Privacy policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data means all data that can be used to identify you personally.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Inlux Robotics GmbH, Haus Sülz 3, 53797 Lohmar, Germany, Tel.: +49 22058933970, Email: accounts@inluxrobotics.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock icon in your browser’s address bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying its content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, i.e. small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for longer and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in your web browser’s cookie settings overview.
If any of the cookies we use also process personal data, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective browsing experience.
You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally.

Please note that refusing cookies may restrict the functionality of our website.

5) Contact

5.1 Trengo
To process customer inquiries, we use the email ticketing system of the following provider: Trengo B.V., Burgemeester Reigerstraat 89, 3581 KP Utrecht, Netherlands
If you contact us by email via our website, your messages are stored and organized in the ticketing system to enable chronological responses and improve the service experience. Each inquiry is assigned an individual ticket number, which facilitates internal allocation and ensures seamless processing.
For organizing and processing inquiries, personal data is collected according to the scope of the information provided—at a minimum, your surname, first name, and email address—transmitted to the provider, stored there, and accessed.

The legal basis for processing this data is our legitimate interest in efficiently organizing our customer service, responding to your request as quickly as possible, and optimizing our service offering in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

5.2 When contacting us (e.g., via the contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is intended to result in a contract, Art. 6(1)(b) GDPR is an additional legal basis for processing. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively resolved and provided that no statutory retention obligations prevent this.

6) Data processing when opening a customer account

Pursuant to Art. 6(1)(b) GDPR, personal data continues to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. You can find out which data is required to open the account in the input form for the relevant form on our website.
You may delete your customer account at any time by sending a message to the aforementioned address of the data controller. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully completed, no statutory retention periods prevent this, and we have no legitimate interest in retaining the data any longer.

7) Data processing for order processing

7.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data we collect is transferred, pursuant to Art. 6(1)(b) GDPR, to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of notifying you about updates owed by us and are processed by us only to the extent necessary for the respective notification.

To process your order, we also work with the service provider(s) listed below, who assist us in whole or in part with the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

7.2 Disclosure of Personal Data to Shipping Service Providers

We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
In accordance with Art. 6 para. 1 lit. a GDPR, we will provide the provider with your email address and/or telephone number before the goods are delivered for the purpose of coordinating a delivery date or announcing the delivery, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery and in accordance with Art. 6 para. 1 lit. b GDPR, we will provide the provider only with the recipient's name and delivery address. The data will be disclosed only to the extent necessary for delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider in advance or announce the delivery.

Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the provider.

7.3 Credit Assessment

If we make advance payments (e.g., delivery on invoice), we reserve the right to conduct a credit assessment based on mathematical-statistical methods in order to safeguard our legitimate interest in determining our customers' ability to pay. In accordance with Art. 6 para. 1 lit. f GDPR, we transmit the personal data required for a credit assessment to the following service provider:
VHV Allgemeine Versicherung AG, VHV-Platz 1, 30177 Hannover, Germany.

The credit report may contain probability values (so-called score values). Where score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things, but not exclusively, address data. We use the results of the credit assessment regarding the statistical probability of payment default to decide whether to establish, perform, or terminate a contractual relationship.

You may object to this processing of your data at any time by notifying the controller responsible for data processing or the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.

8) Web Analytics Services

8.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information also includes your IP address, although Google truncates the last digits to prevent direct identification of individuals.
The information is transferred to Google servers and further processed there. This may also involve transfers to Google LLC, which is based in the USA.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website use and internet use. The IP address transmitted by your browser and truncated as part of Google Analytics is not combined with other data held by Google. The data collected through the use of Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de und unter https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special “demographic characteristics” feature and can use it to create statistics providing information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third parties. This makes it possible to identify target groups for marketing activities. However, the collected data cannot be attributed to any specific person and is deleted after being stored for a period of two months.
Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized advertising” feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension of Google Analytics 4, the “UserIDs” feature may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

8.2 Cloudflare Web Analytics
This website uses the web analytics service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA
To protect site visitors, the provider uses a pseudonymized visitor identifier to enable various analyses of site usage within a short period of no more than 24 hours. This visitor identifier is a randomly generated, time-limited hash value created based on a reduced set of technical attributes. These include, in particular, the user agent (information about the browser and operating system) and the anonymized IP address, which is processed exclusively for the duration of the analysis and then discarded.
If personal data is processed in an individual case, the processing is based on our legitimate interest in statistically analyzing usage behavior for optimization purposes in accordance with Art. 6(1)(f) GDPR. In this case, you may permanently object to the collection and storage of your visitor data for the future by notifying us.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
8.3 Google Tag Manager
This website uses “Google Tag Manager,” a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides the technical basis for bundling various web applications, including tracking and analytics services, and calibrating, controlling, and conditioning them through a uniform user interface. Google Tag Manager itself does not store any information on users’ devices or read such information. The service also does not conduct any independent data analyses. However, when a page is viewed, Google Tag Manager transmits your IP address to Google, where it may be stored. Data may also be transmitted to servers operated by Google LLC. in the USA.
This processing is carried out only if you have expressly consented to it in accordance with Art. 6(1)(a) GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To withdraw your consent, please deactivate this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further legal information about Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de
8.4 Shopify Analytics
This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behavior on our website and create pseudonymized usage profiles. Pseudonymization generally rules out direct identification of individuals. The data is not combined with cleartext data about you collected in any other way.
All processing described above, in particular the reading or storage of information on the device used, will only be carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that protects our site visitors’ data and prohibits disclosure to third parties.
If data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

9) Retargeting/Remarketing and conversion tracking

9.1 Google Ads Remarketing
This website uses retargeting technology provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google places a cookie in the browser of your device, which enables interest-based advertising automatically using a pseudonymous cookie ID and based on the pages you have visited. The information collected for this purpose generally also includes your IP address.
Any further data processing will only take place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalize the ads you view on the web. If you are logged in to Google while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to create audiences. When using Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
All processing activities described above, particularly the setting of cookies to read information from the device being used, are carried out only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Details of the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/ und https://www.google.de/policies/privacy/

9.2 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to serve relevant advertisements to users, improve campaign performance reports, or prevent a user from seeing the same advertisements multiple times. Using a cookie ID, Google records which advertisements are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, GMP can use cookie IDs to record so-called conversions related to ad requests. This is the case, for example, when a user sees a GMP advertisement and later visits the advertiser’s website using the same browser and purchases something through that website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server.
We have no influence over the scope or further use of the data collected by Google through the use of this tool and therefore inform you as follows, based on our current knowledge: By integrating GMP, Google receives information that you have accessed the relevant section of our website or clicked on one of our advertisements. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may discover and store your IP address. As part of the use of GMP, personal data may also be transferred to the servers of Google LLC. in the USA.
All processing described above, particularly the setting of cookies to read information on the device being used, is carried out only if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
You can find GMP by Google’s privacy policy here: https://business.safety.google/intl/de/privacy/ und https://www.google.de/policies/privacy/

9.3 Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology provided by the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
To use Universal Event Tracking, a tag is embedded on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the information collected in this way to Microsoft. The purpose is to statistically record and analyze certain predefined goals, such as purchases or leads, in order to tailor the targeting and content of our offerings more closely to users’ interests. The tags are never used to personally identify users.
All processing activities described above, particularly the setting of cookies to read information from the device being used, are carried out only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

To better identify users whose data we have obtained in the context of business or business-like relationships for statistical analysis, we use a customer matching feature in Microsoft Advertising. To do this, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Microsoft. Microsoft does not gain access to the data in plain text; instead, during the transmission process, it automatically encrypts the information in the customer files using a special algorithm. Microsoft can then use the encrypted information only to match it with existing Microsoft accounts that the individuals have set up. This makes it possible to track user interactions across all services and devices linked to the respective Microsoft account.
Customer data is transmitted to Microsoft only if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw this consent from us at any time with effect for the future.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

10) Website functionalities

10.1 Instagram Plugins
Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially integrated into the page in deactivated form using a so-called “2-click” or “Shariff” solution.
This integration ensures that no connection to the provider's servers is established when you access a page on our website containing such plugins.
Only when you activate the plugins and thereby give your consent to the transfer of data pursuant to Art. 6 para. 1 lit. a GDPR does your browser establish a direct connection to the provider's servers. Regardless of whether you are logged into an existing user profile, certain information about the device you use, including your IP address, your browser, and your browsing history, is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You may withdraw your consent at any time by deactivating the activated plugin by clicking it again. However, withdrawing consent has no effect on data that has already been transmitted to the provider.
Data may also be transmitted to: LinkedIn Corp., USA
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.3 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest when video playback begins in order to load the content. Certain information, including your IP address, is transmitted to the provider.
When playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.
If you are logged into a user account with the provider while visiting our website, your data will be assigned directly to your account when you click on a video. If you do not want your data associated with your account, you must log out before pressing the play button.
All of the processing described above, in particular the placement of cookies to read information from the device being used, takes place only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission. 10.4 Google Maps
This website uses an online mapping service provided by: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive maps, including maps of land areas, in order to present geographical information visually. Using this service displays our location and facilitates directions to it.
As soon as you access the subpages into which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to and stored on Google’s servers; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether an account exists. If you are logged into Google, your data is assigned directly to your account. If you do not want your data associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes it.
The collection, storage, and analysis are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites according to users’ needs. You have the right to object to the creation of these user profiles, and must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google as part of your use of Google Maps, you also have the option of completely deactivating the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, can then no longer be used.
Where legally required, we have obtained your consent to the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the procedure described above for lodging an objection.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google’s data protection provisions can be found here: https://business.safety.google/intl/de/privacy/
10.5 Zapier
We use the services of the following provider to integrate and synchronize databases and web applications: Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA
In this context, our processing operations are automated and various workflows are established to efficiently manage and execute internal processes in our processing system. If personal data is also processed in this context, this is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimizing our internal organization.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.6 Shopsync for Shopify
This website uses the “Shopsync” Shopify app from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
ShopSync synchronizes the “Mailchimp” newsletter service with our Shopify account so that, on the one hand, updates to Mailchimp email lists (such as a newsletter recipient opting out) are automatically recorded in Shopify and, on the other hand, new contact details generated through contracts concluded on Shopify are automatically transferred to Mailchimp email lists.
In the former case, data is processed pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in effectively maintaining advertising recipient records across systems and efficiently tracking legally relevant status changes.
In the second case, only on the basis of the user’s explicit consent pursuant to Art. 6 (1) (a) GDPR, following the conclusion of a contract on Shopify for inclusion in the Mailchimp list, ShopSync transmits the user’s first and last name, address, and email address, together with transaction-related information (purchase amount, time, and date of purchase), to Mailchimp.
ShopSync does not store or retain data transferred in this way after synchronization. All information synchronized between Shopify and Mailchimp is transmitted using SSL (Secure Socket Layer) technology, and all transferred information remains encrypted throughout the synchronization process.
The synchronization process requires the transfer of information via a secure connection to servers hosted by Amazon Web Services in the USA.
You can find further data protection information about ShopSync here: https://www.shop-sync.com/privacy-policy

11) Tools and other services

Cookie Consent Tool
This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they access the site in the form of an interactive user interface, where they can give consent to specific cookies and/or cookie-based applications by checking boxes. When the tool is used, all cookies/services requiring consent are loaded only if the respective user has given the corresponding consent by checking the boxes. This ensures that such cookies are placed on the user’s respective device only when consent has been given.
The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.
If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and, consequently, in the legally compliant design of our website.
Another legal basis for the processing is Art. 6(1)(c) GDPR. As controllers, we are subject to a legal obligation to make the use of cookies that are not technically necessary dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the configuration options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12) Data Subject Rights

12.1 Applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the cited legal basis for the respective requirements for exercising these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and—where applicable—in addition by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When personal data is processed on the basis of explicit consent pursuant to Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.
If statutory retention periods apply to data processed in the context of contractual or contract-like obligations on the basis of Article 6(1)(b) GDPR, this data will routinely be deleted after the retention periods expire, provided it is no longer required for performance of the contract or initiating the contract and/or we no longer have a legitimate interest in retaining it.
When personal data is processed on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Article 21(2) GDPR.
Unless otherwise specified in the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy policy was prepared by the specialist lawyers at IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)