Privacy Policy
1. COLLECTION OF PERSONAL DATA AND THE CONTROLLER HEREOF
1.1. Thank you for visiting our website and for your interest in our services. In the following provisions, we explain how your personal data is processed when you use our website. Personal data refers to any information that can be used to identify you personally
1.2. The data controller responsible for processing personal data on this website within the meaning of the GENERAL DATA PROTECTION REGULATION (henceforth "GDPR") is:
PSYCHIC SPIES ApS, Sejrøgade 1, 2100 København Ø, Denmark
Phone: +4553252568
E-mail: contact@psychicspies.com
The data controler is the natural or legal person who, acting alone or together with others, determines the purposes and means of processing personal data.
2. DATA COLLECTION WHEN VISITING THE SITE
2.1. If you use our website solely for informational purposes, meaning you do not register, submit information, or otherwise interact with us by providing data, we only collect information that your browser automatically transmits to our servers. These records are commonly referred to as "server log files".
Whenever you access our website, we collect the following information, which is technically required to make the website available to you:
- The website pages visited
- The date and time of access
- The volume of data transferred
- The source of referring page from which you accessed our website
- The browser used
- The operating system used
- The IP address used
The processing of this data is carried out pursuant to Art. 6(1) litra f GDPR on the basis of our legitimate interest in ensuring the stability, security and functionality of our website. The collected data is not disclosed to third parties or used for any other purposes. However, we reserve the right to review server log files retrospectively if specific indications suggest unlawful use of the website.
2.2. For security purposes and to safeguard the transmission of personal data and other confidential information (for example, orders or inquiries submitted to the data controller), this website utilizes SSL or TLS encryption technology.
You can identify an encrypted connection by the presence of the "https://" prefix in the browser address bar and the padlock symbol displayed by your broser.
3. HOSTING AND CONTENT DELIVERY NETWORK
3.1. Our website is hosted and its content is displayed through the services of the following provider:
- Shopify International Ltd, Victoria Buildings, 2nd floor, 1-2 Haddington Rd, Dublin 4, D04 XN32, Ireland
Data may also be transferred to:
- Shopify Inc., 150 Elgin st., Ottawa, ON K2P 1L4, Canada
All information collected through our website is processed on the servers of this provider. We have entered into a data processing agreement with Shopify to ensure the protection of visitors' personal data and to prevent any unauthorized disclosure to third parties.
Where personal data is transferred to Canada, an adequate level of data protection is ensured by virtue of an adequacy decision adopted by the European Commission.
4. COOKIES
4.1. To enhance the usability of our website and enable certain functionalities, we make use of cookies. Cookies are small text files that are stored on your device.
4.2. Some cookies are automatically deleted once you close your browser ("session cookies"), while others remain stored on your device for a longer period and allow preferences or settings to be retained ("persistent cookies"). Where persistent cookies are used, information regarding their storage duration can be found on your browser's cookie settings overview.
4.3. Where personal data is processed through cookies used by us, such processing is carried out either pursuant to Art. 6(1) litra b GDPR where required for the performance of the contract, pursuant to Art. 6(1) litra a GDPR where consent has been obtained, or pursuant to Art. 6(1) litra f GDPR based on our legitimate interest in ensuring optimale website functionality and providing a user-friendly and efficient browsing experience.
You may configure your browser settings to notify you when cookies are set and to allow you to decide on a case-by-case basis whether to accept them, or to reject cookies altogether or in specific circumstances.
please note that restricting or disabling cookies may impair the functionality of our website.
5. CONTACTING US
5.1. When you contact us, for example by using a contact form or sending an e-mail, personal data is collected. The specific information collected through a contact form is determined by the fields contained in the respective form.
The data you provide will be used solely for the purpose of responding to your inquiry, facilitating communication with you, and carrying out the related technical administration.
The legal basis for processing this data is our legitimate interest in handling and responding to your request pursuant to Art. 6(1) litra f GDPR. Where your inquiry relates to the initiation or conclusion of a contract, the processing is additionally based on Art. 6(1) litra b GDPR.
Your personal data will be deleted once your inquiry has been conclusively processed and the relevant matter has been fully resolved, provided that no statutory retention obligations require continued storage.
6. USE OF CUSTOMER DATA FOR DIRECT ADVERTISING
6.1. If you subscribe to our e-mail newsletter, we will regularly provide you with information concerning our products, services and offers.
The only information required for newsletter registration is your e-mail address. Any additional infromation is provided voluntarily and is used to personalize communications addressed to you.
We use a double opt-in procedure for newsletter subscriptions. This means that we will only send newsletters after you have expressly confirmed your intention to subscribe. Following your registration, you will receive a link that must be activated to verify your consent to receive future newsletters.
By activating the confirmation link, you provide your consent to the processing of your personal data pursuant to Art. 6(1) litra a GDPR.
When subscribing to the newsletter, we store the IP address assigned by your internet service provider (ISP), together with the date and time of registration, in order to identify and prevent any possible misuse of your e-mail address at a later stage.
The personal data collected during the registration process is used exclusively for newsletter distribution and related promotional communications.
You may unsubscribe from the newsletter at any time by using the unsubscribe link contained in each newsletter or by contacting the responsible party identified at the beginning of this Privacy Policy.
Upon unsubscribing, your e-mail address wil be removed from our mailing list without undue delay, unless you have expressly consented to further processing of your data or we are entitled by law to retain and use the data beyond this purpose, as described in this Privacy Policy.
6.2. Our newsletters will be sent using the following provider:
- Shopify Email, Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data may additionally be transferred to:
- Shopify Inc., 150 Elgin St., Ottawa, ON K2P 1L4, Canada
On the basis of our legitimate interes in effective and user-friendly newsletter communications, the information provided during newsletter registration is transferred to this provider pursuant to Art. 6(1) litra f GDPR so that newsletters may be distributed on our behalf.
Subject to your express consent under Art. 6(1) litra a GDPR, the provider may also analyze the performance of newsletter campaigns using tracking technologies such as web beacons and tracking pixels incorporated into e-mails. These technologies enable the measurement of newsletter opening rates and user interactions with newsletter consent.
You may revoke your consent to the newsletter tracking at any time with effect for the future.
A data processing agreement has been concluded with the provider to ensure appropriate protection of personal data and to prevent unauthorized disclosure to third parites.
Where personal data is transferred to Canada, an adequate level of protection is ensured by an adequacy decision issued by the European Commission.
7. PROCESSING OF DATA FOR THE PURPOSE OF ORDER HANDLING
7.1. Where necesasry for the performance of a contract relating to the delivery of goods and the processing of payments, the personal data collected by us will be transmitted to the shipping service provider engaged for delivery and to the financial institution commissioned to process payment, in accordance with Art. 6(1) litra b GDPR.
7.2. Where we are contractually obliged to provide updates for goods containing digital elements or for digital products, we process the contact information you provide during the ordering process (including your name, postal address, and e-mail address) in order to inform you personally about available upadates within the legally prescribed period. Such processing is carried out in fulfillment of our statutory obligations pursuant to Art. 6(1) ltira c GDPR.
7.3. Your contact details will be used exclusively for the purpose of providing information concerning updates that we are legally or contractually required to supply and will only be processed to the extent necessary to fulfill those obligations.
7.4. For the purpose of processing and fulfilling your order, we also cooperate with the service providers identified below, who assisst us in whole or in part with the performance of concluded contracts. Personal data may be disclosed to these service providers in accordance with the information set out below.
7.5. To fulfill our contractual obligations toward our customers, we work with external shipping partners.
For the sole purpose of delivering orderes goods, we provide the shipping partner selected by us with your name and delivery address in accordance with Art. 6(1) litra b GDPR. Such disclosure is limited to the information required to complete the delivery.
7.6. For order fulfillment and processing, we use the following service provider:
- Gelato ASA, Dronning Eufemias gate 8, NO-0191 Oslo, Norway
For the purpose of processing and fulfilling onlinde orders, your name, address, and any other personal data required for the execution of the order will be transmitted to the provider pursuant to Art. 6(1) litra b GDPR. Personal data is only disclosed to the extent necessary for proper order processing and fulfillment.
7.7. For shipping and delivery services, we use the following provider:
- FIND PROVIDER
where you have expressly consented during the ordering process, we will transmit your e-mail address and/or telephone nmber to the provider pursuant to Art. 6(1) litra a GDPR for the purpose of coordinating a delivery date or providing shipment notifications prior to delivery
If no such consent has been granted, we will only transmit the recipient's name and delivery address to the provider where necessary to complete delivery, pursuant to Art. 6(1) litra b GDPR.
The transfer of data is limited to the information required for delivery. Without your consent, it is not possible to arrange delivery appointments or provide delivery notifications through the provider.
You may withdraw your consent at any time with future effect by contracting either the data controller identified above or the provider directly.
7.8. If you choose the payment method "Apple Pay", offered by Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, Payment processing is carried out through Apple Pay functionality available on devices operating iOS, watchOS or macOS using a payment card stored within Apple Pay
Apple Pay incorporates hardware and software security features designed to protect payment transactions. To authorize a payment, you must enter a security code previously configured by you and verify the transaction using a supported authentication method, such as FaceID or TouchID.
For payment processing purposes, the information entered during the ordering process, together with information relating to the order, is transmitted to Apple in encrypted form. Apple then re-encrypts this information using a developer-specific key before forwarding it to payment service provider associated with the payment card stored in Apple Pay.
This encryption process ensures that only the website through which the purchase was made can access the payment information. Once the transaction has been completed, Apple transmites the device security code to the originating website as confirmation of payment.
Where personal data is processed as part of these transmissions, such processing is carried out exclusively for payment processing purposes pursuant to Art. 6(1) litra b GDPR.
Apple retains anonymized transaction information, including the approximate date and time of the transaction, and information indicating whether the transaction was successfully completed. Through anonymization, any personal reference is removed. Apple uses this anoymized information to improve Apple Pay and other Apple products and services.
When Apple Pay is used on an iPhone or Apple Watch to complete a purchase initiated through Safari on Mac, the Mac and the authorization device communicate through an encrypted channel using Apple's servers. Apple neither processes nor stores this information in a manner that permits personal identification.
The ability to use Apple Pay on a Mac can be disabled through the iPhone settings menu under "Wallet & Apple Pay" by deactivating the option "Allow Payments on Mac".
Additional information regarding Apple Pay's privacy practices can be found at:
- https://support.apple.com/en-gb/HT203027
7.9. If you select "Google Pay" as your payment method, offered by Google Ireland Limited, Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out through the Google Pay application installed on a mobile device running Androind 4.4 (KitKat) or later and equipped with NFC functionality.
Payments are processed using a payment card or other approved payment method stored in Google Pay, such as PayPal. For payments exceeding EUR 25.00, prior authentication of the mobile device is required using the applicable verification method, such as facial recognition, password entry, fingerprint verification, or patterne authentication.
To process the payment, the information submitted during checkout together with order-related information is transmitted to Google. Google then provides the originating website with a unique transaction number associated with the payment information stored in Google Pay. This transaction number serves solely as proof of payment and does not contain actual payment card details.
Google Acts exclusively as an intermediary in processing the payment transaction. The actual payment transaction takes place between the user and the originating website through the payment method stored within Google Pay.
Where personal data is processed as part of these transactions, the processing is carried out solely for payment processing purposes pursuant to Art. 6(1) litra b GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information relating to payments processed through Google Pay. This may include the date, time, amount location, merchant description, descriptions of purchased goods, or services, photographs attached to transactions, the names and e-mail addresses of parties involved in the transaction, the payment method used, descriptions entered by users regarding the purpose of the transaction, and any related promotional offers.
According to Google, such processing is carried out pursuant to Art. 6(1) litra f GDPR on the basis of Google's legitimate interests in maintaining accurate accounting records, verifying transaction infromation, and optimizing and maintaining the functionality of Google Pay.
Google also reserves the right to combine transaction-related information with other data collected through the use of Google's services.
- Google pay terms of service are available at: https://payments.google.com/payments/api-secure/u/0/get_legal_document?Ido=0&Idt=googlepaytos&Idl=en
Further information regarding Google Pay's privacy practices can be found at:
- https://payments.google.com/payments/apis-secure/get_legal_document?Ido=0&Idt=privacynotice&Idl=en
7.10. If you select Paypal as your payment method, payment processing will be carried out by Paypal Europe, S. à. r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
Where you choose a PayPal payment method involving advance payment, the payment information supplied during checkout, including your name, address, banking information, payment card details, currency, transaction number and order-related information, will be transmitted to PayPal pursuant to Art. 6(1) litra b GDPR.
The transfer of personal data is limited to what is necesary for the processing of the payment.
Where you select a PayPal payment method under which PayPal assumes a financial risk by providing payment in advance, additional personal information may be requested during checkout, including your name, address, date of birth, e-mail address, telephone number, and information relating to alternative payment methods.
To safeguard our legitimate interest in evaluating customer creditworthiness, this information is transmitted to PayPal pursuant to Art. 6(1) litra f GDPR for credit assessment purposes.
Using the personal information provided, together with additional data such as shopping cart contents, order history, invoice amounts, and previous payment behaviour, PayPal determines whether the selected payment method can be offered while taking payment and default risks into account.
Credit assesments may include score values generated through scientifically recognized mathematical-statistical methods, which may include address-related information among the relevant factors.
You may object to this processing of your personal data at any time by contacting us og PayPal. However, PayPal may continue processing perosnal data where such processing remains necessary for contractual payment handling.
7.11. This website offers payment methods through Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
If you select a payment method requiring advance payment, such as payment by credit card, the payment information entered during checkout, including your name, address, payment card information, banking details, currency, transaction number, and order-related information, will be transmitted to Shopify Payments pursuant to Art. 6 (1) litra b GDPR.
This disclosure of perosnal data is limited exclusively to what is required to process the selected payment transaction.
8. WEB ANALYTICS SERVICES
8.1. Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland ("Google").
google (Universal) Analytics uses cookies, which are text files storedd on your device that enable analysis of how visitors interact with the website. Information generated by these cookies regarding your use of the website, including your shortened IP address, is generally transferred to servers operated by Google LLC in the United States.
This website exclusively uses Google (Universal) Analytics together with the "_anonymizeelp()" extension. This functionality anonymizes IP addresses by shortening them before processing and prevents any direct association with an individual. Within memeber states of the European Union or other contracting states of the European Economic Area, Google will generally shorten the IP address before transmission. Only in exceptional circumstances will the complete IP address be transmitted to a Google server in the United States and shortened there.
On our behalf, Google uses this information to evaluate website usage, generate reports concerning website activities, and provide additional services related to website and internet usage. The IP address transmitted by your browser within the framework of Google (Universal) Analytics is not combined with other Google data.
All processing activities described above, including the placement of Google Analytics cookies and the collection of information from your device, are carried out only where you have provided your explicit consent pursuant to Art. 6(1) litra a GDPR. Without such consent, Google Analytics will not be activated during your visit to this website.
You may withdraw your consent at any time with future effect by disabling this service through the cookie consent tool available on the website.
We have entered into a data processing agreement with Google to ensure appropriate protection of personal data and to prevent unauthorized disclosure to third parties.
For transfers of personal data to the United States, Google participates in the EU-US Data Privacy Framework, which provides an adequate level of data protection based on a European Commission adequacy decision.
Further information regarding Google (Universal) Analytics is available at:
- https://policies.google.com/privacy?hl=en&gl=en
- https://busniess.safety.google/privacy/
8.1.1. Demographics
Google analytics includes a feature known as "demographics", which allows statistical information regarding the age, gender and interests of website visitors to be generated using interest-based advertising data and information obtained from third parties.
This functionality enables the identification and segmentation of user groups for the purpose of implementing targeted marketing measures. However, information collected through the Demographics feature cannot be linked to a specific individual.
Additional information regarding Google's processing of website related data can be found at:
- https://policies.google.com/technologies/partner-sites?hl=en
8.1.2. Google signals
This website may use the Google Signals feature as an extension of Google Analytics. Google Signals enables the creation of cross-device reports by analyzing user activity across multiple devices.
Where you have enabled personalized advertising within your Google account and linked your devices to that account, Google may analyze usage behaviour across devices and generate statistical models, provided that you have consented to the use of Google Analyticts pursuant to Art. 6(1) litra a GDPR.
The analysis takes into account users who are logged into a Google account and who complete conversions. Statistics may indicate, for example, the device on which an advertisement was first clicked and the device on which the associated conversion occured.
When Google Signals is used, we do not receive personal data from Google. We receive only aggregated statistical information.
You may disable cross-device analysis at any time by turning off the personalized advertising setting within your Google account. Instructions are available at:
- https://support.google.com/ads/answer/2662922
Additional information is available at:
- https://support.google.com/analytics/answer/7532985
8.1.3. User IDs
This website may also use the Use ID feature provided by Google Analytics.
By assigning unique User IDs, cross-device reprots can be generated, enabling analysis of user behaviour across multiple devices where you have consented to Google Analytics, created a personal account on the website, and logged into that account from different devices.
The resulting information may indicate, among other things, the device on which an advertismenet was initially clicked and the device on which the associated conversion occurred.
8.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics 4 uses cookies by default. These cookies are stored on your device and facilitate analysis of how the website is used. Information generated by the cookies, including your IP address in anonymized form, is generally transmitted to Google servers and processed there. Information may also be transferred to servers operated by Google LLC in the United States.
When Google Analytics 4 is used, the IP address transmitted by your device is automatically anonymized before further processing by shortening the final digits. This process is performed within EU member states or other EEA contracting states and prevents direct identification of individuals.
On our behalf, Google uses the collected information to analyze website usage, prepare reports concerning website activity, and provide additional services related to website and internet usage. The anonymized IP address processed within Google Analytics 4 is not combined with other Google data.
Data collected through Google Analytics 4 is retained for a period of two months and subsequently deleted.
Google Analytics 4 also includes a feature known as "Demographic Characteristics," which enables the generation of statistical information concerning age, gender, and interests of website users through interest-based advertising data and information obtained from third parties.
This functionality allows website visitors to be categorized into target groups for marketing purposes. Information collected through this feature cannot be linked to specific individuals and is retained for two months before deletion.
All processing activities described above, including the storage and retrieval of information on your device through Google Analytics cookies, are carried out only where you have provided explicit consent pursuant to Art. 6 (1) lit. a GDPR.
Without your consent, Google Analytics 4 will not be used.
You may withdraw your consent at any time with future effect through the cookie consent tool available on the website.
8.2.1. Google Signs
Google Analytics 4 may be supplemented by Google Signals.
Where personalized advertising is enabled within your Google account and your devices are linked to that account, Google may analyze usage behavior across devices and create cross-device reports, provided that you have consented to Google Analytics pursuant to Art. 6 (1) lit. a GDPR.
This functionality may reveal, for example, the device on which an advertisement was first clicked and the device on which the corresponding conversion took place.
No personal data is provided to us through Google Signals. We receive only aggregated statistical information.
You may disable personalized advertising through your Google account settings at any time.
Additional information is available at:
8.2.2. User IDs
Google Analytics 4 may also use the User ID feature.
Where individual User IDs are assigned, Google can generate cross-device reports that analyze user behavior across multiple devices, provided that you have consented to Google Analytics, created a personal account on the website, and logged into that account from multiple devices.
The collected information may indicate, among other things, the device on which an advertisement was first selected and the device on which the related conversion occurred.
We have entered into a data processing agreement with Google requiring Google to protect website user data and refrain from unauthorized disclosure to third parties.
Google participates in the EU–US Data Privacy Framework, ensuring an adequate level of protection for personal data transferred to the United States.
Further information is available at:
- https://policies.google.com/privacy?hl=en
- https://business.safety.google/privacy/
- https://policies.google.com/technologies/partner-sites
8.3. Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Tag Manager provides the technical infrastructure required to integrate, manage, and control multiple web applications, including analytics and tracking services, through a centralized user interface.
Google Tag Manager itself does not store information on user devices, read information from devices, or perform independent data analysis.
However, when a page is accessed, Google Tag Manager may transmit your IP address to Google and may store it. Information may also be transferred to servers operated by Google LLC in the United States.
All processing activities described above, including the storage or retrieval of information from your device, are carried out only where you have granted explicit consent pursuant to Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time with future effect through the cookie consent tool available on the website.
We have concluded a data processing agreement with Google to ensure the protection of website visitor data and to prevent unauthorized disclosure to third parties.
Additional information regarding Google's privacy standards can be found at:
Google participates in the EU–US Data Privacy Framework for transfers of personal data to the United States.
9. RETARGETING, REMARKETING AND REFERRAL ADVERTISING
9.1. Within our online offering, we use Meta Pixel, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
When a user clicks on an advertisement placed by us on Facebook or Instagram, Meta Pixel adds a parameter to the URL of the linked page. Following redirection, this parameter is stored through a cookie set by our website.
This enables Meta to identify visitors to our website as a target audience for advertising purposes. We use this functionality to display advertisements on Facebook and Instagram only to users who have demonstrated an interest in our website or who exhibit specific characteristics or interests identified through their online behavior (so-called "Custom Audiences").
Meta Pixel also enables us to determine whether users who clicked on an advertisement were redirected to our website and which actions they subsequently performed there ("conversion tracking").
The data collected is anonymous from our perspective and does not permit identification of individual users. However, Meta may store and process the information in a manner that allows it to be linked to a user profile and used for Meta's own advertising purposes.
All processing activities described above, including the placement of cookies and the retrieval of information from user devices, are performed only where explicit consent has been provided pursuant to Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time with future effect through the cookie consent tool available on the website.
We have concluded a data processing agreement with Meta to ensure adequate protection of personal data and to prevent unauthorized disclosure to third parties.
Information generated by Meta is generally transmitted to and stored on Meta servers and may also be transferred to servers operated by Meta Platforms Inc. in the United States.
Meta participates in the EU–US Data Privacy Framework, ensuring an adequate level of protection for personal data transferred to the United States.
9.2. This website uses Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Within Google Ads, we use conversion tracking to measure the effectiveness of advertising campaigns and to present advertisements that are relevant to users' interests.
A conversion tracking cookie is placed when a user clicks on a Google advertisement. These cookies are small text files stored on the user's device and generally expire after 30 days. They are not used to personally identify users.
If a user visits certain pages of this website before the cookie expires, Google and we can determine that the user clicked on a specific advertisement and was redirected to the relevant page.
Each Google Ads customer receives unique cookies, making it impossible to track users across the websites of different Google Ads customers.
Information collected through conversion cookies is used to generate conversion statistics. Advertisers receive information regarding the total number of users who clicked on an advertisement and were redirected to a conversion-tracked page. No information enabling personal identification is provided.
The use of Google Ads may involve the transfer of personal data to Google LLC servers located in the United States.
Additional information regarding Google's processing of website data can be found at:
All processing activities described above are carried out only where explicit consent has been provided pursuant to Art. 6 (1) lit. a GDPR.
Without consent, Google Ads Conversion Tracking will not be activated.
You may permanently prevent the setting of conversion tracking cookies by installing the browser extension available at:
Please note that certain functions of this website may not operate correctly if cookies are disabled.
Further information regarding Google's privacy practices is available at:
Google participates in the EU–US Data Privacy Framework for transfers of personal data to the United States.
10. WEBSITE FUNCTIONALITIES
10.1. Google reCAPTCHA
This website uses the reCAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to Google LLC in the United States.
For visual presentation of the reCAPTCHA interface, Google uses Google Fonts, which are loaded from Google servers. Apart from the information already transmitted through the reCAPTCHA functionality, no additional information is processed for this purpose.
The service is used to determine whether website interactions are carried out by human users or through automated processes. Its purpose is to prevent spam, distributed denial-of-service (DDoS) attacks, and other forms of automated abuse.
To perform this verification, Google may collect and process the IP address of the device used, browser identification data, operating system information, and information concerning the date and duration of the visit. These data are transmitted to Google's servers for evaluation.
The service may also use cookies stored on the user's device.
Where cookies are used as part of the processing described above, they are only set where explicit consent has been granted pursuant to Art. 6 (1) lit. a GDPR.
Such consent may be withdrawn at any time with future effect through the cookie consent tool available on the website.
Where the processing described above is carried out without cookies, the legal basis is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in preventing misuse, combating spam, and ensuring accountability for online interactions.
We have entered into a data processing agreement with Google to ensure adequate protection of personal data and to prevent unauthorized disclosure to third parties.
Google participates in the EU–US Data Privacy Framework, ensuring an adequate level of protection for personal data transferred to the United States.
11. TOOLS AND MISCELLANEOUS
This website uses a cookie consent management tool to obtain and document legally valid consent for the use of cookies and cookie-based services that require user consent.
The cookie consent tool is presented to users through an interactive interface when they access the website. Through this interface, users may provide consent for specific cookies and/or cookie-based services by selecting the corresponding options.
By means of this tool, cookies and services requiring consent are only activated once the user has granted the relevant consent through the designated selection mechanism. This ensures that such cookies are only stored on a user's device where valid consent has been provided.
The tool uses technically necessary cookies to record and retain your cookie preferences. As a general rule, personal data is not processed for this purpose.
Where, in individual cases, personal data such as an IP address is processed in connection with the storage, allocation, or documentation of cookie preferences, such processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in maintaining legally compliant, user-specific, and user-friendly consent management and, consequently, in ensuring a legally compliant operation of our website.
An additional legal basis for such processing is Art. 6 (1) lit. c GDPR. As the data controller, we are subject to a legal obligation to make the use of non-essential cookies dependent upon the user's consent.
Further information regarding the operator of the cookie consent tool and the available configuration options can be found directly within the corresponding user interface on our website.
12. RIGHTS OD DATA SUBJECTS
12.1. Statutory Rights of Data Subjects
Applicable data protection legislation grants you the following rights in relation to the processing of your personal data:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
12.2. Right to Object
WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTERESTS FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE PERSONAL DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING WHERE WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR WHERE THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING. THIS RIGHT APPLIES TO ANY PROCESSING OF PERSONAL DATA CARRIED OUT FOR DIRECT MARKETING PURPOSES.
YOU MAY EXERCISE THIS RIGHT OF OBJECTION IN ACCORDANCE WITH THE PROCEDURE DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL IMMEDIATELY CEASE PROCESSING THE RELEVANT PERSONAL DATA FOR SUCH PURPOSES.
13. RETENTION PERIODS FOR PERSONAL DATA
The duration for which personal data is retained depends on the applicable legal basis for processing, the specific purpose of the processing activity, and, where relevant, any statutory retention obligations (for example, retention periods under commercial or tax law).
Where personal data is processed on the basis of consent pursuant to Art. 6 (1) lit. a GDPR, such data will be retained until the data subject withdraws their consent.
Where statutory retention periods apply to data processed for the performance of contractual obligations or pre-contractual measures pursuant to Art. 6 (1) lit. b GDPR, the relevant data will be routinely deleted once the applicable retention periods have expired, provided that the data is no longer required for the performance or initiation of a contract and provided that no legitimate interest in continued retention exists.
Where personal data is processed on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f GDPR, such data will be retained until the data subject exercises their right to object under Art. 21 (1) GDPR, unless we are able to demonstrate compelling legitimate grounds for continued processing that override the interests, rights, and freedoms of the data subject, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Art. 6 (1) lit. f GDPR, such data will be retained until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise specified in this Privacy Policy with respect to particular processing activities, stored personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.
