CHRIS box AG | Datenschutz

Privacy Policy

A. Cross-channel information

1. Responsible party and content of this privacy policy

We, CHRIS box AG, Fabrikstrasse 10, 8360 Eschlikon/TG Switzerland, are the operator of the website www.chris-box.eu/ (hereinafter referred to as the “website”) and, unless otherwise specified, are responsible for the data processing described in this privacy policy.

Please read the following information so that you know what personal data we collect from you and for what purposes we use it. We base our data protection practices on the legal requirements of the European data protection law EU GDPR.

Please note that the following information is reviewed and amended from time to time. We therefore recommend that you review this privacy policy regularly. Furthermore, other companies are responsible for data processing listed below or are jointly responsible with us, in which case the information provided by these providers is also relevant.

2. Contact person for data protection

If you have any questions about data protection or wish to exercise your rights, please contact our data protection officer by sending an email to the following address: info@chris-box.eu

3. Your rights

Provided that the legal requirements are met, you, as a data subject, have the following rights:

Right to information: You have the right to request access to your personal data stored by us at any time, free of charge, if we process it. This allows you to check which personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, particularly where there are legal retention obligations, the right to erasure may be excluded. In this case, the data may be blocked instead of being erased if the relevant conditions are met.

Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.

Right to data portability: You have the right to receive the personal data you have provided to us in a readable format free of charge.

Right to object: You may object to data processing at any time, in particular for data processing in connection with direct marketing (e.g., advertising emails).

Right to withdraw consent: You have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.

To exercise these rights, please send us an email to the following address: info@chris-box.eu

Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the manner in which your personal data is processed.

4. Data security

We use appropriate technical and organizational security measures to protect your personal data stored with us against loss and unlawful processing, in particular unauthorized access by third parties. Our employees and the service providers we commission are bound by us to maintain confidentiality and data protection. Furthermore, these persons are only granted access to personal data to the extent necessary for the performance of their tasks.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks, and we cannot provide any absolute guarantee for the security of information transmitted in this way.

5. Contacting us

If you contact us via our contact addresses and channels (e.g., by email, telephone, or contact form), your personal data will be processed. The data you provide us with, e.g., the name of your company, your name, your position, your email address, or telephone number, and your request will be processed. In addition, the time of receipt of the request is documented. Mandatory information is marked with an asterisk (*) in contact forms.

Data processing is our legitimate interest within the meaning of Art. 6 (1) lit. f EU GDPR in the implementation of your request or, if your request is aimed at the conclusion or execution of a contract, the necessity for the implementation of the necessary measures within the meaning of Art. 6 (1) lit. b EU GDPR.

6. Use of your data for marketing purposes

6.1 Central data storage and analysis in the CRM system

If it is possible to clearly identify you, we will store and link the data described in this privacy policy, i.e. in particular your personal details, your contact details, your contract data and your surfing behavior on our websites, in a central database. This serves the efficient management of customer data and allows us to respond to your requests appropriately and to efficiently provide the services you have requested and process the associated contracts. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in the efficient management of user data.

We evaluate this data in order to further develop our offers in line with your needs and to display and suggest the most relevant information and offers to you. We also use methods that predict possible interests and future orders based on your website usage. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in carrying out marketing measures.

6.2 Email marketing and newsletter

If you register for our email newsletter (e.g. when opening or within your customer account), the following data will be collected. Mandatory fields are marked with an asterisk (*) in the registration form:

Email address
Title
First and last name
Interest

To prevent misuse and to ensure that the owner of an email address has actually given their consent, we use the double opt-in procedure for registration. After submitting your registration, you will receive an email from us containing a confirmation link. To definitively subscribe to the newsletter, you must click on this link. If you do not click on the confirmation link within the specified period, your data will be deleted and our newsletter will not be sent to this address.

By registering, you consent to the processing of this data in order to receive news from us about our company, our offers in the field of sporting goods, and related products and services. This may also include invitations to participate in competitions or to evaluate any of the aforementioned products and services. Collecting your title and name allows us to verify that the registration is linked to an existing customer account and to personalize the content of the emails. Linking to a customer account helps us to make the offers and content contained in the newsletter more relevant to you and better tailored to your potential needs.

We use your data for sending emails until you revoke your consent. You can revoke your consent at any time, in particular via the unsubscribe link in all our marketing emails.

Our marketing emails may contain a so-called web beacon or 1x1 pixel (tracking pixel) or similar technical tools. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information about which addresses have not yet received the email, to which addresses it was sent, and which addresses the email failed to reach. It also shows which addresses opened the email, how long they were open, and which links were clicked. Finally, we also receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimize the advertising emails in terms of frequency, timing, structure, and content. This enables us to better tailor the information and offers in our emails to the individual interests of the recipients.

The web beacon is deleted when you delete the email. To prevent the use of web beacons in our marketing emails, please set your email program's parameters so that HTML is not displayed in messages, if this is not already the case by default. You can find information on how to configure this setting in the help sections of your email software, e.g. here for Microsoft Outlook.

By subscribing to the newsletter, you also consent to the statistical analysis of user behavior for the purpose of optimizing and adapting the newsletter. This consent constitutes our legal basis for processing the data within the meaning of Art. 6 para. 1 lit. a EU GDPR.

We use the email marketing software Klaviyo 106 Fenchurch Street 5th Floor London, EC3M 5JD England, for marketing emails. Your data is therefore stored in a database by Klaviyo, which allows Klaviyo to access your data if this is necessary for the provision of the software and for support in using the software. The legal basis for this processing is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in using the services of third-party providers.

Klaviyo uses this information to send the newsletter on our behalf and does not use the data of our newsletter recipients to contact them itself or pass it on to third parties.

To protect your data in the US, we have entered into a data processing agreement with Klaviyo in which Klaviyo undertakes to protect our users' data, to process it on our behalf in accordance with its privacy policy, and, in particular, not to disclose it to third parties.

Klaviyo's privacy policy can be found here: https://www.klaviyo.com/privacy

7. Disclosure to third parties and access by third parties

Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to use the services of these companies, it is necessary to disclose your personal data to a certain extent. Such disclosure is made by name, insofar as this is necessary to fulfill the contract you have requested, i.e., for example, to the logistics or transport companies that deliver the products you have requested, or to a manufacturer who is to fulfill your warranty claim. The legal basis for this transfer is the necessity for the performance of the contract within the meaning of Art. 6 (1) lit. b EU GDPR.

A transfer is also made to selected service providers and only to the extent necessary for the provision of the service. Various third-party service providers are also explicitly mentioned in this privacy policy, e.g. in the sections on marketing. These include, for example, IT service providers (such as software solution providers), advertising agencies, and consulting firms. Our legitimate interest in obtaining third-party services within the meaning of Art. 6 (1) lit. f EU GDPR forms the legal basis for this data transfer.

In addition, your data may be transferred, in particular to authorities, legal advisors, or collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from our relationship with you. Data may also be transferred if another company intends to acquire our company or parts thereof and such transfer is necessary to carry out due diligence or to complete the transaction. The legal basis for this data transfer is our legitimate interest within the meaning of Art. 6 (1) lit. f EU GDPR in protecting our rights and complying with our obligations or in selling our company.

8. Transfer of personal data abroad

We are also entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing operations specified in this privacy policy (see in particular sections 12-15). In doing so, the legal provisions on the disclosure of personal data to third parties will of course be observed. If the country in question does not have an adequate level of data protection, we will ensure through contractual arrangements that your data is adequately protected by these companies.

9. Retention periods

We only store personal data for as long as is necessary to carry out the processing operations described in this privacy policy within the scope of our legitimate interests. In the case of contract data, storage is required by statutory retention obligations. Requirements that oblige us to retain data arise from accounting regulations and tax law provisions. In accordance with these provisions, business communications, concluded contracts, and accounting documents must be retained for up to 10 years. If we no longer need this data to provide services to you, it will be blocked. This means that the data may then only be used if this is necessary to fulfill our retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer any retention obligation or legitimate interest in its storage.

B. Special information for our website

10. Log file data

When you visit our website, Shopify's servers temporarily store each access in a log file. The following data is collected without your intervention and stored by us until it is automatically deleted:

the IP address of the requesting computer,
the date and time of access,
the name and URL of the file accessed,
the website from which access was made, including any search terms used,
your computer's operating system and the browser you are using (including type, version, and language settings),
device type in the case of access via mobile phones,
the city or region from which access was made,
the name of your Internet access provider.

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability in the long term, and for error and performance analysis, and enables us to optimize our website (see also section 13 for the last points).

In the event of an attack on the website's network infrastructure or if we suspect other unauthorized or abusive use of the website, the IP address and other data will be evaluated for clarification and defense purposes and, if necessary, used in criminal proceedings to identify and take civil and criminal action against the users concerned. Our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f EU GDPR lies in the purposes described above.

Finally, when you visit our website, we use cookies and applications and tools that are based on the use of cookies. In this context, the data described here may also be processed. You can find more detailed information on this in the following sections of this privacy policy, in particular section

11. Cookies

Cookies are information files that your web browser stores on your computer's hard drive or in its memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.

Cookies help, among other things, to make your visit to our website easier, more pleasant, and more meaningful. We use cookies for various purposes that are necessary for the use of the website as you have requested, i.e., they are “technically necessary.” For example, we use cookies to identify you after you log in as a registered user so that you do not have to log in again when navigating the various subpages. The provision of the shopping cart and order function is also based on the use of cookies. Cookies also perform other technical functions necessary for the operation of the website, such as load balancing, i.e., distributing the performance load of the page across different web servers to reduce the load on the servers. Cookies are also used for security purposes, for example, to prevent unauthorized posting of content. Finally, we also use cookies in the context of the design and programming of our website, for example to enable the uploading of scripts or codes.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in providing a user-friendly and up-to-date website.

Most Internet browsers automatically accept cookies. However, when you access our website, we ask for your consent to the use of cookies that are not technically necessary, in particular when using third-party cookies for marketing purposes. You can select your preferred settings using the buttons in the cookie banner. Details of the services and data processing associated with the individual cookies can be found in the cookie banner and in the following sections of this privacy policy.

You may also be able to configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. The following pages explain how you can configure the processing of cookies in selected browsers.

Google Chrome
Apple Safari

Disabling cookies may mean that you cannot use all the functions of our website.

12. Google SiteSearch / Google Custom Search Engine

This website uses Google SiteSearch/Google Custom Search Engine from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This enables us to provide you with an efficient search function on our website.

When you use our search fields, your browser may transmit the log file data listed in section 10 (including your IP address) and the search term you entered to Google, provided that you have JavaScript installed in your browser. If you wish to prevent data transmission, you can disable JavaScript in your browser settings (usually in the “Privacy” menu). Please note that the search function and other functions of the website may be impaired in this case.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in providing an efficient website search function.

For further processing of the data by Google, please refer to Google's privacy policy: www.google.com/intl/de_de/policies/privacy.

13. Tracking and web analysis tools

13.1 General information on tracking

We use the web analysis services listed below for the purpose of designing our website in line with your needs and continuously optimizing it. In this context, pseudonymized usage profiles are created and cookies are used (please also refer to Section 11). The information generated by the cookie about your use of this website is usually transferred to a server of the service provider listed in section 10, stored there and processed. This may also involve transfer to servers abroad, e.g. in the USA (see section 8, in particular regarding the guarantees provided).

The processing of the data provides us with the following information, among other things:

Navigation path taken by a visitor on the site (including content viewed and products selected or purchased),
Length of stay on the website or subpage,
The subpage from which the website is left,
The country, region, or city from which access is made,
End device (type, version, color depth, resolution, width, and height of the browser window) and
Returning or new visitor.

On our behalf, the provider will use this information to evaluate the use of the website, to compile reports on website activity for us, and to provide other services related to website activity and internet usage for the purposes of market research and the design of this website in line with user needs. For this processing, we and the providers can be considered jointly responsible for data protection to a certain extent.

The legal basis for this data processing with the following tools is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time or refuse processing by rejecting or disabling the relevant cookies in your web browser settings (see section 11) or by using the service-specific options described below.

For further processing of the data by the respective provider as the (sole) controller under data protection law, in particular any transfer of this information to third parties such as authorities on the basis of national legal provisions, please refer to the respective data protection information of the provider.

13.2 Google Analytics

We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (“Google”).

The data described above regarding the use of the website may be transferred to the servers of Google LLC. in the USA for the processing purposes explained (see section 13.1). The IP address is shortened by activating IP anonymization (“anonymizeIP”) on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Users can prevent the collection of data generated by the cookie and related to the use of the website by the user concerned (including the IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on data protection at Google can be found here.

14. Social media

14.1 Social media profiles

We have included links to our profiles on the social networks of the following providers on our website:

Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA;
Instagram Inc. 1601 Willow Road, Menlo Park, CA 94025, USA;

If you click on the social network icons, you will be automatically redirected to our profile on the respective network. This establishes a direct connection between your browser and the server of the respective social network. This informs the network that you have visited our website with your IP address and clicked on the link.

If you click on a link to a network while you are logged into your user account with that network, the content of our website may be linked to your profile so that the network can directly associate your visit to our website with your account. If you want to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account will be established in any case if you log in to the respective network after clicking on the link. The respective provider is responsible for data processing in accordance with data protection law. Please therefore note the information on the network's website.

The legal basis for any data processing attributed to us is our legitimate interest within the meaning of Art. 6 (1) lit. f EU GDPR in the use and promotion of our social media profiles.

14.2 Social media plugins

You can use social plugins from the following providers on our website:

Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA, Privacy Policy;
Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Privacy Policy;

We use social plugins to make it easier for you to share content from our website. Social plugins help us to increase the visibility of our content on social networks and thus contribute to better marketing.

The plugins are disabled by default on our websites and therefore do not send any data to social networks when you simply visit our website. To increase data protection, we have integrated the plugins in such a way that no connection to the networks' servers is established automatically. Only when you activate the plugins and thereby give your consent to the transfer and further processing of data by the social network providers will your browser establish a direct connection to the servers of the respective social network.

The content of the plugin is transmitted directly from the social network to your browser and integrated into the website. This provides the respective provider with information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the provider (usually in the USA) and stored there. We have no influence on the scope of the data that the provider collects with the plugin, whereby we can be considered jointly responsible with the providers to a certain extent from a data protection perspective.

If you are logged in to the social network, it can assign your visit to our website directly to your user account. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g., that you like a product of ours) may also be published on the social network and may be displayed to other users of the social network. The provider of the social network may use this information for the purpose of placing advertisements and designing the respective offer in line with your needs. For this purpose, usage, interest, and relationship profiles may be created, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website, and to provide other services related to the use of the social network. The purpose and scope of the data collection and the further processing and use of the data by the social network providers, as well as your rights in this regard and settings options for protecting your privacy, can be found directly in the privacy policy of the respective provider.

If you do not want the social network provider to assign the data collected via our website to your user account, you must log out of the social network before activating the plugins. Your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR forms the legal basis for the data processing described. You can revoke your consent at any time by notifying the plugin provider of your revocation in accordance with the information provided in their privacy policy.

15. Online advertising and targeting

15.1 In general

We use the services of various companies to provide you with interesting offers online. Your user behavior on our website and websites of other providers is analyzed in order to subsequently display online advertising tailored to your individual needs.

Most technologies for tracking your user behavior (“tracking”) and for displaying targeted advertising (“targeting”) work with cookies (see also Section 11), which enable your browser to be recognized across different websites. Depending on the service provider, it may also be possible for you to be recognized online even when using different devices (e.g., laptop and smartphone). This may be the case, for example, if you have registered for a service that you use on multiple devices.

In addition to the data already mentioned that is collected when you visit websites (“log file data,” see Section 10) and when cookies are used (Section 11) and which may be passed on to the companies participating in the advertising networks, the following data in particular is used to select the advertising that is most relevant to you:

Personal information that you provided when registering for or using a service from advertising partners (e.g., your gender, age group);
User behavior (e.g., search queries, interactions with advertising, types of websites visited, products viewed and purchased, newsletters subscribed to).

We and our service providers use this data to determine whether you belong to the target group we are addressing and take this into account when selecting advertisements. For example, after you have visited our site, you may see advertisements for products you have viewed when you visit other sites (“retargeting”). Depending on the scope of the data, a user profile may also be created, which is evaluated automatically, and the advertisements are selected according to the information stored in the profile, such as membership of certain demographic segments or potential interests or behaviors. Such ads may be presented to you on various channels, including our website or app (as part of onsite and in-app marketing) and ads served through online advertising networks we use, such as Google.

The data may then be evaluated for the purpose of billing the service provider and assessing the effectiveness of advertising measures in order to better understand the needs of our users and customers and improve future campaigns. This may also include information that an action (e.g., visiting certain sections of our websites or sending information) can be traced back to a specific advertisement. Furthermore, we receive aggregated reports from service providers on advertising activities and information on how users interact with our website and our advertisements.

The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by rejecting or disabling the relevant cookies in your web browser settings (see section 11). You can find further options for blocking advertising in the information provided by the respective service provider, such as Google.

15.2 Google Ads

This website uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for online advertising. Google uses cookies for this purpose, such as the so-called DoubleClick cookie, which enables your browser to be recognized when you visit other websites. The information generated by the cookies about your visit to these websites (including your IP address) is transmitted to a Google server in the USA and stored there (please also refer to section 6). Further information on data protection at Google can be found here.

16. Use of our chat function

If you contact us via chat, your personal data will be processed. The data you provide us with, e.g. the name of your company, your name, your position, your email address, and your request, will be processed. In addition, the time of receipt of the request will be documented. Mandatory fields are marked with an asterisk (*).

We process this data exclusively for the purpose of fulfilling your request (e.g., providing information about a product, assisting with contract processing, such as returning products, incorporating your feedback into the improvement of our services, etc.). We use a tool from Zendesk GmbH, Neue Schönhauser Str. 3-5, 10178 Berlin, Germany, to provide the chat function. Your data is therefore stored in a Zendesk database, which may allow Zendesk to access your data if this is necessary for the provision of the software and for support in using the software.

The legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in the use of modern communication technologies or, if your request is aimed at the conclusion or execution of a contract, in the implementation of the necessary measures within the meaning of Article 6(1)(b) EU GDPR.

17. Registration for a customer account

If you open a customer account on our website, we collect the following data, whereby mandatory information is marked with an asterisk (*) in the corresponding form:

Personal details: Title, Last name, First name, Billing and delivery address, Company, company address, and VAT number for business customers
Login details: Email address, password,
Additional information: Languages, Gender

We use your personal details to verify your identity and check that you meet the requirements for registration. Your email address and password together serve as your login details and thus ensure that the correct person is using the website under your details. We also need your email address to verify and confirm the opening of your account and for future communication with you that is necessary for the execution of the contract. In addition, this data is stored in your customer account for future contracts. For this purpose, we also allow you to store further information in your account (e.g., your preferred payment method).

We also use the data to provide an overview of the products ordered and services purchased (see in particular Sections 18 and 23) and to provide you with an easy way to manage your personal data, to administer our website and the contractual relationships, i.e. to establish, shape the content, process and amend the contracts concluded with you via your customer account.

We process the information on language and gender in order to display offers on the website that are tailored to your profile or personal needs, for statistical recording and evaluation of the selected offers and thus to optimize our suggestions and offers.

The legal basis for processing your data for the above purpose is your consent in accordance with Art. 6 (1) (a) EU GDPR. You can withdraw your consent at any time by removing the information from your customer account or deleting your customer account or by sending us a message requesting that it be deleted.

To prevent misuse, you must always treat your login details as confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others.

18. Ordering products

If you wish to order products or book services on the website, we require various data for the processing of the contract. If you do not log in with your customer account (see section 17), we collect the following data, depending on the product or service, whereby mandatory information is marked with an asterisk (*) in the corresponding form:

Title
Last name
First name
Billing and delivery address
Email address
Date of birth
Company name, company address, and VAT number for business customers
Telephone number

We use this data to verify your identity before concluding a contract. We also need your email address to confirm your order and for future communication with you that is necessary for the execution of the contract. We store your data together with the marginal data of the order (e.g. time, order number, etc.), the data relating to the services ordered/booked (e.g., description, price, and characteristics of the product; “product data”), the payment data (e.g., selected payment method, confirmation of payment, and time; see also Section 19), and the information relating to the processing and fulfillment of the contract (e.g., return of products, use of service or warranty services, etc.) in our CRM database (see Section 6.1) so that we can ensure correct order processing and contract fulfillment.

If it's needed to fulfill the contract, we'll also pass on the info to any third-party service providers (like shipping companies).

The legal basis for this data processing is the fulfillment of the contract with you under Art. 6 para. 1 lit. b EU GDPR.

Providing data that isn't marked as required is voluntary.

We process this data in order to tailor our offer to your personal needs as best as possible, to facilitate the processing of contracts, to contact you via an alternative communication channel if necessary with regard to the fulfillment of the contract, or for statistical recording and evaluation to optimize our offers. The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by notifying us.

19. Online payment processing

If you purchase services or products on our website, depending on the product or service and the desired payment method, you will be required to provide additional information, such as your credit card information or login details for your payment service provider, in addition to the information specified in Section 18. This information, as well as the fact that you have purchased a service from us for the relevant amount and at the relevant time, will be forwarded to the respective payment service providers (e.g., payment solution providers, credit card issuers, and credit card acquirers). Please always note the information provided by the respective company, in particular the privacy policy and the general terms and conditions. The legal basis for this transfer is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b EU GDPR.

In order to avoid payment defaults, the necessary data, in particular your personal details, may also be transferred to a credit agency for automated assessment of your creditworthiness. In this context, the credit agency may assign you a so-called score value. This is an estimate of the future risk of default, e.g. based on a percentage. The value is calculated using mathematical and statistical methods and taking into account data from other sources available to the credit agency.  We reserve the right not to offer you the “invoice” payment method based on the information received. The legal basis for this data processing is our legitimate interest in avoiding payment defaults in accordance with Art. 6 (1) lit. f. EU GDPR.

As of: 2025