Data protection

Table of contents

I. General

(1) Below we inform you about the collection of personal data when using our website.

(2) The term 'personal data' refers to the definition in Article 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as the 'General Data Protection Regulation' or 'GDPR' for short) as all data that can be related to you personally. This includes, for example, name, address, email address, user behavior. With regard to other terms, in particular the terms 'processing', 'controller', 'processor' and 'consent', we refer to the statutory data protection definitions in Article 4 GDPR.

(3) For matters that have an impact in Switzerland, even if they are initiated outside Switzerland, the Swiss Federal Data Protection Act, hereinafter referred to as the 'DSG', also applies. However, we use the terms of the GDPR throughout here. The terms of the GDPR 'personal data', 'processing', 'contract processor', 'special categories of data' and data portability also mean, to the extent that the DSG applies, the terms used in the DSG 'personal data', 'processing', 'contract processor', 'data transfer' and 'particularly sensitive personal data' under the DSG. The legal meaning of the terms is determined in this case by the DSG.

(4) We generally only process personal data to the extent that this is necessary to provide a functional website and the content and services we offer. Personal data is generally only processed if you have given us your consent in accordance with Art. 6 (1) (a) GDPR or if the processing is permitted by statutory provisions, in particular by one of the legal bases specified in Art. 6 (1) (b) to (f) GDPR.

(5) Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Storage may also take place if this is provided for by national or European regulations to which we are subject. In this case, the data will be blocked or deleted when the storage period prescribed in the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfillment of a contract.

(6) If we use commissioned service providers for individual functions of our website or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below.

II. Responsible body

(1) The controller within the meaning of Art. 4 No. 7 GDPR, the other data protection laws applicable in the Member States of the European Union and other provisions and provisions of a data protection nature is:

forty:love GmbH
Managing Director: Maximilian Garrit Frey

Bischofstrasse 80A
47809 Krefeld
Germany

Phone: +49 2151 5354046
Email: info@open-era.de

Register court: District Court of Krefeld
Registration number: HRB18266

(2) Further details regarding the responsible party can be found in our imprint.

III. Your rights

(1) You have the following rights with regard to the personal data concerning you:

  • the right to information,
  • the right to rectification and erasure,
  • the right to restriction of processing,
  • the right to object to processing,
  • the right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

(3) Within the scope of the DSG, you also have the right to:

  • Data release,
  • Data destruction

IV. Processing of personal data when using our website for informational purposes

(1) If you access our website without registering or otherwise providing us with information ('informational use'), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to enable you to view our website and to ensure stability and security: IP address, date and time of the request, time zone difference to GMT, content of the website, access status (HTTP status), amount of data transferred, request website, web browser, operating system, language and version of the browser

(2) The aforementioned data is also stored in so-called log files on our servers. This data is not stored together with your other personal data.

(3) The collection and temporary storage of the IP address is necessary to enable the delivery of our website to your device. For this purpose, your IP address must be stored for the duration of your visit to our website.

(4) The storage of the above-mentioned data in log files serves to ensure the functionality and to optimize our website as well as to ensure the security of our information technology systems.

(5) This data will not be evaluated for marketing purposes. Our legitimate interest in data processing lies in the above purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 Para. 1 Clause 1 Letter f) of GDPR. The above data for the provision of our website is deleted when the respective session is ended. The collection of the above data for the provision of our website and the storage of this data in log files is essential for the operation of our website. There is no possibility of objection.

V. Processing of personal data through cookies

(1) We use so-called cookies on our website. Cookies are small text files that are stored on the storage medium of your device, for example on a hard drive, and through which certain information is sent to us as the location that placed the cookies. Cookies cannot run programs or transmit viruses to your device. This website uses the following types of cookies, the scope and functionality of which are explained below.

(2) Cookies stored in connection with your web browser:

  • Transient cookies: These cookies are automatically deleted when you close your web browser. These include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your web browser to the shared session. This enables your device to be recognized when you return to our website. Session cookies are deleted as soon as you log out or close the web browser.
  • Persistent cookies: These cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.

(3) The processing of personal data by the above cookies serves to make our website more user-friendly and effective for you overall. Some functions of our website cannot be offered without the use of these cookies. In particular, some functions of our website require that your web browser can be identified even after changing pages. If you have an account, we use cookies to identify you for subsequent visits. This avoids you having to log in again each time you visit our website. The data processed by cookies that are necessary to provide the functions of our website are not used to create user profiles. If cookies are used for analysis purposes, they serve to improve the quality and user-friendliness of our website, its content and functions. They enable us to understand how the website, which functions and how often they are used. This enables us to continuously optimize our offering.

(4) Unless cookies are technically necessary, we will only use them with your prior consent, which you can revoke at any time. The legal basis is Art. 6 (1) (a) GDPR.

(5) The above cookies are stored on your device and transmitted from there to our server. You can therefore configure the processing of data and information by cookies yourself. You can make the appropriate configurations in the settings of your web browser, for example to reject third-party cookies or cookies altogether. In this context, we would like to point out that you may then not be able to use all the functions of our website properly. In addition, we recommend that you regularly delete cookies and your browser history manually.

VI. Additional functions and offers on our website

(1) In addition to the informational use of our website described above, we offer various services that you can use if you are interested. This usually requires the provision of additional personal data. We require this data to provide the respective service. The above data processing principles apply here.

(2) In some cases, we use external service providers who have been carefully selected and commissioned by us to process this data. These service providers are bound by our instructions and are regularly monitored by us. If personal data is passed on to third parties as part of services that we offer jointly with partners, you can find more information in the following descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more information about the consequences of this in the following descriptions of the individual services.

VII. Contact

(1) If you contact us by e-mail, the personal data you send to us with your e-mail will be stored.

(2) We also have a contact form on our website that you can use to contact us. The data you enter in the input mask will be transmitted to us and stored: first name, last name, telephone number, customer number.

(3) The data will be used exclusively to answer your questions. Unless explicitly stated in this privacy policy, the data will not be passed on to third parties. In addition, we record your IP address and the time of sending.

(4) The processing of the above personal data serves solely to process your enquiries.

(5) The processing of further personal data that arise through the use of the contact form provided on our website serves to prevent misuse and to ensure the security of our information technology systems.

(6) This is also where our legitimate interest in processing your personal data lies. If you have given us your consent to do so, the legal basis for processing this data is Art. 6 (1) (a) GDPR. Otherwise, the legal basis for processing this data is Art. 6 (1) (f) GDPR, in particular if you send us the data by email. If you want to use your email to work towards the conclusion of a contract, Art. 6 (1) (b) GDPR represents an additional legal basis.

(7) The data will be deleted, subject to statutory retention periods, as soon as we have finally processed your request. If you contact us by email, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed further. You can declare the revocation or objection by sending an email to our email address provided in the imprint.

VIII. Newsletter

(1) We provide you with a newsletter that you can subscribe to on our website. Details of the newsletter, in particular its possible contents, are specified in the declaration of consent. If you subscribe to our newsletter, the data you entered in the input mask when registering for the newsletter will be sent to us. In order to register for the newsletter, you must provide the mandatory data requested by us: E-mail address.

(2) If you provide further personal data when registering, this is voluntary.

(3) We use the so-called double opt-in procedure to register for our newsletter. After you register, we will send you an email to the email address you provided, asking you to confirm that you would like us to send you the newsletter in the future. If you do not confirm your registration within the period specified in the email, the data you provided will be blocked and deleted after 3 days. In addition, we store your IP address and the time of registration for the newsletter as well as the time of confirmation. The data will not be passed on to third parties in connection with the processing of the data for sending the newsletter. This data will only be used to send the newsletter.

(4) Unless we use a third-party provider listed below to send the newsletter, no data will be passed on to third parties in connection with the processing of the data for sending the newsletter.

(5) The data you enter in the input mask when registering will be processed for the purpose of addressing you personally. After your confirmation, we will save your email address so that we can send you the newsletter. We save the respective IP address and the times of registration and confirmation in order to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. This is also our legitimate interest. If you have given us your consent, the legal basis for the processing is Art. 6 Para. 1 Clause 1 Letter a) GDPR. If the processing is otherwise based on our legitimate interests, the legal basis is Art. 6 Para. 1 Clause 1 Letter f) GDPR.

(6) The above data will be deleted as soon as it is no longer required to achieve the above purposes. We will therefore store your above data as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, we will store the above data purely statistically and anonymously.

(7) You can revoke your consent to receive the newsletter at any time by unsubscribing from the newsletter. You can unsubscribe by clicking on the link included in every newsletter email we send you.

(8) We would like to point out that we evaluate your user behavior when sending the newsletter. The newsletter emails we send contain a so-called web beacon or a so-called tracking pixel. This is a one-pixel image file that is stored on our website. The data mentioned in this section and the web beacons are linked to your email address and an individual ID for evaluation. The links contained in the newsletter also contain this ID. We create a user profile based on the aforementioned data. We record when you read the newsletter and which links you click on in the newsletter email. From this we deduce your personal interests. We link this data to your user behavior on our website.

(9) This processing of the data serves the purpose of tailoring the newsletter to your individual interests, optimizing our offer and making it more interesting for you overall. This is also our legitimate interest. If you have given us your consent, the legal basis for the processing is Art. 6 Paragraph 1 Clause 1 Letter a) GDPR. If the processing is otherwise based on our legitimate interests, the legal basis is Art. 6 Paragraph 1 Clause 1 Letter f) GDPR. If you have given us your consent for the above processing of the data, you can revoke this consent at any time. You can object to this evaluation of your user behavior at any time by clicking on the separate link contained in each newsletter e-mail. In addition, you can prevent the above evaluation of your user behavior if you have deactivated the display of images in your e-mail program by default. We would like to point out that in this case the newsletter will not be displayed in full and you may therefore not be able to use all of the newsletter's functions. If you manually activate the display of the images, the analysis of your user behavior described above will take place again.

IX. Blog

(1) We offer a blog on our website. In this blog we publish articles on various topics.

(2) If you have given us your consent to store your data, you can revoke this consent at any time. You can object to the storage of the above data at any time.

X. Registration

(1) In order to use additional functions on our website, we offer the option of registering by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The mandatory information requested during registration is marked accordingly and must be provided in full. Otherwise we will reject the registration. The following data is collected as part of the registration process: title, first name, last name, email address, address .

(2) At the time of registration, the IP address and the date and time of registration are also saved. As part of the registration process, the user's consent to process this data is obtained.

(3) Registration is required for the provision of certain content and services on our website. We use the data entered for this purpose only for the purpose of using the respective offer or service or to provide the services for which you have registered. In the event of important changes to our offers, services or services, for example concerning the scope of the offer or in the event of technically necessary changes, we use the email address provided during registration to inform you of this. The legal basis for the processing of the data is Art. 6 Para. 1 Clause 1 Letter a) GDPR. Insofar as the registration serves to conclude or execute a contract, Art. 6 Para. 1 Clause 1 Letter b) GDPR represents an additional legal basis.

(4) You can revoke your consent at any time. The legality of the data processing that has already taken place remains unaffected by the revocation.

(5) The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case if the registration on our website is cancelled or changed. You have the option of cancelling the registration at any time. You can have the data stored about you changed at any time. Statutory retention periods remain unaffected.

(6) We only transmit personal data to third parties if this is necessary for the performance of the contract. The data will not be transmitted to any other parties or will only be transmitted if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

(7) If you have given us your consent, the legal basis for processing the data is Art. 6 (1) sentence 1 lit. a) GDPR. Otherwise, the legal basis is Art. 6 (1) sentence 1 lit. b) GDPR.

(8) We process and/or store your personal data on a server of an external provider in the European Union. This ensures that the standards and regulations of European data protection law are adhered to.

XI. Purchase or order

(1) We offer you paid services on our website. For this purpose, we process personal data provided by you.

(2) The processing is carried out for the purpose of establishing and implementing a contractual relationship with you. If you have given us your consent for this, the legal basis for the processing is Art. 6 Para. 1 Clause 1 Letter a) GDPR. Otherwise, the legal basis for the processing is Art. 6 Para. 1 Clause 1 Letter b) GDPR.

(3) You can revoke your consent at any time. You can object to the processing of your personal data at any time. However, we would like to point out that a contract cannot be concluded without this data.

(4) The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case if we no longer need your personal data to carry out the contractual relationship. Deletion will not occur if we are obliged to continue storing your personal data due to legal regulations.

(5) We offer you paid services on our website without the need for registration or the creation of a customer account. To do this, you must enter your personal data in an input mask. This data is transmitted to us. Mandatory information is marked accordingly and must be provided in full. The following data is collected: title, first name, last name, email address, address.

(6) In addition, the IP address and the date and time are stored.

(7) The processing is carried out for the purpose of establishing and implementing a contractual relationship with you. If you have given us your consent for this, the legal basis for the processing is Art. 6 Para. 1 Clause 1 Letter a) GDPR. Otherwise, the legal basis for the processing is Art. 6 Para. 1 Clause 1 Letter b) GDPR.

(8) You can revoke your consent at any time. You can object to the processing of your personal data at any time. However, we would like to point out that a contract cannot be concluded without this data.

(9) The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case if we no longer need your personal data to carry out the contractual relationship. Deletion will not occur if we are obliged to continue storing your personal data due to legal regulations.

XII. Payment service providers

(1) In order to process the payment, we will transmit the payment data you have provided to us to Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

(2) The transmission of payment data and processing by the above payment service provider(s) is carried out for the purpose of payment processing. The use of external payment service providers enables us to offer you a selection of different payment methods and thus to make the types of payment processing more flexible for both you and us. This is also our legitimate interest. If you have given us your consent, the legal basis for processing the data is Art. 6 Para. 1 S. 1 lit. a) GDPR. If the processing of the above data takes place to process and execute the contractual relationship, the legal basis is Art. 6 Para. 1 S. 1 lit. b) GDPR. Otherwise, the legal basis is Art. 6 Para. 1 S. 1 lit. f) GDPR.

(3) You can revoke your consent at any time. You can object to the processing of your personal data at any time. However, we would like to point out that without the transmission of payment data and/or processing by the payment service provider, none or at least not all payment methods can be made available to you and the contract may not be possible.

(4) Your payment data will be transmitted to servers of our payment service provider in the European Union and processed there. This ensures that the standards and regulations of European data protection law are adhered to.

XIII. Transport and logistics

(1) For the logistical processing of the contract and for shipping, we will transmit the necessary personal data provided by you, such as name and address, to the transport and logistics service provider(s) commissioned by us to send the goods, as follows: DHL.

(2) Contact details such as telephone number or email address will only be passed on if you have given us your consent.

(3) This data is transmitted to transport and logistics service providers for the purpose of logistical processing of the contract and for shipping the goods. The use of external transport and logistics service providers enables us to handle and process your order logistically. This is also our legitimate interest. If you have given us your consent, the legal basis for processing the data is Art. 6 Para. 1 Clause 1 Letter a) GDPR. If the above data is processed for the purpose of processing and executing the contractual relationship, the legal basis is Art. 6 Para. 1 Clause 1 Letter b) GDPR. Otherwise, the legal basis is Art. 6 Para. 1 Clause 1 Letter f) GDPR.

(4) You can revoke your consent at any time. You can object to the processing of your personal data at any time. However, we would like to point out that without the transmission of this data we will not be able to process your order logistically and therefore the execution of the contract will not be possible.

(5) Your data will be transferred to servers of our transport and logistics service provider in the European Union and processed there. This ensures that the standards and regulations of European data protection law are adhered to.

XIV. Product recommendations

(1) With your consent, we will transmit the data you have provided to us, as well as order data and, if applicable, data about your usage behavior on our website, to for the purpose of evaluation in order to send you interest-based product recommendations.

(2) The transmission and evaluation of the above data by the service provider is carried out for the purpose of sending you interest-based product recommendations. The processing of the above data is also carried out for optimization purposes, in particular to adapt our offer to your interests and make it more attractive for you. This is also our legitimate interest. If you have given us your consent, the legal basis for processing the data is Art. 6 Para. 1 Clause 1 Letter a) GDPR. Otherwise, the legal basis is Art. 6 Para. 1 Clause 1 Letter f) GDPR.

(3) You can revoke your consent at any time. You can object to the processing of your personal data at any time.

XV. emetriq

We use "emetriq" (formerly: "xplosion") on our website, a service provided by emetriq GmbH, Vorsetzen 35, 20459 Hamburg, Germany (hereinafter referred to as: "emetriq"). emetriq enables us to display targeted advertisements on this website and on websites that also use emetriq for users who have already visited our website and are interested in our offers. This advertising is displayed based on the information that emetriq collects when the respective user visits the respective website. For this purpose, emetriq uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device and that enable an analysis of your use of our website. No personal data is processed in this process. Under no circumstances will the prescribed information be used to personally identify you as a visitor to our website.

We use emetriq for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. The use of emetriq also enables us to display advertising tailored to your interests. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 Para. 1 Clause 1 Letter f) of GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent emetriq from collecting the aforementioned information by setting an opt-out cookie on one of the websites linked below: https://www.emetriq.com/opt-out/ or http://www.youronlinechoices.com/de/praferenzmanagement/ . We would like to point out that this setting will be deleted if you delete your cookies.

Information from the third-party provider: emetriq GmbH, Vorsetzen 35, 20459 Hamburg, Germany. Further information from the third-party provider regarding data protection can be found on the following emetriq website: https://www.emetriq.com/datenschutz/ .

XVI. Facebook Pixel

We use the service on our website.

The service enables the provider to show our ads on Facebook, so-called "Facebook Ads", only to Facebook users who have visited our website, in particular those who have shown interest in our online offering or in certain topics or products. The service makes it possible to check whether a user was redirected to our website after clicking on our Facebook ads. Among other things, the service uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device. If you are logged into Facebook with your user account, your visit to our online offering will be recorded in your user account. The data collected about you is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, this data can be linked by the provider to your user account there. We have no influence on the scope and further use of data collected by the provider through the use of the service. To the best of our knowledge, the provider receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you have a user account with Facebook and are registered, the provider can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and save your IP address and possibly other identification features.

We use the service for marketing and optimization purposes, in particular to display advertisements that are relevant and interesting to you and thus to improve our offering, make it more interesting for you as a user and avoid annoying advertisements.

The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.

The legal basis is Art. 6 Paragraph 1 Clause 1 Letter a) GDPR (consent).

Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
2 Dublin
Ireland
https://www.facebook.com/

XVIII. Google Analytics 4

We use the service on our website.

We use the service to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

The service uses cookies, i.e. small text files that are stored on your device and that enable an analysis of your use of our website. The information generated by the cookie about the use of our website is transferred to a server of the provider within the EU and stored there. The IP addresses are shortened on these servers. A corresponding pseudonymized data set is transmitted to the USA.

The service transfers personal data to the USA. The EU Commission has decided that this country offers an adequate level of data protection (TADPF). The service has submitted to the TADPF.

You can also prevent the storage of cookies generated by this service by making the appropriate settings in your web browser. We would like to point out that in this case you may not be able to use all the functions of our website. If you want to prevent the collection of data generated by the cookie and related to your user behavior (including your IP address) as well as the processing of this data by the service provider, you can also download and install the web browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

In order to oblige the provider of this service to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded a data processing agreement with the provider.

The legal basis is Art. 6 Paragraph 1 Clause 1 Letter a) GDPR (consent).

Provider:
Google Ireland Limited
Google Building Gordon House
Barrow St
4 Dublin
Ireland
Phone +353 1 543 1000
Fax +353 1 686 5660
https://www.google.com/

XIX. Hotjar

We use the service on our website.

The service stores and processes information about your user behavior on our website. For this purpose, the service uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device and that enable an analysis of your use of our website.

We use the service to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

The legal basis is Art. 6 Paragraph 1 Clause 1 Letter a) GDPR (consent).

You can also prevent the storage of cookies generated by this service by making the appropriate settings in your web browser. We would like to point out that in this case you may not be able to use all the functions of our website.

Provider:
Hotjar Ltd.
Dragonara Business Centre, 5th Floor
Dragonara Road, St Julian's
STJ 3141 Paceville
Malta
Phone +1 855 464-6788
https://www.hotjar.com/
https://help.hotjar.com/hc/en-us/articles/360053355554-Hotjar-Company-Details