1. An Overview of Data Protection

General Information
The following information provides you with an easy-to-understand overview of what happens to your personal data when you visit this website. The term 'personal data' includes all information that can be used to identify you personally. Detailed information about data protection can be found in our privacy policy, which we have provided below this text.
Data Collection on This Website
Who is responsible for data collection on this website (i.e. the 'controller')?
The data on this website is processed by the website operator, whose contact details can be found in the section 'Information about the Controller (referred to as 'Controller' in the GDPR)' of this privacy policy.
How do we collect your data?
We collect your data by you providing it to us. For example, this may include information that you enter into our contact form.
Other data is automatically or with your consent collected by our IT systems when you visit our website. This mainly includes technical information (e.g., web browser, operating system, or the time of access to the page). This information is collected automatically as soon as you enter this website.
For what purposes do we use your data?
Some of the information is generated to ensure the website's error-free provision. Other data may be used to analyze your usage behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other order inquiries.
What rights do you have regarding your data?
You have the right at any time to request information free of charge about the origin, recipients, and purposes of your stored personal data. You also have the right to request the correction or deletion of your data. If you have consented to data processing, you can withdraw your consent at any time, which will affect all future data processing. Furthermore, you have the right to request the restriction of processing your data under certain circumstances. You also have the right to file a complaint with the competent supervisory authority.
Do not hesitate to contact us at any time if you have questions about this or other privacy-related matters.
Analysis Tools and Third-Party Tools
It is possible that your browsing behavior will be statistically analyzed when you visit this website. Such analysis is primarily carried out using so-called analysis programs.
Detailed information about these analysis programs can be found in our following privacy policy.

2. Hosting
We host the content of our website with the following provider:

Google Cloud
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as 'Google Cloud').
When you visit our website, your personal data is processed on Google Cloud servers. This may also involve the transfer of personal data to Google's parent company in the United States. The transfer of data to the USA is based on the EU Standard Contractual Clauses. You can find details here: https://cloud.google.com/terms/data-processing-addendum.
Further information can be found in the Google Cloud Privacy Policy: https://cloud.google.com/privacy.
Google Cloud is used based on Art. 6(1)(f) GDPR. We have a legitimate interest in providing our website as reliably as possible. If consent has been obtained, processing will be based solely on Art. 6(1)(a) GDPR and § 25(1) TDDDG, to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., Device Fingerprinting) as defined by TDDDG. This consent can be revoked at any time.
The company is certified under the 'EU-US Data Privacy Framework' (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF is obligated to comply with these data protection standards. You can find more information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Data Processing
We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law that ensures that this service processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Data Processing
We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law that ensures that this service processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection
The operators of this website and its pages take the protection of your personal data very seriously. Therefore, we handle your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
Whenever you use this website, various personal data is collected. Personal data refers to data that can personally identify you. This privacy policy explains which data we collect and for what purposes we use it. It also explains how and for what purpose the information is collected.
We would like to point out that data transmission over the Internet (e.g., during email communication) may have security gaps. A complete protection of data against access by third parties is not possible.
Information About the Responsible Party (Referred to as the “Controller” in the GDPR)
The party responsible for data processing on this website is:
Gil Arusi
Phone: +49 89 998 8440 0
Email: [email protected]
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Retention Period
Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will occur after these reasons no longer apply.
General Information on the Legal Bases of Data Processing on This Website
If you have given consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data pursuant to Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on § 25(1) TDDDG. Consent can be revoked at any time. If your data is required for the fulfillment of a contract or for pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. If your data is required to fulfill a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, data processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Specific legal bases in individual cases can be found in the following sections of this privacy policy.
Appointment of a Data Protection Officer
We have appointed a data protection officer:
Saleh Bushnaq
Phone: +49 15252889231
Email: [email protected]
Recipients of Personal Data
As part of our business operations, we collaborate with various external entities. This sometimes requires the transfer of personal data to these external entities. We only share personal data with external parties if it is necessary for contract fulfillment, if we are legally required to do so (e.g., sharing data with tax authorities), if we have a legitimate interest in the transfer pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using data processors, we only share personal data of our customers based on a valid data processing agreement. If joint processing occurs, a joint processing agreement is concluded.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent that you have already given at any time. The legality of the data processing carried out before revocation remains unaffected.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT THAT IT IS RELATED TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).
Right to File Complaints with Regulatory Authorities
In the event of violations of the GDPR, affected individuals have the right to file a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged violation. The right to file a complaint exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to request that data that we process automatically on the basis of your consent or in fulfillment of a contract be handed over to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
Right to Information, Correction, and Deletion
Within the framework of applicable legal provisions, you have the right to obtain information about your stored personal data, its origin and recipients, and the purpose of data processing at any time. You may also have the right to request the correction or deletion of your data. If you have any questions about this or other issues related to personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing applies in the following cases:
If you dispute the accuracy of your data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you require it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have objected pursuant to Art. 21(1) GDPR, your rights and our rights must be weighed against each other. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data may – apart from storage – only be processed with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
SSL and/or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this website uses either SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from 'http://' to 'https://' and by the lock symbol in the browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data Collection on This Website

Cookies
Our websites and pages use so-called "cookies." Cookies are small data packets that do not harm your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored on your device (permanent cookies). Session cookies are automatically deleted once you leave the site. Permanent cookies remain stored on your device until you actively delete them or they are automatically removed by your web browser.
Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies allow the integration of certain services from third-party providers into websites (e.g., cookies for processing payment services).
Cookies serve different functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video playback). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies required for electronic communication, to provide specific functions you request (e.g., shopping cart function), or to optimize the website (necessary cookies) (e.g., cookies that provide measurable insights into web audience behavior) are stored based on Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically flawless and optimized provision of its services. If your consent for storing cookies and similar tracking technologies has been requested, processing is based exclusively on the given consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); this consent can be revoked at any time.
You have the option to configure your browser to notify you whenever cookies are set, to allow cookies only in certain cases, to generally exclude them, or to activate automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.
You can find details about which cookies and services are used on this website in this privacy policy.
Consent with Cookie Notice & Compliance
Our website uses the consent technology of Cookie Notice & Compliance for GDPR to obtain your consent for storing certain cookies on your device or using specific technologies and to document this in compliance with data protection regulations.
Cookie Notice & Compliance for GDPR is installed locally on our servers, so no connection to third-party servers is established. Cookie Notice & Compliance for GDPR stores a cookie in your browser to assign the granted consent and its withdrawal to you. The cookie remains active for 1 month. Your data is stored until you request deletion, delete the consent cookie yourself, or the purpose for data storage ceases. This does not affect statutory retention periods.
Cookie Notice & Compliance for GDPR is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.
Real Cookie Banner
Our website uses the consent technology of Real Cookie Banner to obtain your consent for storing certain cookies on your device or using specific technologies and to document this in compliance with data protection regulations. The provider of this technology is devowl.io GmbH, Tannet 12, 94539 Grafling, Germany (hereinafter referred to as "Real Cookie Banner").
Real Cookie Banner is installed locally on our servers, so no connection to the provider's servers is established. Real Cookie Banner stores a cookie in your browser to assign the granted or withdrawn consent to you. The data collected in this way is stored until you request deletion, withdraw your consent to data storage, or the purpose for data storage ceases (e.g., after processing your request is completed). This does not affect statutory provisions—especially those concerning retention periods.
We use Real Cookie Banner to obtain the legally required consent for the use of cookies from website visitors. The legal basis for this is Art. 6(1)(c) GDPR.
Server Log Files
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. The information includes:
Type and version of the browser used
The operating system used
Referrer URL
The hostname of the accessing computer
The time of the server request
The IP address
This data is not merged with other data sources.
This data is collected based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website. To achieve this, server log files must be collected.
Inquiry via Email, Phone, or Fax
If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
This data is processed based on Art. 6(1)(b) GDPR if your request is related to contract fulfillment or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling the inquiries directed at us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested; consent can be revoked at any time.
The data you send us via contact inquiries remains with us until you request deletion, revoke your consent for storage, or the purpose for data storage ceases (e.g., after your request is completed). Mandatory legal provisions—especially retention periods—remain unaffected.

5. Analytics Tools and Advertising

Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It merely manages and executes the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google's parent company in the United States.
Google Tag Manager is used based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on their website. If consent has been obtained, processing is based exclusively on Article 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to user device information (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when processing data in the USA. Any company certified under the DPF is obligated to adhere to these data protection standards. More information can be found at the following link: https://www.dataprivacyframework.gov/participant/5780.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various user data, such as visited pages, time spent on the site, the operating system used, and the user’s origin. This data is assigned to a unique user ID and linked to the respective user device.
Furthermore, Google Analytics can record your mouse and scroll movements as well as clicks. Google Analytics uses various modeling approaches to enhance the collected data and employs machine learning technologies for data analysis.
Google Analytics uses technologies that enable user recognition for behavior analysis (e.g., cookies or device fingerprinting). The information collected by Google regarding the use of this website is usually transmitted to a Google server in the United States and stored there.
The use of these services is based on your consent in accordance with Article 6(1)(a) GDPR and § 25(1) TDDDG. You can revoke your consent at any time.
Data transfer to the USA is based on the European Commission’s Standard Contractual Clauses (SCC). Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that ensures compliance with European data protection standards when processing data in the USA. Any company certified under the DPF is obligated to adhere to these data protection standards. More information can be found at the following link: https://www.dataprivacyframework.gov/participant/5780.
IP Anonymization
Google Analytics IP anonymization is active. This means that Google shortens your IP address within member states of the European Union or other contracting states of the European Economic Area Agreement before transmitting it to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide the website operator with further services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Data Processing Agreement
We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.