Skip to content

Cart

Your cart is empty

Privacy Policy

Privacy Policy

"Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies as long as no other information is provided in the subsequent processing operations."
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any personal information. 
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, the date and time of the retrieval, the IP address, the amount of data transmitted, and the requesting provider. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our predominant legitimate interest in ensuring the uninterrupted operation of our website and improving our services. 
 
"Your data will be transmitted, among other places, to Canada. There is an adequacy decision from the EU Commission for data transmissions to Canada."

contact

Person responsible
Contact us upon request. The person responsible for data processing is: Mathias dos Santos Held, Gohliser Straße 4, 04105 Leipzig Germany, +49 (0) 341 561 29 505, ola@brasilheroe.com


Initiative contact by the customer via email
"If you initiate contact with us via email, we will only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of processing and responding to your contact request."
If the contact is for the purpose of carrying out pre-contractual measures (e.g. consultation in case of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
"If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons relating to your particular situation."
"We only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use."

 

Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide. The data processing is for the purpose of contacting you.
If the contact is for the purpose of carrying out pre-contractual measures (e.g. consultation in case of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
"If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons relating to your particular situation."
"We only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use."


Customer Account Orders      

Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your customer account will then be deleted.

Collection, processing, and transfer of personal data in orders
When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order as well as to handle your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you. 
"Your data may be shared, for example, with the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of data transmission is limited to a minimum."
 
"Your data will be transmitted, among other places, to Canada. There is an adequacy decision from the EU Commission for data transmissions to Canada."


Reviews Advertising

Data collection when writing a comment
When commenting on an article or post, we collect your personal data (name, email address, comment text) only to the extent you provide. The processing is intended to enable commenting and to display comments. By submitting the comment, you consent to the processing of the transmitted data. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your personal data will then be deleted.

"When your comment is published, only the name you provided will be published."

Website logo for Google customer reviews
"On our website, the website logo for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; 'Google') is embedded."
The integration serves the purpose of displaying the number and results of our reviews received so far via Google and promoting participation in this program.
"To display the logo on our website and show you personalized ads on Google, Google uses cookies. This may involve processing and transmitting your IP address to Google."
"Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://privacy.google.com/businesses/controllerterms/."
The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information on the terms of use and data protection when using Google Customer Reviews, please visit https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and https://policies.google.com/privacy?hl=de.

Google Customer Reviews Rating Tool
"We use the review tool for Google Customer Reviews from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; 'Google')."
"After your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, you will be contacted by us via email, using Google's survey opt-in module. The following information may be processed and transmitted to Google: order details (e.g., order ID, delivery country, estimated delivery date, GTIN of the ordered products) as well as your email address."
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://privacy.google.com/businesses/controllerterms/ and https://business.safety.google/adscontrollerterms.
The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent, provided that you have expressly agreed to the transfer of your data and the receipt of the review request. You can revoke your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information on terms of use and data protection when using Google customer reviews, please visit https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html as well as under https://policies.google.com/privacy?hl=de
 
Use of your personal data for the sending of postal advertising
"We use your personal data (name, address), which we have received in the context of the sale of a product or service, to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data will result in no contract being concluded."
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct marketing. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.

Use of the email address for sending newsletters
We use your email address solely for our own advertising purposes for sending newsletters, provided you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. 

"Your data will be passed on to a service provider for email marketing as part of a contract processing. No transfer to other third parties will take place."

Use of the email address for sending direct advertising
We use your email address, which we received in the context of the sale of a product or service, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, as long as you have not objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the designated link in the advertising email for this purpose. No costs other than the transmission costs according to the basic rates will be incurred.


Shipping service provider Inventory management      

Passing on the email address to the shipping company for information about the shipping status
"We will pass your email address on to the transport company as part of the contract processing, provided you have expressly consented to this during the ordering process. The transfer is for the purpose of informing you via email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation."

Use of an external inventory management system
"We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected during the order will be sent to"
Billbee GmbH, Paulinenstrasse 54, 32756 Detmold
transmitted.


Payment service provider Credit report      

Use of PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Data collection and processing in credit assessment
If we provide services in advance, e.g., in the case of payment by invoice or direct debit, we reserve the right to obtain a credit report based on mathematical-statistical methods using Klarna, Chausseestraße 117, 10115 Berlin. For this purpose, we will transmit the personal data required for a credit check to them and use the information obtained about the statistical probability of a payment default for a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) that are calculated based on scientifically recognized mathematical-statistical methods, and in their calculation, among other things, address data is included. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when we provide services in advance. You have the right to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation by notifying us. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being concluded with the payment method you have selected.

Use of personal data when selecting Klarna payment options
In order to offer you the payment options from Klarna, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you can take advantage of the payment options offered by Klarna and to tailor the payment options to your needs. General information about Klarna can be found at: https://www.klarna.com/de/. Your personal information will be processed by Klarna in accordance with applicable data protection regulations and in accordance with the information in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.


cookies
 
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows for the unique identification of the browser when the website is accessed again.
 
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and the transmission of the data contained. Already stored cookies can be deleted at any time. However, we would like to point out that you may not be able to use all the functions of this website to their full extent.
 
"You can find information on how to manage (including disabling) cookies in the major browsers at the following links:"

 
Technically necessary cookies
"As long as no other information is provided in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change."
 
The use of cookies or similar technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our services.
You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
 

Analysis Advertising Tracking Communication      

Use of Google Analytics
"We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; 'Google') on our website."
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website usage and internet usage to the website operator. The following information may be collected, among others: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using, visited pages, referrer URL (the website from which you accessed our website), location data, purchase activities. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.
Google Analytics uses technologies such as cookies, browser web storage, and counting pixels that allow an analysis of your use of the website. The information generated about your use of this website is usually transmitted to a server of Google in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. Data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data that Google has about you.
"On this website, IP anonymization is enabled. This means that your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there."
The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/ as well as https://policies.google.com/technologies/cookies?hl=de.

Use of the Facebook Pixel
"We use the remarketing feature 'Custom Audiences' of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland 'Facebook') on our website."
Meta Platforms Ireland and we are jointly responsible for the collection of your data and the transmission of this data to Facebook when using the service. The basis for this is an agreement between us and Meta Platforms Ireland regarding the joint processing of personal data, in which the respective responsibilities are defined. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. Accordingly, we are particularly responsible for fulfilling the information obligations according to Articles 13, 14 GDPR, for complying with the security requirements of Article 32 GDPR regarding the correct technical implementation and configuration of the service, as well as for complying with the obligations under Articles 33, 34 GDPR, insofar as a breach of personal data protection concerns our obligations under the agreement on joint processing. Meta Platforms Ireland is responsible for enabling the rights of the data subjects according to Articles 15 - 20 GDPR, for adhering to the security requirements of Article 32 GDPR regarding the security of the service, and for fulfilling the obligations under Articles 33, 34 GDPR, insofar as a breach of personal data protection concerns the obligations of Meta Platforms Ireland under the agreement on joint processing.
The application serves the purpose of targeting visitors of the website with interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag has been implemented on the website. Through this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook servers which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will then see personalized, interest-based Facebook ads.
"Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum."
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in targeting website visitors with interest-based advertising. You have the right to object at any time to the processing of personal data concerning you for reasons relating to your particular situation. You can deactivate the remarketing function "Custom Audiences" here.
More information on the collection and use of data by Facebook, your related rights, and options for protecting your privacy can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/

Use of Google Ads Conversion Tracking
"We use the online advertising program 'Google Ads' on our website and, in this context, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google)."
When you click on an ad served by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain personal data, and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, there is no way for cookies to be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to create conversion statistics. In this process, we learn the total number of users who clicked on one of our ads and were redirected to a page marked with a conversion tracking tag. However, we do not receive any information that would allow us to personally identify users.
Your data may be transmitted to the servers of Google LLC in the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adscontrollerterms/.
.
The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information as well as Google's privacy policy, please visit: https://www.google.de/policies/privacy/

 
Use of the Pinterest Tag
"We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland "Pinterest") on our website."
The application serves the purpose of targeting visitors of the website with interest-based advertising on the social network Pinterest. For this purpose, the conversion tag from Pinterest has been implemented on the website. Through this tag, a direct connection to the Pinterest servers is established when visiting the website. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then see personalized, interest-based Pinterest ads.
If you arrive at our website via a pin on the social network Pinterest, a cookie for conversion tracking will be placed on your computer. These cookies have a limited validity, do not contain any personal data, and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information obtained through the conversion cookie is used to create conversion statistics and thus optimize our website. This may include processing the following information: total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g., category or product pages), search queries on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in targeting website visitors with interest-based advertising. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. You can deactivate personalized advertising in the personalization settings on Pinterest or via the AdChoices website optout.aboutads.info. You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Further information on the collection and use of data by Pinterest, your rights in this regard, and options for protecting your privacy can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.

 
Use of the live chat system "Zendesk Chat"
"We use the live chat system of Zendesk Inc. (1019 Market Street, 6th Floor, San Francisco, California 94103, USA; 'Zendesk') on our website."
The system serves the purpose of communication between you and us as the provider. Usage profiles can be created from this data under a pseudonym. Cookies are used for this purpose. The cookies enable the recognition of the internet browser.
"Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data. A copy of the standard contractual clauses will be provided to you by Zendesk upon request."
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct customer communication. You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
You can prevent the storage of cookies by selecting the appropriate technical settings of your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Further information on the collection and use of data by Zendesk, your related rights, and options for protecting your privacy can be found in Zendesk's privacy policy at https://www.zendesk.com/company/customers-partners/privacy-policy/.

 

Plug-ins and Others

Use of Google Tag Manager
"We use the Google Tag Manager on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; 'Google')." 
"This application manages JavaScript tags and HTML tags that are used for the implementation of tracking and analysis tools in particular. The data processing serves the purpose of demand-oriented design and optimization of our website."
"The Google Tag Manager itself does not store cookies nor does it process personal data. However, it enables the triggering of additional tags that can collect and process personal data."
For more information on terms of use and data protection, please see here.

 
Use of Google reCAPTCHA 
We use the reCAPTCHA service on our website from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The query serves the purpose of distinguishing the input by a human or by automated, machine processing. To this end, your input is transmitted to Google and used there. Additionally, the IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to the servers of Google LLC in the USA. There is no adequacy decision from the EU Commission for the USA. The data transmission is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest. to protect our website from automated spying, abuse, and SPAM. You have the right to object at any time to the processing of your personal data concerning you based on Article 6(1)(f) GDPR for reasons relating to your particular situation.
For more information about Google reCAPTCHA and the associated privacy policy, please visit: https://www.google.com/recaptcha/intro/android.html as well as https://www.google.com/privacy
 

Use of Google Maps
"We use the embedding function of Google Maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website."
The function allows for the visual representation of geographical information and interactive maps. In doing so, Google collects, processes, and uses data from visitors to the websites that embed Google Maps when the pages are accessed.
"Your data may also be transmitted to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks."
The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
For more information on the collection and use of data by Google, please refer to Google's privacy policy at https://www.google.com/privacypolicy.html. There, you also have the option to change your settings in the Privacy Center, allowing you to manage and protect your data processed by Google.

Use of YouTube
"We use the embedding feature for YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; 'YouTube') on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; 'Google')."
The function displays videos stored on YouTube in an iFrame on the website. The option "Enhanced Privacy Mode" is activated. This means that YouTube does not store any information about the visitors of the website. Only when you watch a video will information about it be transmitted to YouTube and stored there. Your data may be transmitted to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
Further information on the collection and use of data by YouTube and Google, your related rights, and options for protecting your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Use of Vimeo
"We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; 'Vimeo') on our website to embed videos from the 'Vimeo' portal."
"When you access pages on our website that are equipped with such a plug-in, a connection is established to the servers of Vimeo, and the plug-in is displayed on the page by notifying your browser. This transmits both your IP address and the information about which of our pages you have visited to the servers of Vimeo."
"If you are logged into Vimeo, Vimeo assigns this information to your personal user account. When using the plug-in features (e.g., by starting a video by pressing the corresponding button), this information is also associated with your Vimeo account."
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies takes place with your consent based on § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.
Further information on the purpose and scope of the collection, as well as on the further use and processing of the data by Vimeo, and about your rights and options to protect your privacy can be found in the privacy policy of Vimeo: https://vimeo.com/privacy


Rights of the affected and storage duration

Duration of storage
"After the complete execution of the contract, the data will initially be stored for the duration of the warranty period, and thereafter in consideration of legal, particularly tax and commercial law retention periods, and will then be deleted after the expiration of the period, unless you have consented to further processing and use."

Rights of the data subject
You have the following rights under Articles 15 to 20 of the GDPR, provided that the legal requirements are met: right to access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
Furthermore, you have the right to object under Art. 21 para. 1 GDPR to the processing based on Art. 6 para. 1 f GDPR, as well as to the processing for the purpose of direct marketing.

Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of your personal data is not lawful.

"You can file a complaint, among other places, with the supervisory authority responsible for us, which you can reach at the following contact details:"

Saxon Data Protection Officer
Devrientstrasse 5
01067 Dresden
Tel.: +49 351 85471101
Fax: +49 351 85471109
E-Mail: saechsdsb@slt.sachsen.de

Right of objection
"If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to these processing activities at any time for reasons arising from your particular situation, with effect for the future."
"After a successful objection, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims."

If the processing of personal data is carried out for the purposes of direct advertising, you can object to this processing at any time by notifying us. After the objection has been made, we will cease the processing of the affected data for the purposes of direct advertising.

last updated: 01/10/2022