Go to homepage

Privacy policy

1. Data Protection at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit our website. Personal data refers to all information that relates to an identified or identifiable natural person. Detailed information can be found in the privacy policy set out below.

Data Collection on This Website

  • Who is responsible for data collection on this website?
    The website carries out data processing on this website. The operator’s contact details can be found in the section “Information on the Responsible Entity” in this privacy policy.
  • How do we collect your data?
    On the one hand, your data is collected when you provide it to us, for example, by entering data into a contact form. On the other hand, technical data are collected automatically or after your consent when you visit the website through our IT systems (e.g., browser type, operating system, time of page access).
  • What do we use your data for?
    Some of the data is used to ensure the error-free provision of the website. Other data may be used to analyse your user behavior. If contracts can be concluded or initiated via the website, the transmitted data are also processed for contract offers, orders, or other service inquiries.
  • What rights do you have to your data?
    You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. You may revoke any consent you have given to data processing at any time with effect for the future. Under certain circumstances, you may request the restriction of processing. You also have the right to complain to the competent Swiss Federal Data Protection and Information Commissioner (FDPIC/EDÖB).

For these and any other questions regarding data protection, you may contact us at any time.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically evaluated, in particular through analytics programs. Details can be found in this privacy policy.

2. Hosting and Content Delivery Networks (CDN)

We host the content of our website with the following provider:

INWX

The provider is INWX GmbH, Prinzessinnenstraße 30, 10969 Berlin, Germany.

Further information can be found in INWX’s privacy policy: https://www.inwx.de/de/privacy.

The use of INWX is based on our legitimate interest in providing our website as reliably, securely, and efficiently as possible. INWX provides the technical resources for operating our website, in particular server and domain administration.

Data processing takes place within the European Union. INWX undertakes to comply with the applicable European data protection standards.

Cloudinary Inc. (Images and Videos)

The provider is Cloudinary Inc., 3400 Central Expressway, Suite 110, Santa Clara, CA 95051, USA (“Cloudinary”).

Further information can be found in Cloudinary’s privacy policy: https://cloudinary.com/privacy?tid=331690184217.

The use of Cloudinary is based on our legitimate interest in the reliable presentation of our website. Cloudinary provides a cloud-based content delivery network (CDN) that allows website operators to securely store media content. This relieves our own servers and can improve website loading times. Where consent has been requested, processing is carried out exclusively based on consent, insofar as consent covers the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting). Consent may be revoked at any time.

The company is certified under the Swiss–U.S. Data Privacy Framework (DPF). The DPF is an agreement between Switzerland and the US that aims to ensure compliance with European data protection standards when data is processed in the US. Every company certified by the DPF undertakes to comply with these data protection standards.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned services. This is a legally required agreement that ensures that the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the Swiss Federal Act on Data Protection (DSG).

3. General Information and Mandatory Disclosures

Data protection

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy. When you visit our website, various personal data is collected, i.e., information that can be used to identify you personally. This privacy policy explains what data we collect, for what purposes we use it, and on what legal basis. Please note that data transmission over the Internet (e.g., communication by email) may have security gaps. Complete protection against access by third parties is not possible.

Information on the Responsible Entity

The responsible entity for data processing on this website is:

LEKI Lenhart GmbH
Karl-Arnold-Straße 30
DE-73230 Kirchheim unter Teck

Phone: +49 (0) 7021 9400 0
Email: service@leki.de
Fax: +49 (0) 7021 9400 99

The responsible entity is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Retention Period

Unless a specific retention period is stated in this privacy policy, we retain your personal data for as long as necessary to fulfil the respective purpose. If you exercise your right to deletion or revoke your consent, your data will be deleted unless there are other legally permissible reasons for retention (e.g., tax or commercial law retention obligations). In such cases, deletion takes place once these reasons no longer apply.

Legal Bases for Data Processing on This Website

Your personal data is processed on various legal bases. If you have given us your consent, processing is based on that consent, which you may revoke at any time with effect for the future. This applies in particular to the use of cookies or access to information on your end device (e.g., device fingerprinting).

Data required for the performance of a contract or for pre-contractual measures are processed for that purpose. In addition, we may process personal data on the basis of legal obligations or our legitimate interests. The applicable legal bases in each case are explained in the following sections of this privacy policy.

Data Protection Officer

We have appointed a data protection officer:

Barton & Bluhm KG
Eschenalle 32
DE-14050 Berlin

Phone: +49 (0) 3051 3011 5 33
Email: larsholger.kraus@bartonbluhm.de

Recipients of Personal Data

In the course of our business activities, we cooperate with external partners. Personal data is disclosed only if necessary for contract performance (e.g., shipping service providers), if we are legally obliged to do so (e.g., tax authorities), if there is a legitimate interest, or if another legal basis permits disclosure. Where processors are used, disclosure is based exclusively on a corresponding contract. In cases of joint controllership, an agreement on the respective obligations is concluded.

Revocation of Your Consent to Data Processing

Many data processing operations are possible only with your express consent. You may revoke consent at any time. The lawfulness of processing carried out before revocation remains unaffected.

Right to Object to Data Collection in Special Cases and to Direct Advertising

If your personal data is processed based on our legitimate interests, you have the right to object at any time on grounds relating to your particular situation. This also applies to profiling based on this provision. In such cases, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time. This also applies to profiling insofar as it is related to direct marketing. In the event of an objection, your personal data will no longer be used for direct marketing purposes.

Right to Lodge a Complaint

In the event of violations of the Swiss Federal Act on Data Protection (DSG) or the General Data Protection Regulation (GDPR), you may complain with the Swiss Federal Data Protection and Information Commissioner (EDÖB). This right exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract in a commonly used, machine-readable format, or to have it transmitted to a third party. Direct transmission to another controller will be carried out only insofar as technically feasible.

Information, Correction, and Deletion

Within the framework of applicable legal provisions, you have the right at any time to obtain information about your stored personal data, their origin and recipients, and the purpose of processing, as well as, where applicable, a right to correction or deletion of these data. For this purpose and for further questions regarding personal data, you may contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data. This right applies in the following cases: If you contest the accuracy of your personal data, we usually need time to verify this.

  • For the duration of the review, you have the right to request restriction of processing. For the duration of the review, you have the right to request restriction of processing.
  • If the processing of your personal data was/is unlawful, you may request restriction instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of its deletion.
  • If you have objected to the processing of your personal data, we will weigh up your interests against ours. For the duration of this review, you may request a restriction. If processing has been restricted, such data - apart from storage - may be processed only with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of Switzerland or Liechtenstein.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser address line from “http://” to “https://” and the lock symbol in your browser.

If SSL/TLS encryption is activated, data transmitted to us cannot be read by third parties.

Objection to Advertising Emails

The use of contact data published in the imprint for sending unsolicited advertising and informational materials is hereby objected to. We expressly reserve the right to take legal action in the event of unsolicited advertising, in particular spam emails.

4. Fundamentals of Data Processing

We process personal data in particular in the following categories of processing:

  • Customer data of customers for whom we provide services;
  • Communication or visits;
  • Other contractual relationships;
  • Job applications;
  • If we are required to do so for legal or regulatory reasons;
  • Personal data in connection with events;
  • Fulfillment of due diligence obligations or other legitimate interests, e.g., avoiding conflicts of interest, ensuring data accuracy and security, or enforcing our rights.

5. Purposes of Data Processing and Legal Basis

Provision of Services

We primarily process personal data that we receive from our customers in the context of our customer relationships and from our business partners in the context of other contractual relationships with them and other persons involved.

The personal data of our customers includes the following information in particular:

  • Contact information (e.g., name, address, telephone number, email, other contact info);
  • Personal information (e.g., date of birth);
  • Customer data (depending on the order, e.g., records, employee data, accounting data, reference data, etc.);
  • Risk assessment data (for example, creditworthiness information, commercial register data, specialized databases, data from the Internet);
  • Financial information (for example, data relating to bank accounts);
  • Order-related data (for example, delivery notes, invoice information, contractual data);
  • Technical information (for example, statistical data, GPS information);
  • Image recordings (for example, project photographs, project videos).

We process these personal data for the purposes described based on the following legal grounds:

  • Conclusion or performance of a contract with the data subject or for the benefit of the data subject, including contract initiation and any enforcement thereof;
  • Compliance with a legal obligation (for example, where we are required to disclose information);
  • Consent (for example, to send you marketing information);
  • Protection of legitimate interests (for example, for administrative purposes, to improve our quality, to ensure security, to conduct risk management, to enforce our rights, to defend against claims, or to review potential conflicts of interest).

6. Data Collection on this Website

Cookies

Our website uses cookies. Cookies are small data packets and do not cause damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted when you end your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services provided by third parties within websites (e.g., cookies used to process payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies may be used to analyze user behavior or for advertising purposes.

Necessary cookies that are required for the operation of the website, certain requested functions (e.g., shopping cart), or optimization of the website (e.g., reach measurement) are stored unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. Where you have consented to the use of cookies or comparable recognition technologies, processing is carried out exclusively based on that consent. You may revoke your consent at any time with effect for the future.

You can configure your browser settings to notify you when cookies are set and to allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Information on which cookies and services are used on this website can be found in this Privacy Policy.

Server Log Files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The collection of this data is based on our legitimate interest in ensuring a technically error-free presentation and optimization of the website. For this purpose, the storage of server log files is required.

Contact Form

If you send us an inquiry via the contact form, we process the personal data you provide (including contact details) for the purpose of handling your request and in case of follow-up questions. This data is not shared with third parties without your consent.

Your data is processed where necessary for the performance of a contract or for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries or on your consent, if you have given it. You may revoke any consent given at any time with effect for the future.

The personal data entered in the contact form is stored until the purpose for processing no longer applies (e.g., after your inquiry has been fully processed), you request deletion, or you revoke your consent. Mandatory statutory retention obligations remain unaffected.

Inquiries by Email or Telephone

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), is stored and processed by us for the purpose of handling your request. We do not disclose this data without your consent.

We process your data where this is necessary for the performance of a contract or for the implementation of pre-contractual measures. In all other cases, processing is based either on our legitimate interest in efficiently handling inquiries or on your consent, which you may revoke at any time with effect for the future.

The data you submit to us via contact inquiries remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Klaviyo

We use Klaviyo on this website. The provider is Klaviyo Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA, and Cambridge, MA 02141, USA.

Klaviyo is used to manage existing and potential customers and their contacts. It enables us to capture, organize, and analyze customer interactions across channels such as email, social media, or telephone. The collected personal data is used for communication and marketing purposes (e.g., sending newsletters). Klaviyo also enables analysis of user behavior on our website. Where you have given your consent, processing is carried out on this basis, in particular when using cookies or comparable technologies (e.g., device fingerprinting). You may revoke your consent at any time with effect for the future. Consent may be withdrawn at any time.

Data transfers to the United States are based on the Swiss Standard Contractual Clauses in accordance with the Swiss Federal Act on Data Protection (FADP/DSG).

The transfer of personal data to the United States is carried out based on the Standard Contractual Clauses in accordance with the FADP/DSG. The company is certified under the Swiss–U.S. Data Privacy Framework (DPF). Data transfers to the United States are carried out on the basis of the Standard Contractual Clauses in accordance with the FADP/DSG.

Registration on This Website

You may register on this website to use additional features. The personal data collected during registration is used exclusively to provide the respective offer or service. Required fields must be completed; otherwise, registration is not possible.

We use the email address provided during registration to inform you of important changes or technically necessary updates.

The data collected during registration is processed for the performance of the user relationship and, where applicable, for the initiation of further contracts.

Your registration data is stored for as long as your account is active and is deleted thereafter, provided no statutory retention obligations apply.

7. Social Media

Facebook

This website integrates functions of the social network Facebook. The provider is Meta Platforms Ireland Limited, Dublin, Ireland. Facebook may also transfer data to the United States and other countries. When the element is active, a direct connection to Facebook’s servers is established. Facebook thereby receives information about your visit to our website and may associate this information with your user account if you are logged in.

Use is based on our legitimate interest in ensuring an optimal presentation of our website. Where we obtain your explicit consent for this purpose, processing is carried out exclusively on that basis. Meta Platforms Ireland Limited and we are jointly responsible for the collection and transmission of data to Facebook. Subsequent processing is carried out exclusively by Facebook.

Further information is available at: https://de-de.facebook.com/privacy/explanation.

The company is certified under the Swiss–U.S. Data Privacy Framework (DPF).

Instagram

This website incorporates functions of Instagram, which is also operated by Meta Platforms Ireland Limited, Dublin, Ireland. When interactive elements are activated, a connection to the Instagram servers is established, and your visit may be associated with your account if you are logged in.

Use is based on our legitimate interest in ensuring an optimal presentation of our website. Where we obtain your explicit consent for this purpose, processing is carried out exclusively on that basis. Meta and we are jointly responsible for the collection and transmission of the data; further processing is carried out exclusively by Instagram.

Further information is available a: https://privacycenter.instagram.com/policy/.

The company is certified under the Swiss–U.S. Data Privacy Framework (DPF).

8. Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate and manage other tracking, analytics tools, and technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform analyses. However, your IP address is collected and may be transmitted to Google servers in the United States. Use of Google Tag Manager is based on our legitimate interest in the efficient and straightforward management of tools on our website. The company is certified under the Swiss–U.S. Data Privacy Framework (DPF).

Google Analytics

Subject to your consent, we may use Google Analytics. Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables us to analyze the behavior of visitors to our website, including page views, duration of visits, operating systems, and user origin. The data is aggregated under a user ID and assigned to the respective device. In addition, mouse movements, scrolling behavior, and clicks may be recorded. Google Analytics uses cookies or comparable technologies to enable the recognition of users. The data is generally transmitted to Google servers in the United States. Processing is carried out based on your consent. Your IP address is shortened through IP anonymization within the European Union or Switzerland before transmission to the United States. You may prevent data collection by Google Analytics by installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de

The company is certified under the Swiss–U.S. Data Privacy Framework (DPF).

IP Anonymization

Google Analytics IP anonymization is activated. As a result, your IP address is shortened by Google within Switzerland or Liechtenstein, the European Union, or other contracting states to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Prevention of Processing

The granting of consent is entirely voluntary. You have the right to revoke any consent at any time. Revocation of consent does not affect the lawfulness of processing carried out on the basis of consent prior to revocation. You may revoke consent directly on our website via the “Cookie Settings” link.

You may also revoke consent by deleting or disabling cookies in your Internet browser.

You may prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on how Google Analytics handles user data can be found in Google’s Privacy Policy at: https://support.google.com/analytics/answer/6004245?hl=de.

Shopware 6 E-Commerce Tracking

Our website uses the “E-Commerce Tracking” function of Shopware 6. This function allows the website operator to analyze the purchasing behavior of visitors in order to optimize online marketing measures. Information such as completed orders, average order values, shipping costs, and the time period between product views and purchases is collected. Google may aggregate this data under a transaction ID that is assigned to the respective user or device.

9. Newsletter

If you wish to subscribe to our newsletter, we require your email address. In addition, we may request information that confirms you are the owner of the email address and that you consent to receiving the newsletter. Any additional data is collected only on a voluntary basis.

We use your data exclusively for sending the newsletter and do not disclose it to third parties.

The processing of your data in the newsletter subscription form is based on your consent. You may revoke your consent at any time, for example via the “Unsubscribe” link in the newsletter. The lawfulness of data processing carried out before revocation remains unaffected.

Your data is stored by us or the newsletter service provider until you unsubscribe and is deleted after unsubscription or once the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list within the scope of our legitimate interest. Data stored for other purposes remains unaffected.

After unsubscription, your email address may be stored on a blacklist to prevent future mailings. This data is used exclusively for this purpose and is not merged with other data. Storage is based on legitimate interest and is not time-limited. You may object to this storage if your interests outweigh our legitimate interest.

10. Plugins and Tools

YouTube

This website integrates videos from the YouTube platform. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page that includes an embedded YouTube video, a connection to YouTube servers is established. In doing so, information is transmitted indicating which of our pages you have visited. If you are logged into your YouTube account, YouTube may directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in enhanced privacy mode. According to YouTube, this mode does not use data to personalize your browsing experience on YouTube. Advertisements are also not personalized. No cookies are set in enhanced privacy mode. However, so-called local storage elements may be stored in the browser, which contain personal data similar to cookies and may be used for recognition purposes.

Additional data processing operations may occur when a video is played, over which we have no control.

Use of YouTube serves the interest of presenting our online offerings appealingly and constitutes a legitimate interest. In addition, data processing may be carried out on the basis of your consent. This includes, in particular, consent for cookies or access to device information (for example, device fingerprinting). Consent may be revoked at any time. Further information on data protection at YouTube can be found in its Privacy Policy at: https://policies.google.com/privacy?hl=de.

The company is certified under the Swiss–U.S. Data Privacy Framework (DPF).

Google Maps

This website uses Google Maps provided by Google Ireland Limited, Dublin, to display map material. Use of Google Maps requires the storage of your IP address. This information is generally transmitted to Google servers in the United States and stored there. We do not influence this data transmission. When Google Maps is activated, Google may also use Google Fonts to ensure the consistent display of fonts. These fonts are loaded by your browser into the cache to display text correctly.

The use of Google Maps serves the purpose of providing an appealing presentation of our offerings and ensuring easy location of the places specified. This constitutes a legitimate interest. Where your explicit consent is required for this purpose, for example when using cookies or comparable technologies, processing is carried out exclusively based on that consent. You may revoke your consent at any time with effect for the future.

The company is certified under the Swiss–U.S. Data Privacy Framework (DPF). Further information on the handling of user data can be found in Google’s Privacy Policy at: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use Google reCAPTCHA on this website, provided by Google Ireland Limited, Dublin, to determine whether entries, for example in contact forms, are made by humans or by automated programs. For this purpose, reCAPTCHA analyzes various information in the background, such as IP address, length of stay, or mouse movements, which are transmitted to Google.

Processing is carried out based on our legitimate interest in protecting our website from misuse and spam. Where explicit consent exists, for example for cookies or device fingerprinting, processing is carried out exclusively based on that consent. Consent may be revoked at any time. The company is certified under the Swiss–U.S. Data Privacy Framework (DPF). The company is certified under the “Swiss–U.S. Data Privacy Framework” (DPF). Further information on Google reCAPTCHA can be found in Google’s Privacy Policy and Google’s Terms of Use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Data Processing Agreement

We have concluded a data processing agreement with the service provider named above in accordance with the Swiss Federal Act on Data Protection (DSG). This agreement obligates the service provider to process the personal data of our website visitors exclusively in accordance with our instructions and in compliance with the DSG.

E-Commerce and Payment Service Providers

Processing of Customer and Contract Data

We collect, process, and use personal data of customers for the establishment, structuring, and modification of our contractual relationships. Usage data of this website is processed only to the extent necessary for the use of the service or for billing purposes. The legal basis is our legitimate interest.

The data is deleted after completion of the order or termination of the business relationship and after the expiry of statutory retention periods.

Data Transfer Upon Conclusion of a Contract for Online Shops, Merchants, and Goods Delivery

If you order goods from us, we transfer your personal data to the transport company commissioned with delivery as well as to the payment service provider. Only the data required to perform the respective task is transmitted.

The purpose and legal basis for processing is contract performance. If you have given consent, we transfer your email address to the transport company so that it can inform you about the shipment status. Any consent given may be revoked at any time.

Data Transfer Upon Conclusion of a Contract for Services and Digital Content

Personal data is transferred to third parties only where this is necessary for contract processing, for example to the credit institution responsible for payment processing. Any further transfer takes place exclusively with your explicit consent.

The purpose and legal basis for processing is contract performance.

Creditworthiness Checks

If payment is made on account or by another payment method that requires us to make advance performance, we may carry out a creditworthiness check (scoring). For this purpose, we transfer your personal data (for example, name, address, age, bank details) to a credit agency. Based on this data, the credit agency determines the probability of a payment default. If the risk is too high, we may refuse the requested payment method.

Processing is carried out for contract performance and to prevent payment defaults based on our legitimate interest. Where consent has been obtained, the creditworthiness check is based on that consent. Any consent given may be revoked at any time.

Payment Services

We use payment services provided by third parties on our website. In the event of a purchase, the required personal data (for example, name, payment amount, bank details, credit card number) is processed by the payment service provider for payment processing. The legal basis is contract performance and our legitimate interest in secure and efficient payment processing. Where consent is required, processing is based on that consent. Consent may be revoked at any time with effect for the future.

The following payment services and payment service providers are used on this website:

TWINT

If the payment method “TWINT” is selected during the ordering process, personal data is transmitted as part of payment processing to TWINT AG, Stauffacherstrasse 41, 8004 Zurich, Switzerland (hereinafter “TWINT”). The data transmitted is limited to what is required for payment processing. This includes, among other things, device information, payment amounts, merchant information, and technical transaction data.

Processing of the data is carried out for the purpose of executing and processing payments via TWINT. As part of its role as a payment service provider, TWINT may transfer data to other involved financial institutions or technical service providers to the extent required for payment processing.

Further information on data processing by TWINT can be found in TWINT’s Privacy Policy at https://www.twint.ch/datenschutz/.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium.

Mastercard may transfer data to its parent company in the United States. Data transfer to the United States is based on Mastercard’s Binding Corporate Rules. Further details can be found in Mastercard’s Privacy Policy at: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom.

VISA may transfer data to its parent company in the United States. Data transfer to the United States is based on the Swiss Standard Contractual Clauses in accordance with the DSG.

Further details can be found in VISA’s Privacy Policy at: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

12. Processing of Data in Job Applications

You may submit your application for employment with us by post or via the email address provided on our website. Application documents and all personal data disclosed to us in connection with the application are treated as strictly confidential, are not disclosed to third parties, and are processed exclusively for the purpose of reviewing your application for employment with us. Unless you have given contrary consent, your application file will be returned to you or deleted or destroyed after completion of the application process, provided it is not subject to statutory retention obligations. The legal bases for processing your data are your consent, performance of the contract with you, and our legitimate interests.

 

In the event of discrepancies or inconsistencies between the language versions of this Privacy Policy, the German version shall prevail.

Status: January 2026