Data protection notices

The protection of your privacy when using our website is particularly important to us. In the following we therefore inform you about the collection of anonymous and personal data.

1. Provider / Controller within the meaning of data protection law

This website is a service of the company

carmoto tectum GmbH
Schopenstehl 20
20095 Hamburg
Tel.: +49 40 - 573 083 610
Fax.: +49 40 - 573 083 696
E-Mail: info@carsale24.com
Web: www.carsale24.com

represented by the managing directors Lars Häger, Ulf Voigt
registered in the commercial register of the Hamburg
Local Court under commercial register number: HRB 123228

2. Data protection officer

ecolaw Gesellschaft für Datensicherheit und Datenschutz mbH
represented by the managing director, Mr Florian König
Dienerreihe 2, D – 20457 Hamburg
Tel. +49 (0) 40 30 39 49 – 13
Fax +49 (0) 40 30 39 49 – 29
datenschutz@ecolaw.de
https://www.ecolaw.de

Registered in the commercial register of the Hamburg Local Court under HRB 199394

3. Competent supervisory authority

The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str 22, 7th floor, 20459 Hamburg, Tel.: 040/42854-4040, Fax: 040/42854-4000, E-Mail: mailbox@datenschutz.hamburg.de

4. Fundamentals

Your personal data (e.g. salutation, name, address, email address, phone number, bank details, credit card number) are stored and processed by us in compliance with the relevant statutory data protection provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other data-related laws [e.g. the German Telemedia Act (TMG)].

Under the GDPR and other regulations, the processing and use of data is only permitted if the GDPR or another legal provision expressly permits it or if the data subject consents (prohibition subject to permission). On the basis of these legal grounds, the processing and use of data is in particular only permitted if:

the data subject has given their consent to the processing of the personal data concerning them for one or more specific purposes;
the processing is necessary for the performance of a contract to which the data subject is party, or in order to take pre-contractual steps at the data subject’s request;
the processing is necessary for compliance with a legal obligation to which the controller is subject;
the processing is necessary in order to protect the vital interests of the data subject or of another natural person;
the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Accordingly, we use and process your personal data only within the permitted framework of contract processing or if you have given informed consent.

As a matter of principle, we do not pass on your personal data, including your address and email address, to third parties. Exceptions to this are our service partners who require the transfer of data to handle the contractual relationship, or where we have expressly pointed this out. In these cases, however, the scope of the transferred data is always limited to the necessary minimum.

5. Anonymous data collection

In principle you can visit our website without telling us who you are. We only learn:

the name of your internet service provider
the website from which you visit us (referrer URL)
the pages of our website that you visit
the date and time of access as well as the volume of data transferred
a message about successful access
browser type and version of the requesting computer/device
the operating system of the requesting computer/device
the IP addresses of the requesting computer/device

This information is evaluated only for statistical purposes. As an individual user you remain anonymous in this respect; a merging with your personal data does not of course take place, unless you have expressly consented to this or one of the cases listed below applies.

6. Collection of personal data when visiting our website and using our services in general

As a matter of principle, we only collect personal data if you provide it to us voluntarily and of your own accord. This may occur, for example, with an order or to perform a contract, a survey, or when registering for services for which registration with personal data is required. In such cases we generally only collect the data we are legally authorised to collect and which are strictly necessary to fulfil the services you request. The respective strictly required data fields are marked with an asterisk. All additional data you provide is purely voluntary.

For the highest possible security of your data, it is transmitted in encrypted form via SSL/TLS encryption. Your data is stored and processed by us only on servers within the European Union. A transfer to third countries does not take place as a matter of principle, unless we are entitled and/or obliged to do so on the basis of a legal provision, or you have expressly consented to this beforehand.

7. Data processing for the performance of the contract

7.1 Purpose of processing

If you would like to list and sell your car with us, you provide your personal data as part of registration. The mandatory details marked with an asterisk are personal data required to conclude a contract with us. For some services (such as the creation of a listing by an appraiser) we have to pass on your data to service providers commissioned by us. The processing of the data you enter therefore always takes place for the purpose of performing the contract.

7.2 Legal basis

The legal basis for this processing is Art. 6 (1)(b) GDPR.

7.3 Categories of recipients

As a matter of principle we do not pass on your personal data to third parties. Depending on the desired service, data may be passed on to the following recipients, e.g.:

buyer of your vehicle (dealer)
transport service provider for picking up your vehicle
payment service providers, banks
vehicle providers in the context of your trade-in (dealers, manufacturers)
further partners if commissioned by you (e.g. appraiser, registration service for deregistration).

Your personal data will not be transmitted to third parties for purposes other than those listed below. In particular, no data will be passed on to third parties—for example, for advertising purposes—without your express consent.

We only pass on your personal data to third parties if:

you have given your express consent pursuant to Art. 6 (1) sentence 1(a) GDPR;
this is necessary pursuant to Art. 6 (1) sentence 1(b) GDPR for the handling of contractual relationships; there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1(c) GDPR; or the disclosure is necessary pursuant to Art. 6 (1) sentence 1(f) GDPR for the assertion, exercise or defence of legal claims.

7.4 Storage period

We store the data required for contract processing until the expiry of the statutory warranty and, where applicable, contractual guarantee periods.

The data required under commercial and tax law we retain for the legally specified periods, regularly ten years (cf. Section 257 German Commercial Code (HGB), Section 147 German Fiscal Code (AO)). Email addresses that we receive solely for sending newsletters we delete immediately as soon as you unsubscribe from the newsletter.

8. Processing of applicant data

The personal data you voluntarily provide in the context of a job posting are processed by us exclusively for the advertised position to which you applied. In addition to name and address, this regularly also concerns contact details and information from your application documents. We only process special categories of data if you have voluntarily provided them to us or we have a special legal permission or obligation for this. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG (new) and, where applicable, Art. 6 (1)(b) GDPR.

Should the application process not lead to employment, your data will be deleted after six months, unless you have given us your express consent to store your application documents for later consideration. In such a case, deletion takes place after 24 months at the latest.

You can withdraw your consent at any time with effect for the future by sending an email to info@carsale24.com.

9. Bookingtime

On our website we use the service “Bookingtime” from Bookingtime GmbH, Robert-Koch-Straße 26, 20249 Hamburg, for arranging appointments. Bookingtime enables you to book an appointment with us over the internet. You use this service voluntarily. All entries, which also include personal data, are voluntary, even if they are declared as mandatory in the booking process. The legal basis for this processing is Art. 6 (1)(a) GDPR. You can withdraw your consent at any time, free of charge and with effect for the future, by email to info@carsale24.com.

Further information on data protection at Bookingtime can be found at: https://www.onlinetermine.com/datenschutz

10. Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data, are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent, unless disclosure is necessary to fulfil the service you requested. The data remains with us until you ask us to delete it, withdraw your consent or the purpose for storage no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected. Please direct the withdrawal to info@carsale24.com.

11. Recording of telephone calls (sale of a vehicle)

If you would like to list and sell a car with us, you can generally do this yourself on our website. In special exceptional cases, however, you may wish to carry out the sale by telephone. In order to conclude a binding purchase contract, we must be able to prove that the contract was concluded. Therefore, such telephone sales are recorded by us. You can of course refuse this recording; in that case we cannot carry out the telephone sale. The legal basis is Art. 6 (1)(a) GDPR.

Before the recording starts you are informed about it by our staff; in addition, an automated announcement indicates the beginning. You have the option to object to the recording at any time. Processing takes place exclusively in Germany, transmitted and stored in encrypted form. The storage period is 30 days at the commissioned service provider; on our side the retention period is 10 years due to statutory documentation and retention obligations. Questions to info@carsale24.com.

12. Use of cookies

We use cookies to make visiting our website attractive and to enable the use of certain functions. Cookies are small text files that are stored on your computer. Most of the cookies we use are deleted again after the end of the browser session (session cookies). Other cookies remain on your computer and enable us to recognise your computer on your next visit (persistent cookies). On your first visit we show you a pop-up (cookie manager). You can deactivate the use of cookies via your browser at any time.

Instructions for adjusting the cookie settings can be found for Mozilla Firefox, Microsoft Edge, Microsoft Internet Explorer, Google Chrome, Apple Safari and Opera on the respective support pages of the browser providers (links in the original).

Mozilla Firefox:
https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectlocale=de&redirectslug=Cookies+l%C3%B6schen

Microsoft Edge:
https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Microsoft Internet Explorer
https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Google Chrome:
https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de

Apple Safari:
https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera:
https://help.opera.com/de/latest/web-preferences/

13. BootstrapCDN

In order to deliver all subpages of our website to you quickly and securely across all devices, we use the BootstrapCDN content delivery network provided by StackPath, LLC, 2021 McKinney Avenue, Suite 1100, Dallas, TX 75201, United States of America (hereinafter referred to as ‘BootstrapCDN’). A Content Delivery Network (CDN) is a network of regionally distributed servers connected to one another via the internet. This network enables content – particularly very large files – to be delivered quickly, even during periods of high traffic. This also constitutes our overriding legitimate interest under Article 6(1)(f) of the GDPR in the fast, reliable and efficient provision of our website’s content. In addition, your data may be processed for the following purposes:

Analysis
Advertising delivery
Content display

BootstrapCDN works by delivering so-called JavaScript libraries to your browser. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the BootstrapCDN service. Accordingly, the legal basis for this processing is Article 6(1)(a) of the GDPR. When your browser downloads a file from BootstrapCDN, your IP address is transmitted whilst you are connected to the BootstrapCDN server. In addition, further personal data is also sent and stored. BootstrapCDN may therefore receive, collect and store the following data:

Usage data
IP address
Browser information
Domain name
URLs
Time of access or retrieval
Device operating system

BootstrapCDN has servers located in various countries, and your data may also be stored outside the European Economic Area. Consequently, BootstrapCDN may transfer the data it collects to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. You may not even be informed of such access. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. Data processing is primarily carried out by BootstrapCDN. This may mean that, in some cases, data is processed and stored without being anonymised. It may also happen that this data is linked to data from other BootstrapCDN services where you have a user account. Below is a list of the countries to which the data is transferred. This may be for various purposes, e.g. for storage or processing.

United States of America

In addition, according to BootstrapCDN, your data will be transferred to the recipients listed below:

StackPath, LLC
Google Ireland Limited

BootstrapCDN retains personal data processed on our behalf for as long as is necessary to provide the services offered, to comply with legal obligations, to resolve disputes and to enforce agreements, or until you withdraw your consent with future effect. If you wish to prevent this data transfer, you can install a JavaScript blocker (see, for example, https://noscript.net/) or disable the execution of JavaScript code in your browser. Please note, however, that this will mean the website can no longer provide its usual service (such as fast loading speeds). If you do not consent to the processing of your personal data as described here, you cannot use BootstrapCDN. Below you will find the email address of the data protection officer at the company responsible for processing: privacy@stackpath.com Further information on data protection can be found in BootstrapCDN’s privacy policy, which is available via the following link: https://www.jsdelivr.com/terms/privacy-policy

14. Google Tag Manager

We use ‘Google Tag Manager’ on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as ‘Google’). Google Tag Manager is a tag management system. It enables users to update tracking codes and associated code snippets – collectively referred to as ‘tags’ – on their website or mobile app. The Google Tag Manager tool, which implements the tags, is a cookie-free domain and does not itself collect any personal data. Google Tag Manager triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented using Google Tag Manager. The legal basis for this processing is our legitimate interest under Article 6(1)(f) of the GDPR in the efficient design of our website and the management of the integrated tags. The following data is processed when using Tag Manager:

Aggregated data on tag triggering

If you are logged into your Google account, you are allowing Google to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Google account. Furthermore, when Google Analytics is used, this data is shared with the following recipients:

Google Ireland Limited
Alphabet Inc.
Google LLC

United States of America
Singapore
Chile
Taiwan

If you wish to prevent data being passed on, you can opt out of Google Analytics. Regardless of this, we recommend that you regularly log out of your user account on a social network after using it, and in particular before activating embedded content, as this will help you avoid your activity being linked to your profile with the relevant provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Data Protection Clauses of the European Commission. Further information on data protection and Google’s use of data can be found on the following Google website:

Google Tag Manager Terms of Use: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/
Google Tag Manager FAQ:
https://support.google.com/tagmanager/?hl=de#topic=3441530
Google Privacy Policy:
https://policies.google.com/privacy?hl=de&gl=de

15. Google Web fonts

On our website, we use fonts provided by Google to ensure a consistent visual presentation. ‘Google Fonts’ is a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as ‘Google’). The legal basis for this processing is our legitimate interest in ensuring an attractive and clear layout for our website, in accordance with Article 6(1)(f) of the GDPR.

When you visit our website, a connection is established with Google’s servers and the relevant font is loaded into your browser cache. The following data is processed in the process:

IP address
Aggregated user data
Referrer URL
CSS requestFont requests

If you are logged into your Google account, you allow Google to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Google account. Furthermore, when using Google Fonts, this data is transferred to the following recipients:

Alphabet Inc.
Google LLC
Google Ireland Limited

Google may also transfer the data collected to another country. Please note that Google may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal recourse. You may not even be informed of this. According to Google, your data may be transferred worldwide. This may be for various purposes, e.g. for storage or processing. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Data Protection Clauses of the European Commission. If your browser does not support web fonts or if you refuse to use them, a standard font from your computer will be used. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

16. Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform (Usercentrics) provided by Usercentrics GmbH, Rosental 4, 80331 Munich. Usercentrics collects log file data and consent data via JavaScript. This JavaScript enables us to inform users about their consent to specific cookies and other technologies on our website, and to obtain, manage and document this consent.

The legal basis for processing the data is our legitimate interest under Article 6(1)(f) of the GDPR in the legally compliant collection and documentation of consent. The aim is to understand users’ preferences and act accordingly.

The data will be deleted as soon as it is no longer required for our logging purposes. The cookie is valid for 60 days. Consent data must be retained for 6 years in accordance with Section 257 of the German Commercial Code (HGB). The record of the withdrawal of previously given consent is retained for three years. This retention is based, on the one hand, on our accountability obligation under Article 5(2) of the GDPR. This obliges us to ensure that the processing of personal data complies with the General Data Protection Regulation. By contrast, the retention period under the standard limitation period pursuant to Section 195 of the German Civil Code (BGB) is three years.

You can permanently disable JavaScript at any time by adjusting the relevant settings in your browser, which would also prevent Usercentrics from running the JavaScript.

Further information on Usercentrics’ data protection practices can be found at: https://usercentrics.com/de/datenschutzerklarung/

17. Ad4Mat

On our website, we use “Ad4Mat”, a service provided by advanced store GmbH, Alte Jakobstraße 79 / 80, 10179 Berlin, Germany (hereinafter referred to as “Ad4Mat”). Ad4Mat stores and processes information about your user behaviour on our website. We use Ad4Mat for marketing and optimisation purposes, in particular to analyse the use of our website and to continuously improve individual functions, offers and the user experience. By statistically analysing user behaviour, we can improve our offering and make it more interesting for you as a user. To this end, Ad4Mat uses not only pixels but also cookies – small text files that are stored locally in your web browser’s cache on your device and which enable an analysis of your use of our website. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the Ad4Mat service. Accordingly, the legal basis for this processing is Article 6(1)(a) of the GDPR.

As soon as you consent to the use of Ad4Mat on our website, a connection is established with Ad4Mat’s servers. Below you will find all (personal) data processed by or through the use of this service:

Search terms
Products viewed
Browser information
Device information
IP address
Date and time of visit
Referrer URL
Log file data
Browser type
Browser version
Device operating system
Geographical location
Pages viewed
Internet service provider

In addition, the following recipients may receive your personal data:

Google LLC
advanced store GmbH

In this context, please note that when you use Google services, information about your use of this website is generally transmitted to a Google server in the USA and stored there. If you are logged into your Google account, you allow Google to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Google account. Google may also transfer the data collected to another country. Please note that Google may transfer data outside the European Union and the European Economic Area to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. It may also be the case that you are not even informed of this.

The user data collected is stored for up to 12 months from the date of collection. The cookies used in this context are listed below:

adspaceId
catId
config
country
multi_adv
productId
ret_on
search_name

The retention period is the length of time for which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes. The user data collected is stored for up to 12 months from the date of collection, unless you withdraw your voluntary consent beforehand with effect for the future.

Further information on data protection can be found in the privacy policy of advanced store GmbH, which you can view via the link below:
https://www.ad4mat.com/privacy-policy/

Click here to read advanced store GmbH’s cookie policy.
https://www.ad4mat.com/privacy-policy

Click here to withdraw your consent across all domains operated by the data controller.
https://www.advanced-store.com/en/data-privacy/

18. ADCELL

As part of our website, we use the “ADCELL” affiliate programme operated by Firstlead GmbH, Rosenfelder Str. 15–16, 10315 Berlin (hereinafter referred to as “ADCELL”). If you click on an advert containing an affiliate link, ADCELL will place a cookie on your computer for conversion tracking. The cookies serve the purpose of ensuring correct billing within the affiliate programme by recording the performance of an advertising medium. The cookies recognise that you have clicked on the advert and enable the origin of the order to be traced back to the advertiser. ADCELL also uses so-called tracking pixels. These allow information such as visitor traffic on the pages to be analysed. The information generated by cookies and tracking pixels regarding the use of this website (including the IP address) and the delivery of advertising formats is transmitted to an ADCELL server and stored there. Among other things, ADCELL can detect that the affiliate link on this website has been clicked. ADCELL may pass on this (anonymised) information to contractual partners under certain circumstances; however, data such as the IP address is not combined with other stored data. When you visit this website, you will be asked to set your privacy preferences. Here, you have the option to consent to or refuse the use of the ADCELL service. Accordingly, the legal basis for this processing is Article 6(1)(a) of the GDPR. As soon as you consent to the use of ADCELL on our website, a connection is established with ADCELL’s servers. Below is a list of all (personal) data collected by or through the use of this service:

Partner identification number
Ads clicked
Referrer URL
Timestamp
Visitor ID

Furthermore, the following methods are used to store information on a user’s device:

ADCELLpidX
This cookie is set when a user clicks on an ADCELL advert and contains information about the publisher, the advert, the SubID, the referrer and a timestamp.
Type: cookie
Duration: session
Domain: Adcell.com

ADCELLspidX
This cookie is set after clicking on an ADCELL advert and contains information about the publisher, the advert, the SubID, the referrer and the timestamp.
Type: cookie
Duration: session
Domain: Adcell.com

ADCELLvpidX
This cookie is set after clicking on an ADCELL advert and contains information about the publisher, the advert, the SubID, the referrer and the timestamp.
Type: cookie
Duration: session
Domain: adcell.com

ADCELLjhX
This cookie is set after repeated views of or clicks on an ADCELL advert. This allows the user’s journey across the various publishers to be tracked.
Type: cookie
Duration: session
Domain: adcell.com

ADCELLnoTrack
This cookie is set if the user does not wish to be tracked.
Type: cookie
Duration: Session
Domain: adcell.com

According to ADCELL, your data is processed within the European Union and, apart from Firstlead GmbH, there are no other recipients of your data. The data collected in this process will be deleted as soon as it is no longer required for the purposes of processing or you withdraw your voluntary consent with effect for the future. Below you will find the email address of ADCELL’s Data Protection Officer: datenschutz@adcell.de. Further information on data protection at ADCELL can be found in Firstlead GmbH’s privacy policy, which you can view via the following link: https://www.adcell.de/agb#sector_6. Click here to withdraw your consent across all domains of the data controller: https://www.adcell.de/datenschutz

19. Adform

Our website uses the ‘Adform’ service provided by Adform A/S, Wildersgade 10B, 1st floor, DK-1408 Copenhagen, Denmark (hereinafter referred to as ‘Adform’). This service is used to display interest-based advertisements to visitors to this website as part of the Adform advertising network. In this context, Adform stores cookies on your computer which enable it to recognise you when you visit websites that are part of the Adform advertising network. On these sites, you may then be shown adverts relating to content you have previously viewed on websites that use Adform’s retargeting technology. Accordingly, the purposes of the processing are:

Analysis
Conversion Tracking
Optimisation
Retargeting
Targeting

When you visit this website, you will be asked to set your privacy preferences. Here, you have the option to consent to or refuse the use of the Adform service. Accordingly, the legal basis for this processing is Article 6(1)(a) of the GDPR. Your consent given here is voluntary and may be withdrawn at any time with future effect. As soon as you consent to the use of Adform on our website, a connection is established with the servers of the Adform network. The following list contains all (personal) data collected by or through the use of this service:

Advertisements viewed
Browser information
Browser type
Ads clicked
Cookie ID
Date and time of visit
Device identifier
Device information
Device operating system
Geographical location
Mobile advertising IDs
Search terms
Third-party information
Unique device identifier
Usage data
Websites visited
Cross-device ID
Partner ID

In addition, Adform uses other technologies, such as pixels and web beacons. Below is an overview of the cookies used and their retention periods. According to Adform, the maximum retention period for cookie-based information is 13 months.

Name: Connect.sid
Description: Indicates whether the user’s browser accepts cookies. 1 – Cookies are allowed, 3 – Opt-out
Type: cookie
Retention period: 1 month, 29 days
Domain: adform.net

Name: TPC
Description: Indicates whether the user’s browser accepts third-party cookies
Type: cookie
Retention period: 14 days
Domain: adform.net

Name: GCM
Description: Indicates whether the partner’s cookie-matching status needs to be re-checked (determined by cookie matching).
Type: cookie
Lifetime: 1 day
Domain: adform.net

Name: CM
Description: Indicates whether the partner’s cookie match needs to be re-checked (determined by AdServing).
Type: cookie
Lifetime: 1 day
Domain: adform.net

Name: CM14
Description: Indicates whether the partner’s cookie-matching status needs to be re-checked (determined by cookie matching).
Type: cookie
Lifetime: 14 days
Domain: adform.net

Name: token
Description: Security token for opt-out functions
Type: cookie
Lifetime: Session
Domain: adform.net

Name: otsid
Description: Advertising-specific opt-out
Type: cookie
Lifetime: Session
Domain: adform.net

Name: uid
Description: This is a unique identifier
Type: cookie
Duration: 1 month, 29 days
Domain: adform.net

Name: cid
Description: This is a unique identifier
Type: cookie
Duration: 1 month, 29 days
Domain: adform.net

Name: adtrc
Description: Checks whether browser information has been collected
Type: cookie
Duration: Session
Domain: adform.net

Name: SR
Description: Sequential rotator information – contains total impressions, daily impressions, total clicks, daily clicks and date of last impression
Type: cookie
Duration: 1 day
Domain: adform.net

Name: CT
Description: Identifies membership at the time of the last click for third-party pixels on the advertiser’s pages
Type: cookie
Duration: 1 hour
Domain: adform.net

Name: EBFCD
Description: Identifies the daily frequency cap for banner expansion
Type: cookie
Duration: 7 days
Domain: adform.net

Name: CFFC
Description: Compound banner frequency cap
Type: cookie
Duration: 7 days
Domain: adform.net

According to Adform, the data collected may be transferred to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. You may not even be notified of such access. Below is a list of the countries to which the data is transferred. This may be for various purposes, e.g. for storage or processing.

Worldwide

Furthermore, other recipients of the collected data are listed below:

Adform A/S
Service partners

Below is the email address of Adform’s Data Protection Officer: dpo@adform.com

Further information on data protection can be found in Adform’s Privacy Policy, which is available via the link below:
https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/

Adform’s Cookie Policy:
https://site.adform.com/privacy-center/website-privacy/website-cookie-policy/

Click here to withdraw your consent across all domains of the data processor:
https://site.adform.com/privacy-center/platform-privacy/opt-out/

20. Adition

On our website, we use ADITION, a data-driven digital marketing service that provides an advertising platform aimed at advertisers and online marketing agencies. ADITION is operated by ADITION technologies AG, Oststraße 55, 40211 Düsseldorf, Germany (hereinafter referred to as ‘ADITION’). The platform is used to provide information, to deliver advertising on the internet and to manage the delivery of advertising. The use of the platform and the delivery of advertising are analysed statistically. For this purpose, and to prevent misuse of the platform, ADITION creates an access log. This log stores data relating to access to the platform and the retrieval of advertising. Accordingly, the purposes of the processing are:

Advertising
Analysis
Retargeting

When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the ADITION service. Accordingly, the legal basis for this processing is Article 6(1)(a) of the GDPR. As soon as you consent to the use of ADITION on our website, a connection is established with ADITION’s servers. In doing so, your personal data is processed. Below is an overview of all (personal) data collected by or through the use of this service:

Access status
Advertising identifier
Anonymised IP address
Browser information
Click path
Device information
Device operating system
Mobile advertising IDs
Referrer URL
Session ID
Usage data

In addition, Adition also uses cookies and pixels, which are listed below. The maximum potential storage period on a device is 6 months:

Name: UserID1
Description: Used to control the frequency and sequence of ad impressions per device (web browser / unique device). Targets devices that have previously interacted with the advertiser’s campaign or website. Campaign performance measurement: Measurement of the frequency of interactions per device; measurement of actions on the campaign landing page following ad interaction (view or click) using a pseudonymous UserID.
Type: cookie
Storage period: 6 months

Name: lc_${campaign_id}
Description: Controls the frequency of ad serving per device (web browser / unique device). Controls the order in which adverts are served per device. Retargeting devices that have previously interacted with the campaign or the advertiser’s website. Measurement of campaign success: Measuring the frequency of interactions per device. Measuring actions on the campaign landing page following ad interaction (view or click).
Type: cookie
Lifetime: 30 minutes

Name: lv_${campaign_id}
Description: Controls the frequency of ad serving per device (web browser / unique device). Controls the sequence of ad serving per device Retargeting devices that have previously interacted with the advertiser’s campaign or website Measuring campaign success: Measuring contact frequency per device Measuring actions on the campaign landing page following ad contact (view or click).
Type: cookie
Duration: 30 minutes

Name: LogID1_${content_unit_id}
Description: Controls the frequency of ad serving per device (web browser / unique device). Controls the order in which adverts are served per device. Retargeting devices that have previously interacted with the campaign or the advertiser’s website. Measuring campaign success: measuring the frequency of interactions per device; measuring actions on the campaign landing page following ad interaction (view or click).
Type: cookie
Duration: session

Name: fc${farm_id}
Description: Controls the frequency with which adverts are served per device (web browser / unique device). Controls the sequence in which adverts are displayed per device; retargeting devices that have previously interacted with the advertiser’s campaign or website; measuring campaign success: measuring the frequency of interactions per device; measuring actions on the campaign landing page following ad interaction (view or click).
Type: cookie
Retention period: 5 months, 27 days

Name: oo
Description: This is an opt-out cookie.
Type: cookie
Storage period: session

According to ADITION, the data collected is processed within the European Union and is deleted as soon as it is no longer required for processing or you withdraw your voluntary consent with effect for the future. According to ADITION, there are no data recipients other than ADITION technologies AG.

Below you will find the email address of the Data Protection Officer at ADITION technologies AG: office@kanzlei-raimer.com

Further information on data protection can be found in the Privacy Policy of ADITION technologies AG, which you can view via the following link: https://www.adition.com/en/privacy/

The ADITION technologies AG Cookie Policy can be found via the following link: https://www.adition.com/datenschutz/

21. Adsrvr

On our website, we use adsrvr.org, a service provided by The UK Trade Desk Ltd., 10th Floor, Barts Square, One Bartholomew Cl, London, United Kingdom (hereinafter referred to as ‘The Trade Desk’). We use this service for personalisation, advertising, analytics and website security. When you visit this website, you will be asked to set your privacy preferences. Here, you have the option to consent to or refuse the use of the Google AdServices service. Accordingly, the legal basis for this processing is Article 6(1)(a) of the GDPR. As soon as you consent to the use of adsrvr.org on our website, a connection is established with The Trade Desk’s servers. In doing so, the following information is transmitted to The Trade Desk’s server:

Unique device identifier
Platform cookie ID
Advertising identifier
IP address
Browser information
Geographical location
Device settings
Browser version
Information from third-party sources
Browsing activity

According to The Trade Desk, this data is not shared with third parties. However, this service may transfer the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. Below is a list of the countries to which the data is transferred. This may be for various purposes, e.g. for storage or processing.

Worldwide

The recipients of the data collected are listed below.

The UK Trade Desk Ltd

Click here to read The Trade Desk’s privacy policy:
https://www.thetradedesk.com/de/privacy

Click here to withdraw your consent across all domains of the data processor:
https://www.adsrvr.org

22. Bing Ads Retargeting

This website uses Bing Ads with a retargeting function to optimise advertising measures and to serve adverts. Bing Ads is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter ‘Microsoft’). In order to use this service, a cookie is placed on your device if you have accessed our website via a Microsoft Bing advert. This enables Microsoft and us to recognise that someone has clicked on an advert, been redirected to our website and reached a pre-defined landing page (‘conversion site’). We are only informed of the total number of users who clicked on this Bing advert and were then redirected to our site. Microsoft processes information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles serve to analyse visitor behaviour and are used to display advertisements. When you visit this website, you will be asked to set your privacy preferences. Here, you have the option to consent to or decline the use of the Bing Ads service. Accordingly, the legal basis for this processing is Article 6(1)(a) of the GDPR. Your consent given in this context is voluntary and may be withdrawn at any time with future effect. Once you consent to the use of Bing Ads on our website, the following (personal) data may be processed and transferred to Microsoft:

Browser language
Cookie information
Digital signature
IP address
Microsoft Click ID
Page title
Referrer URL
Screen resolution
URL
UET version
Event information
Page load time

Bing Ads may transfer the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal recourse. You may not even be notified of such access. Below is a list of the countries to which the data is transferred. This may be for various purposes, e.g. for storage or processing.

Worldwide

In addition, Bing Ads uses various methods to store information on a user’s device:

Name: _uetsid
Description: This is a tracking cookie used for targeted advertising.
Type: cookie
Lifetime: 30 minutes

Name: MUID
Description: This is a user identifier tracking cookie used to help count valid clicks for targeted advertising.
Type: cookie
Lifetime: 1 year, 25 days

Name: MUIDB
Description: This is a user identifier tracking cookie used by Microsoft Bing Ads for targeted advertising.
Type: cookie
Lifetime: 1 year, 25 days

Name: _uetvid
Description: This is used to track visitors across multiple websites in order to display relevant adverts based on the visitor’s preferences.
Type: cookie
Storage period: 16 days

Further information on data protection and the cookies used by Microsoft and Bing Ads can be found at the following link: https://privacy.microsoft.com/de-de/privacystatement .

23. DoubleClick Ad

On our website, we use “DoubleClick”, an online marketing tool provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Among other things, DoubleClick uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device. By means of a cookie ID, Google records which adverts are served in which web browser. This makes it possible to prevent adverts from being displayed more than once. Using the cookie IDs, DoubleClick can also record so-called conversions that relate to advert requests. This is the case, for example, when you see a DoubleClick advert and later access the advertiser’s website with the same web browser and make a purchase there. According to Google, the aforementioned cookies do not contain any personal data. Through the use of DoubleClick, your browser automatically establishes a direct connection with Google’s server. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the DoubleClick service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you consent to the use of DoubleClick on our website, a connection is established with Google’s servers. The following list contains all (personal) data collected by or through the use of DoubleClick:

Browser information
Click path
Cookie information
Date and time of visit
Demographic data
Device identifier
Location information
Hardware/software type
Internet service provider
IP address
Frequency with which adverts are seen
Delivering domains
Interaction data
Page views
Search history

If you have a Google user account and are registered, Google may associate the visit with your user account. Even if you are not registered with Google or are not logged in, it is possible that Google may find out and store your IP address. In addition, when DoubleClick is used, this data is passed on to the following recipients:

Google Ireland Limited
Alphabet Inc.
Google LLC

United States of America

Furthermore, Google stores various cookies on your device. With the help of these cookies, Google can obtain information about visitors to our website. This information is used for marketing and analysis purposes. The cookies remain on your device for up to one year. Where applicable, the use of DoubleClick may trigger further data processing operations over which we have no influence. DoubleClick uses various methods to store information on a user’s device, as listed below:

Name: test_cookie
Description: Tests the browser settings permissions in the user’s browser
Type: cookie
Storage period: 1 day
Domain: doubleclick.net

Name: IDE
Description: Contains a randomly generated user ID. Using this ID, Google can recognise the user across different websites and display personalised advertising.
Type: cookie
Storage period: 1 year
Domain: doubleclick.net

If you wish to prevent data being shared, you can refuse the functions of Google Analytics. Regardless of this, we recommend that you regularly log out of your user account on a social network after using it, and in particular before activating embedded content, as this will help you avoid any association with your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Data Protection Clauses of the EU Commission. Further information on data protection and Google’s use of data can be found on the following Google website: https://policies.google.com/privacy

24. eKomi

On our website, we use technologies provided by the software company eKomi Ltd., Zimmerstraße 11, 10969 Berlin, Germany (hereinafter referred to as “eKomi”). The company provides an online review tool that helps us to continuously improve our services. Through the use of this tool, data is transferred to, processed and stored by eKomi. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the eKomi service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you consent to the use of eKomi on our website, a connection is established with eKomi’s servers. Below you will find a list of the (personal) data collected and processed by or through the use of this service:

eKomi name
Unique ID
Email address
Anonymous order transaction ID
Order number
Browser information
Device operating system
URLs
Date and time of visit

According to eKomi, your data is processed within the European Union. Further information on data protection at eKomi can be found in eKomi’s privacy policy, which you can view via the following link: https://www.ekomi.de/de/datenschutz/

25. TrustPilot

We work with Trustpilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark (“Trustpilot”) in order to obtain customer feedback and improve our service. In this context, we may invite you by email to leave a review. For this purpose, we transmit the following data to Trustpilot: name, email address and reference number.

The invitation to review is issued exclusively on the basis of your previous use of our service. Leaving a review is voluntary. Please note that a user profile is required in order to use Trustpilot. If you submit a review via the link contained in the invitation, a user account is automatically created with Trustpilot.

Your data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in obtaining customer feedback. Further information on data processing by Trustpilot can be found in their privacy policy.

26. Facebook (Linking)

This website links to our company profile (hereinafter “fan page”) on the Facebook website, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”). If you are logged into your Facebook profile and click on the link to our fan page on Facebook, Facebook will associate your visit to our fan page with your profile. The same applies to other actions such as using the “Share” or “Like” function. If you do not want this, you must log out of your Facebook profile before clicking on the link.

Facebook processes your personal data when you visit our fan page. As the owner of the fan page, we have no influence over Facebook’s data processing. You can find out which personal data is processed by Facebook and what data protection rights you have in relation to Facebook in Facebook’s data protection information, which you can view via the following link: https://www.facebook.com/about/privacy

27. Facebook Pixel

To recognise your user behaviour, we use the “visitor action pixel” provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”) within our website. With this conversion tool, we can track your actions after you have seen or clicked on a Facebook advert. This serves to monitor and analyse the effectiveness of our Facebook adverts for statistical purposes and for market research purposes. When you first visit our website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the Facebook Pixel. Accordingly, the legal basis for this processing is consent pursuant to Article 6(1)(a) GDPR. Below you will find all (personal) data collected during or through the use of the service:

Adverts viewed
Content viewed
Device information
Geographical location
HTTP header
Interactions with advertising, services and products
IP address
Elements clicked
Marketing information
Non-confidential custom data
Pages visited
Pixel ID
Referrer URL
Success of marketing campaigns
Usage data
User behaviour
Facebook cookie information
Facebook user ID
Usage/click behaviour
Browser information

Although we can only recognise this data in anonymised form, this data is also stored and processed by Facebook. We do not know exactly what Facebook does with this data, but it can be assumed that Facebook can and will link this data to your Facebook account. Facebook can thus use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook and its partners create usage, interest and relationship profiles, e.g. in order to evaluate your use of our website with regard to the adverts displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services connected with the use of Facebook. For this purpose, Facebook uses various methods to store information on a user’s device, as listed below:

Name: _fbp
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: act
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: c_user
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: datr
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: fr
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: m_pixel_ration
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: pl
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: presence
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: sb
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: spin
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: wd
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Name: xs
Description: Facebook cookie for website analysis, ad targeting and ad measurement.
Type: cookie
Storage period: 1 year
Domain: facebook.com

Facebook may transfer the data collected to another country. Please note that Facebook may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. Below you will find a list of the countries to which the data is transferred. This may be for various purposes, e.g. for storage or processing:

Singapore
United Kingdom
United States of America

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for protecting your privacy, please refer to Facebook’s data protection information, which you can find via the following link: https://de-de.facebook.com/privacy/explanation

Further information on the subject of cookies at Facebook can be found here: https://www.facebook.com/policies/cookies

28. Facebook Social Plugins

So-called social plugins from the company Facebook Inc. are built into our website. You can recognise these buttons by the classic Facebook logo, such as the “Like” button (the hand with the raised thumb) or by a clear “Facebook Plugin” label. A social plugin is a small part of Facebook that is integrated into our page. Each plugin has its own function. The most commonly used functions are the well-known “Like” and “Share” buttons. The following social plugins are offered by Facebook:

“Save” button
“Like” button, Share, Send and Quote
Page plugin
Comments
Messenger plugin
Embedded posts and video players
Group plugin

You can find more detailed information on how the individual social plugins are used at https://developers.facebook.com/docs/plugins. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you consent to the use of social plugins on our website, a connection is established with Facebook’s servers. In doing so, the following information is transmitted to the Facebook server:

Usage data
Browser information
Date and time of visit
Facebook user ID
Websites visited
HTTP header

If you have a Facebook account or have visited Facebook before, Facebook has already set at least one cookie in your browser. In this case, your browser sends information to Facebook via this cookie as soon as you visit our page or interact with social plugins (e.g. the “Like” button). The information received is deleted or anonymised within 90 days. According to Facebook, this data includes your IP address, which website you have visited, the date, the time and other information relating to your browser. To prevent Facebook from collecting a large amount of data during your visit to our website and linking it to your Facebook data, you must log out of your Facebook account during your visit to the website.

Please note that this service may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. Below you will find a list of the countries to which the data is transferred. This may be for various purposes, e.g. for storage or processing:

Worldwide

In addition, Facebook may transfer the data collected to further recipients. The recipients of the data collected are listed below:

Facebook Inc.
Facebook Ireland Limited

At least the following cookies are set in your browser when you visit a website with Facebook social plugins:

Name: dpr
Type: Cookie
Description: This cookie is used to enable the social plugins on the website to function
Storage period: Session

Name: fr
Type: Cookie
Description: This cookie is also used to ensure that the plugins on the website function correctly
Storage period: 3 months

Further information on data protection at Facebook, your rights in relation to Facebook, and the processing of your personal data by Facebook can be found in the links below.

Click here to read Facebook’s privacy policy:

https://www.facebook.com/privacy/explanation

Click here to read Facebook’s cookie policy:

https://www.facebook.com/policies/cookies/

Click here to withdraw across all Facebook domains:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

29. Google Ads

On our website, we use “Google Ads” (formerly Google AdWords), a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Ads enables us to draw attention to our attractive offers by means of advertising media on external websites. This allows us to determine how successful individual advertising measures are. These advertising media are delivered by Google via so-called “AdServers”. For this purpose, we use so-called AdServer cookies, by means of which certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the Google Ads service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you consent to the use of Google Ads on our website, a connection is established with Google’s servers. In doing so, the following information is transmitted to the Google server:

Adverts viewed
Cookie ID
Date and time of visit
Device information
Geographical location
IP address
Search terms
Advertising displayed
Customer ID
Impressions
Online identifiers
Browser information

If you are logged into your Google account, you allow Google to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Google account. In addition, when Google Ads is used, this data is passed on to the following recipients:

Alphabet Inc.
Google LLC
Google Ireland Limited

Chile
Singapore
United States of America
Taiwan

Name: test_cookie
Description: This is set as a test to check whether the browser allows cookies to be set. Contains no identification features.
Type: cookie
Storage period: 15 minutes
Domain: doubleclick.net

Where applicable, the use of Google Ads may trigger further data processing operations over which we have no influence. If you wish to prevent data being passed on, you can refuse the functions of Google Ads. Regardless of this, we recommend that you regularly log out of your user account on a social network after using it, and in particular before activating embedded content, as this will help you avoid any association with your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Data Protection Clauses of the EU Commission. Further information on data protection and Google’s use of data can be found on the following Google website: https://www.google.de/intl/de/policies/privacy

30. Google AdServices

This website uses Google AdServices, an advertising and targeting service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). Google AdServices uses so-called “cookies”, which are stored on your computer. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the Google AdServices service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you consent to the use of Google AdServices on our website, a connection is established with Google’s servers. In doing so, the following information is transmitted to the Google server:

Click path
Events
IP address
Referrer URL
Touchpoint to the advertising medium
Transactions
User agent
Pages viewed

If you are logged into your Google account, you allow Google to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Google account. In addition, when Google AdServices is used, this data is passed on to the following recipients:

Google Ireland Limited
Alphabet Inc.
Google LLC

United States of America
Singapore
Chile
Taiwan

Name: test_cookie
Description: Set as a test to check whether the browser allows cookies to be set. Contains no identification features.
Type: cookie
Storage period: 15 minutes
Domain: doubleclick.net

Name: IDE
Contains a randomly generated user ID. Using this ID, Google can recognise the user across different websites and display personalised advertising.
Type: cookie
Storage period: 1 year
Domain: doubleclick.net

Where applicable, the use of Google AdServices may trigger further data processing operations over which we have no influence. If you wish to prevent data being passed on, you can refuse the functions of Google AdServices. Regardless of this, we recommend that you regularly log out of your user account on a social network after using it, and in particular before activating embedded content, as this will help you avoid any association with your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Data Protection Clauses of the EU Commission. Further information on data protection and Google’s use of data can be found on the following Google website: https://www.google.de/intl/de/policies/privacy

31. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). Google Analytics uses so-called “cookies”, which are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the Google Analytics service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you consent to the use of Google Analytics on our website, a connection is established with Google’s servers. In doing so, the following information is transmitted to the Google server:

App updates
Click path
Date and time of visit
Device information
Downloads
Flash version
Location information
IP address
JavaScript support
Pages visited
Purchase activity
Referrer URL
Usage data
Widget interactions
Browser information

If you are logged into your Google account, you allow Google to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Google account. In addition, when Google Analytics is used, this data is passed on to the following recipients:

Google Ireland Limited
Alphabet Inc.
Google LLC

United States of America
Singapore
Chile
Taiwan

Furthermore, Google stores various cookies on your device. With the help of these cookies, Google can obtain information about visitors to our website. This information is used for marketing and analysis purposes. The cookies remain on your device for up to 2 years. Below you will find an overview of the cookies associated with the use of Google Analytics:

Name: _ga
This is used to distinguish users.
Type: cookie
Storage period: 2 years

Name: _gid
This is used to distinguish users.
Type: cookie
Storage period: 1 day

Name: _gat
This is used to throttle the request rate.
Type: cookie
Storage period: 1 minute

Name: _dc_gtm_xxx
This is used to distinguish users.
Type: cookie
Storage period: 1 minute

Name: _gat_gtag_xxx
This is used to distinguish users.
Type: cookie
Storage period: 1 minute

Name: _gac_xx
This contains information about which advert was clicked on.
Type: cookie
Storage period: 2 months, 29 days

Name: IDE
Using this ID, Google can recognise the user across different websites and domains and display personalised advertising.
Type: cookie
Storage period: 1 year

Where applicable, the use of Google Analytics may trigger further data processing operations over which we have no influence. If you wish to prevent data being passed on, you can refuse the functions of Google Analytics. Regardless of this, we recommend that you regularly log out of your user account on a social network after using it, and in particular before activating embedded content, as this will help you avoid any association with your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Data Protection Clauses of the EU Commission. Further information on data protection and Google’s use of data can be found on the following Google website: https://www.google.de/intl/de/policies/privacy

32. Gstatic.com

On our site, as part of our website template, we use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter referred to as “Google”). Gstatic is a service used by Google to retrieve static content in order to reduce bandwidth usage and to pre-load required catalogue files. According to Google, the transmission and processing of personal data generally takes place on servers within the European Union. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR.

If you consent to the use of Gstatic, a connection is established with Google’s servers. The following data is processed in the process:

Images
CSS

If you are logged into your Google account, you allow Google to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Google account. In addition, when Google services are used, this data is passed on to the following recipients:

Alphabet Inc.

However, Google may also transfer the data collected to another country. Please note that Google may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. It may also be the case that you are not even informed of this. According to Google, your data may be transferred worldwide. This may be for various purposes, e.g. for storage or processing. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Data Protection Clauses of the EU Commission.

Further information can be found in Google’s privacy policy at: https://www.google.com/policies/privacy/

33. Hotjar

On our website, we use “Hotjar”, a web analytics service provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta (hereinafter referred to as “Hotjar”). Among other things, Hotjar uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device and enable an analysis of your use of our website, as well as a so-called tracking code. The cookies used by Hotjar are stored on your device for varying lengths of time, in some cases only during your visit and in some cases for 365 days. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the Hotjar service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you consent to the use of Hotjar on our website, a connection is established with Hotjar’s servers. In doing so, the following personal data is processed:

Device-dependent data collected by your device and your web browser:

IP address of your device (collected and stored in an anonymised format)
Email address, including your first and last name, insofar as you have provided this to us via our website
Screen size of your device
Device type and browser information
Geographical data (country only)
Language for displaying our website
User interactions
Mouse commands (movement, position and clicks)
Keyboard inputs

Log data automatically used by our server when Hotjar is used:

Referring domain
Websites visited
Geographical data (country only)
Language for displaying our website
Date and time of access

Hotjar uses this information to evaluate your use of our website, to compile reports on usage and to provide other services connected with the evaluation of our website. Hotjar uses various methods to store information on a user’s device, as listed below:

Name: _hjClosedSurveyInvites
Description: Hotjar cookie set as soon as a visitor interacts with an invitation modal for a survey on external links. It is used to ensure that the same invitation is not shown again if it has already been displayed.
Type: cookie
Storage period: 1 year

Name: _hjDonePolls
Description: Hotjar cookie set as soon as a visitor has completed a survey using the “on-site survey” widget. It is used to ensure that the same survey is not shown again if it has already been completed.
Type: cookie
Storage period: 1 year

Name: _hjMinimizedPolls
Description: Hotjar cookie set as soon as a visitor minimises an on-site survey widget. It is used to ensure that the widget remains minimised as the visitor navigates through your site.
Type: cookie
Storage period: 1 year

Name: _hjShownFeedbackMessage
Description: Hotjar cookie set when a visitor minimises or completes incoming feedback. This is done so that the incoming feedback loads immediately as minimised when the visitor navigates to another page on which it is set to appear.
Type: cookie
Storage period: 1 year

Name: _hjid
Description: Hotjar cookie set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar user ID, which is unique to this site in the browser. This ensures that behaviour on subsequent visits to the same site is attributed to the same user ID.
Type: cookie
Storage period: 1 year

Name: _hjTLDTest
Description: When the Hotjar script runs, we try to determine the most generic cookie path we should use instead of the page hostname. This is done so that cookies (where applicable) can be shared across subdomains. To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.
Type: cookie
Storage period: Session

Name: _hjUserAttributesHash
Description: User attributes sent via the Hotjar Identify API are cached for the duration of the session in order to determine when an attribute has changed and needs to be updated.
Type: cookie
Storage period: Session

Name: _hjCachedUserAttributes
Description: This cookie stores user attributes sent via the Hotjar Identify API when the user is not in the sample. These attributes are only stored if the user interacts with a Hotjar feedback tool.
Type: cookie
Storage period: Session

Name: _hjLocalStorageTest
Description: This cookie is used to check whether the Hotjar tracking script can use local storage. If this is possible, the value 1 is set in this cookie. The data stored in _hjLocalStorageTest has no expiry time but is deleted almost immediately after it is created.
Type: cookie
Storage period: Session

Name: _hjIncludedInPageviewSample
Description: This cookie is intended to inform Hotjar whether this visitor is included in the data collection defined by your website’s page view limit.
Type: cookie
Storage period: 30 minutes

Name: _hjIncludedInSessionSample
Description: This cookie is intended to inform Hotjar whether this visitor is included in the data sample defined by your site’s daily session limit.
Type: cookie
Storage period: 30 minutes

Name: _hjAbsoluteSessionInProgress
Description: This cookie is used to detect a user’s first page view session. This is a True/False flag set by the cookie.
Type: cookie
Storage period: 30 minutes

Name: _hjFirstSeen
Description: This is used to identify a new user’s first session. It stores a True/False value indicating whether Hotjar has seen this user for the first time. It is used by recording filters to identify new user sessions.
Type: cookie
Storage period: Session

Name: hjViewportId
Description: This stores information about the user viewport, such as size and dimensions.
Type: cookie
Storage period: Session

Name: _hjRecordingEnabled
Description: This is added when a recording is started and is read when the recording module is initialised, to determine whether the user is already in a recording in a particular session.
Type: cookie
Storage period: Session

Further information on data protection at Hotjar can be found in Hotjar’s privacy policy, which you can view via the following link: https://help.hotjar.com/hc/en-us/articles/115011639887-Data-Safety-Privacy-Security

34. AB Testing (our own optimisations)

To ensure the usability and performance of our website, we use cookies for so-called AB tests. In doing so, different variants of individual page contents or functions are displayed in order to compare their effectiveness and to provide the best possible version.

The cookie used is technically necessary, as it ensures that a consistent variant is displayed to you for the duration of the test.

The AB testing cookie is automatically deleted after the test has ended or after 3 months at the latest.

35. Youtube

On the pages of our website, we embed videos from “YouTube”, a social media platform provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “YouTube”). We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the sharing of data with YouTube partners is not necessarily excluded by enhanced privacy mode. For example, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network. When you visit this website, you will be asked to set your privacy settings. Here, you have the option to consent to or refuse the use of the YouTube service. Accordingly, the legal basis for this processing is Article 6(1)(a) GDPR. As soon as you start a YouTube video on our website, a connection is established with YouTube’s servers. In doing so, the following information is transmitted to the YouTube server:

Device information
IP address
Referrer URL
Videos viewed

If you are logged into your YouTube account, you allow YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. In addition, when YouTube is used, this data is passed on to the following recipients:

Alphabet Inc.
Google LLC
Google Ireland Limited

YouTube may also transfer the data collected to another country. Please note that YouTube may transfer data outside the European Union and the European Economic Area to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, without you necessarily having any legal remedies available to you. It may also be the case that you are not even informed of this. According to YouTube, your data may be transferred worldwide. This may be for various purposes, e.g. for storage or processing.

Furthermore, YouTube stores various cookies on your device. With the help of these cookies, YouTube can obtain information about visitors to our website. According to YouTube, this information is used, among other things, to compile video statistics, to improve user-friendliness and to prevent fraud attempts. The cookies remain on your device for up to 10 years. Where applicable, further data processing operations may be triggered after a YouTube video has started, over which we have no influence.

If you wish to prevent data being passed on, you cannot use the functions of YouTube. Regardless of this, we recommend that you regularly log out of your user account on a social network after using it, and in particular before activating embedded content, as this will help you avoid any association with your profile with the respective provider. According to Google, any data transfer to the USA takes place in compliance with the provisions of the underlying Standard Contractual Clauses of the EU Commission. Further information on data protection and Google’s use of data can be found on the following Google website: https://www.google.de/intl/de/policies/privacy

36. YouTube (Linking)

This website links to our company profile (hereinafter “fan page”) on YouTube, a social media platform provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). If you are logged into your Google profile and click on the link to our fan page on YouTube, Google will associate your visit to our fan page with your profile. The same applies to other actions such as using the “Share” or “Like” function. If you do not want this, you must log out of your Google profile before clicking on the link.

Google processes your personal data when you visit our fan page. As the owner of the fan page, we have no influence over Google’s data processing. You can find out which personal data is processed by Google and what data protection rights you have in relation to Google in Google’s data protection information, which you can view via the following link: https://www.google.de/intl/de/policies/privacy

37. Withdrawal of your consent

If you have given us data protection consent for certain data uses and/or services, you can of course withdraw this at any time with effect for the future. A simple message to the address given below is sufficient for this purpose:

carmoto tectum GmbH
Schopenstehl 20
20095 Hamburg
Tel.: +49 40 573 083 610
E-Mail: info@carsale24.com

38. Your rights as a data subject

As a data subject, you have various rights in relation to your personal data. As the controller, we have taken appropriate measures to provide you as a data subject with all information pursuant to Articles 13 and 14 of the GDPR and all communications pursuant to Articles 15 to 22 and Article 34 of the GDPR relating to the processing in a concise, transparent, intelligible and easily accessible form, using clear and plain language; this applies in particular to information addressed specifically to children. The information is provided in writing or in another form, where applicable also electronically. If requested by you, the information may also be provided orally, provided that your identity as a data subject has been proven in another form.

You are, of course, also entitled at any time to request, in writing or electronically, information about the data stored concerning you and its origin, the recipient or recipients to whom the data is passed on, and the purpose of storage. In addition, you have the right to request that incorrect data be corrected and, where the legal requirements for this are met, that your data be deleted or blocked. A simple message to the address given below is sufficient for this purpose:

carmoto tectum GmbH
Schopenstehl 20
20095 Hamburg
Tel.: +49 40 573 083 610
Email: info@carsale24.com

In detail, you have the following rights:

38.1 Right to confirmation and information

You can request confirmation from us as to whether personal data concerning you is being processed by us.

If we process your data, you can request information from us about the following:

the purposes for which the personal data is processed;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
the planned duration for which the personal data concerning you will be stored or, if specific information on this is not possible, the criteria for determining the storage period;
the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by us, or a right to object to this processing;
the existence of a right to lodge a complaint with a supervisory authority;
all available information about the origin of the data, where the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, you have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

38.2 Right to rectification

You have a right to rectification and/or completion vis-à-vis us if the processed personal data concerning you is incorrect or incomplete. We must, of course, carry out the rectification without undue delay.

38.3 Right to restriction of processing

You can request the restriction of the processing of the personal data concerning you under the following conditions:

if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
if we no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or
if you have objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether our legitimate grounds override yours.

Where the processing of the personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State, by us or by legitimate third parties.

Where the restriction of processing has been restricted in accordance with the above conditions, we will inform you before the restriction is lifted.

38.4 Right to erasure

Obligation to erase

You can request that the personal data concerning you be erased without undue delay, and we are obliged to erase this data without undue delay, where one of the following grounds applies:

The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
The personal data concerning you has been unlawfully processed.
The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
The personal data concerning you was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

Information to third parties

Where we have made the personal data concerning you public and are obliged to erase it pursuant to Article 17(1) of the GDPR, we take appropriate measures, including of a technical nature, taking account of available technology and the cost of implementation, to inform the controllers processing the personal data that you as a data subject have requested the erasure of all links to this personal data or of copies or replications of this personal data.

Exceptions

The right to erasure does not exist insofar as the processing is necessary

for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) as well as Article 9(3) of the GDPR;
for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to under section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defence of legal claims.

38.5 Right to notification

Where you have asserted the right to rectification, erasure or restriction of processing vis-à-vis us, we are obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about these recipients vis-à-vis us.

38.6 Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance, provided that

the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR; and
the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be adversely affected by this.

The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

38.7 Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of the personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

We will then no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is connected with such direct marketing.

If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you have the option of exercising your right to object by automated means using technical specifications.

38.8 Right to withdraw the data protection consent declaration

You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

38.9 Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply where the decision

a.) is necessary for entering into, or the performance of, a contract between you and us,

b.) is authorised by Union or Member State law to which we are subject and which lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or

c.) is based on your explicit consent.

However, these decisions must not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests have been taken.

With regard to the cases referred to in a.) and c.), we take appropriate measures to safeguard your rights and freedoms and legitimate interests.

38.10 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of the personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint was lodged informs the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

39. Email advertising

If you sign up for our newsletter, we collect only the data required for this purpose in order to send you our email newsletter regularly in accordance with your consent. Accordingly, the legal basis for the processing is Article 6(1)(a) GDPR. We do not pass on the data you provide here to third parties; processing takes place exclusively in Germany. Registration takes place via a secure and established double opt-in procedure. After you sign up for the newsletter, you receive an email to the email address you entered. This email contains a confirmation link which you must click in order to complete the newsletter registration process. This procedure is intended to prevent your email address from being used without authorisation by a third party. You can withdraw the consent you have voluntarily given here at any time, free of charge and with effect for the future. A corresponding message to info@carsale24.com is sufficient for this purpose; alternatively, you can unsubscribe from the newsletter via the link provided for this purpose in the newsletter.

40. Further information

If you have any further questions or suggestions regarding the subject of “data protection” or if you would like information about your data or its rectification or erasure, please write to us by email or letter at:

carmoto tectum GmbH
Schopenstehl 20
20095 Hamburg
Tel.: +49 40 573 083 610
Email: info@carsale24.com

Hamburg, December 2021