Privacy policy

IONIQ Skincare GmbH & Co. KG attaches great importance to the protection of your privacy and your personal data as well as the necessary data security and therefore collects, processes and uses your personal data exclusively in accordance with the principles described below as well as the provisions of the EU General Data Protection Regulation and the data protection law applicable to IONIQ Skincare GmbH & Co. KG in accordance with the Federal Data Protection Act.

I. Name and address of the controller

IONIQ Skincare GmbH & Co. KG
Otto-Lilienthal-Str. 18
88677 Markdorf
Germany
Phone: +49 (0) 7544 505-1831
Email: hello@ioniqskin.com

represented by the management

II Data Protection Officer

The appointed data protection officer of the controller can be contacted at

E-Mail: hello@ioniqskin.com

III. Your rights as a data subject

First of all, we would like to inform you here about your rights as a data subject. These rights are standardized in Art. 15 - 22 GDPR standardized. This includes:

• Right to information (Art. 15 GDPR),
• Right to erasure (Art. 17 GDPR),
• Right to rectification (Art. 16 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to restriction of data processing (Art. 18 GDPR),
• Right to object to data processing (Art. 21 GDPR).

To assert these rights, please contact: hello@ioniqskin.com. The same applies if you have any questions about data processing in our company or wish to withdraw your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Rights of objection

Please note the following in connection with rights of objection:

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is associated with direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, if possible to: hello@ioniqskin.com. In the event that we process your data to protect legitimate interests, you can object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

IV. General information on data processing

1. Purposes and legal bases of data processing

When processing your personal data, we comply with the provisions of the GDPR and all other applicable data protection regulations. The legal basis for data processing arises in particular from Art. 6 GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also constitute a data protection authorization provision. Before you give your consent, we will inform you about the purpose of the data processing and about your right of withdrawal.

We also process your data on the basis of a balancing of interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR, for example to make our website more attractive and secure.

If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent. Processing of special categories of personal data pursuant to Art. 9 GDPR is otherwise only carried out if this is required by law.

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, it will not be passed on to third parties unless we are obliged to do so due to mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement authorities).

2. Recipients of the data / categories of recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In certain cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection contracts were concluded with all service providers. This applies in particular to shipping, payment services, credit checks, IT service providers), but also to marketing and website tracking.

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, is required by law or if you have given us your consent to do so.

We transfer your personal data to service providers or group companies outside the European Economic Area, in particular also to the USA. Compliance with the level of data protection is guaranteed by: e.g. EU standard contractual clauses / registration in the Data Privacy Framework.

We store your data for as long as it is required for the respective processing purpose. Please note that numerous retention periods mean that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). If there are no further retention obligations, the data will be routinely deleted once the purpose has been achieved.

In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

3. Secure transmission of your data

We use appropriate technical and organizational security measures to protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

The exchange of data to and from our website is encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols.

4. Obligation to provide the data

Various personal data are necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the point above. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or execute the underlying contractual relationship without providing this data.

V. Use of cookies, Art. 6 para. 1 lit. S. a, f) GDPR, § 25 para. 1, 2 TDDDG

Our website uses so-called cookies. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your end device and saved (locally) by your browser. Cookies only contain pseudonymous, usually even anonymous data. Some cookies remain in place for the duration of a browser session (so-called session cookies), others are stored for longer periods (so-called persistent cookies, e.g. consent settings). The latter are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, we also use cookies that are controlled by third-party providers. They use the information contained in the cookies, e.g. to show you content or to record the pages you have visited.

On the basis of our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR), we set technically necessary cookies, which are absolutely necessary for the operation of the website and to ensure its functionality. Furthermore, we use cookies without your consent if their sole purpose is to store or access information stored in the terminal device for the transmission of messages or if they are absolutely necessary to provide the service you have expressly requested, § 25 para. 2 TDDDG.

Subject to your consent, other cookies are used that enable us or third parties to analyze how our services are used, for example. This allows us to design the content according to user needs. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it according to the thematic interests of the user, for example. The legal basis for this is your express consent (Art. 6 para. 1 p. 1 lit. a GDPR, § 25 para. 1 TDDDG).

You can revoke your consent via our consent banner at any time with effect for the future and change the cookie settings. Please note that changes must be made separately for each end device.

https://ioniqskin.com/pages/cookie-policy

If you have accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can avoid such a combination by not giving or revoking your consent to the relevant cookies or by logging out of the respective third-party providers in advance.

Most browsers accept cookies automatically. You can also deactivate, restrict or delete cookies on your end device manually via your browser settings or with the help of software. If you deactivate the setting of cookies, you will not be able to use our website to its full extent or only to a limited extent.

Please also note our information in the section of the respective service that uses cookies.

VI Use of the IONIQ Shop

1. Shopify

We use shopify's online store so that you can purchase our products directly from us. This is provided by Shopify International Limited, Victoria Buldings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify is headquartered in Canada.

Shopify processes the data primarily on European servers, with some data also going to Canada. Some of the subcontractors used by shopify are based in the USA. Here, shopify ensures that these subcontractors are obliged to comply with the requirements of the GDPR. The agreements with shopify required under data protection law have been concluded.

As part of the order or purchasing process, we process in particular the contact data, first and last name, e-mail address, address, payment information such as credit card information and the order data (quantity, price SKU etc.).

In addition, shopify collects technical data in order to ensure and optimize the operation of the platform. These are in particular the IP address to improve security and for geolocalization, device and browser information such as device type, operating systems, browser type and version.

Cookies are also used for session tracking and personalization as well as other tracking tools such as Triple Whale for the analysis and evaluation of user behaviour in our online store. Here we collect information on the length of stay, clicks and other interactions. Our aim is to continuously develop and improve our online store and our service. In addition, you will receive a short reminder from us that your shopping cart is already full, so that you can simply continue and complete the purchase you have started.

In connection with the respective purchase contract concluded and your payment method, we may also check your creditworthiness or pass on the data provided to our logistics and payment service providers for payment or shipment of your ordered goods.

We process your personal data exclusively for the purpose of contract initiation and processing. The processing of the aforementioned data takes place in order to enter into the purchase contract with you and to be able to fulfill the contractual obligations. The legal basis for processing is the contractual relationship within the framework of the purchase contract, Art. 6 para. 1 p. 1 lit. b GDPR.

In principle, you are not obliged to disclose your personal data to us. However, it is not possible to order and purchase our products without us processing personal data. If you do not provide us with this data, it will not be possible to conclude the contract.

2. Use of payment and logistics service providers

In order to process your order, we transmit the personal data required for the delivery of the goods you have ordered to our service provider FIEGE Logistik Stiftung & Co. KG, Joan-Joseph-Fiege-Straße 1, 48268 Greven, Germany (hereinafter referred to as "Fiege"). The agreement required under data protection law for order processing in accordance with Art. 28 GDPR was concluded with Fiege. In this agreement, Fiege undertakes to protect the data of our users and to process it exclusively on our behalf in accordance with the applicable data protection regulations.

Depending on your chosen payment method, the data required for payment processing will be passed on to the respective credit institution, credit card company or payment service provider. These include Google Pay, Apple Pay and PayPal (Europe) S.à.r.l. & Cie, S.C.A., We pass on the respective data to service providers commissioned by us, insofar as this is necessary for payment processing or delivery. For the processing of your data by the payment services, we refer you to their terms of use and data protection provisions.

The legal basis for the transfer of data to our logistics and payment service providers by us, based on the fulfillment of the contractual obligation under the purchase contract, is Art. 6 para. 1 sentence 1 lit. b GDPR.

We store your personal data for as long as this is necessary to achieve the respective storage purpose. We will then delete your data unless we are obliged to store it for a longer period of time due to tax, commercial or other statutory storage or documentation obligations or, if the storage purpose no longer applies, you have consented to further storage in accordance with Art. 6 para. 1 p. 1 lit. a GDPR have consented.

The forwarding of your data to the respective logistics and payment provider serves exclusively to fulfill our contractual obligations and is therefore subject to the statutory retention obligations.

3. Identity and credit check when selecting Klarna payment methods

Various payment options are offered in the store. If you choose one of the payment options of our partner Klarna GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "Klarna"; see also https://www.klarna.com/de/), your data provided during the ordering process will be forwarded to Klarna for the processing of the payment and the performance of an identity and credit check. If you select the payment method on account, your data (first and last name, street, house number, postal code, city, date of birth, telephone number) as well as the data in connection with your order will be transmitted to Klarna and, if applicable, to the factor working with Klarna.

For the purpose of its own identity and credit check, Klarna or partner companies commissioned by Klarna transmit data to credit agencies (credit agencies) and receive information from them and, if applicable, creditworthiness information based on mathematical-statistical procedures, the calculation of which includes address data, among other things. Detailed information on this and on the credit agencies used can be found in Klarna GmbH's privacy policy https://www.klarna.com/de/datenschutz/.

Furthermore, Klarna may use third-party tools to detect and prevent fraud. Data obtained with these tools may be stored in encrypted form by third parties so that they can only be read by Klarna. This data will only be used if you select a payment method from our cooperation partner Klarna, otherwise the data will automatically expire after 30 minutes via a system-side setup.

The legal basis for the transfer of data to Klarna is based on your consent given by selecting the payment method in the order process and the contractual relationship within the framework of the purchase contract Art. 6 para. 1 p. 1 lit. b, f GDPR.

The transmission of your data is necessary for the processing of the purchase contract. Klarna processes your data exclusively for the purpose of its own identity and credit checks. We do not store the data.

4. Submission of product reviews

You can rate our products in our webshop. We use the Judge me tool from Judge.me Ltd, Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB. We would like to gather feedback on our products and use the contact and exchange with our customers to continuously improve ourselves. In particular, we process personal data such as name or pseudonym, e-mail address and comments. We check the product reviews before we display them on our website.

The processing is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntary submission of the evaluation. We store your data until you withdraw your consent or as long as the product reviews are relevant and are to be available on the website.

The user can revoke their consent to the processing of personal data at any time. You can revoke your consent at any time using the contact details provided.

5. Sending transactional emails

We use the Shopify service for the technical implementation of sending system emails or for email communication of our webshop (e.g. for sending confirmations of receipt and invoices or for implementing the password reset function).

The processing of personal data by us and our service provider is solely for the purpose of processing and sending our system e-mails. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b GDPR.

We store your personal data for as long as this is necessary to achieve the respective storage purpose or for as long as you have given your consent to storage. We will then delete your data unless we are obliged to store it for a longer period of time due to tax, commercial or other statutory storage or documentation obligations or, if the storage purpose no longer applies, you have consented to further storage in accordance with Art. 6 para. 1 p. 1 lit. a GDPR have consented.

6. Simplify WhatsApp Live Chat

We use the "Simplify WhatsApp Live Chat" tool on our website, an application from SetuBridge Technolabs, to enable direct communication with our customers via WhatsApp. SetuBridge Technolabs is headquartered at 603 Samruddhi Complex, opp Sakar-3, Ahmedabad, GJ, 380014, India.

With "Simplify WhatsApp Live Chat" you can get in touch with us directly via the WhatsApp messenger service. In particular, the following personal data such as telephone numbers, names, chat content and metadata are processed for this purpose. Our aim is to facilitate direct contact with you and optimize customer communication. If you have purchased a product or are interested in our products, the legal basis is Art. 6 para. 1 p. 1 lit. b, f GDPR. The legal basis for any further processing is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR. We only store the chat histories for as long as is necessary to process your request or to comply with statutory retention periods. These are then deleted. Detailed information can be found at https://www.setubridge.com/terms-and-condition/.

7. Report Pundit

We use the "Report Pundit" app in our Shopify store, which was provided to us by Estore Automate Inc, 651 N Broad St, Suite 206, Middletown, DE 19709, USA is made available. It helps us to create individual business reports and analyses of business-relevant data such as sales figures, customer behavior, product data and other business-relevant information in our online store. This enables us to optimize and continuously improve our business processes and customer service and to carry out business evaluations. In particular, customer information such as name and e-mail address, product data and information on transactions are processed for this purpose. The processing takes place exclusively in connection with the operation of our online store and on the basis of our legitimate interest in accordance with Art. 6 para. 1 p. 1 lit. f GDPR and, if applicable, for the fulfillment of the contract pursuant to Art. 6 para. 1 p. 1 lit. b GDPR. The data is transmitted to Estore Automate servers when the app is used. This may result in the transfer of personal data to the USA. The necessary data protection agreements have been concluded. The data will only be stored for as long as is necessary to fulfill the stated purposes. They are then deleted automatically or manually. More detailed information can be found at Report Pundit at https://www.reportpundit.com/privacy-policy.

8. Advertising purposes existing customers, Art. 6 para. 1 p. 1 lit. f GDPR

We are interested in maintaining the customer relationship with you and providing you with information and offers about our products/services. We therefore process your data in order to send you information and offers tailored to your interests by e-mail.

The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f GDPR.

If you do not wish this, you can object to the use of your personal data for the purpose of direct advertising at any time; this also applies to profiling insofar as it is associated with direct advertising. If you object, we will no longer process your data for this purpose.

The objection can be made free of charge and without giving reasons and should be sent to +49 7544 9049704, by e-mail to hello@ioniqskin.com or by post to IONIQ Skincare GmbH & Co. KG, Otto-Lilienthal-Str. 18, 88677 Markdorf, Germany.

We store your personal data for as long as this is necessary to achieve the respective storage purpose. We will then delete your data unless we are obliged to store it for a longer period of time due to tax, commercial or other statutory storage or documentation obligations or, if the storage purpose no longer applies, you have consented to further storage in accordance with Art. 6 para. 1 p. 1 lit. a GDPR have consented.

9. Storyclash

We use Storyclash as a monitoring tool for our social media activities. Storyclash is provided to us by Storyclash GmbH, Energiestraße 1, 4020 Linz/ Austria. This allows us to analyze content from our various social media presences such as Facebook, Instagram, LinkedIn and Twitter. This enables us to find out which of our contributions have met with interest from our prospective customers and customers. It also allows us to better assess the success and popularity of topics and campaigns. Overall, this enables us to optimize our strategy and make our marketing activities more interest-oriented.

The legal basis for this is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke this consent at any time for the future. The agreements required under data protection law are in place.

More detailed information on Storyclash can be found at: https://www.storyclash.com/privacy.

10. Taxdoo

We use the Taxdoo tool, which is provided to us by Taxdoo GmbH, Alter Wandrahm 13, 20457 Hamburg, to automate VAT calculation and reporting. This allows us to collect and process tax-relevant information more efficiently and easily across different countries. These are then evaluated for VAT purposes. In particular, the following data is processed: Name, e-mail address, telephone number, physical address, geolocation, IP address and information on the browser and operating system used. The legal basis is the legal obligation pursuant to Art. 6 para. 1 p. 1 lit. c GDPR. The agreements required under data protection law are in place. You can find more detailed information about Taxdoo at https://www.taxdoo.com/de/dsgvo/.

11. Amplify Bundles & Upsell and Amplify Slide Cart Drawer

We use the two apps Amplify Bundles & Upsell and Amplify Slide Cart Drawer in our webshop. These are provided to us by Amplify Apps Inc. Rimon 36, Ge'alya, 6789730, IL. This allows us to optimize and simplify the shopping experience for our customers. In particular, we process product and shopping cart data, name, physical address, e-mail address and telephone number as well as IP address, device and browser information. AI functions are also used to create offers. The legal basis for this is our legitimate interest, as far as the optimization of our offer is concerned, as well as your consent for tracking, Art. 6 para. 1 p. 1 lit. f, a GDPR. The agreements required under data protection law are in place. You can revoke your consent at any time with effect for the future. More detailed information can be found at: https://heyamplify.com/privacy-policy/.

12. Stoq

In our webshop we use the Stoq tool from Artos Software inc, 1111B S Governors Ave STE 3617, Dover, DE, 19904, USA, to monitor our product and inventory levels and to ensure the availability of our products. The tool supports the ordering and returns process and enables the notification service. In particular, the following data is processed: Name, e-mail address, telephone number, physical address, geolocation, IP address and information on the browser and operating system used. The legal basis for this is Art. 6 Para. 1S. 1 lit f GDPR and Art. 6 para. 1 p. 1 lit. b GDPR. The agreements required under data protection law are in place.

You can find more detailed information at https://www.stoqapp.com/policy.

13. E-mail and contact form

In our store it is possible to contact us or make a complaint / product inquiry via a contact form. We use the Zendesk tool for this. The service provider of Zendesk is Zendesk GmbH c/o TaylorWessing, Neue Schönhauser Str. 3-5, 10178 Berlin, which belongs to the parent company Zendesk, 181 Fremont St., San Francisco, CA 94105, USA. In all cases, the user's personal data will be transmitted to our support staff. These are usually title, first and last name, communication data (e-mail address, telephone number), resulting correspondence (topic, message).

If you provide us with further personal data via the comment field, this will be treated in strict confidence and only made accessible to the employees entrusted with processing your request.

When you select a complaint about a product or product inquiry, we also process your details about our product.

Your data and the resulting correspondence will be processed exclusively by us. Beyond this, the data will not be passed on to third parties. The data will be used exclusively for the conversation started with you in order to contact you via the contact options provided to us regarding your request.

The legal basis for the processing of data transmitted in the course of sending an email or via the contact form is Art. 6 para. 1 p. 1 lit. a GDPR. If the user contacts us with the aim of concluding a contract, the legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data transmitted by email or via our contact form, this is the case when the respective conversation with the user has ended. Your entries in our contact form will be deleted from our web server after seven days. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The user has the option to revoke their consent to process the personal data at any time.

14. Chatbot Vennie

On our website, we use the AI-supported chatbot Vinnie to support us with customer communication. We integrate Vinnie via our Zendesk platform and the Shopify support system. The tool is provided to us by Vennie Tech UG, Bluntschlistr. 31, 69115 Heidelberg made available. This enables us to improve our customer service by answering inquiries automatically and providing our customers with relevant information. AI language models are used to provide our customers with personalized and context-related answers in real time. In particular, the following personal data is processed: E-mail address, telephone number, physical address, geolocation, IP address and information about the browser and operating system. The legal basis for this is our legitimate interest in the efficient design of our customer service, Art. 6 para. 1 p. 1 lit. f GDPR. The relevant data protection agreements are available. More detailed information can be found at https://www.vennie.tech/misc/data.

15. More apps

To round off the functions of our online store, we have integrated the following apps/functions for you in our store. These offer additional convenience for your order and for the subsequent order processing by us. In particular, the following personal data is processed: Name, contact data such as e-mail address, telephone number, location data such as physical address, geolocation and IP address as well as device information such as information on the browser and operating system.

The following service providers are used for this purpose:

Channable from Product Impulse B.V., Kromme Nieuwegracht 66-70, 3512 HL Utrecht, Netherlands. More detailed information can be found at https://www.channable.com/privacy-policy.

Duplify Duplicate Store, offered by Presidio, Headquarters PENN 1, Pennsylvania Plaza Suite 2501, New York, NY, 10119, USA. More detailed information can be found at https://duplifyapp.com/pages/privacy-policy.

Order Print Pro, provided by Subscription Plus, 1 Kingdom Street, Paddington Central, London, ENG, W2 6BD, GB. You can find more detailed information at https://www.forsbergplustwo.com/pages/privacy-policy.

EZ Product Translate from the supplier Freshify from Cortaillod, CH. Further information can be found at https://freshify.click/project/ez-product-image-translate/privacy-policy.

Matrixify from provider ITissible Kaivas 35B, Riga, LV1021, LV. Details can be found at https://matrixify.app/privacy-notice/.

Fast Bundle, offered by Fast Bundle, 13353 Commerce Parkway, Unit 2353, 3rd floor, Richmond, BC, V6V 3A1, CA. Further information can be found at https://fastbundle.co/privacyPolicy/.

Ymg Product Options & Variants provided by YMQ liuhe, xiongzhou, NanJing, JS, 211500, China. You can find more detailed information at https://option.ymq.cool/privacy-policy.html.

VII. Newsletter (Klaviyo)

You have the option of registering for our newsletter to receive news about promotions and our products. Which personal data is processed when you subscribe to the newsletter can be seen from the input mask (the e-mail address is mandatory).

Registration for our e-mail newsletter takes place in a double opt-in procedure.

For the technical implementation of the shipment, your personal data will be transferred to the service of Klaviyo Global HQ, 125 Summer St Floor 6. Boston, MA 02111, United States (hereinafter referred to as "Klaviyo"), which processes the data provided in compliance with the necessary data security measures as a contractor within the meaning of Art. 28 GDPR for us. Klaviyo is registered with the Data Privacy Framework. The data is used by Klaviyo exclusively for sending the newsletter and for evaluating the success of the newsletter. Further information on Klaviyo can be found at https://www.klaviyo.com/legal/data-processing-agreement and at https://www.klaviyo.com/legal.

In order to further improve the newsletter service, data on usage and the associated interests of the recipients are collected and statistically processed. We use this to analyse the opening and clicking behaviour of our newsletter subscribers for the statistical evaluation of our newsletter, to optimize and further develop our newsletter content and to control personalized content in our newsletter.

The legal basis for the processing of the data transmitted in the course of consenting to the sending of the newsletter and for the temporary storage of the data for the evaluation of success is Art. 6 para. 1 p. lit. a GDPR. In addition, we have an interest in direct advertising and evaluating the success of your response to the content of the newsletter in order to successfully assert ourselves in the market, Art. 6 para. 1 p. lit. f GDPR.

The processing of personal data by us and our service provider Klaviyo serves solely to process and send a newsletter and to evaluate the success of a respective newsletter. Anonymized statistics on the use of and response to our newsletter help us to better tailor our offers to the interests of our subscribers. This also constitutes the necessary legitimate interest in the processing of the data.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data provided to us for the purpose of requesting and sending the newsletter, this is the case if consent to processing is withdrawn. After unsubscribing from the newsletter, all stored data will be deleted.

You can withdraw your consent to the processing of your personal data for the purpose of receiving the newsletter at any time. You can unsubscribe from the newsletter at any time. You can unsubscribe by sending us an email (hello@ioniqskin.com ) or by using the unsubscribe link provided in the newsletter.

VIII. Whatsapp newsletter - via "charles"

In order to be close to our customers at all times, we also offer our newsletter via WhatsApp. You can also contact us directly via WhatsApp without having to call or email us.

charles is based on the software "charles" from Charles GmbH, Gartenstr. 86-87, 10115 Berlin. The service is technically based on the WhatsApp Business API. This means that the encrypted exchange of messages technically ensures that WhatsApp has no access to personal data when you communicate with us via WhatsApp. The legal basis for processing your data is your consent, Art. 6 para. 1 p. 1 lit. a GDPR, which we obtain through double consent. charles deletes or anonymizes your data as soon as it is no longer required for the purposes of processing, i.e. usually when you withdraw your consent. You can withdraw your consent at any time by contacting hello@ioniqskin.com. Of course, you can also stop communicating with us via WhatsApp at any time without cause by pressing the STOP button in the chat, which is equivalent to revoking your consent.

In order to realize the communication via WhatsApp/ charles, your name, your mobile phone number and all data that you provide when you write to us may be processed. With regard to the processing of your data by us, please also take note of the further information in this privacy policy.

Information on data protection at charles is available at https://www.hello-charles.com/privacy-policy, information on data protection at WhatsApp is available at: https://whatsapp.com/legal/business-policy/.

IX. Surveys

1. Survey Planet

We conduct customer surveys in order to continuously improve our products and service. For this we use the Survey Planet tool from SurveyPlanet LLC, 578 Washington Blvd, #807, Marina Del Rey CA 90292, USA.

Of course, participation in these surveys is voluntary. The legal basis for this is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR.

You can revoke your consent at any time. If possible, please contact hello@ioniqskin.com. Insofar as we collect and process personal data, your data will be deleted and stored inaccessibly after revocation.

The data collected as part of the surveys will be used exclusively to conduct and evaluate the survey and will be deleted as soon as it is no longer required.

The agreements required for this under data protection law have been concluded. More detailed information can be found at https://surveyplanet.com.

2. Zigpoll

We use Zigpoll to conduct surveys. The tool is provided to us by Argonautic Labs, 400 E 67th Street, New York, NY, 10065, USA. The necessary data protection agreements are in place. This enables us to gain more information about what our customers like about our products and our service and where we can improve. This allows us to understand in detail at which points of the journey (on the website) problems may have occurred. Zigpoll can be used to conduct surveys or somewhat more complex polls. Customer data and contract data are linked to the surveys. The answers are summarized with the help of an AI tool. In particular, the following data is processed: IP address of the end device (the IP address is anonymized immediately), type of end device, size of the end device screen, geographical location, language used on the website, referring domain and date and time of the website visit.

The use of Zigpoll is based on Art. 6 para. 1 p. 1 lit. a GDPR. Zigpoll will only be activated if you have given us your consent. If you do not agree to the storage and evaluation of this data from your visit, you can revoke your consent to storage and use at any time.

You have the option to withdraw your consent at any time. Please contact hello@ioniqskin.com. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information can be found at https://www.zigpoll.com/terms-and-policies.

X. Jobs / Applications

We link to job advertisements on our website at https://ioniqskin.com/info/career to draw attention to vacancies at IONIQ. This Privacy Policy does not cover the online recruiting system at https://www.wagner-group.com/de/karriere/ or https://careers.wagner-group.com/ (hereinafter "Recruiting System"), which is operated by J. Wagner GmbH, Otto-Lilienthal-Str., Munich. 18, 886777 Markdorf, Germany (hereinafter referred to as "WAGNER") is made available to the companies of the WAGNER GROUP.

The concept for the application procedure was defined for all companies in the WAGNER GROUP in order to ensure a standardized and data protection-compliant process throughout the Group. WAGNER attaches great importance to the protection of your privacy and that of your personal data as well as the necessary data security and has implemented the necessary data protection measures. The standardized system also offers you the option of using your login data to centrally manage, edit and delete your application and make it available to other companies in the WAGNER GROUP. Your application documents submitted for an application to a company, e.g. IONIQ, can only be viewed by this company as the responsible body for the respective application procedure and processed as part of the application process. Only you can make changes to and delete the data provided.

For further information on data processing as part of your application process or for our recruiting system, we therefore refer you to our separate privacy policy.

Please note that by redirecting to the recruiting system you are leaving our website and that cookies and tracking technologies are used within the recruiting system.

XI. Website analysis services

We use statistical and analysis services and offers from third-party providers on our website to evaluate and analyze your use of our website and our store. Personal data is often passed on to third-party providers or analyzed automatically. The type, scope and purpose of this processing of personal data are listed and explained below.

1. Google Analytics 4

If you consent to this, Art. 6 para. 1 p. lit. a GDPR, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This technology makes it possible to analyze your use of our website.

When you visit our website, Google Analytics 4 sets cookies that are stored on your end device. The scope of this information also includes your IP address.

In order to protect your data in the best possible way, we only use Google Analytics with IP anonymization activated. As a result, your IP address is generally shortened by Google within the EU/EEA. The full IP address is only communicated in full to a Google server in the USA in exceptional cases and truncated there. This generally excludes the possibility of direct personal references.

Google uses the information collected from you to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for us as the website operator. Google explains how Google processes and transmits the IP address transmitted by your browser as part of Google Analytics under its own responsibility at https://policies.google.com/privacy?hl=de&gl=en and at https://policies.google.com/technologies/partner-sites. In particular, Google collects information about which other websites you have already visited and also analyzes this information for its own purposes.

The data collected as part of the use of Google Analytics 4 is stored for a maximum period of 14 months and then deleted or completely anonymized.

The necessary data protection agreements have been concluded.

You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, you can access our cookie settings section in particular. You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on available at the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=de.

2. Google Signals

We can use Google Signals as an extension to Google Analytics 4. Google Signals is used to create cross-device reports. If you have activated personalized ads and linked your end devices to a Google account, Google can analyze your usage behavior across devices and create data models.

In this way, your user activities can be combined into a uniform picture regardless of the device you use to surf our pages (so-called cross-device conversion) - without you becoming personally recognizable to us, however, because we only receive anonymous statistics from Google. According to the information available to us from Google, the prerequisite for this is, in addition to your consent to us, a corresponding consent that you have given to Google.

You can stop using Google Signals and thus the cross-device analysis at any time. To do this, deactivate the "Personalized advertising" function in the settings of your Google account, as described on the Google support pages: https://support.google.com/ads/answer/2662922?hl=de. Further information on Google Signals can be found at https://support.google.com/analytics/answer/7532985?hl=de.

3. Demographic characteristics

Google Analytics 4 uses the special function "demographic characteristics". This function is used to compile statistics that provide information about the age, gender and interests of site visitors. For this purpose, advertising and information from third-party providers is analyzed so that suitable target groups for marketing measures can be identified, defined and addressed. According to Google, however, this data cannot be individually assigned to a specific person and is deleted in accordance with the information on Google Analytics 4.

4. Stack

We use the server-side tracking tool from Stape on our website. The service provider is Stape Inc, 8 The Green, Suite 12892, Dover, DE, 19901, USA. The servers used by Stape are located in Belgium.

The processing of personal data by us and our service provider Stape helps us to better understand the behavior of our customers so that we can continuously improve our products and services for you. Anonymized statistics about the use of our website and our online store help us to better align our offers with the interests of our customers and to develop them further.

The use of Stape is based on Art. 6 para. 1 p. 1 lit. a GDPR. Stape will only be activated if you have given us your consent. If you do not agree to the storage and analysis of this data from your visit, you can revoke your consent to the storage and use at any time by clicking on our consent banner. For more information about Stape and the data collected, please refer to the privacy policy at the following link: https://stape.io/gdpr; https://stape.io/dpa.

In order to accompany the transfer of data to Stape with a suitable instrument under data protection law, we have concluded a DPA with Stape with the so-called EU standard contractual clauses on data protection.

You have the option to withdraw your consent at any time. Please contact hello@ioniqskin.com. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

5. Clear

On our website we use the services of Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany. Klar collects, processes and stores data on this website and its subpages for reach measurement and statistical analysis on our behalf.

The legal basis is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR and § 25 para. 1 p. 1 TDDDG. Different cookies are used for the different recording types in order to guarantee the respective recording type.

You have the option to withdraw your consent at any time. Please contact hello@ioniqskin.com. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

6. Ads and marketing services for advertising and retargeting

We use advertising and marketing services and offers from third-party providers for advertising and retargeting on our website. Personal data is often passed on to third-party providers or transmitted automatically. The type, scope and purpose of this processing of personal data are listed and explained below.

7. Use of Google Ads

We use the online advertising program "Google Ads" from the provider Google to draw attention to our offers in the store on third-party websites with the help of advertising material (so-called "ads"). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We do this in order to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

These advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our store via a Google ad, Google will store cookies on your PC. These cookies are not intended to identify you personally and lose their validity after 30 days. As a rule, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are stored as analysis values.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Google Ads customer. Cookies can therefore not be tracked via the websites of Google Ads customers.

We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

For information from Google about GoogleAds Conversion: https://ads.google.com/intl/de_de/home/faq/gdpr/.

In addition to GoogleAds Conversion, we also use Ads Remarketing. This is a procedure with which we would like to address you again. This application allows our advertisements to be displayed to you when you continue to use the Internet after visiting our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. This allows Google to determine your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used for remarketing.

For information from Google on Google Ads Remarketing: https://support.google.com/google-ads/answer/9028179?hl=de.

The data collected by Google is made available to us in aggregated statistics. This tells us the total number of users who clicked on an ad and were redirected to a page with a Google Ads tag. We use this information to create conversion statistics and custom audiences and also to analyze them. We would like to point out that we do not provide Google with any data for the implementation of a Custom Audiences process.

It is important for us to make our website or store attractive and to increase interaction with our visitors with the help of this service. We use the advertising and marketing services, in particular the use of Google Ads, for our conversion tracking and remarketing. We use the statistics provided by Google via the GoogleAds service exclusively to measure the performance of our advertisements in order to measure the success of specific marketing measures.

We use the so-called Enhanced Conversions as a supplement. Enhanced Conversions allow us to improve the accuracy of conversion measurement by transmitting hash values of personal data to Google.  This data is processed exclusively in hashed, encrypted form (SHA256) and is used to assign interactions with our advertising (e.g. clicks on ads) more precisely to a conversion event on our website.

We use Enhanced Conversions to analyze the effectiveness of our Google Ads campaigns and to optimize our advertising measures. The legal basis for this is consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

The information provided is pseudonymized using a secure hash function (SHA256) before being transmitted to Google. Google only uses this data to compare it with existing Google user accounts and does not store it permanently. The data is not traced back to individual users by us or by Google.

It cannot be ruled out that data may also be transferred to servers of Google LLC based in the USA. Google is certified under the EU-U.S. Data Privacy Framework and is committed to complying with European data protection law. In addition, we have concluded the necessary data protection agreements.

You can deactivate Google Enhanced Conversions at any time via our cookie consent tool or revoke your consent. You can also customize or disable personalized advertising in your Google Account:

https://adssettings.google.com/. Further information on data processing by Google can be found at https://policies.google.com/privacy.

The legal basis for the processing of personal data using marketing cookies and functions of GoogleAds is based on your consent in this regard via the cookie settings or our cookie banner Art. 6 para. 1 p. 1 lit. a GDPR.

We will delete the information provided to us by Google after six months at the latest.

You can object to the collection, storage and use of information by Google at any time with effect for the future via the following channels / revoke your consent given via the cookie banner:

1. You can deactivate the storage of cookies by making the appropriate settings or set your browser so that you are notified as soon as cookies are set. To do this, you must change the necessary settings in the browser menus Preferences or Options. We would like to point out that some areas of our website may then no longer function properly, i.e. only to a limited extent.
2. You can object to this by installing the deactivation add-on provided by Google. Further information on this can be found at https://tools.google.com/dlpage/gaoptout?hl=de.
3. You can change your cookie usage settings via our cookie banner at any time.

However, we would like to point out that if you deactivate or opt-out, you may not be able to use all functions of the website to their full extent.

8. Hotjar

We use the web analysis tool Hotjar, provided by Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta, Europe.

 Hotjar helps us to better understand the user behavior of our website visitors (e.g. mouse movements, clicks, scrolling behavior) in order to make our website more attractive and constantly improve it. Hotjar uses cookies and tracking codes that store information such as anonymized IP address, screen size, device type of the end device used, geographical location (country), preferred language and time of access to our site. A pseudonymized user profile is created for this purpose. Personal data is not processed or stored. The agreements required under data protection law in accordance with Art. 28 GDPR are available.

The processing takes place on the basis of Art. 6 para. 1 p. lit. a GDPR - your consent via the cookie consent banner. You can revoke or change your consent at any time. More detailed information can be found at https://www.hotjar.com/legal/policies/privacy/.

9. Use of Shoplift

We use the Shoplift app on our website, provided by Shoplift, Inc, 2261 Market Street, San Francisco, CA 94114, USA. Shoplift is an A/B testing tool for Shopify that allows us to test different versions of product pages and landing pages to improve the user experience and optimize the conversion rate.

As part of the A/B tests, Shoplift analyzes the behavior of visitors to our website. The following data can be processed: Browser and device type, time spent on certain pages, click behavior (e.g.  on buttons or images), scroll depth, shortened IP address. Shoplift uses cookies to assign visitors to specific test groups and to analyze user behavior. No directly identifiable personal data such as name or e-mail address is stored.

The processing takes place on the basis of your consent in accordance with Art. 6 para. 1 p. lit. a GDPR, which you give via our cookie banner. You can revoke this consent or adjust your cookie settings at any time.

Shoplift is based in the USA. Data processing may therefore take place outside the EU/EEA. According to Shoplift, it is certified in accordance with the EU-U.S. Data Privacy Framework, which ensures an appropriate level of data protection. The agreements required under data protection law are in place. You can find more detailed information at: https://www.shoplift.ai/privacy-policy.

10. Teads Conversion Tracking

We use Teads on our website to display ads, video and display advertising to our prospective customers via their media platform. This service is provided to us by Teads S.A., 111 W 19th St, New York, NY, 10003, USA. We integrate a pixel into our website that is loaded as soon as a website is accessed. This enables us to determine whether a user who has been shown an advertisement or a video with our advertisement has visited our website.

We use this information to play targeted, interest-based advertising videos and to track conversions. This provides us with statistical evaluations of the use of our website so that we can analyze our advertising. In particular, the following data is processed: IP address, browser/device used, referrer URL and the time of access.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time for the future. The agreements required under data protection law are in place.

It cannot be ruled out that Teads may also transfer personal data to service providers in third countries outside the EU, in particular to the USA, as part of its services. These transfers are carried out exclusively in compliance with the legal requirements pursuant to Art. 44 ff. GDPR.

Detailed information on the tool can be found at https://www.teads.com/privacy-policy/.

11. Use of meta pixels

We use the Meta Pixel as part of our advertising measures. The Meta Pixel is an analysis service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

After you have given your consent to the setting of retargeting/advertising cookies, we integrate a meta pixel on our website and enable Facebook to evaluate your surfing behavior.

A direct connection between your browser and a meta server is established via the built-in pixel and your visit to our website. Facebook or Meta collects the following information via the connection: Your browser type, your end device, the website accessed and, for example, the effect of a Facebook ad, and stores these in cookies that are stored on your end device. In addition, contact information such as name, e-mail address and telephone number are processed as well as information about your location such as geolocation, IP address and physical address. The fact that this information is processed is made transparent by Facebook in its privacy policy. We have no influence on the data collected and data processing operations carried out by Facebook, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We use the meta pixel and the information generated in this way for a cost-benefit analysis and to optimize our Facebook ads. Facebook provides anonymized statistical evaluations for this purpose.

When you click on an advertisement placed by Facebook, a cookie for the meta pixel is stored on the end device you are using.

Further information on cookies can be found in the section "Use of cookies".

If you visit certain pages of our website and the cookie has not yet expired, Facebook or Meta and we can recognize that you have clicked on one of our ads on Facebook and have been redirected to this page.

The data collected by Facebook or Meta using the pixel is made available to us in aggregated statistics. This tells us the total number of users who clicked on your ad and were redirected to a page with a Facebook pixel. We use this information to create conversion statistics and custom audiences or lookalike audiences and also to evaluate these. We would like to point out that we do not provide Facebook with any data for the implementation of a Custom Audiences process and do not carry out any list matching.

If you are logged in to Facebook with your profile, Facebook can link the information obtained via the pixel to your profile. Further information on data processing can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/.

It is important for us to make our website attractive and to increase interaction with our visitors with the help of the service. The processing, i.e. the activation of the pixel as well as the setting and evaluation of information stored in cookies, is carried out exclusively on the basis of your consent given in the cookie banner for the setting of retargeting or advertising cookies (Art. 6 para. 1 p. 1 lit. a GDPR).

Sessions are terminated after 30 minutes without activity and campaigns after three months. The time limit for campaigns can be a maximum of one year.

You can object to the collection, storage and use of information by Facebook or Meta at any time with effect for the future via the following channels or revoke your consent given via the cookie banner:

1. You can deactivate the storage of cookies by making the appropriate settings or set your browser so that you are notified as soon as cookies are set. To do this, you must change the necessary settings in the browser menus Preferences or Options. We would like to point out that some areas of our website may then no longer function properly, i.e. only to a limited extent.
2. You can object to the creation of user profiles for registered Facebook users by contacting Facebook directly to exercise this right. As a Facebook member, you can edit your Facebook settings at https://www.facebook.com/settings?tab=ads and object to data collection using Facebook pixels. In addition, we would like to point out that you can prevent an assignment to your profile by logging out of your respective social media profile before visiting the website and also deleting the cookies used by the social media platform.
   If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
3. You can change your cookie usage settings via our cookie banner at any time.

However, we would like to point out that if you deactivate or opt-out, you may not be able to use all functions of the website to their full extent.

12. Use of TikTok Pixel

We use TikTok Pixel on our website. The Tiktok Pixel is an analysis service of TikTok Technology Limited, 10 Earlsfort Terrace, Saint Kevin's, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, 1 London Wall, London, EC2Y 5EB, England; (hereinafter jointly referred to as "TikTok").

After you have given your consent to the setting of retargeting/advertising cookies, we integrate a TikTok pixel on our website and enable TikTok to evaluate your surfing behavior.

A direct connection between your browser and a TikTok server is established via the built-in pixel and your visit to our website. TikTok collects the following information via the connection: Your browser type, your end device, the website you have accessed and, for example, the effect of a TikTok advertisement and stores these in cookies, which are stored on your end device. TikTok makes the fact that this information is processed transparent in its privacy policy. We have no influence on the data and data processing procedures collected by TikTok, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods.

If you visit certain Internet pages on our website and the cookie has not yet expired, TikTok and we can recognize that you have clicked on one of our ads on TikTok and have been redirected to this page.

The data collected by TikTok using the pixel is made available to us in aggregated statistics. This tells us the total number of users who clicked on your ad and were redirected to a page with a TikTok pixel. We use this information to create conversion statistics and custom audiences or lookalike audiences and also to evaluate these.

Further information on data processing can be found in TikTok's privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/de.

It is important for us to make our website attractive and to increase interaction with our visitors with the help of the service. The processing described takes place exclusively on the basis of your consent given in the cookie banner for the setting of retargeting or advertising cookies (Art. 6 para. 1 p. 1 lit. a GDPR).

You can revoke your consent to the processing of your data by means of the TikTok Pixel at any time without cause, informally and free of charge:

1. You can deactivate the storage of cookies by making the appropriate settings or set your browser so that you are notified as soon as cookies are set.
2. You can change your cookie usage settings made via our cookie banner at any time via the cookie settings (accessible via our website footer). Under "Marketing" you can deactivate the relevant cookies or the use of the TikTok Pixel by changing the checkbox.

However, we would like to point out that if you deactivate or opt-out, you may not be able to use all functions of the website to their full extent.

13. Use of Pinterest Pixel

We use the Pinterest pixel as part of our advertising measures. Pinterest Pixel is an analytics service provided by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest". After you have given your consent to the setting of retargeting/advertising cookies, we integrate the pixel on our website to evaluate your surfing behavior.

The built-in pixel establishes a direct connection between your browser and a Pinterest server. We process the following information: Browser type, end devices, website already accessed and the effect of an advertisement and stores these in cookies, which are stored on your end device. In addition, contact information such as name, e-mail address and telephone number are processed as well as information about your location such as geolocation, IP address and physical address. Pinterest makes it transparent in its privacy policy that this information is processed. We have no influence on the data collected and data processing operations carried out by Pinterest, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We use the pixel for a cost-benefit analysis and to optimize our advertisements. Pinterest provides anonymized statistical evaluations for this purpose. This tells us the total number of users who clicked on the ad and were redirected to a page with a Pinterest pixel. We use this information to create conversion statistics and custom audiences or lookalike audiences and also to evaluate these. We would like to point out that we do not provide Pinterest with any data for the implementation of a Custom Audiences process and do not carry out any list matching.

When you click on an advertisement placed by Pinterest, a cookie for the pixel is stored on the device you are using.

Further information on cookies can be found in the section "Use of cookies".

If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you have clicked on one of our ads and have been redirected to this page. It is therefore not possible for cookies to be tracked via the websites of business customers.

If you are logged in to Pinterest, Facebook can link the information obtained via the pixel to your profile. Further information on data processing can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.

It is important for us to make our website attractive and to increase interaction with our visitors with the help of the service. The processing, i.e. the activation of the pixel as well as the setting and evaluation of information stored in cookies, is carried out exclusively on the basis of your consent given in the cookie banner (Art. 6 para. 1 p. 1 lit. a GDPR).

Sessions are terminated after 30 minutes without activity and campaigns after three months. The time limit for campaigns can be a maximum of one year.

You can object to the collection, storage and use of information by Pinterest at any time with effect for the future via the following channels or revoke your consent given via the cookie banner:

1. You can deactivate the storage of cookies by making the appropriate settings or set your browser so that you are notified as soon as cookies are set. To do this, you must change the necessary settings in the browser menus Preferences or Options. We would like to point out that some areas of our website may then no longer function properly, i.e. only to a limited extent.
2. You can object to the creation of user profiles for registered Pinterest users by contacting Pinterest directly to exercise this right. In addition, we would like to point out that you can prevent an assignment to your profile by logging out of your respective social media profile before visiting the website and also deleting the cookies used by the social media platform.

If you do not have a Pinterest account, you can deactivate usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

3. You can change your cookie usage settings via our cookie banner at any time.

However, we would like to point out that if you deactivate or opt-out, you may not be able to use all functions of the website to their full extent.

XII Social media

We use extensions, plug-ins and offers from third-party providers on our website for the uniform presentation of the website and to display social media content. Personal data is often passed on to third-party providers or transmitted automatically. The type, scope and purpose of this processing of personal data are listed and explained below.

Links to the following social networks are integrated on our website:

Facebook, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Instagram Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland;
Privacy Policy: https://help.instagram.com/519522125107875;
Opt-out: optout.networkadvertising.org/ and http://www.youronlinechoices.com

YouTube Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy Policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de and http://www.youronlinechoices.com

TikTok Musical.ly Inc, 10351 Santa Monica Blvd #310, Los Angeles, CA, 90025 USA
Privacy Policy: https://www.tiktok.com/de/privacy-policy/
Opt-out: https://www.youronlinechoices.com/

When you visit our website, no personal data is initially passed on to the respective providers of the social networks. You can recognize the providers by the marking on the button above the initial letter or the logo. We give you the opportunity to communicate directly with the provider of the respective social network via the button. Only if you click on the marked field and thereby activate it will the provider receive the information that you have accessed the corresponding website of our online offer.

We have no influence on the scope of the data that Facebook, Instagram and YouTube process with the help of this link and therefore inform you according to our level of knowledge: By linking, the providers receive the information that you have visited the corresponding website from our website. We have no influence on the data and data processing procedures collected by the above-mentioned providers, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. The terms of use and data protection provisions of the providers apply. The providers store the data collected about you as usage profiles and use these for the purposes of advertising, market research and/or the needs-based design of their website. If you are logged in to Facebook, Instagram or YouTube, they can assign the information to your respective account.

The legal basis for the forwarding to the respective linked social network is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR by voluntarily clicking on the button of the respective social network.

XIII Automated decision-making and profiling

As a responsible company, we do not carry out profiling or use automated decision-making.

XIV Links to other websites

Our website also contains - clearly recognizable - links to the websites of other companies. Where links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee or liability can be assumed for this content. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, such links will be removed immediately.

XV Availability and changes

We reserve the right to change this data protection declaration from time to time or to adapt it to legal requirements and therefore ask you to check the current data protection declaration each time you visit our website.

Version: July 2025