Privacy policy

INFORMATION ON THE COLLECTION OF PERSONAL DATA

(1) In the following we inform about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) Responsible person acc. Art. 4 par. 7 EU Data Protection Regulation (DS-GVO) is data protection officer Luca Renerken, aesthevore, Postfach 91 10 in 47748 Krefeld. E-mail: [email protected]

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are legal retention obligations.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we also state the specified criteria for the storage period.

YOUR RIGHTS

(1) You have the following rights against us regarding the personal data concerning you:

• Right to information,
• Right to rectification or deletion,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

(1) In the case of merely informative use of the website, i.e. if you do not transmit information to us in any other way, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access status/HTTP status code
• Data volume transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

(2) In addition to the aforementioned data, cookies may be stored on your computer when you use our website – already now or in the future. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which the entity that sets the cookie (in this case by us) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the internet offer as a whole more user-friendly and effective (legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO). In principle, you can delete cookies at any time via the settings in your browser or block them from the outset.

In addition, we also use so-called local storage as well as session storage technology (also called “local data” and “local storage” as well as “session storage”). With Local Storage, data is stored locally in your browser’s cache, which persists and can be read even after you close the browser window or exit the program, unless you actively clear the cache. Local Storage allows your preferences when using our websites to be stored on your computer and used by you. The function of Session Storage corresponds in content to the Local Storage described, except that the corresponding data is automatically removed from the cache of your browser immediately after closing the browser (“session”).

Third parties cannot access the data stored in the local storage and in the session storage. They will not be passed on to third parties and will not be used for advertising purposes. In particular, this technology is used to present our content to you in an appealing graphical presentation (e.g. pop-up windows, etc.) and to personalize our offer and the navigation on our pages for you. You manage LocalStorage content in the browser via the settings for “Chronicle” or “Local Data”, depending on which browser you use. If you should restrict the described functions accordingly, functional restrictions may possibly occur

(3) In principle, we use the techniques described above solely to improve the user-friendliness and functionality of our websites. We use these techniques in the legitimate interest to be able to make them an attractive fully functional offer based on Article 6 para. 1 lit. f GDPR. If, in addition, consent to the use of cookies is required, we will ask you to give your consent at the appropriate point. In the case of the use of cookies based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. If you do not want the techniques described above to be used, then you can set this individually in the settings of your respective browser. There you may also find a list of the cookies used, if actually used.

(4) Special statement on cookies:

1. a) This website may use the following types of cookies, the scope and functionality of which are explained below:

• Transient cookies (for this b)
• Persistent cookies (in addition c).

1. b) Transient cookies are automatically deleted when you close the browser. These include in particular theSession cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
2. c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
3. d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.

HOSTING

For the technical operation of the website we use the following hosting provider: Kinsta Inc, Attn: Privacy and Data, Protection Team, 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA, [email protected]. Log files (see above) are transferred to Kinsta in the process. Kinsta uses the Google Cloud Platform service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Log files are transferred to Google pseudonymously, so that no conclusions can be drawn about your person. Kinsta implements current compliance measures for international data transfers with Google. These measures are based on the EU Standard Contractual Clauses (SCCs). The legal basis for the use of Kinsta is Art. 6 para. 1 p. 1 lit. f DSGVO (web hosting). For more information, visit: https://kinsta.com/legal/privacy-policy/. We have concluded an order processing contract in accordance with Art. 28 DSGVO.

OTHER FEATURES AND OFFERS OF OUR WEBSITE

(1) In addition to the purely informational use of our website, we may offer various services that you can use if you are interested. For this purpose, you will usually have to provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. They have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.

(3) Furthermore, we may pass on your personal data to third parties if promotional participations, competitions, contract conclusions or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or below in the description of the offer.

(4) If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

OBJECTION OR REVOCATION AGAINST THE PROCESSING OF YOUR DATA

(1) If you have given your consent to the processing of your data, you may revoke this consent at any time. Such revocation will affect the permissibility of processing your personal data after you have expressed it to us.

(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the merits of the case and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the following contact details: Data Protection Officer Luca Renerken, aesthevore, P.O. Box 91 10 in 47748 Krefeld. E-mail: [email protected]

DURATION OF THE STORAGE OF PERSONAL DATA

We store personal data in accordance with the statutory retention periods (e.g. retention periods under commercial and tax law). Subsequently, the respective data will be deleted, provided that they are not required for the fulfillment of the contract and/or there is no legitimate interest in storing them.

SPECIAL FEATURES OF OUR WEBSITES

USE OF THE BLOG FUNCTIONS

In our blog we publish various articles on topics related to our activities.

USE OF OUR WEBSHOP

(1) If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory information necessary for the processing of contracts is marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR.

(2) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data will only be used to comply with legal obligations.

NEWSLETTER

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent form.

(2) For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to [email protected] or by sending a message to the contact details given in the imprint.

SOCIAL MEDIA AND THIRD PARTIES

(1) We currently use the following social media plug-ins or links: Facebook, Instagram, Twitter. We use the so-called two-click solution for social media plug-ins. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the mark on the box above its initial letter or logo. We open the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

(2) We have neither influence on the collected data and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f GDPR. If, in addition, consent to the use of cookies is required, we will ask you to give your consent at the appropriate point. In the case of the use of cookies based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

(5) For further information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the data protection declarations of these providers communicated below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

(6) Addresses of the respective plug-in providers and URL with their privacy notices:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications as well as

https://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, https://help.instagram.com/155833707900388.

Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

GOOGLE WEB FONTS

(1) This site uses so-called web fonts provided by Google for the uniform display of fonts (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO). Google fonts are loaded directly from a Google server. To make this technically possible, your browser sends a request to Google. Together with this request, further information is sent to the Google. This is the name of the browser used, the version of the browser, the website from which the request was triggered, your operating system, as well as your IP address and the language settings of your browser. If your browser does not support web fonts, a default font is used by your computer. For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://www.google.com/policies/privacy/. The legal basis for the data transfer to Google is Art. 6 para. 1 p. 1 lit. f GDPR. In addition, if consent is required for the use of Goolge Web Fonts cookies, we will ask you to provide your consent at the appropriate point. In the case of the use of Goolge Web Fonts cookies based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(2) For more information on the purpose and scope of data collection and its processing by the third-party provider, please refer to the provider’s privacy policy. There you will also receive further information about your rights in this regard and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. This is a service provided as of 01/22/2019 by Google Ireland Limited (“Google”), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We cannot rule out the possibility that Google will continue to process your personal data in the USA as well. Google LLC. (USA) has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. In addition, Goolge Web Fonts is used under the Google APIs Terms of Service, available at https://developers.google.com/terms?authuser=1#i_google_controller-controller_data_protection_terms. Thus, to protect your personal data, we have also agreed with Goolge on the Google Controller-Controller Data Protection Terms(https://business.safety.google/controllerterms/?authuser=1), which meet the requirements of Art. 26 and Art. 46 of the GDPR (“Shared Responsibility”).

YOUTUBE VIDEO INTEGRATION

(1) To improve our service, we have integrated YouTube videos into our online offer, which are stored on https://www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under “Collection of personal data when visiting our website” is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. The legal basis for the data transfer to YouTube is Art. 6 para. 1 p. 1 lit. f GDPR. If, in addition, consent to the use of cookies is required, we will ask you to give your consent at the appropriate point. In the case of the use of cookies based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(3) For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also receive further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. This is a service provided as of 01/22/2019 by Google Ireland Limited (“Google”), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We cannot rule out the possibility that Google will continue to process your personal data in the USA as well. Google LLC. (USA) has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

YOUTUBE VIDEO INTEGRATION

(1) To improve our service, we have integrated Vimeo videos into our online offer, which are stored on https://vimeo.com/ and can be played directly from our website.

(2) By visiting the website, Vimeo receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under “Collection of personal data when visiting our website” is transmitted. This occurs regardless of whether Vimeo provides a user account through which you are logged in or whether no user account exists. If you are logged in to Vimeo, your data is directly assigned to your account. If you do not want the assignment with your profile at Vimeo, you must log out before activating the button. Vimeo stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Vimeo to exercise this right. The legal basis for the data transfer to Vimeo is Art. 6 para. 1 p. 1 lit. f GDPR. If, in addition, consent to the use of cookies is required, we will ask you to give your consent at the appropriate point. In the case of the use of cookies based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(3) For more information on the purpose and scope of data collection and its processing by Vimeo, please see the privacy policy. There you will also receive further information about your rights and setting options to protect your privacy: https://vimeo.com/privacy. This is a service provided by Vimeo, Inc, 555 West 18th Street, New York, New York 10011, USA, Email: [email protected], a company incorporated and operated under the laws of the United States of America (registration number: 4550462, Delaware). We cannot exclude that Vimeo also processes your personal data in the USA. Vimeo has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

USE AND APPLICATION OF THE PAYMENT SERVICE PROVIDER PAYPAL

(1) The controller has integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which are virtual personal or business accounts. In addition, PayPal offers the possibility of processing virtual payments via credit cards if a user does not maintain a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal allows you to initiate online payments to third parties or receive payments as well. PayPal also assumes trustee functions and offers buyer protection services.

(2) The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

(2) If the data subject selects “PayPal” as a payment option during the ordering process in our online store, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing.

(3) The personal data transmitted to PayPal are usually first name, last name, address, e-mail address, IP address, telephone number, cell phone number or other data necessary for payment processing. For the processing of the purchase contract are also such personal data necessary, which are related to the respective order.

(4) The purpose of transmitting the data is payment processing and fraud prevention. The controller will transfer personal data to PayPal in particular if there is a legitimate interest for the transfer. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness.

(5) PayPal may disclose the personal data to affiliated companies and service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process the data on behalf.

(6) The data subject has the possibility to revoke the consent to the handling of personal data at any time vis-à-vis PayPal. A revocation does not affect personal data that must necessarily be processed, used or transmitted for (contractual) payment processing.

(7) The applicable privacy policy of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-fullabgerufen.

USE AND APPLICATION OF THE PAYMENT SERVICE PROVIDER KLARNA

If you decide to use Klarna’s payment services, we ask for your consent that we may transfer the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit reporting agencies mentioned in Klarna’s Privacy Policy may be used for identity and credit checks.

You can revoke your consent to this use of personal data at any time to Klarna.

USE OF CLOUDFLARE

(1) This site uses functions of CloudFlare for uniform technical implementation. Cloudflare, Inc. is a US company that provides a content delivery network, Internet security services, and distributed DNS services that reside between the visitor and the Cloudflare user’s hosting provider and act as a reverse proxy for websites(https://de.wikipedia.org/wiki/Cloudflare). CloudFlare offers you, as a visitor to our website, faster access to the content of times by storing the page content on Cloudflare’s network. In addition, CloudFlare provides security for our websites on the CloudFlare network, e.g. DDoS protection and web firewall. CloudFlare also uses a cookie(__cfduid) for better internet security and identification of internet users. The legal basis for the data transfer to CloudFlare is Art. 6 para. 1 p. 1 lit. f GDPR. If, in addition, consent to the use of cookies is required, we will ask you to give your consent at the appropriate point. In the case of the use of cookies based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(2) For more information on the purpose and scope of data collection and processing by the third-party provider, please refer to the provider’s privacy policy. There you will also receive further information about your rights in this regard and setting options for protecting your privacy: https://www.cloudflare.com/de-de/privacypolicy/. This is a service provided by Cloudflare, Inc, 101 Townsend St,, San Francisco, CA 94107, USA, privacyquestions@cloudflare. We cannot exclude that CloudFlare continues to process your personal data also in the USA. Cloudflare, Inc. (USA) has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

WEB ANALYTICS

USE OF GOOGLE ANALYTICS

(1) This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this website: Disable Google Analytics.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form, thus excluding the possibility of personal references. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is thus immediately deleted.

(5) We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases where personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR. If, in addition, consent to the use of cookies is required, we will ask you to give your consent at the appropriate point. In the case of the use of cookies based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(6) Third Party Provider Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4,Ireland, Fax: +353 (1) 436 1001. User Terms: https://www.google.com/analytics/terms/de.html, Privacy Policy Overview: https: //www.google.com/intl/de/analytics/learn/privacy.html , and Privacy Policy: https: //www.google.de/intl/de/policies/privacy.