Privacy Policy

as well as information on any consent you may have given

As the controller within the meaning of data protection provisions, we hereby inform you below about the processing of your personal data by us.

I. The term “personal data” and other important terms

Personal data is, simply put, all information relating to you personally as the data subject. Provisions defining what the term “personal data” means and what other terms important for the following data protection information mean can be found in Article 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the controller; contact details of the data protection officer

The controller is, simply put, the entity that alone or jointly with others decides on the purposes and means of the processing of personal data. You can find the name and the contact details of the controller (and, insofar as a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / our imprint.

III. Purposes of processing your personal data; legal bases for processing

We process your personal data within the scope of our activities for the purposes listed below on the basis of the respective legal bases stated.

1. In order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website, your personal data is processed on the basis of Article 6(1)(f) GDPR.

2. For the implementation of pre-contractual measures carried out on the basis of an enquiry from you, your personal data is processed on the basis of Article 6(1)(b) GDPR.

3. In order to safeguard our legitimate interest in responding to enquiries and in carrying out other measures carried out on the basis of an enquiry from you, your personal data is processed on the basis of Article 6(1)(f) GDPR.

4. For the performance of a contract to which you are a party, your personal data is processed on the basis of Article 6(1)(b) GDPR.

5. For the implementation of measures for the purposes of advertising, your personal data is processed either on the basis of the consent you have given pursuant to Article 6(1)(a) GDPR or on the basis of Article 6(1)(f) GDPR.

6. For compliance with legal obligations to which we are subject, your personal data is processed on the basis of Article 6(1)(c) GDPR.

7. In order to safeguard our legitimate interest in enforcing our rights and in defending against claims asserted against us, your personal data is processed on the basis of Article 6(1)(f) GDPR.

8. On the basis of the consent you have given pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), your personal data is processed for the purposes of web analytics, online marketing, the integration of external content and the provision of enhanced functionalities.

Our systems are protected in accordance with the state of the art by technical and organisational measures in order to protect your personal data against access, alteration or disclosure by unauthorised persons as well as against loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information within this Privacy Policy.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

Insofar as this is necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the scope of the statutory provisions. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information within this Privacy Policy. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.

Insofar as we transfer personal data to recipients in third countries (i.e. countries outside the European Economic Area), this is done on the basis of an adequacy decision of the European Commission pursuant to Article 45 GDPR or on the basis of appropriate safeguards pursuant to Article 46 GDPR. For transfers to the United States, we rely on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework (DPF) of 10 July 2023, provided that the respective recipient is certified under the DPF. For transfers to the United Kingdom, we rely on the adequacy decision of the European Commission of 28 June 2021. For details, please refer to the information on the respective services below.

V. Scope of processing of your personal data for the individual processing purposes

Below we inform you in detail about the processing of your personal data for the various processing purposes.

For the transport of goods, we pass on address and contact data as well as, where applicable, links and codes for shipment tracking to:
- DHL Paket GmbH, Sträßchensweg 10; 53113 Bonn
- General Logistics Systems, Germany GmbH & Co. OHG, GLS Germany, Straße 1 - 7, 36286 Neuenstein
- DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn
- FedEx Express Germany GmbH, Langer Kornweg 34K, 65451 Kelsterbach
- Kühne + Nagel (AG & Co.) KG, Wilhelm-Kaisen-Brücke 1, 28195 Bremen
- Mirawi GmbH, Riedweg 6, 89081 Ulm
- Team Trans Hamburg GmbH, Friesenstraße 3, D-20097 Hamburg
- SERVICE TEAM Döbeln, Handwerkliche und Allgemeine Dienstleistungsgesellschaft mbH, Bahnhofstraße 31, 04720 Döbeln
- Cargoboard GmbH & Co. KG, Technologiepark 22, 33100 Paderborn
- Shiparound GmbH, Am Nonnenhof 29, 72488 Sigmaringen
- Rhenus SE & Co. KG, Rhenus-Platz 1, 59439 Holzwickede, Germany

For export documentation and customs services, address and contact data may be passed on to:
- Michael Maser, Talstr. 88, 70794 Filderstadt

In order to process payments for orders, the following payment service providers selected by the customer may receive the data required for processing:
- PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

The following manufacturers may, under certain circumstances, receive address and contact data for the processing of warranty cases:
- LLC Autoterm, 72 Paleju street, Marupe, Marupes district, LV-2167, Latvia
- SERVICE TEAM Döbeln, Handwerkliche und Allgemeine Dienstleistungsgesellschaft mbH, Bahnhofstraße 31, 04720 Döbeln
- Victron Energy B.V., PO Box 50016, 1305 AA Almere, The Netherlands
- Queensize Camper UG (limited liability), Alte Mühle 22d, 22395 Hamburg
- Blaufaktor GmbH & Co. KG, Riedweg 12, 78607 Talheim
- Scanstrut Ltd, 14 Dart Business Park, Clyst St. George, Exeter EX3 0QH, United Kingdom
- Overland Fuel BV, Oude Koningstraat 2, 6551 DN Weurt, The Netherlands
- Votronic Elektronik-Systeme GmbH, Am Bruch 17, 66954 Pirmasens
- RNG Germany GmbH (Renogy), Friedberger Landstraße 434, 60389 Frankfurt am Main, Germany
- texdev GmbH, Weseler Str. 82, 46519 Alpen, Germany (own brand products)
- Genesis Import GmbH, Gewerbering-Süd 8, 97359 Schwarzach am Main, Germany
- OSCULATI S.r.l., Via Pacinotti 12, 20054 Segrate (MI), Italy
- ATI DI MARIANI SRL Unipersonale, Via E. Mattei 461, Z. ind. 4 Torre del Moro, 47522 Cesena (FC), Italy

In compliance with the statutory requirements, we commission, in part, service providers for IT, software solutions and maintenance, hosting etc. These may have access to order and customer data as well as customer emails:
- maßarbyte GmbH & Co. KG, Niedersedlitzer Str. 71, 01257 Dresden
- CMO Internet Dienstleistungen GmbH, Kaiserstraße 57/1, 72764 Reutlingen
- Jera GmbH, Reutener Straße 4, 79279 Vörstetten
- AMTANGEE Aktiengesellschaft, Konrad-Zuse-Ring 12, 14469 Potsdam
- GREYHOUND Software GmbH & Co. KG, Segelfliegerweg 53, 49324 Melle
- ecomDATA GmbH, Steinamangererstraße 9/16, 7400 Oberwart, Austria
- T4DT GmbH, Baumschulenallee 20-22, 30625 Hannover, Germany
- CodingNexus LLC, 3833 Powerline Road, Suite 101, Fort Lauderdale, FL 33309, USA (data processing takes place on servers within the EU; however, as a US-based company, the service provider has access to personal data. The transfer is based on standard contractual clauses pursuant to Article 46(2)(c) GDPR or on the EU-U.S. Data Privacy Framework, insofar as certification exists.)

1. Use of our website for informational purposes

If you visit our website without transmitting information to us, we only process the personal data that your browser transmits to our server. These are the following data which are technically necessary in order to display our website to you and to ensure stability and security:

the page you accessed
date and time of the request
amount of data transmitted
source or referrer from which you reached the page
browser used by you
operating system used by you
your IP address

The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website.

Your personal data will be deleted after 6 months unless it is still required for the assertion of rights or the enforcement of claims due to measures taken against the proper operation of our website. In this case, deletion will take place without undue delay after completion of the respective proceedings.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that you cannot have our website displayed to you.

2. Processing of enquiries

If you contact us with an enquiry or a concern, we process the personal data as well as information/documents transmitted by you. Regardless of the channel through which you transmit your enquiry or concern to us, these may include:

date and time of contacting us
name data
contact data
data relating to the enquiry/concern
transmitted information/documents

The processing of your personal data and the transmitted information/documents is carried out – depending on the content of your enquiry or concern – on the basis of Article 6(1)(b) GDPR for the implementation of pre-contractual measures, or on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party, or on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in responding to enquiries/concerns and in carrying out other measures in connection with the processing of enquiries/concerns.

Insofar as this is necessary for processing your enquiry/concern, we transfer your personal data to third parties within the scope of the statutory provisions. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.

Your personal data will be deleted when your enquiry/concern has been clarified, but at the earliest after expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this Privacy Policy.

You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we cannot process your enquiry or concern.

3. Performance of contracts

If you transmit personal data to us for the purpose of concluding a contract or in connection with a contract, we process the data you transmit for the handling of the contract. This includes your customer data (e.g. your name and your address) and the contract data (e.g. information on the products covered by the contract as well as payment and delivery information).

The processing of your personal data is carried out on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party.

Insofar as this is necessary for the performance of the contract with you, we transfer your personal data to third parties within the scope of the statutory provisions. This transfer is made to the service providers involved in the processing of the contract. These are the providers of the processing tools used by us, the transport companies commissioned, and the payment service providers commissioned for payment matters.

Insofar as you use the payment service provider PayPal for the processing of payment transactions, we expressly point out that PayPal’s Privacy Policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.

Your personal data will be deleted after expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this Privacy Policy.

For concluding a contract with us, the provision of your personal data is required. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we cannot conclude a contract with you.

4. Advertising via newsletter

If you subscribe to our newsletter, we process the email address you transmit – and, if you transmit further personal data, also these – in order to send you information about our offers by email. Only the provision of your email address is mandatory in this respect. If you voluntarily transmit further personal data, we may process this data in order to address you personally in the newsletter.

For the dispatch of our newsletter we use the service Brevo (formerly Sendinblue) provided by Brevo SAS, 106 Boulevard Haussmann, 75008 Paris, France. Brevo processes your email address and any additional data you have provided on our behalf for the purpose of sending the newsletter. Processing takes place on servers within the European Union. We have concluded a data processing agreement with Brevo pursuant to Article 28 GDPR.

Our newsletters contain so-called tracking pixels (web beacons). These are small, invisible image files that are retrieved from Brevo’s servers when the newsletter is opened. This allows us to determine whether and when a newsletter message was opened and which links contained in the message were clicked. We use this data for statistical analysis in order to optimise the content of our newsletters. If you do not wish this, you can deactivate the loading of external images in your email programme or unsubscribe from the newsletter.

Further information on data protection at Brevo can be found at: https://www.brevo.com/de/legal/privacypolicy/

When you subscribe to our newsletter, you give consent with the following content: “I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and the further personal data communicated by me for the purpose of sending the newsletter. I can revoke this consent at any time and without stating reasons with effect for the future. The lawfulness of the processing carried out up to the revocation remains unaffected in the event of revocation.”

Registration for our newsletter takes place using the so-called double opt-in procedure. This means: after registration you will first receive an email with a notice about the registration for the newsletter combined with a request to confirm the registration. Your confirmation of the registration is required in order to document the required consent to the sending of the newsletter and to be able to detect registrations using third-party email addresses. In connection with newsletter registrations and confirmations, the IP address as well as date and time are logged in order to be able to prove the giving of consent in accordance with the legal requirements, where applicable.

The processing of your personal data is carried out on the basis of the consent you have given for this purpose pursuant to Article 6(1)(a) GDPR.

You can revoke your consent at any time and without stating reasons with effect for the future. For this purpose, it is sufficient to send a corresponding notice to the controller, whose contact details you can find in the information about the controller. The lawfulness of the processing carried out up to the revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted without undue delay, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this Privacy Policy.

For receiving our newsletter, at least the provision of your email address is required. You are not obliged to provide your email address. However, failure to provide your email address would mean that you cannot subscribe to our newsletter.

5. Advertising via postal mail

We process the personal data you transmit relating to your first and last name and address, where applicable, for sending information about our offers by postal mail.

The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in carrying out advertising measures by postal mail.

You may object at any time to the processing of your personal data for the purpose of carrying out advertising measures by postal mail. For this purpose, it is sufficient to send a corresponding notice to the controller, whose contact details you can find in the information about the controller.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by postal mail, the personal data you transmitted relating to your first and last name and address will be deleted without undue delay, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this Privacy Policy.

You are not obliged to provide your personal data for the purpose of carrying out advertising measures by postal mail. However, failure to provide your personal data would mean that we cannot send you advertising by postal mail.

6. Compliance with legal obligations to which we are subject

Within the scope of the respective requirements, we process your personal data for compliance with legal obligations to which we are subject.

For compliance with legal obligations to which we are subject, the processing of your personal data is carried out on the basis of Article 6(1)(c) GDPR.

Insofar as this is necessary for compliance with legal obligations to which we are subject, we transfer your personal data to third parties within the scope of the statutory provisions. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.

Your personal data will be deleted when it is no longer required for compliance with legal obligations to which we are subject, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this Privacy Policy.

7. Enforcement of our rights and defence against claims asserted against us

Where applicable, we process your personal data to safeguard our legitimate interest in enforcing our rights and defending against claims asserted against us.

In this case, the processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR.

Insofar as this is necessary to safeguard our legitimate interest, we transfer your personal data to third parties within the scope of the statutory provisions. This transfer is made to the debt-collection service providers involved or to our lawyers.

In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.

Your personal data will be deleted after completion of the proceedings, but at the earliest after expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this Privacy Policy.

8. Use of cookies and other technologies

We may use cookies and similar technologies on our website so that you can use the functions we offer, in order to analyse the use of the functions we offer, and, where applicable, also in order to present advertising that is as needs-based as possible. Below we inform you about the cookies and other technologies we use.

Cookies are small files stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our offer overall more user-friendly.

Insofar as the use of cookies or similar technologies results in the storage of information on, or the retrieval of information from, your terminal device and this is not strictly necessary, this is done on the basis of your consent pursuant to Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

8.1 Technically required cookies and technologies:

In part, the use of cookies and technologies on our website is technically required in order to be able to provide you with the functions of our service requested by you and in order to document consent you have given. For this reason, you cannot deselect the use of the corresponding cookies and technologies (opt-out). You can prevent the storage of cookies by adjusting your browser software settings. You can delete stored cookies via the corresponding settings. However, we point out that, in this case, you may not be able to use all functions of our website to their full extent.

8.1.1 Consent Tool

We use a so-called consent tool on our website with which, in accordance with our data-protection obligations pursuant to Article 5(2) GDPR in conjunction with Article 6(1)(c) GDPR, we inform you about the cookies we use and with which we document whether and to what extent you have chosen to have your data processed.

Controller:

The processing of your personal data is carried out by us as the controller. You can find the name and contact details of the controller (and, insofar as a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / our imprint.

Processing purposes and legal basis:

Fulfilment of the data-protection obligations to inform about cookies used and storage/documentation of consent given pursuant to Article 5(2) GDPR in conjunction with Article 6(1)(c) GDPR

Provider of the consent tool used:

WebStollen GmbH, Prinz-Ludwig-Str. 15, 93055 Regensburg

You can find the provider’s data-protection information here:

https://www.webstollen.de/Datenschutzerklaerung

Name/designation of the cookie:

eu_cookie

Cookie duration:

365 days

8.2 Web analytics

8.2.1 Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager is a technical solution that allows us to manage and deploy other web services and tracking technologies via a single interface. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analysis. It merely serves to manage and deploy the tools integrated via it. We use Google Tag Manager partly in a server-side variant, in which requests are first routed through our own server (gtm.tigerexped.de). Even with the server-side variant, data is forwarded to Google.

The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, insofar as services that require consent are integrated via Tag Manager. Insofar as only technically necessary services are integrated via Tag Manager, the legal basis is Article 6(1)(f) GDPR.

A transfer of personal data to the USA cannot be excluded. The transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework (DPF) of 10 July 2023. Google LLC is certified under the DPF (certification is available at https://www.dataprivacyframework.gov/).

Further information on data protection at Google can be found at: https://policies.google.com/privacy

8.2.2 Google Analytics 4

We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google Analytics uses cookies and similar technologies that enable an analysis of the use of our website. In particular, the following data is processed: pages accessed, time spent on pages, browser and operating system used, screen resolution, referral source, approximate location (based on the truncated IP address) and interactions with the website (e.g. clicks, scroll behaviour). IP anonymisation is activated by default in Google Analytics 4, meaning that your IP address is truncated by Google within Member States of the European Union or other States party to the Agreement on the European Economic Area before being transmitted to Google servers. In exceptional cases, the full IP address may be transmitted to a Google server in the USA and truncated there.

We use Google Analytics to evaluate the use of our website and to compile reports on website activities. This enables us to continuously improve our offering. We have concluded a data processing agreement with Google pursuant to Article 28 GDPR.

Google Analytics is only used with your consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

A transfer of personal data to the USA takes place. The transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework (DPF) of 10 July 2023. Google LLC is certified under the DPF (certification is available at https://www.dataprivacyframework.gov/).

The data collected by Google Analytics is stored for a period of 14 months and then automatically deleted.

Further information on data protection at Google Analytics can be found at: https://support.google.com/analytics/answer/6004245

8.2.3 Microsoft Clarity

We use Microsoft Clarity on our website, a web analytics service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter “Microsoft”). The parent company is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Microsoft Clarity collects data on user behaviour on our website using cookies and similar technologies. This includes in particular:

- mouse movements and clicks
- scroll behaviour
- session recordings
- heatmaps
- pages visited and time spent
- device and browser information

The collected data is processed pseudonymously and serves to analyse and improve the user-friendliness of our website. Entries in form fields (e.g. password fields, payment data) are automatically masked by Microsoft Clarity and are not captured.

Microsoft Clarity is only used with your consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool. Without your consent, no session recordings are created and no data is transmitted to Microsoft.

A transfer of personal data to the USA takes place. The transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework (DPF) of 10 July 2023. Microsoft Corporation is certified under the DPF (certification is available at https://www.dataprivacyframework.gov/).

Further information on data protection at Microsoft Clarity can be found at: https://learn.microsoft.com/en-us/clarity/setup-and-installation/privacy-disclosure

8.3 Online marketing and advertising

8.3.1 Google Ads Conversion Tracking and Remarketing

We use Google Ads on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google Ads enables us, through the use of cookies and similar technologies, to measure the success of our advertisements (conversion tracking) and to display interest-based advertisements to you on third-party websites (remarketing). Information about your use of our website (e.g. pages visited, purchases made) is processed in order to analyse the effectiveness of our advertising measures and to display personalised advertising to you.

Google Ads is only used with your consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool. In addition, you can deactivate personalised advertising in the Google settings: https://adssettings.google.com

8.3.2 Meta/Facebook Pixel

We use the Facebook Pixel (Meta Pixel) on our website, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). The parent company is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The Meta Pixel is a JavaScript code which, when you visit our website, collects data about your usage behaviour using cookies and similar technologies. This enables us to measure the effectiveness of our Facebook advertisements (conversion tracking) and to display interest-based advertising to you on Meta platforms (Custom Audiences, Lookalike Audiences).

When the Meta Pixel is used, joint controllership exists between us and Meta pursuant to Article 26 GDPR with respect to the collection of data and its transmission to Meta. We have concluded an agreement with Meta for this purpose which sets out the respective data protection obligations to be fulfilled by us and by Meta. Details of this agreement can be found at: https://www.facebook.com/legal/controller_addendum

The Meta Pixel is only used with your consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

A transfer of personal data to the USA takes place. The transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework (DPF) of 10 July 2023. Meta Platforms, Inc. is certified under the DPF (certification is available at https://www.dataprivacyframework.gov/).

Further information on data protection at Meta can be found at: https://www.facebook.com/privacy/policy/

8.3.3 Brevo Marketing Automation

In addition to the newsletter dispatch (see Section V.4), we use marketing automation features provided by Brevo (formerly Sendinblue) of Brevo SAS, 106 Boulevard Haussmann, 75008 Paris, France. Cookies and similar tracking technologies are used to collect data about your usage behaviour on our website in order to send you personalised content and automated email communications.

The use of Brevo’s marketing automation features is only carried out with your consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

Processing takes place on servers within the European Union. A transfer of personal data to third countries does not take place as a matter of principle.

Further information on data protection at Brevo can be found at: https://www.brevo.com/de/legal/privacypolicy/

8.4 Push notifications

8.4.1 WonderPush

We use the service WonderPush provided by WonderPush SAS, France, on our website to send you web push notifications via your browser. Push notifications serve to inform you about current offers, news and other relevant information. In order to send you push notifications, a push token (a unique identifier for your browser) and, where applicable, information about your usage behaviour are processed.

The use of WonderPush and the sending of push notifications are only carried out with your express consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time by deactivating push notifications in your browser settings or by adjusting the settings in our consent tool.

Processing takes place on servers within the European Union.

Further information on data protection at WonderPush can be found at: https://www.wonderpush.com/privacy-policy

8.5 Search functionality

8.5.1 Morayne

We use the search service Morayne on our website to provide you with an intelligent product search. When you use the search function on our website, your search queries and, where applicable, further usage data are transmitted to Morayne’s servers and processed there in order to display relevant search results to you.

The use of Morayne is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

8.6 Spam protection

8.6.1 Google reCAPTCHA

We use Google reCAPTCHA on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google reCAPTCHA serves to distinguish whether input on our website is made by a human or abusively through automated, machine processing. For this purpose, Google reCAPTCHA analyses the behaviour of the visitor on our website based on various characteristics. This analysis begins automatically as soon as the visitor enters a page with integrated reCAPTCHA. During the analysis, various information is evaluated (e.g. IP address, time spent on the page, mouse movements). The data captured during the analysis is forwarded to Google.

The use of Google reCAPTCHA is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

Further information on data protection at Google reCAPTCHA can be found at: https://policies.google.com/privacy

8.7 Integration of external content

8.7.1 YouTube

We embed videos from the YouTube platform on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The embedding is carried out in enhanced data protection mode (via the domain youtube-nocookie.com), so that initially no cookies are set on your terminal device before you play a video. However, when a video is played, data is transmitted to YouTube. This includes in particular your IP address, the URL of the page on which the video is embedded, as well as information about your browser and operating system. If you are logged in to Google, Google may associate this information with your user account.

The embedding of YouTube videos is only carried out with your consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

Further information on data protection at YouTube can be found at: https://policies.google.com/privacy

8.7.2 Google Maps

We may use the mapping service Google Maps on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). When loading a page with embedded Google Maps, a connection to Google’s servers is established. In this process, data is transmitted to Google, in particular your IP address and the map section you have selected.

The integration of Google Maps is only carried out with your consent. The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future by adjusting the settings in our consent tool.

Further information on data protection at Google Maps can be found at: https://policies.google.com/privacy

8.7.3 OpenStreetMap

On certain product pages (in particular on pages relating to solar modules and solar panel kits) we use the mapping service OpenStreetMap as part of an interactive solar yield widget. Map tiles are loaded from the servers of the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom. When loading the map tiles, your IP address is transmitted to the servers of the OpenStreetMap Foundation. The solar yield widget enables you to calculate the expected solar yield for the respective product by selecting a location on the map. The solar yield calculation itself is carried out on our own servers; the location data entered (latitude and longitude) is used exclusively for the calculation and is not stored.

The legal basis for the integration of OpenStreetMap is Article 6(1)(f) GDPR to safeguard our legitimate interest in providing a user-friendly location selection for the solar yield calculation. Your right to object to processing pursuant to Article 21 GDPR remains unaffected.

A transfer of personal data to the United Kingdom takes place. The transfer is based on the adequacy decision of the European Commission pursuant to Article 45 GDPR of 28 June 2021.

Further information on data protection at OpenStreetMap can be found at: https://wiki.osmfoundation.org/wiki/Privacy_Policy

VI. Period for which your personal data is stored or criteria for determining this period

Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the scope of the statutory provisions and in accordance with the information in this Privacy Policy. Information on the period for which your personal data is stored or the criteria for determining this period can be found in the information on the processing of your personal data for the individual processing purposes in this Privacy Policy.

VII. Your rights

1. Overview

In order to ensure fair and transparent processing of personal data, you as the data subject have the following rights under data protection provisions:

the right of access pursuant to Article 15 GDPR,

the right to rectification pursuant to Article 16 GDPR,

the right to erasure pursuant to Article 17 GDPR,

the right to restriction of processing pursuant to Article 18 GDPR,

the right to data portability pursuant to Article 20 GDPR

the right to withdraw consent at any time pursuant to Article 7(3) GDPR,

the right to object to processing pursuant to Article 21 GDPR, about which we inform you separately below

and the right to lodge a complaint with the supervisory authority pursuant to Article 77 GDPR, about which we inform you separately below.

2. Your right to object to processing

The processing of personal data is lawful where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, Article 6(1)(f) GDPR.

You as the data subject have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR; this also applies to profiling based on these provisions.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject, or the processing serves the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing. If you as the data subject object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3. Your right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you as the data subject have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

VIII. Information on the basis for providing your personal data and on possible consequences of failure to provide it

Insofar as this is necessary in order to ensure fair and transparent processing, you can find information on the basis for providing your personal data and on possible consequences of failure to provide it in the information on the processing of your personal data for the individual processing purposes.

Information on the authenticity of customer reviews

Every consumer review is checked for authenticity before publication to ensure that reviews only come from consumers who have actually purchased/used the products being reviewed.

The review is checked by only allowing reviews to be submitted after logging into a registered customer account through which a purchase was made.