR
Legitimate interests: Direct marketing, sales promotion
Data recipients: Agency, lettershop

IV.18.e. Legal Obligation

Purpose of processing: Fulfillment of legal obligations (e.g. information, notification, disclosure and retention obligations, payment of taxes and duties)
Legal bases: The respective legal regulation applies in conjunction with Art. 6 para. 1 lit. c GDPR.
Data recipients: Authorities, state institutions, lawyer, tax advisor, data protection officer if applicable

Insofar as named [[lastname_lastname_179]], the controller is subject to these special legal obligations, among others:

V. What data protection rights do I have?

As a data subject, you have the following rights:

Confirmation of data processing: You have the right to obtain confirmation from us as to whether your personal data is being processed. The requirements for this can be found in Art. 15 GDPR;
Access: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 GDPR;
Rectification: You have the right to request the immediate correction of inaccurate personal data concerning you. The requirements for this can be found in Art. 16 GDPR;
Erasure: You have the right to request the immediate deletion of personal data concerning you. The requirements for this can be found in Art. 17 GDPR;
Restriction of processing: You have the right to request the restriction of processing of your personal data. The requirements for this can be found in Art. 18 GDPR;
Data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted by us to another controller. The requirements for this can be found in Art. 20 GDPR;
Withdrawal of consent: You have the right to withdraw your consent at any time if the processing is based on Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR. The data processing up to the withdrawal remains lawful. The withdrawal only applies to the future. The requirements for this can be found in Art. 7 (3) GDPR;
Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The requirements for this can be found in Art. 77 GDPR. You can contact the supervisory authority responsible for the controller or the one in your country or federal state. A list of all supervisory authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on our overriding legitimate interest (Art. 6 (1) lit. e or f GDPR), with effect for the future; this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

Right to object to processing of data for direct marketing and product evaluations

We collect and process your personal data to conduct direct marketing. You have the right to object at any time to processing of personal data concerning you for such direct marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.
In individual cases, we process and use your personal data to send you an evaluation request and/or product recommendation by email that exclusively relates to your purchase, conclusion and/or other similar transactions. Furthermore, we may also use your email address and/or postal address in this context to send you product recommendations by email and/or mail for similar goods and/or services offered by us. You receive these evaluation requests and product recommendations from us regardless of whether you have subscribed to a newsletter.
Exercise of objection: You can object to the data processing for direct marketing purposes at any time by letter to raumvonwert GmbH, Gwinnerstraße 46, 60388 Frankfurt am Main or by email to [[email_address_placeholder_031]] and/or at the end of each advertising email with effect for the future, without incurring any costs other than the transmission costs according to the basic rates. Your right to object automatically applies to any possible profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes with immediate effect.

VI. How long is my data stored?

Unless otherwise stated above, the following criteria apply to determine the storage duration:

For consent according to Art. 6 para. 1 lit. a GDPR, the data is stored for as long as the data subject withdraws their consent.
For pre-contractual and contractual purposes according to Art. 6 para. 1 lit. b GDPR, storage is carried out beyond the end of the contract until the expiry of relevant limitation periods (e.g. 3 years according to § 195 BGB) from the concluded contract.
For our overriding legitimate interest according to Art. 6 para. 1 lit. f GDPR, the data is stored for as long as the data subject exercises their right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defense of legal claims.
For direct marketing according to Art. 6 para. 1 lit. f GDPR, the data is stored for as long as the data subject exercises their right to object according to Art. 21 para. 2, 3 GDPR.
For retention obligations incumbent upon us, the relevant documents are retained until the expiry of the relevant statutory provisions (e.g. 10 or 6 years according to § 147 AO and § 257 HGB).
We store prospect data for as long as it can be assumed that there is still an interest in cooperation with us. If we assume that there is no longer any interest, we delete this data.
We store business party data for as long as it can be assumed that there is still an interest in cooperation with us. If we assume that there is no longer any interest, we delete this data at the earliest 3 years after the end of the last business relationship, unless there are legal retention obligations.
We store supplier data until the supplier objects and delete it at the earliest 3 years after the end of the last business relationship, unless there are legal retention obligations.

Otherwise, personal data is only stored for as long as there is a legal basis for storage.

VII. Source of data

We process personal data that we have received from you or the recipients of personal data.

VIII. Obligation to provide data

In the course of providing our contractually or legally assumed obligations, you as the data subject may be obliged to provide our company with personal data that is necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will usually have to refuse the conclusion of the contract or will no longer be able to carry out an existing contract and may have to terminate it.

Privacy Information for our Facebook Profile

I. Scope

With this document, the controllers named [[lastname_lastname_179]] inform you according to Art. 13 GDPR, § 32 BDSG about the processing of personal data when visiting and interacting on our profile at https://www.facebook.com/klapster.de. [[firstname_placeholder_025]] privacy information is valid since September 2024 and is published at https://www.klapster.de/en/datenschutz. Due to the further development of the platform or due to changed legal or official requirements, it may be necessary to update this information. The amended version will be made available to you at this point.

II. Definitions

Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
BDSG: Federal Data Protection Act, available at https://dejure.org/gesetze/BDSG
Cookies: These are information that is often stored in databases on your device (e.g. internet browser). Each type of "cookie" may contain personal data. In many cases, however, the data is pseudonymized.
GDPR: Regulation (EU) 2016/679 (General Data Protection Regulation), available at https://dejure.org/gesetze/DSGVO
Personal data: Any information relating to personal or material circumstances of an identified or identifiable natural person. [[firstname_placeholder_025]] includes, for example, profile data such as your name, username, email address and profile picture, usage data such as information about the time of your visit to our social media channels, and interaction data such as your comments, your recommendations, comments and sharing of posts, as well as other data generated when visiting our social media channels in connection with your person.
Platform: All services on www.facebook.com
Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (Art. 4 No. 7 GDPR).
Web storage: [[firstname_placeholder_025]] is information that, like cookies, is stored in databases on your device.

III. Who is responsible for data processing?

a) Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (for users who have their habitual residence in the European Economic Area or the United Kingdom)
b) Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (for all other users)

("Facebook" referred to)

Facebook is responsible for data processing insofar as it concerns the technical and administrative operation of the platform and Facebook processes the personal data also or exclusively for its own purposes (such as for the technical and administrative provision of its own services including the storage and evaluation of user data generated in the process).

raumvonwert GmbH, Gwinnerstraße 46, 60388 Frankfurt am Main. The complete imprint is available at https://www.klapster.de/en/impressum ("we" or "us" referred to)

We are responsible for data processing insofar as we process personal data for our own purposes (such as for providing social media channels and evaluating the use of content offered there, including user and interaction data generated in the process).

Facebook and we jointly Facebook and we are jointly responsible for data evaluation for statistical purposes. See below under VIII for details.

IV. Contact details of the data protection officer

You can contact Facebook's data protection officer via the following provided form: https://www.facebook.com/help/contact/540977946302970
We have not appointed a data protection officer for our company as there is no legal obligation to do so.

V. Data processing by Facebook

Facebook is operated by Meta Platforms Ireland Ltd. or Meta Platforms, Inc. We maintain a company profile there to provide our company information and interact with users. Every time our profile is accessed on the platform, personal data is processed by Facebook, regardless of whether you are logged in with your personal Facebook account and regardless of whether you have accepted cookies. Regarding the processing of personal data by Facebook, we refer to Facebook's privacy policy, available at https://www.facebook.com/privacy/policy/

Facebook also provides information on the legal bases for data processing there.

VI. Cookies and Web storage

Facebook uses so-called cookies and web storage. We have no influence on the scope and content. We therefore refer you completely to Facebook's cookie policy, available at https://www.facebook.com/privacy/policies/cookies

VII. Data processing by us

We process your personal data for the purposes of providing and using our profile on the platform, in particular for:

Presentation of our company and implementation of marketing activities,
Interaction between us and users of the platform, e.g. via direct messages, commenting, recommending or sharing content or to respond to your inquiries or concerns,
Analysis of user behavior and measurement of the reach of our content offered on the platform, e.g. to improve our information and services.

The legal basis for our company presentation and user interaction with registered Facebook users is the Facebook Terms of Use (Art. 6 (1) S. 1 lit. b GDPR). Regarding the analysis of user behavior, we refer to our predominantly legitimate interests (Art. 6 (1) S. 1 lit. f GDPR), which in particular consist of evaluating the profiles of our users as well as the reach of our social media channels, with the aim of optimizing our content offered there for you.

VIII. Data processing in joint responsibility

Together with Facebook, we collect statistical data in aggregated form that provides us with insights into the use of our company profile by users and the interaction with the content provided there (so-called "Insights data"). Insights data typically includes, among other things, the following information:

Number of interactions (e.g. via "Like" button, commenting or sharing posts)
Number of comments
Duration of video views
Visitor metrics (e.g. page views)
Demographic data of visitors (e.g. age, gender, location, field of activity, industry)
Reach (describes how many people are reached by a particular post [in percent/absolute numbers])
Engagement Rate (indicates how many people who see a social media post actually react to it with likes, comments or shares)
First Time Impression Ratio (Impressions generally describe the number of views of a post; this determines how widely a post was distributed. "First Time Impression Ratio" describes the proportion of first-time impressions, i.e. the number of newly reached persons).

We process Insights data exclusively for statistical analysis of user behavior with the aim of learning more about the users of the platform and aligning our content as best as possible with the needs and interests of our users. We do not have access to the underlying usage data. Therefore, no conclusions about your person can be drawn from Insights data. Also, a link between your data and your user account with the respective service provider is not possible. The legal basis for the associated processing of your Insights data is the protection of our legitimate interests (Art. 6 (1) S. 1 lit. f GDPR), which in particular consist of offering our users optimized content on our social media channels and communicating with you in the best possible way.

The agreement on joint responsibility acc. to Art. 26 (1) GDPR for Page Insights is available at https://de-de.facebook.com/legal/terms/page_controller_addendum

The agreement on joint responsibility acc. to Art. 26 (1) GDPR for Meta Business Tools is available at: https://www.facebook.com/legal/controller_addendum

IX. To whom is the data disclosed?

Data disclosure by Facebook

Facebook describes the recipients of the data in its privacy policy (see above).

Meta Platforms Ireland Ltd. also transfers data to its parent company in the USA, among other things. The adequacy decision of the EU Commission of 10.07.2023 pursuant to Art. 45 GDPR regarding the EU-USA Data Privacy Framework applies. The certification of Meta Platforms, Inc. can be verified at https://www.dataprivacyframework.gov/s/participant-search

Data disclosure by us

We disclose the personal data we have collected via the platform internally within the company to the departments responsible for this. If we use external service providers to manage the platform (e.g. web agency, social media management, etc.), we have concluded a contract for order processing with these service providers in accordance with Art. 28 GDPR to protect your data.

Personal data is also disclosed to third parties or made public in the following cases:

Art. 6 (1) S. 1 lit. a GDPR: You have given your consent to the data disclosure. You can revoke this at any time with effect for the future. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.
Art. 6 (1) S. 1 lit. c GDPR: We are legally or statutorily obliged to do so.
Art. 6 (1) S. 1 lit. f GDPR: The processing is necessary for the purposes of the legitimate interests pursued by us, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

X. Your data subject rights

Your rights towards Facebook

Facebook informs you about your rights and how you can exercise them in its privacy policy (see above). You can contact Facebook directly regarding your rights via this contact form. If you have a Facebook account, you can partly decide yourself in your privacy settings how your data is processed and viewed.

Your rights towards us

We inform you [[lastname_lastname_179]] about your rights towards us:

Confirmation of data processing: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. The requirements for this can be found in Art. 15 GDPR;
Access: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 GDPR;
Rectification: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. The requirements for this can be found in Art. 16 GDPR;
Erasure: You have the right to obtain the erasure of personal data concerning you without undue delay. The requirements for this can be found in Art. 17 GDPR;
Restriction of processing: You have the right to obtain restriction of processing of your personal data. The requirements for this can be found in Art. 18 GDPR;
Data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller by us. The requirements for this can be found in Art. 20 GDPR;
Withdrawal of consent: You have the right to withdraw your consent at any time if the processing is based on Art. 6 (1) S. 1 lit. a or Art. 9 (2) lit. a GDPR. The data processing up to the withdrawal remains lawful. The withdrawal only applies to the future. The requirements for this can be found in Art. 7 (3) GDPR;
Complaint: You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data relating to you infringes the GDPR. The requirements for this can be found in Art. 77 GDPR. You can contact the supervisory authority responsible for the controller or the one in your country or federal state. A list of all supervisory authorities can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our overriding legitimate interest (Art. 6 (1) S. 1 lit. e or f GDPR), with effect for the future; this also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

XI. How long is my data stored?

Unless otherwise stated above, the following criteria apply to determine the storage duration with us:

For consent according to Art. 6 para. 1 lit. a GDPR, the data is stored until you revoke your consent.
For pre-contractual and contractual purposes according to Art. 6 para. 1 lit. b GDPR, the data is stored until the termination of the contract.
For our overriding legitimate interest according to Art. 6 para. 1 lit. f GDPR, the data is stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
For direct marketing according to Art. 6 para. 1 lit. f GDPR, the data is stored until you exercise your right to object according to Art. 21 para. 2, 3 GDPR.

Otherwise, personal data is only stored for as long as there is a legal basis for storage.

XII. What is the source of the data?

The controllers collect and process data that you have provided yourself.

Privacy Information for our Instagram Profile

I. Scope

With this document, the controllers named below inform you according to Art. 13 GDPR, § 32 BDSG about the processing of personal data when visiting and interacting on our profile at https://www.instagram.com/klapster_dieklapptreppe/. This privacy information is valid since September 2024 and is published at https://www.klapster.de/en/datenschutz. Due to the further development of the platform or due to changed legal or official requirements, it may be necessary to update this information. The amended version will be made available to you at this point.

II. Definitions

Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
BDSG: Federal Data Protection Act, available at https://dejure.org/gesetze/BDSG
Cookies: These are information that is often stored in databases on your device (e.g. internet browser). Each type of "cookie" may contain personal data. In many cases, however, the data is pseudonymized.
GDPR: Regulation (EU) 2016/679 (General Data Protection Regulation), available at https://dejure.org/gesetze/DSGVO
Personal data: Any information relating to personal or material circumstances of an identified or identifiable natural person. This includes, for example, profile data such as your name, username, email address and profile picture, usage data such as information about the time of your visit to our social media channels, and interaction data such as your comments, your recommendations, comments and sharing of posts, as well as other data generated when visiting our social media channels in connection with your person.
Platform: All services on www.instagram.com
Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (Art. 4 No. 7 GDPR).
Web storage: This is information that, like cookies, is stored in databases on your device.

III. Who is responsible for data processing?

a) Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (for users who have their habitual residence in the European Economic Area or the United Kingdom)
b) Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (for all other users)

("Instagram" referred to)

Instagram is responsible for data processing insofar as it concerns the technical and administrative operation of the platform and Instagram processes the personal data also or exclusively for its own purposes (such as for the technical and administrative provision of its own services including the storage and evaluation of user data generated in the process).

raumvonwert GmbH, Gwinnerstraße 46, 60388 Frankfurt am Main. The complete imprint is available at: https://www.klapster.de/en/impressum ("we" or "us" referred to)

We are responsible for data processing insofar as we process personal data for our own purposes (such as for providing social media channels and evaluating the use of content offered there, including user and interaction data generated in the process).

Instagram and we jointly Instagram and we are jointly responsible for data evaluation for statistical purposes. See below under VIII for details.

IV. Contact details of the data protection officer

You can contact Instagram's data protection officer via the following provided form: https://www.facebook.com/help/contact/540977946302970
We have not appointed a data protection officer for our company as there is no legal obligation to do so.

V. Data processing by Instagram

Instagram is operated by Meta Platforms Ireland Ltd. or Meta Platforms, Inc. We maintain a company profile there to provide our company information and interact with users. Every time our profile is accessed on the platform, personal data is processed by Instagram, regardless of whether you are logged in with your personal Instagram account and regardless of whether you have accepted cookies. Regarding the processing of personal data by Instagram, we refer to Instagram's privacy policy, available at https://www.facebook.com/privacy/policy/

Instagram also provides information on the legal bases for data processing there.

VI. Cookies and Web storage

Instagram uses so-called cookies and web storage. We have no influence on the scope and content. We therefore refer you completely to the information provided by Instagram, available at https://www.facebook.com/privacy/policies/cookies

VII. Data processing by us

We process your personal data for the purposes of providing and using our profile on the platform, in particular for:

Presentation of our company and implementation of marketing activities,
Interaction between us and users of the platform, e.g. via direct messages, commenting, recommending or sharing content or to respond to your inquiries or concerns,
Analysis of user behavior and measurement of the reach of our content offered on the platform, e.g. to improve our information and services.

The legal basis for our company presentation and user interaction with registered Instagram users is the Instagram Terms of Use (Art. 6 (1) S. 1 lit. b GDPR). Regarding the analysis of user behavior, we refer to our predominantly legitimate interests (Art. 6 (1) S. 1 lit. f GDPR), which in particular consist of evaluating the profiles of our users as well as the reach of our social media channels, with the aim of optimizing our content offered there for you.

VIII. Data processing in joint responsibility

Together with Instagram, we collect statistical data in aggregated form that provides us with insights into the use of our company profile by users and the interaction with the content provided there (so-called "Insights data"). Insights data typically includes, among other things, the following information:

Number of interactions (e.g. via "Like" button, commenting or sharing posts)
Number of comments
Duration of video views
Visitor metrics (e.g. page views)
Demographic data of visitors (e.g. age, gender, location, field of activity, industry)
Reach (describes how many people are reached by a particular post [in percent/absolute numbers])
Engagement Rate (indicates how many people who see a social media post actually react to it with likes, comments or shares)
First Time Impression Ratio (Impressions generally describe the number of views of a post; this determines how widely a post was distributed. "First Time Impression Ratio" describes the proportion of first-time impressions, i.e. the number of newly reached persons).

Further information on the collected Insights data is provided by Instagram, available at: https://www.facebook.com/business/help/1667855400105460?id=352983927780695

We process Insights data exclusively for statistical analysis of user behavior with the aim of learning more about the users of the platform and aligning our content as best as possible with the needs and interests of our users. We do not have access to the underlying usage data. Therefore, no conclusions about your person can be drawn from Insights data. Also, a link between your data and your user account with the respective service provider is not possible. The legal basis for the associated processing of your Insights data is the protection of our legitimate interests (Art. 6 (1) S. 1 lit. f GDPR), which in particular consist of offering our users optimized content on our social media channels and communicating with you in the best possible way.

The agreement on joint responsibility acc. to Art. 26 (1) GDPR for Page Insights is available at https://de-de.facebook.com/legal/terms/page_controller_addendum

The agreement on joint responsibility acc. to Art. 26 (1) GDPR for Meta Business Tools is available at: https://www.facebook.com/legal/controller_addendum

IX. To whom is the data disclosed?

Data disclosure by Instagram

Instagram describes the recipients of the data in its privacy policy (see above).

Meta Platforms Ireland Ltd. also transfers data to its parent company in the USA, among other things. The adequacy decision of the EU Commission of 10.07.2023 pursuant to Art. 45 GDPR regarding the EU-USA Data Privacy Framework applies. The certification of Meta Platforms, Inc. can be verified at https://www.dataprivacyframework.gov/s/participant-search

Data disclosure by us

We disclose the personal data we have collected via the platform internally within the company to the departments responsible for this. If we use external service providers to manage the platform (e.g. web agency, social media management, etc.), we have concluded a contract for order processing with these service providers in accordance with Art. 28 GDPR to protect your data.

Personal data is also disclosed to third parties or made public in the following cases:

Art. 6 (1) S. 1 lit. a GDPR: You have given your consent to the data disclosure. You can revoke this at any time with effect for the future. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.
Art. 6 (1) S. 1 lit. c GDPR: We are legally or statutorily obliged to do so.
Art. 6 (1) S. 1 lit. f GDPR: The processing is necessary for the purposes of the legitimate interests pursued by us, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

X. Your data subject rights

Your rights towards Instagram

Instagram informs you about your rights and how you can exercise them in its privacy policy (see above). You can contact Instagram directly regarding your rights via this contact form. If you have an Instagram account, you can partly decide yourself in your privacy settings how your data is processed and viewed.

Your rights towards us

We inform you below about your rights towards us:

Confirmation of data processing: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. The requirements for this can be found in Art. 15 GDPR;
Access: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 GDPR;
Rectification: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. The requirements for this can be found in Art. 16 GDPR;
Erasure: You have the right to obtain the erasure of personal data concerning you without undue delay. The requirements for this can be found in Art. 17 GDPR;
Restriction of processing: You have the right to obtain restriction of processing of your personal data. The requirements for this can be found in Art. 18 GDPR;
Data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller by us. The requirements for this can be found in Art. 20 GDPR;
Withdrawal of consent: You have the right to withdraw your consent at any time if the processing is based on Art. 6 (1) S. 1 lit. a or Art. 9 (2) lit. a GDPR. The data processing up to the withdrawal remains lawful. The withdrawal only applies to the future. The requirements for this can be found in Art. 7 (3) GDPR;
Complaint: You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data relating to you infringes the GDPR. The requirements for this can be found in Art. 77 GDPR. You can contact the supervisory authority responsible for the controller or the one in your country or federal state. A list of all supervisory authorities is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our overriding legitimate interest (Art. 6 (1) S. 1 lit. e or f GDPR), with effect for the future; this also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

XI. How long is my data stored?

Unless otherwise stated above, the following criteria apply to determine the storage duration with us:

For consent according to Art. 6 para. 1 lit. a GDPR, the data is stored until you revoke your consent.
For pre-contractual and contractual purposes according to Art. 6 para. 1 lit. b GDPR, the data is stored until the termination of the contract.
For our overriding legitimate interest according to Art. 6 para. 1 lit. f GDPR, the data is stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
For direct marketing according to Art. 6 para. 1 lit. f GDPR, the data is stored until you exercise your right to object according to Art. 21 para. 2, 3 GDPR.

Otherwise, personal data is only stored for as long as there is a legal basis for storage.

XII. What is the source of the data?

The controllers collect and process data that you have provided yourself.

Privacy Information for our Pinterest Profile

I. Scope

With this document, the controllers named below inform you according to Art. 13 GDPR, § 32 BDSG about the processing of personal data when visiting and interacting on our profile at https://de.pinterest.com/klapsterfoldingstairs/. This privacy information is valid since September 2024 and is published at https://www.klapster.de/en/datenschutz. Due to the further development of the platform or due to changed legal or official requirements, it may be necessary to update this information. The amended version will be made available to you at this point.

II. Definitions

Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
BDSG: Federal Data Protection Act, available at https://dejure.org/gesetze/BDSG
Cookies: These are information that is often stored in databases on your device (e.g. internet browser). Each type of "cookie" may contain personal data. In many cases, however, the data is pseudonymized.
GDPR: Regulation (EU) 2016/679 (General Data Protection Regulation), available at https://dejure.org/gesetze/DSGVO
Personal data: Any information relating to personal or material circumstances of an identified or identifiable natural person. This includes, for example, profile data such as your name, username, email address and profile picture, usage data such as information about the time of your visit to our social media channels, and interaction data such as your comments, your recommendations, comments and sharing of posts, as well as other data generated when visiting our social media channels in connection with your person.
Platform: All services on https://www.pinterest.com/
Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (Art. 4 No. 7 GDPR).
Web storage: This is information that, like cookies, is stored in databases on your device.

III. Who is responsible for data processing?

a) Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (for users who have their habitual residence in the European Economic Area or the United Kingdom)
b) Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA (for all other users)

("Pinterest" referred to)

Pinterest Europe Ltd. and Pinterest Inc. are jointly responsible for data processing insofar as it concerns the technical and administrative operation of the platform and Pinterest processes the personal data also or exclusively for its own purposes (such as for the technical and administrative provision of its own services including the storage and evaluation of user data generated in the process).

raumvonwert GmbH, Gwinnerstraße 46, 60388 Frankfurt am Main. The complete imprint is available at https://www.klapster.de/en/impressum("we" or "us" referred to)

We are responsible for data processing insofar as we process personal data for our own purposes (such as for providing social media channels and evaluating the use of content offered there, including user and interaction data generated in the process).

Pinterest and we jointly Pinterest and we are jointly responsible for data evaluation for statistical purposes. See below under VIII for details.

IV. Contact details of the data protection officer

You can contact Pinterest's data protection officer via the following provided form: https://help.pinterest.com/en/data-protection-officer-contact-form
We have not appointed a data protection officer for our company as there is no legal obligation to do so.

V. Data processing by Pinterest

Pinterest is operated by Meta Platforms Ireland Ltd. or Meta Platforms, Inc. We maintain a company profile there to provide our company information and interact with users. Every time our profile is accessed on the platform, personal data is processed by Pinterest, regardless of whether you are logged in with your personal Pinterest account and regardless of whether you have accepted cookies. Regarding the processing of personal data by Pinterest, we refer to Pinterest's privacy policy, available at https://policy.pinterest.com/en/privacy-policy

Pinterest also provides information on the legal bases for data processing there.

VI. Cookies and Web storage

Pinterest uses so-called cookies and web storage. We have no influence on the scope and content. We therefore refer you completely to Pinterest's cookie policy, available at https://policy.pinterest.com/cookies

VII. Data processing by us

We process your personal data for the purposes of providing and using our profile on the platform, in particular for:

Presentation of our company and implementation of marketing activities,
Interaction between us and users of the platform, e.g. via direct messages, commenting, recommending or sharing content or to respond to your inquiries or concerns,
Analysis of user behavior and measurement of the reach of our content offered on the platform, e.g. to improve our information and services.

The legal basis for our company presentation and user interaction with registered Pinterest users is the Pinterest Terms of Service (Art. 6 (1) S. 1 lit. b GDPR). Regarding the analysis of user behavior, we refer to our predominantly legitimate interests (Art. 6 (1) S. 1 lit. f GDPR), which in particular consist of evaluating the profiles of our users as well as the reach of our social media channels, with the aim of optimizing our content offered there for you.

VIII. Data processing in joint responsibility

Together with Pinterest, we collect statistical data in aggregated form that provides us with insights into the use of our company profile by users and the interaction with the content provided there (so-called "Insights data"). Insights data typically includes, among other things, the following information:

Number of interactions (e.g. via "Like" button, commenting or sharing posts)
Number of comments
Duration of video views
Visitor metrics (e.g. page views)
Demographic data of visitors (e.g. age, gender, location, field of activity, industry)
Reach (describes how many people are reached by a particular post [in percent/absolute numbers])
Engagement Rate (indicates how many people who see a social media post actually react to it with likes, comments or shares)
First Time Impression Ratio (Impressions generally describe the number of views of a post; this determines how widely a post was distributed. "First Time Impression Ratio" describes the proportion of first-time impressions, i.e. the number of newly reached persons).

We process Insights data exclusively for statistical analysis of user behavior with the aim of learning more about the users of the platform and aligning our content as best as possible with the needs and interests of our users. We do not have access to the underlying usage data. Therefore, no conclusions about your person can be drawn from Insights data. Also, a link between your data and your user account with the respective service provider is not possible. The legal basis for the associated processing of your Insights data is the protection of our legitimate interests (Art. 6 (1) S. 1 lit. f GDPR), which in particular consist of offering our users optimized content on our social media channels and communicating with you in the best possible way.

The agreement on joint responsibility acc. to Art. 26 (1) GDPR for advertising data is available at https://business.pinterest.com/en/pinterest-advertising-services-agreement/germany/

The agreement on joint responsibility acc. to Art. 26 (1) GDPR for Meta Business Tools is available at:

IX. To whom is the data disclosed?

Data disclosure by Pinterest

Pinterest describes the recipients of the data in its privacy policy (see above).

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland also transfers data to its parent company in the USA, among other things. In doing so, Pinterest Europe Ltd. relies on the EU Standard Contractual Clauses, which are considered appropriate safeguards according to Art. 46 (2) c GDPR for the transfer of data outside the EU, the EEA or one of the countries approved by the European Commission as providing "adequate" data protection.

Data disclosure by us

We disclose the personal data we have collected via the platform internally within the company to the departments responsible for this. If we use external service providers to manage the platform (e.g. web agency, social media management, etc.), we have concluded a contract for order processing with these service providers in accordance with Art. 28 GDPR to protect your data.

Personal data is also disclosed to third parties or made public in the following cases:

Art. 6 (1) S. 1 lit. a GDPR: You have given your consent to the data disclosure. You can revoke this at any time with effect for the future. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.
Art. 6 (1) S. 1 lit. c GDPR: We are legally or statutorily obliged to do so.
Art. 6 (1) S. 1 lit. f GDPR: The processing is necessary for the purposes of the legitimate interests pursued by us, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

X. Your data subject rights

Your rights towards Pinterest

Pinterest informs you about your rights and how you can exercise them in its privacy policy (see above). You can contact Pinterest directly regarding your rights via this contact form. If you have a Pinterest account, you can partly decide yourself in your privacy settings how your data is processed and viewed.

Your rights towards us

We inform you below about your rights towards us:

Confirmation of data processing: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. The requirements for this can be found in Art. 15 GDPR;
Access: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 GDPR;
Rectification: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. The requirements for this can be found in Art. 16 GDPR;
Erasure: You have the right to obtain the erasure of personal data concerning you without undue delay. The requirements for this can be found in Art. 17 GDPR;
Restriction of processing: You have the right to obtain restriction of processing of your personal data. The requirements for this can be found in Art. 18 GDPR;
Data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller by us. The requirements for this can be found in Art. 20 GDPR;
Withdrawal of consent: You have the right to withdraw your consent at any time if the processing is based on Art. 6 (1) S. 1 lit. a or Art. 9 (2) lit. a GDPR. The data processing up to the withdrawal remains lawful. The withdrawal only applies to the future. The requirements for this can be found in Art. 7 (3) GDPR;
Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our overriding legitimate interest (Art. 6 (1) S. 1 lit. e or f GDPR), with effect for the future; this also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

XI. How long is my data stored?

Unless otherwise stated above, the following criteria apply to determine the storage duration with us:

For consent according to Art. 6 para. 1 lit. a GDPR, the data is stored for as long as you revoke your consent.
For pre-contractual and contractual purposes according to Art. 6 para. 1 lit. b GDPR, the data is stored until the termination of the contract.
For our overriding legitimate interest according to Art. 6 para. 1 lit. f GDPR, the data is stored for as long as you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
For direct marketing according to Art. 6 para. 1 lit. f GDPR, the data is stored for as long as you exercise your right to object according to Art. 21 para. 2, 3 GDPR.

Otherwise, personal data is only stored for as long as there is a legal basis for storage.

XII. What is the source of the data?

The controllers collect and process data that you have provided yourself.

Privacy Information for our YouTube Channel

I. Scop

With this document, the controllers named below inform you according to Art. 13 GDPR, § 32 BDSG about the processing of personal data when visiting and interacting on the platform https://www.youtube.com/@klapster8359/videos. This privacy information is valid since September 2024 and is published at https://www.klapster.de/en/datenschutz. Due to the further development of the platform or changes in legal or regulatory requirements, it may be necessary to update this information. The amended version will be made available to you at this point.

II. Definitions

Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
BDSG: Federal Data Protection Act, available at https://dejure.org/gesetze/BDSG
Cookies: This is information that is often stored in databases on your device (e.g. internet browser). Each type of "cookie" may contain personal data. In many cases, however, the data is pseudonymized.
GDPR: Regulation (EU) 2016/679 (General Data Protection Regulation), available at https://dejure.org/gesetze/DSGVO
Personal data: Any information relating to personal or material circumstances of an identified or identifiable natural person. This includes, for example, profile data such as your name, username, email address and profile picture, usage data such as information about the time of your visit to our social media channels, and interaction data such as your comments, your recommendations, comments and sharing of posts, as well as other data generated when visiting our social media channels in connection with your person.
Platform: All services on www.youtube.com
Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (Art. 4 No. 7 GDPR).
Web storage: This is information that, like cookies, is stored in databases on your device.

III. Who is responsible for data processing?

a) Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users who have their habitual residence in the European Economic Area or the United Kingdom)
b) Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (for all other users)

("Google" or "YouTube" referred to)

YouTube is responsible for data processing insofar as it concerns the technical and administrative operation of the platform and YouTube processes the personal data also or exclusively for its own purposes (such as for the technical and administrative provision of its own services including the storage and evaluation of user data generated in the process).

raumvonwert GmbH, Gwinnerstraße 46, 60388 Frankfurt am Main. The complete imprint is available at: https://www.klapster.de/en/impressum ("we" or "us" referred to)

We are responsible for data processing insofar as we process personal data for our own purposes (such as for providing videos and evaluating the use of content offered there, including user and interaction data generated in the process).

IV. Contact details of the data protection officer

You can contact YouTube's data protection officer via the following provided form: https://support.google.com/policies/contact/general_privacy_form
We have not appointed a data protection officer for our company as there is no legal obligation to do so.

V. Data processing by YouTube

YouTube is operated by Google Ireland Limited or Google LLC. We maintain a channel there to provide our company videos and interact with users. Every time our channel is accessed on the platform, personal data is processed by YouTube, regardless of whether you are logged in with your personal Google account and regardless of whether you have accepted cookies. Regarding the processing of personal data by YouTube, we refer to YouTube's privacy policy, available at https://policies.google.com/privacy?hl=en&gl=en

YouTube provides a separate privacy policy for children, available at: https://kids.youtube.com/t/privacynotice

You can make your own settings in the privacy settings, available at: https://support.google.com/youtube/answer/9315727?hl=en&ref_topic=9386940

You can make your own settings in the privacy settings for all Google products, available at: https://support.google.com/policies/answer/9581826?

VI. Cookies and Web storage

YouTube uses so-called cookies and web storage. We have no influence on the scope and content. We therefore refer you completely to the information provided by YouTube, available at https://policies.google.com/technologies/cookies?hl=en

VII. Data processing by us

We process your personal data for the purposes of providing and using our profile on the platform, in particular for:

Presentation of our company and implementation of marketing activities,
Interaction between us and users of the platform, e.g. via direct messages, commenting, recommending or sharing content or to respond to your inquiries or concerns,
Analysis of user behavior and measurement of the reach of our content offered on the platform, e.g. to improve our information and services.

The legal basis for operating our channel and user interaction with registered Google users is the YouTube Terms of Service (Art. 6 (1) S. 1 lit. b GDPR). Regarding the analysis of user behavior, we refer to our predominantly legitimate interests (Art. 6 (1) S. 1 lit. f GDPR), which in particular consist of evaluating the profiles of our users as well as the reach of our social media channels, with the aim of optimizing our content offered there for you.

VIII. To whom is the data disclosed?

Data disclosure by YouTube

YouTube describes the recipients of the data in its privacy policy, available at https://policies.google.com/privacy?hl=en&gl=en.

Data disclosure by us

We disclose the personal data we have collected via the platform internally within the company to the departments responsible for this. If we use external service providers to manage the platform (e.g. web agency, social media management, etc.), we have concluded a contract for order processing with these service providers in accordance with Art. 28 GDPR to protect your data.

In addition, we use YouTube as a processor and have concluded a data processing agreement with YouTube in accordance with Art. 28 GDPR to protect your personal data. There, YouTube relies on the EU Standard Contractual Clauses for data transmission outside the member states of the European Union, which are considered appropriate safeguards under Art. 46 paragraph 2 c) GDPR.

Personal data is also disclosed to third parties or made public in the following cases:

Art. 6 (1) S. 1 lit. a GDPR: You have given your consent to the data disclosure. You can revoke this at any time with effect for the future. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.
Art. 6 (1) S. 1 lit. c GDPR: We are legally or statutorily obliged to do so.
Art. 6 (1) S. 1 lit. f GDPR: The processing is necessary for the purposes of the legitimate interests pursued by us, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

IX. Your data subject rights

Your rights towards YouTube

YouTube informs you about your rights and how you can exercise them in its privacy policy. You can contact YouTube directly regarding your rights via this contact form. If you have a Google account, you can partly decide yourself in your privacy settings how your data is processed and viewed.

Your rights towards us

We inform you below about your rights towards us:

Confirmation of data processing: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. The requirements for this can be found in Art. 15 GDPR;
Access: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 GDPR;
Rectification: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. The requirements for this can be found in Art. 16 GDPR;
Erasure: You have the right to obtain the erasure of personal data concerning you without undue delay. The requirements for this can be found in Art. 17 GDPR;
Restriction of processing: You have the right to obtain restriction of processing of your personal data. The requirements for this can be found in Art. 18 GDPR;
Data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller by us. The requirements for this can be found in Art. 20 GDPR;
Withdrawal of consent: You have the right to withdraw your consent at any time if the processing is based on Art. 6 (1) S. 1 lit. a or Art. 9 (2) lit. a GDPR. The data processing up to the withdrawal remains lawful. The withdrawal only applies to the future. The requirements for this can be found in Art. 7 (3) GDPR;
Complaint: You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data relating to you infringes the GDPR. The requirements for this can be found in Art. 77 GDPR. You can contact the supervisory authority responsible for the controller or the one in your country or federal state. A list of all supervisory authorities is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our overriding legitimate interest (Art. 6 (1) S. 1 lit. e or f GDPR), with effect for the future; this also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

X. How long is my data stored?

Unless otherwise stated above, the following criteria apply to determine the storage duration with us:

For consent according to Art. 6 para. 1 lit. a GDPR, the data is stored until you revoke your consent.
For pre-contractual and contractual purposes according to Art. 6 para. 1 lit. b GDPR, the data is stored until the termination of the contract.
For our overriding legitimate interest according to Art. 6 para. 1 lit. f GDPR, the data is stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
For direct marketing according to Art. 6 para. 1 lit. f GDPR, the data is stored until you exercise your right to object according to Art. 21 para. 2, 3 GDPR.

Otherwise, personal data is only stored for as long as there is a legal basis for storage.

XI. What is the source of the data?

The controllers collect and process data that you have provided yourself.

FAQ

Case Studies

About us & Service

Informations