General Information and Mandatory Details – Identification of the Controller

The controller responsible for data processing on this website is:
Haarpigmentierung MHS UG (haftungsbeschränkt)
Managing Director: Nicole Danelski
Katzbachstr. 7
10965 Berlin
Germany
Phone: +49 30 20847450
Email: kontakt@haarpigmentierung.de
Website: https://haarpigmentierung.de
The controller decides, alone or jointly with others, on the purposes and means of the processing of personal data (e.g. names, contact details, etc.).

Withdrawal of Your Consent to Data Processing

Some data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal. The legality of the data processing carried out prior to the withdrawal remains unaffected.

Right to Lodge a Complaint with the Competent Supervisory Authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection matters is the data protection officer of the German state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Data Portability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party. This will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.

Right of Access, Rectification, Restriction, Erasure

You have the right, under the applicable statutory provisions, to request free information about your stored personal data, its origin, its recipients and the purpose of the data processing at any time, and, if applicable, a right to rectification, restriction or erasure of this data. You may contact us at any time using the contact details provided in the legal notice regarding this and any other questions relating to personal data.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar and by the lock icon in the browser line.

Server Log Files

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:

  1. Information about the browser type and version used
  2. The user’s operating system
  3. The user’s internet service provider
  4. The user’s IP address
  5. Date and time of access
  6. Websites from which the user’s system reaches our website
  7. Websites accessed by the user’s system via our website

This data is not combined with other data sources. The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract or pre-contractual measures.

Data Transfer upon Conclusion of a Contract for the Purchase and Shipping of Goods

Personal data is only transferred to third parties where this is necessary for the performance of the contract. Third parties may, for example, be payment service providers or logistics companies. Any further transfer of data does not take place, or only takes place if you have expressly consented to it.
The basis for this data processing is Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract or pre-contractual measures.

Hosting and Content Delivery

The website is hosted and website content is delivered using the “EC2”, “S3”, “SNS”, “Lambda”, “DynamoDB” and “Cloudfront” products of Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA (“AWS”). AWS processes and stores our web content on our behalf.
Hosting takes place exclusively via the German AWS data centre in Frankfurt am Main.
Amazon.com, Inc. and certain controlled US subsidiaries, including AWS, are certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commit to complying fully with EU data protection requirements. The certification can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
The use of AWS is based on our legitimate interest in a secure and efficient provision and optimisation of our online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (data processing agreement).

Registration on this Website

To use certain features (e.g. viewing your order history), you can register on our website. The data transmitted is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full; otherwise we will refuse the registration. Registering a customer account is voluntary; orders can also be placed as a guest without registration.
In the event of important changes, for example for technical reasons, we will inform you by email. The email will be sent to the address provided during registration.
The processing of the data entered during registration is based on your consent (Art. 6(1)(a) GDPR). You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal. The legality of the data processing already carried out remains unaffected by the withdrawal.
We store the data collected during registration for the period during which you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.

Contact Forms / Consultation Forms

We process and store data from our contact forms in the CRM system “Zoho CRM”, provided by ZOHO Corporation B.V, Churchilllaan 11 (17th Floor), 3527 GV Utrecht, Netherlands (hereinafter referred to as “Zoho”).
The processing of the data entered in the contact form is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR) and serves to improve and speed up our customer and user service. You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal. The legality of the data processing operations carried out prior to the withdrawal remains unaffected.
Zoho has entered into a data processing agreement with us based on the EU Standard Contractual Clauses adopted by the European Commission, in order to ensure an adequate level of data protection for any data transfers.
The use of Zoho CRM is optional; if you do not agree to the collection and storage of your data in Zoho CRM’s external system, we offer you the following alternative contact options for service enquiries: by email, telephone, fax or post.
Further information is available in Zoho CRM’s privacy policy: https://www.zoho.com/privacy.html

Payment Service Providers

PayPal

We use the payment service provider PayPal for payment processing, offered by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you select “PayPal” as your payment method during the order process, the data required for payment processing (e.g. name, address, email address, IP address, order data) will be automatically transmitted to PayPal. The transfer is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing).
Further information on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe

We use the payment service provider Stripe for payment processing (including SEPA direct debit, credit/debit card, Google Pay, Apple Pay). The provider is Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA; for customers in the European Economic Area, payment services are provided, depending on the service used, by Stripe’s Irish group companies (including Stripe Payments Europe, Ltd. / Stripe Technology Europe, Ltd., Dublin, Ireland) (hereinafter “Stripe”).
If you select a payment method supported by Stripe during the order process, the data required for payment processing (e.g. name, address, email address, IP address, and payment-method-specific data such as IBAN or card details) will be automatically transmitted to Stripe. The transfer is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing). Where data is transferred to Stripe group companies outside the European Economic Area (e.g. in the USA), Stripe ensures an adequate level of data protection through appropriate safeguards, including the EU Standard Contractual Clauses.
Further information on data protection at Stripe can be found at: https://stripe.com/de/privacy

Shipping Service Providers

DHL

We work with DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn (hereinafter “DHL”) to deliver the goods you have ordered.
For the purpose of delivery, we transmit the data required for this (e.g. name, delivery address and, if applicable, telephone number and email address for shipping notifications) to DHL. The transfer is based on Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract.
Further information on data protection at DHL can be found at: https://www.dhl.de/de/privacy/

Push Notifications

Our website uses push services (push notifications) provided by operating system and browser manufacturers. These are short messages that can be displayed on your device’s screen and through which we inform you about new project-related content, provided you have previously given the corresponding consent on your device. We do not send you any advertising via push notifications.
When using push services, a device token from Apple or a registration ID from Google is assigned. These are encrypted, anonymised device IDs. The sole purpose of their use is to provide the push services. It is not possible to draw any conclusions about the individual user.
You can turn off the receipt of push messages via your smartphone’s operating system.

Telephony via sipgate

We use sipgate, a service provided by sipgate GmbH, Gladbacher Str. 74, 40219 Düsseldorf (hereinafter “sipgate”), to handle our incoming and outgoing phone calls with prospective customers and customers. The legal basis for this is Art. 6(1) sentence 1(b) GDPR. Sipgate stores the phone numbers and call data (time and duration of the call) until we delete the data at sipgate.
You can view sipgate’s privacy policy here: https://www.sipgate.de/datenschutz

Email and Newsletter Delivery via Amazon Web Services (AWS)

Our emails (registration, account deletion confirmation, newsletter sign-up, newsletter sign-up confirmation, newsletter email, password recovery, order confirmation, shipping confirmation, contact form, and all other sales and website emails) from this website are sent via Amazon Simple Email Service (Amazon SES), a service provided by the technical service provider Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States (https://aws.amazon.com/), to which we transmit your email address and the email content temporarily (during sending) to an AWS server (within the EU). This disclosure is based on Art. 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure and user-friendly email delivery service.
To protect your data, which may in part be stored in the USA, we have entered into a data processing agreement with Amazon Web Services Inc. based on the European Commission’s Standard Contractual Clauses, in order to enable the transfer of your personal data to Amazon Web Services Inc. This data processing agreement can be viewed at the following link: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf
Amazon.com, Inc. and certain controlled US subsidiaries, including AWS, are also certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commit to complying fully with EU data protection requirements. The certification can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
Further information on Amazon Simple Email Service as well as on data use and processing by Amazon Web Services Inc. is available at http://aws.amazon.com/de/ses/ and at http://aws.amazon.com/de/privacy/.

Data Erasure and Storage Period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may continue to take place if this is provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

Newsletter Data

We require an email address from you in order to send you our newsletter. Verification of the email address provided is necessary, and your consent to receive the newsletter is required. Supplementary data is not collected, or is provided voluntarily. This data is used exclusively for sending the newsletter.
The data provided when subscribing to the newsletter is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal, or you can unsubscribe via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the withdrawal.
Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and via other channels, it will continue to be stored by us.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our offering more user-friendly, effective and secure.
Some cookies are “session cookies”. Such cookies are automatically deleted at the end of your browser session. Other cookies, on the other hand, remain stored on your device until you delete them yourself. Such cookies help us recognise you when you return to our website.
Using a modern web browser, you can monitor, restrict or prevent the setting of cookies. Disabling cookies may result in limited functionality of our website.
The setting of cookies which are necessary for the exercise of electronic communication processes or for providing certain functions you wish to use (e.g. the shopping cart) is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in storing cookies to provide our services in a technically error-free and smooth manner. Where other cookies (e.g. for analytics purposes) are set, these are addressed separately in this privacy policy.

Web Analytics Services

Google Analytics

Our website uses functions of the web analytics service Google Analytics. The provider of the web analytics service is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
Google Analytics uses “cookies”. These are small text files that your web browser stores on your device and which enable an analysis of your use of the website. Information generated by the cookie about your use of our website is transmitted to and stored on a Google server. The server location is generally the USA.
The setting of Google Analytics cookies is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, where applicable, our advertising.
IP Anonymisation
We use Google Analytics in conjunction with the IP anonymisation function. This ensures that Google shortens your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the USA. In exceptional cases, Google may transfer the full IP address to a server in the USA and shorten it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with further services relating to website and internet usage. The IP address transmitted by Google Analytics is not merged with any other data held by Google.
Browser Plugin
You can prevent the setting of cookies by your web browser; however, some functions of our website may be limited as a result. You can also prevent the collection of data relating to your use of the website, including your IP address, and its subsequent processing by Google. This is possible by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Objection to Data Collection
You can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to our website: Disable Google Analytics.
Details on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
Data Processing Agreement
In order to fully comply with statutory data protection requirements, we have entered into a data processing agreement with Google.
Demographic Characteristics in Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics. This allows us to create reports containing statements on the age, gender and interests of website visitors. This data originates from Google’s interest-based advertising as well as from visitor data from third-party providers. It is not possible to attribute this data to a specific person. You can deactivate this function at any time via the ad settings in your Google account, or by generally prohibiting the collection of your data by Google Analytics as described under “Objection to Data Collection” above.

Use of Tools and Other Services

Google Tag Manager

Our website uses functions of Google Tag Manager. The provider of Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
Google Tag Manager is a solution that allows us to manage website tags via an interface on the Google website. The Google Tag Manager tool itself implements these website tags and is a “cookieless” domain that does not collect any personal data. Google Tag Manager triggers other tags, which may in turn collect data. Google Tag Manager does not have access to this data.
Details on Google Tag Manager’s usage policies can be found at the following link: http://www.google.de/tagmanager/use-policy.html

Google Maps

Our website uses Google Maps, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).
Through the use of the Google Maps web service, we can present interactive maps from Google on our website and visually display geographical information. This is done by retrieving Google Maps from a Google server in the USA, which involves the transfer of your data to Google. This concerns information about your use of our website (such as your IP address). The use of Google Maps is based on Art. 6(1)(f) GDPR and already occurs when calling up those subpages on which Google Maps is embedded. As the operator of this website, we have a legitimate interest in presenting maps to you in an interactive format on our website.
If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating Google Maps by disabling JavaScript and iframes in your browser. Google Maps can then no longer be used.
Google LLC (the parent company of Google Ireland Limited) is certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commits to complying fully with EU data protection requirements. The certification can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
Further information on how Google handles user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/

OpenStreetMap

We use the map service OpenStreetMap on our website, operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (“OSMF”), together with the JavaScript library Leaflet for display purposes.
By using OpenStreetMap, we are able to present interactive maps to you. This is done by retrieving map tiles from OSMF’s servers, which involves the transfer of your data (including your IP address) to OSMF. This is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in presenting maps to you in an interactive format.
OSMF acts as an independent controller in this regard, not as our data processor. The transfer of data to servers in the United Kingdom is based on the European Commission’s adequacy decision for the United Kingdom.
If you do not agree to the transfer of your data to OSMF as part of your use of OpenStreetMap, you have the option of completely deactivating the map display by disabling JavaScript in your browser. The map can then no longer be used.
Further information can be found in the OpenStreetMap Foundation’s privacy policy: https://osmfoundation.org/wiki/Privacy_Policy

Google Web Fonts

Our website uses web fonts from Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
The use of these web fonts allows us to present our website in the way we intend, regardless of which fonts are locally available to you. This is done by retrieving Google Web Fonts from a Google server in the USA, which involves the transfer of your data to Google. This concerns your IP address and which page on our site you visited. The use of Google Web Fonts is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and delivery of our website.
Google LLC (the parent company of Google Ireland Limited) is certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commits to complying fully with EU data protection requirements. The certification can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
Details on Google Web Fonts can be found at: https://www.google.com/fonts#AboutPlace:about and further information in Google’s privacy policy: https://policies.google.com/privacy/partners?hl=de

Google reCAPTCHA

Our website uses Google reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).
Google reCAPTCHA is primarily used to determine whether a form is submitted by a natural person or whether it has been created through automated, machine processing and submitted for abusive purposes.
The service involves the transmission of the IP address and other data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in establishing individual intent in online actions and in reducing misuse and spam on parts of our website (e.g. contact forms).
If you do not agree to the future transmission of your data to Google when using Google reCAPTCHA, you also have the option of completely deactivating Google reCAPTCHA by disabling JavaScript in your browser. Google reCAPTCHA, and thus also parts of the website (e.g. recaptcha-protected forms or sections), can then no longer be used.
Google LLC (the parent company of Google Ireland Limited) is certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commits to complying fully with EU data protection requirements. The certification can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
Further information on Google reCAPTCHA and Google’s privacy policy can be found at the following link: https://www.google.com/intl/de/policies/privacy/

Use of Videos

YouTube

Our website uses YouTube plugins for the integration and display of video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit a page with an embedded YouTube plugin, a connection is established to YouTube’s servers. This informs YouTube which of our pages you have visited.
If you are logged into your YouTube account, YouTube can directly link your browsing behaviour to your personal profile. You can prevent this by logging out beforehand.
The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Details on how user data is handled can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

Online Marketing – Advertising and Conversion Cookies

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland – on behalf of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
AdWords is an online advertising programme. As part of this programme, we use conversion tracking. After clicking on an ad served by Google, a cookie for conversion tracking is set. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used for personal identification of users. Using the cookie, Google and we can recognise that you clicked on an ad and were redirected to our website.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that would allow users to be personally identified.
In addition, we use Google audience lists (“remarketing”) to show you relevant, interest-based advertising on other websites within the Google advertising network. Remarketing cookies remain valid for up to 13 months, and conversion tracking cookies for up to 90 days.
Even without your consent, Google processes an anonymised, non-personal signal value for statistical purposes (without a cookie and without attribution to your person). With your consent, we additionally transmit your email address, phone number and name in hashed (encrypted) form to Google, in order to more reliably attribute advertising conversions (“Enhanced Conversions”). This hashed customer data is deleted by Google shortly after matching.
The storage of cookies and the transmission of hashed customer data are based on your consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. A data processing agreement pursuant to Art. 28 GDPR is in place with Google. The transfer of data to the USA is based on the EU-U.S. Data Privacy Framework, under which Google LLC is certified.
Details on Google AdWords and Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy

Facebook Retargeting and Facebook Conversions API

Our website uses the retargeting technology “Website Custom Audience” as well as the “Conversions API” of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”) – on behalf of Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA.
The Facebook retargeting technology allows us to show visitors who have already visited our website in the past and who are Facebook members relevant advertising and offers on Facebook via the Facebook ad network.
We only use this retargeting technology, and additionally transmit your email address, phone number and name in hashed form to Meta (“Conversions API”) in order to more reliably attribute advertising actions, with your consent. Without your consent, no data is transmitted to Meta. The hashed customer data is deleted by Meta within 48 hours after matching against Meta’s own user data.
Legal basis: consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. A data processing agreement pursuant to Art. 28 GDPR is in place with Meta. The transfer of data to the USA is based on the EU-U.S. Data Privacy Framework, under which Meta Platforms, Inc. is certified.
Further information on data protection and your related configuration options can be found at: https://www.facebook.com/settings/?tab=ads as well as at: https://www.facebook.com/privacy/policy/
You can object to the future use of Facebook Website Custom Audiences via the link https://www.facebook.com/settings/?tab=ads as well as the link http://www.youronlinechoices.com/de/praferenzmanagement/.

X Remarketing

Our website uses the remarketing technology of the platform X (formerly Twitter), provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter “X”) – on behalf of X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
With X’s remarketing function, we can target visitors to our website with advertising on the X platform based on their interests. X uses so-called “tags” for this purpose. Visits to our website and data on the use of the website are recorded using this tag and stored in cookies (including “muc”, “personalization_id”), which remain valid for up to 2 years. If you visit X at a later date, you will be shown advertisements there based on your interests.
The storage of these cookies is based exclusively on your consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. A data processing agreement pursuant to Art. 28 GDPR is in place with X. The transfer of data to the USA is based on the EU-U.S. Data Privacy Framework, under which X Corp. is certified.
If you do not want X to target you with interest-based advertising, you can additionally deactivate this in your X account under privacy settings (“Personalisation and data”).
Further information on data protection and advertising at X can be found here: https://business.x.com/en/help/ads-policies/product-policies/interest-based-opt-out-policy as well as in X’s privacy policy: https://x.com/en/privacy

TikTok Advertising and TikTok Events API

Our website uses advertising technologies from TikTok, provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”), together with TikTok Information Technologies UK Limited. The parent company is ByteDance Ltd., based in China.
With your consent, we transmit your email address, phone number and name in hashed form to TikTok (“Events API”) in order to more reliably attribute advertising actions. Without your consent, no data is transmitted to TikTok.
Legal basis for the processing: consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. The transfer of data to third countries is based on your explicit consent after having been informed of the existing risks (Art. 49(1)(a) GDPR), as no adequacy decision and no certification comparable to that of the other providers named in this policy exists for TikTok/ByteDance.
Further information can be found in TikTok’s privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en