Data Privacy Policy
Thank you for your interest in our online services. Protecting your privacy is particularly important to us. The following information explains the nature, scope and purposes of our processing of personal data and the rights of data subjects.
1. Scope
This Privacy Policy applies to all pages accessible at https://www.juvia.com/de/de/, including their subpages (hereinafter collectively referred to as the “Website”).
2. Legal framework
The legal framework for data protection is set out in the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
3. Name and address of the controller
The controller within the meaning of the GDPR, other national data protection laws of the Member States and other data protection provisions is:
JUVIA GmbH & Co. KG
KAP am Südkai Agrippinawerft
28 50678 Köln
Telephone: +49 (0)221 46 70 68 01
Email: service@juvia.com
(hereinafter “we”, “us”)
4. Name and address of the data protection officer
The following person has been appointed as data protection officer:
Lukas Biniossek
SCO-CON:SULT GmbH
Hauptstraße 27 53604
Bad Honnef www.sco-consult.de
6. Definitions
This Privacy Policy is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). For your information, the terms used are explained below:
7. Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
8. Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
9. Processing
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
10. Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.
11. Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
12. Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
13. Controller or person responsible for processing
The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
14. Processor
A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
15. Recipient
A recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.
16. Third party
A third party is a natural or legal person, public authority, agency or other body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
17. Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they signify their agreement, by a statement or by a clear affirmative action, to the processing of personal data relating to them.
18. Principles governing the processing of personal data
The following principles apply to all processing operations described in this Privacy Policy:
1. Purpose and scope of the processing of personal data
Personal data is collected only for the specified purposes. The scope of processing is limited to what is necessary for those purposes. The controller reserves the right to process personal data where and to the extent necessary to safeguard its legitimate interest in establishing, exercising or defending legal claims.
2. Legal bases for the processing of personal data
Personal data may be processed if at least one of the following conditions is met:
• Consent (Article 6(1)(a) GDPR)
• Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR)
• Legal obligation (Article 6(1)(c) GDPR)
• Safeguarding a legitimate interest pursued by us or a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject (Article 6(1)(f) GDPR)
3. Retention period for personal data
The data subject’s personal data is erased or blocked as soon as the purpose of storage ceases to apply. Data may be retained beyond this point if the European or national legislator has provided for this in EU regulations, laws or other provisions to which the controller is subject. Data is also blocked or erased when a retention period prescribed by those provisions expires, unless further retention is necessary for entering into or performing a contract.
4. Recipients of personal data
As a rule, recipients of data subjects’ personal data are limited to the controller and the processors it engages in compliance with data protection law. Data may also be disclosed to third parties if the controller is authorised to do so by a legal provision or is required to do so by statutory provisions or administrative or court orders.
5. Transfers of personal data to third countries
If personal data relating to data subjects is transferred to countries outside the European Union (EU) or the European Economic Area (EEA), this will take place only where an adequate level of protection exists (Article 45 GDPR), appropriate safeguards are in place (Article 46 GDPR), or the conditions for derogations for specific situations under Article 49 GDPR are met.
6. Existence of automated decision-making
As a responsible organisation, we do not use automated decision-making or profiling.
19. Automatic data collection when visiting our Website
Whenever our Website is accessed, our system automatically collects information from the computer system of the device accessing it.
1. Scope of processing
The following data is collected:
• the browser type and version used,
• the user’s operating system,
• the user’s internet service provider,
• the user’s IP address,
• the date and time of access,
• websites from which the user’s system accesses our Website,
• pages of our Website accessed by the user’s system.
The data is stored in log files. It is not stored together with other personal data relating to the user. Once identifying the individual is no longer necessary to achieve the purposes, the data is anonymised by truncating the IP address.
2. Legal basis for processing
The legal basis for processing is Article 6(1)(f) GDPR.
3. Purpose of processing
Processing the IP address within the system is necessary to deliver the Website to the user’s computer. Storage in log files safeguards our legitimate interests in detecting and rectifying malfunctions and preserving evidence in the event of a cyberattack, which prevail following a balancing of interests within the meaning of Article 6(1)(f) GDPR. The data is used in anonymised form for analytical purposes.
4. Retention period
Personal data in log files is generally anonymised unless longer retention is necessary to fulfil the purposes stated above. Anonymised log data is erased after 7–14 days.
5. Options for objection and erasure
As this data is essential to ensure the functionality and security of our information technology systems, you cannot object to its processing as a user.
20. Hosting and log files
A third-party provider processes data on our behalf to provide hosting and Website display services. This safeguards our legitimate interests in the correct presentation of our services, which prevail following a balancing of interests. All data collected through the use of this Website or through the forms provided in our online shop, as described below, is processed on that provider’s servers. Processing on other servers takes place only within the scope explained here. This service provider is based in a country within the European Union or the European Economic Area.
1. Server log files
You can visit our websites without providing personal information. Each time a page is accessed, the web server merely stores a so-called server log file automatically, containing, for example, the name of the requested file, your IP address, the date and time of retrieval, the volume of data transferred and the requesting provider (access data), and documenting the retrieval. This access data is evaluated exclusively to ensure the smooth operation of the Website and to improve our services. In accordance with Article 6(1), first sentence, point (f) GDPR, this safeguards our legitimate interests in the correct presentation of our services, which prevail following a balancing of interests. All access data is erased no later than seven days after the end of your visit. XXI. Collection and use of data for contract performance and when opening a customer account We collect personal data that you voluntarily provide to us when placing an order, contacting us (for example, via a contact form or email) or opening a customer account. Mandatory fields are marked as such because, in these cases, we require the data to perform the contract, handle your enquiry or open the customer account; without it, you cannot complete your order or open an account, or submit your enquiry. The relevant input forms show which data is collected. We use the data you provide in accordance with Article 6(1), first sentence, point (b) GDPR to perform the contract and handle your enquiries. Once the contract has been fully performed or your customer account has been deleted, processing of your data is restricted and the data is erased after the retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use it beyond this point as permitted by law and as explained in this Policy. You may delete your customer account at any time by sending a message using the contact option described below. 1. Disclosure of data to shipping service providers If you have given us your express consent during or after placing your order, we will, on the basis of that consent and in accordance with Article 6(1), first sentence, point (a) GDPR, forward your email address to the selected shipping service provider so that it can contact you before delivery to announce or arrange the delivery. You can withdraw your consent at any time by sending a message using the contact option described below or directly to the shipping service provider at the following contact address: service@juvia.com. Following withdrawal, we will erase the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use it beyond this point as permitted by law and as explained in this Policy.
21. Cloudflare CDN
We use technologies provided by Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA (hereinafter “Cloudflare”), which processes data on our behalf to provide our Website. We use the provider’s content delivery network (CDN). Our Website incorporates resources from external sources, such as JavaScript libraries required for its functionality.
1. Scope of processing
When you visit our Website, your browser connects to Cloudflare’s servers to load the relevant resource. The libraries are integrated via a CDN (content delivery network). When connecting to the CDN servers, your IP address, the address of the page visited and information about your browser and operating system are transmitted. For technical reasons, Cloudflare briefly decrypts the traffic between you and us and encrypts it again before forwarding it. The provider guarantees, through appropriate technical and organisational measures, that the data will not be processed for unrelated purposes or disclosed. Subject to the general provisions, the data is not passed on to third parties.
2. Storage of and access to browser data (cookies)
Cloudflare does not use cookies for tracking or analytical purposes as part of its CDN services.
3. Legal basis for processing
The legal basis for processing is Article 6(1)(f) GDPR.
4. Purpose of processing
Processing takes place to protect our information technology systems from cyberattacks and optimise loading speeds and the worldwide accessibility of our Website. These purposes also constitute our legitimate interests in processing, which prevail following a balancing of interests.
5. Transfers of data to third countries
To provide its services, Cloudflare will also process data outside the European Economic Area (in particular in the USA). Cloudflare provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Cloudflare uses the standard contractual clauses provided by the European Commission for this purpose.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies and depends on the statutory provisions.
7. Options for objection and erasure
The provisions of Article 21 GDPR concerning the right to object to processing based on a balancing of interests apply. You have the right to object to this processing at any time on grounds relating to your particular situation. However, as the data is collected and processed to ensure Website security and maintain operations, our legitimate interests prevail.
8. Further information
Further information on Cloudflare’s privacy practices is available at: https://www.cloudflare.com/de-de/privacypolicy/
23. Usercentrics Consent Manager
Usercentrics GmbH, Sendlinger Str. 7, 80331 München, Germany (hereinafter “Usercentrics”), processes data on our behalf and provides us with a software-as-a-service (SaaS) consent management platform. This enables us to obtain and manage Website users’ consent to data processing.
1. Scope of processing
When you visit our Website, a connection is established to Usercentrics’ servers to load the files and scripts needed to run the service. Usercentrics collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
• Consent data and the status of your consent
• Approximate geolocation based on your IP address (including to display the consent banner in the correct language)
Usercentrics may also store and read the following cookies on your device:
ucData
Service: Usercentrics
Domain: .juvia.com
Purpose: Consent management; technically necessary
Type: LocalStorage
Validity: 12 months
Legal basis: Article 6(1)(f) GDPR
Consent required: No
ucString
Service: Usercentrics
Domain: .juvia.com
Purpose: Consent management; technically necessary
Type: LocalStorage
Validity: 12 months
Legal basis: Article 6(1)(f) GDPR
Consent required: No
ucTaglogger
Service: Usercentrics
Domain: .juvia.com
Purpose: Consent management; technically necessary
Type: SessionStorage
Validity: 12 months
Legal basis: Article 6(1)(f) GDPR
Consent required: No
2. Storage of and access to browser data (cookies and similar technologies)
Usercentrics stores cookies and similar technologies in your device’s browser to document your consent status. Collecting this data is strictly necessary for technical reasons in order to store your consent status.
3. Legal basis for processing
Processing is necessary to comply with a legal obligation (Article 6(1)(c) GDPR). The legal basis for storing information on the end user’s terminal equipment or accessing that information is the strict technical necessity for providing the Website properly, pursuant to section 25(2), point 2 TDDDG. The legal basis for subsequent processing and documentation of the data collected is our legitimate interest under Article 6(1)(f) GDPR.
4. Purpose of processing
Processing is carried out to collect, manage, document and transmit consent and personal data. This corresponds to our legitimate interest in maintaining legally reliable evidence and documentation of the consent you have given or withdrawn.
5. Transfers of data to third countries
Personal data is not currently transferred to third countries (outside the EU/EEA).
6. Retention period
The consent log data collected by the consent manager is stored for 12 months and then automatically deleted.
7. Options for objection and erasure
The provisions of Article 21 GDPR concerning the right to object to processing based on a balancing of interests apply. As processing by Usercentrics is strictly necessary to fulfil our legal obligation to provide evidence and to ensure the functionality of the Website, it is generally not possible to object to processing unless grounds relating to your particular situation require it.
8. Further information
Further information on Usercentrics’ privacy practices is available at: https://usercentrics.com/de/datenschutzerklaerung/.
24. Prismic CMS
New Prismic, 9 rue de la Pierre Levée, 75011 Paris, France (hereinafter “Prismic”), processes data on our behalf and provides us with the content management system (CMS).
1. Scope of processing
When you visit our Website, a connection is established to Prismic’s servers to load the files and scripts needed to run the service. Prismic collects the following data:
• Device and browser information (including browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
2. Storage of and access to browser data (cookies)
Prismic does not use cookies for tracking or analytical purposes as part of its CMS services.
3. Legal basis for processing
The legal basis for processing is our legitimate interest under Article 6(1)(f) GDPR.
4. Purpose of processing
The purpose of processing is to provide and correctly display our Website. Due to Prismic’s technical integration, content cannot be displayed correctly without this service. Ensuring a fully functional Website also constitutes our legitimate interest.
5. Transfers of data to third countries
To provide its services, Prismic will also process data outside the European Economic Area (in particular in the USA). Prismic provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Prismic relies on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period is determined by the statutory provisions.
7. Options for objection and erasure
The provisions of Article 21 GDPR concerning the right to object to processing based on a balancing of interests apply. You have the right to object to this processing at any time on grounds relating to your particular situation. However, as the data is collected and processed to maintain operations, there are generally compelling legitimate grounds which may override users’ interests.
8. Further information
Further information on Prismic’s privacy practices is available at: https://prismic.io/legal/privacy.
25. Vimeo
We use plugins on our Website provided by Vimeo.com, Inc., Attention: Data Protection Officer, 330 West 34th Street, 10th Floor, New York, New York 10001 (hereinafter “Vimeo”). Vimeo enables us to embed and play videos on our Website.
1. Scope of processing
If you consent to the use of Vimeo, a connection to Vimeo’s servers is established when you access one of our web pages containing embedded Vimeo content. This is necessary to load the scripts, plugins, videos and files required for display. Vimeo automatically collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us) • Approximate geolocation (based on the IP address)
• Interactions with the video player (including clicks, mouse movements, scrolling behaviour and keystrokes used to control the player; sensitive entries such as passwords are not recorded)
If you are logged into your personal Vimeo account during your visit, Vimeo may associate this data directly with your profile. In this case, your name, email address, viewing history, playlists, comments and other profile information may also be collected and processed.
Vimeo may also store and read the following cookies on your device:
vuid
Service: Vimeo
Domain: .vimeo.com
Purpose: Video player
Type: Third-party cookie
Validity: 1 year
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
cfbm
Service: Vimeo
Domain: .vimeo.com
Purpose: Security
Type: Third-party cookie
Validity: 30 minutes
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
LOCAL_STORAGE_ID*
Service: Vimeo
Domain: .juvia.com, .vimeo.com
Purpose: Video player
Type: LocalStorage
Validity: Persistent
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
SESSION_STORAGE_ID*
Service: Vimeo
Domain: .juvia.com, .vimeo.com
Purpose: Video player
Type: SessionStorage
Validity: Session
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
PLAYER_PICOX*
Service: Vimeo
Domain: .juvia.com, .vimeo.com
Purpose: Video player
Type: LocalStorage
Validity: Persistent
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is transmitted to Vimeo’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Vimeo places cookies and similar technologies in your device’s browser to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to provide high-quality, ad-free videos. This improves the user experience and enables us to compile statistics to continuously improve our online services.
5. Transfers of data to third countries
To provide its services, Vimeo will also process data outside the European Economic Area (in particular in the USA). Vimeo provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Vimeo relies on certification under the EU-U.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the method of integration, whether you are signed in to a Vimeo account, the individual cookies and the statutory provisions.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Vimeo’s privacy practices is available at: https://vimeo.com/legal/terms/de/datenschutz/policy.
26. Google Analytics
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”), processes data on our behalf and provides this service to analyse our Website’s performance data and continuously optimise and improve our online presence.
1. Scope of processing
If you consent to the use of Google Analytics, the scripts and files required to run Google Analytics are loaded from Google’s servers. The following data may then be collected each time a page of our Website is accessed:
• Browser type and version used
• Operating system and version used
• IP address
• Language
• Date and time of the request
• The address of the website from which you reached this page (referrer URL)
• Age
• Approximate geolocation (based on your IP address)
• Device information such as brand, model, resolution, mobile/PC
• Interests
• Unique user identifier Google Analytics may also store and read the following cookies on your device:
ga*
Service: Google Analytics
Domain: .juvia.com
Purpose: Tracking
Type: First-party cookie
Validity: 14 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
gcl_au
Service: Google Analytics
Domain: .juvia.com
Purpose: Tracking/marketing
Type: First-party cookie
Validity: 90 days
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
IDE
Service: Google Analytics
Domain: .doubleclick.net
Purpose: Security
Type: Third-party cookie
Validity: 13 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
FPLC
Service: Google Analytics
Domain: .juvia.com
Purpose: Tracking
Type: First-party cookie
Validity: 20 hours
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
FPID
Service: Google Analytics
Domain: .juvia.com
Purpose: Tracking
Type: First-party cookie
Validity: 13 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is processed, transmitted to Google’s servers and stored there.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Google places cookies and similar technologies in your device’s browser to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the consent you have given and the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to measure and evaluate visitor traffic, user behaviour, geographical data and interests in order to optimise our Website, manage advertising activities and continuously improve our services.
5. Transfers of data to third countries
To provide its services, Google Analytics will also process data outside the European Economic Area (in particular in the USA). Google provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Google relies on certification under the EU-U.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
Google Analytics stores data on Google’s servers for up to 14 months, depending on the service configuration. Personal data is automatically erased after this period.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Google Analytics’ privacy practices is available at: https://support.google.com/analytics/answer/6004245.
27. Google Tag Manager
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”), processes data on our behalf and provides this service to allow us to manage website tags through a single interface.
1. Scope of processing
If you consent to the use of Google Tag Manager, the scripts and files required to run Google Tag Manager are loaded from Google’s servers. The following data may then be collected each time a page of our Website is accessed:
• Browser type and version used
• Operating system and version used
• IP address
• Date and time of the request
• The address of the website from which you reached this page (referrer URL)
This data is technically necessary and is processed to enable communication with your browser. The data is transmitted to Google’s servers and processed there. Your IP address is not stored permanently; it is used only for the duration of the communication and then erased.
Google Tag Manager may also store and read the following cookies on your device:
_gtmeec
Service: GTM
Domain: .juvia.comY
Purpose: Tracking
Type: First-party cookie
Validity: 3 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Google Tag Manager places cookies and similar technologies in your device’s browser to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the consent you have given and the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to use a tool that makes it easier for us to integrate and manage third-party analytics, marketing and other tools and technologies on our Website. Third-party tools may, among other things, make our Website more secure against cyberattacks and help us continuously expand and improve our online services.
5. Transfers of data to third countries
To provide its services, Google Tag Manager will also process data outside the European Economic Area (in particular in the USA). Google provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Google relies on certification under the EUU.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
Google Tag Manager stores data on Google’s servers only for as long as technically necessary to enable communication with your browser. The stored data is automatically erased after 14 days at the latest.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Google Tag Manager’s privacy practices is available at: https://support.google.com/tagmanager/answer/9323295.
28. Google Ads conversion tracking
Under data protection agreements, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) provides this service to evaluate the effectiveness of advertising materials and measure the success of our advertising campaigns.
1. Scope of processing
If you consent to the use of Google Ads conversion tracking, a connection to Google’s servers is established when you access our Website. Google Ads conversion tracking may collect the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
• Online identifiers, in particular the Google Click Identifier (GCLID) (the ID of an advertisement clicked on), and unique user identifiers
• Website interactions and conversion actions (e.g. page views, newsletter subscriptions, app downloads, requests for quotes, phone calls made by clicking on phone numbers, or clicks on specific buttons)
• Transaction data (shopping basket contents, products purchased)
• Contact details such as name, email address or telephone number, exclusively in pseudonymised form when enhanced conversions are used.
Google Ads conversion tracking may also set and read the following cookies:
FPAU
Service: Google Ads
Domain: .juvia.com
Purpose: Marketing/tracking
Type: First-party cookie
Validity: 3 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
_gcL*
Service: Google
Domain: .juvia.com
Purpose: Marketing/tracking
Type: LocalStorage
Validity: 3 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is processed, transmitted to Google’s servers and stored there. If you are signed in to your Google account, Google may link the data collected directly to your account.
Google Ads conversion tracking operates across domains if you consent to processing.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Google Ads conversion tracking places cookies and similar technologies in your device’s browser to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to measure and evaluate our advertising campaigns through conversion tracking. Conversion tracking analyses your Website interactions, such as clicks on advertisements, products or other relevant buttons, as well as your purchasing behaviour and submitted forms. This enables us to target our campaigns more precisely, personalise relevant advertisements for you and achieve our marketing objectives.
5. Transfers of data to third countries
To provide its services, Google Ads conversion tracking will also process data outside the European Economic Area (in particular in the USA). Google provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Google relies on certification under the EUU.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
Google Ads conversion tracking stores the data collected for varying periods. These depend, among other things, on whether the data can be associated with a Google account, the service’s technical method of integration, the cookies set and Google’s retention policies.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on conversion tracking is available at: https://business.google.com/de/ad-tools/conversion-tracking/. Further information on Google’s privacy practices is available at: https://policies.google.com/privacy.
30. Microsoft Clarity
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter “Microsoft”), processes data on our behalf and provides this service for statistical analysis of user behaviour on our Website.
1. Scope of processing
If you consent to the use of Microsoft Clarity, a connection to Microsoft’s servers is established when you access our Website. Microsoft Clarity automatically collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
• Heatmaps (session recordings), including observation of Website navigation, “rage clicks” (e.g. rapid repeated clicking out of frustration), mouse movements, clicks and scrolling Microsoft Clarity may also store and read the following cookies on your device:
SM
Service: MS Clarity
Domain: .c.clarity.ms
Purpose: Marketing/tracking
Type: Third-party cookie
Validity: A few seconds
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
MUDI
Service: MS Clarity
Domain: .clarity.ms
Purpose: Marketing/tracking
Type: Third-party cookie
Validity: 13 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
cltk
Service: MS Clarity
Domain: .juvia.com
Purpose: Marketing/tracking
Type: SessionStorage
Validity: Session
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
clsk
Service: MS Clarity
Domain: .juvia.com
Purpose: Marketing/tracking
Type: First-party cookie
Validity: 1 day
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is transmitted to Microsoft Clarity’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Microsoft Clarity places cookies and similar technologies in your device’s browser to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the consent you have given and the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to measure and statistically evaluate visitor traffic and analyse user activity and interaction behaviour on our Website. The data collected is used to identify strengths and weaknesses in the user experience. These findings enable us to make our Website more efficient and user-friendly and continuously optimise our online services.
5. Transfers of data to third countries
To provide its services, Microsoft will also process data outside the European Economic Area (in particular in the USA). Microsoft provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Microsoft relies on certification under the EU-U.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the method of integration, the individual cookies and the statutory provisions. Recording data is retained for 30 days. Favourited session data and heatmap data are retained for 9 months.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Withdrawal applies to this browser, and your consent must be renewed after the cookies’ validity period expires or when you change devices. You can also block cookies or delete cookies already stored at any time through your browser settings.
8. Further information
Further information on Microsoft Clarity’s privacy practices is available at: https://clarity.microsoft.com/privacy.
31. PayPal
We use the PayPal payment service on our Website. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). PayPal is provided from external servers and acts as a payment service provider. If you wish to pay through PayPal, a connection to PayPal’s servers is established.
1. Scope of processing
If you consent to the use of PayPal, a connection to PayPal’s servers is established when you access one of our web pages containing embedded PayPal content. This is necessary to load the required scripts and files. PayPal automatically collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
Personal data that PayPal may collect and use for payment processing, fraud prevention, identity verification, personalisation or analytics includes, depending on the function and payment method selected, the following categories:
• Personal identifiers (including name, address, telephone number, email address and, where applicable, other data that can identify you)
• Payment information (including bank details and transaction data)
• Approximate geolocation (based on your IP address)
• Profile-related data (including data from your PayPal account)
• Where applicable, other data strictly necessary to carry out the transaction and any fraud prevention measures The data collected is passed on to PayPal’s subprocessors, credit institutions and other service providers where strictly necessary to provide the service or process the payment, or, if you have consented, for analytics and personalisation. In addition to payment processing, these transfers serve in particular fraud prevention and risk management. If you are signed in to your personal PayPal account during your Website visit and carry out a transaction, PayPal may associate the data collected when the page is accessed with your account.
PayPal may also store and read the following cookies on your device:
__paypal_storage__
Service: PayPal
Domain: www.paypal.com
Purpose: Transaction processing
Type: LocalStorage
Validity: Persistent
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is transmitted to PayPal’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
With your consent, PayPal uses cookies and similar technologies in your device’s browser. Some of these cookies are technically necessary to ensure a secure transaction process. Other cookies are used to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the consent you have given and the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG.
The legal basis for processing your data to perform a contract or take pre-contractual measures in connection with payment processing is Article 6(1)(b) GDPR. The legal basis for subsequent processing of the data collected that does not serve contract performance or a pre-contractual measure is your consent under Article 6(1) (a) GDPR.
4. Purpose of processing
The purpose of processing is to integrate a straightforward and secure payment service provider so that we can offer you a convenient and protected payment method in our online shop and enable performance of the contract.
5. Transfers of data to third countries
To provide its services, PayPal will also process data outside the European Economic Area (in particular in the USA). PayPal provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, PayPal relies on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the individual cookies and the statutory provisions.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on PayPal’s privacy practices is available at: https://www.paypal.com/de/legalhub/paypal/privacy-full.
32. Amazon Pay
We use the Amazon Pay payment service on our Website. The provider is Amazon Payments Europe S.C.A., 38, avenue John F. Kennedy, L-1855 Luxembourg (hereinafter “Amazon Pay”). Amazon Pay is provided from external servers and acts as a payment service provider. If you wish to pay through Amazon Pay, a connection to Amazon’s servers is established.
1. Scope of processing
If you consent to the use of Amazon Pay, a connection to Amazon’s servers is established when you access one of our web pages containing Amazon Pay content. This is necessary to load the required scripts and files. Amazon automatically collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
• Approximate geolocation (based on the IP address)
Personal data that Amazon may collect and use for payment processing, fraud prevention, identity verification, personalisation or analytics includes the following categories:
• Personal identifiers (including name, address, telephone number, email address and, where applicable, other data that can identify you)
• Payment information (including bank details and transaction data)
• Information about your seller account or other Amazon accounts (if any)
• Where applicable, other data strictly necessary to carry out the transaction and any fraud prevention measures The data collected is passed on to Amazon’s subprocessors, credit institutions and other service providers where strictly necessary to provide the service or process the payment, or, if you have consented, for analytics and personalisation. In addition to payment processing, these transfers serve in particular fraud prevention and risk management. If you are signed in to your personal Amazon account during your Website visit and carry out a transaction, Amazon may associate the data collected when the page is accessed with your account.
Amazon may also store and read the following cookies on your device:
JSESSIONID
Service: Amazon Pay
Domain: payments-eu.amazon.com
Purpose: Transaction processing
Type: Third-party cookie
Validity: Session
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
session-id
Service: Amazon Pay
Domain: .amazon.com
Purpose: Transaction processing
Type: Third-party cookie
Validity: 1 year
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
session-id-apay
Service: Amazon Pay
Domain: .amazon.com
Purpose: Transaction processing
Type: Third-party cookie
Validity: 1 year
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is transmitted to Amazon’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
With your consent, Amazon uses cookies and similar technologies in your device’s browser. Some of these cookies are technically necessary to ensure a secure transaction process. Other cookies are used to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the consent you have given and the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for processing your data to perform a contract or take pre-contractual measures in connection with payment processing is Article 6(1)(b) GDPR. The legal basis for subsequent processing of the data collected that does not serve contract performance or a pre-contractual measure is your consent under Article 6(1) (a) GDPR.
4. Purpose of processing
The purpose of processing is to integrate a straightforward and secure payment service provider so that we can offer you a convenient and protected payment method in our online shop and enable performance of the contract.
5. Transfers of data to third countries
To provide its services, Amazon will also process data outside the European Economic Area (in particular in the USA). Amazon provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Amazon relies on certification under the EU-U.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the method of integration, the individual cookies and the statutory provisions.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Amazon’s privacy practices is available at: https://www.amazon.de/gp/help/customer/display.html? nodeId=GX7NJQ4ZB8MHFRNJ.
33. SpeedKit/Baqend
Baqend GmbH, Stresemannstraße 23, 22769 Hamburg, Germany (hereinafter “Baqend”), processes data on our behalf and provides the “SpeedKit” service, which enables us to load and deliver our Website faster.
1. Scope of processing
If you consent to the use of SpeedKit, a connection to Baqend’s servers is established when you access one of our web pages. This enables optimised and accelerated delivery of our Website. Baqend automatically collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
• User and session IDs
• Website visitors’ interactions and performance metrics Baqend may also store and read the following cookies on your device:
baqend-speedkit-config
Service: Baqend/SpeedKit
Domain: www.juvia.com
Purpose: Loading time optimisation
Type: LocalStorage, first-party cookie
Validity: Persistent, 6 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
baqend-speedkit-user-id
Service: Baqend/SpeedKit
Domain: www.juvia.com
Purpose: Loading time optimisation
Type: LocalStorage, first-party cookie
Validity: Persistent, 6 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is transmitted to Baqend’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Baqend places cookies and similar technologies in your device’s browser to collect and read usage statistics. The specific cookies set and stored depend on the consent you have given and the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to optimise our Website’s loading times and performance. This provides a better user experience for our visitors and enables us to continuously optimise the technical delivery of our online services.
5. Transfers of data to third countries
Personal data is not currently transferred to third countries (outside the EU/EEA).
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the method of integration, the individual cookies and the statutory provisions.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Speed Kit’s privacy practices is available at: https://www.speedkit.com/privacy.
34. Bing Ads (Microsoft Advertising)
Under data protection agreements, Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter “Microsoft”) provides this service to evaluate the effectiveness of advertising materials and measure the success of our advertising campaigns.
1. Scope of processing
If you consent to the use of Bing Ads, a connection to Microsoft’s servers is established when you access our Website. Bing Ads automatically collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
The personal data that may be collected and processed through this service depends on its specific method of integration, the cookies set and your browser settings. This includes in particular:
• Usage data (including pages viewed, time spent and clicks on advertisements)
• Conversion data (including purchases made or registrations)
If you are signed in to your personal Microsoft account during your Website visit, Microsoft may associate this data directly with your profile.
Microsoft may also store and read the following cookies on your device:
MUID
Service: Bing Ads
Domain: .bing.com
Purpose: Marketing/tracking
Type: Third-party cookie
Validity: 13 months
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
MR
Service: Bing Ads
Domain: .c.bing.com
Purpose: Marketing/tracking
Type: Third-party cookie
Validity: 1 week
Legal basis: Article 6(1)(a) GDPR
Consent required: Yes
This data is transmitted to Microsoft’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Bing Ads places cookies and similar technologies in your device’s browser to collect and read usage statistics. The specific cookies set and stored depend on the consent you have given and the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG.
The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to analyse user behaviour to measure the success of our advertising campaigns. This improves the user experience and enables us to compile statistics to continuously improve our online services.
5. Transfers of data to third countries
To provide its services, Microsoft will also process data outside the European Economic Area (in particular in the USA). Microsoft provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Microsoft relies on certification under the EU-U.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the method of integration, the individual cookies and the statutory provisions.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Bing Ads’ privacy practices is available at: https://www.microsoft.com/en-us/privacy/privacystatement.
35. Fairing
Under data protection agreements, Fairing Inc., 228 Park Avenue South, PMB 38031, New York NY, US, 10003 (hereinafter “Fairing”) provides this service to offer and evaluate surveys on Website experience and customer satisfaction.
1. Scope of processing
If you consent to the use of Fairing, a connection to Fairing’s servers is established when you access one of our web pages containing embedded Fairing content. This is necessary to load the scripts and files required for display. Fairing automatically collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
Other personal data that Fairing may collect and process as part of a survey depends on your entries and the specific integration. This includes in particular:
• Your voluntary answers in the survey form
• Where applicable, contact details (including name, email address and telephone number)
• Transaction and order data (including order ID, products purchased and order value)
Fairing may also store and read the following cookies on your device:
lc2fpi
Service: LiveIntent via Fairing
Domain: .fairing.co
Purpose: The cookie stores a pseudonymous device identifier and may be used for advertising, audience targeting and identification purposes.
Type: Marketing cookie
Validity: approx. 1 year
Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG
Consent required: Yes
liss
Service: LiveIntent via Fairing
Domain: .fairing.co
Purpose: The cookie is used to synchronise and match user and advertising information.
Type: Marketing cookie
Validity: approx. 1 year
Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG
Consent required: Yes
AMP_6facc5af68 Service: Amplitude via Fairing Domain: .fairing.co
Purpose: The cookie stores device and session information and is used to analyse use of the service. Type: Analytics cookie
Validity: approx. 1 year
Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG
Consent required: Yes
AMP_MKTG_6facc5af68
Service: Amplitude via Fairing
Domain: .fairing.co
Purpose: The cookie stores marketing and source attribution information, such as UTM parameters, referrers or click IDs.
Type: Marketing and analytics cookie Validity: approx. 1 year
Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG
Consent required: Yes
intercom-device-id-uan21vw7
Service: Intercom via Fairing
Domain: .fairing.co
Purpose: The cookie is used to recognise a device and supports, among other things, technical functions and abuse prevention measures.
Type: Functional and tracking cookie
Validity: approx. 9 months
Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG
Consent required: Yes
intercom-id-uan21vw7
Service: Intercom via Fairing
Domain: .fairing.co
Purpose: The cookie contains a pseudonymous visitor identifier and enables a user to be recognised within the Intercom system.
Type: Functional and tracking cookie
Validity: approx. 9 months Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG Consent required: Yes
ph_phc_dtxNm8R5PLjl9iYu48WmgvmAlda576CtGW1KyS6l9W3_posthog
Service: PostHog via Fairing Domain: .fairing.co
Purpose: The cookie is used for pseudonymous browser recognition and product and usage analytics.
Type: Analytics cookie
Validity: approx. 1 year Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG Consent required: Yes This data is transmitted to Fairing’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Fairing places cookies and similar technologies in your device’s browser to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to provide survey forms to assess Website users’ satisfaction. This enables us to compile statistics to continuously improve our online services.
5. Transfers of data to third countries
To provide its services, Fairing will also process data outside the European Economic Area (in particular in the USA). Fairing provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Fairing relies on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the method of integration, the individual cookies and the statutory provisions.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Fairing’s privacy practices is available at: https://fairing.co/privacy.
36. Meta Pixel
Under data protection agreements, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”) provides this service, which enables us to deliver personalised advertising.
1. Scope of processing
If you consent to the use of Meta Pixel, a connection to Meta’s servers is established when you access one of our web pages. This is necessary to load the scripts and files required for display. Meta collects the following data:
• Device and browser information (e.g. browser type, operating system and their versions)
• IP address
• Date and time of the Website visit and the referrer URL (the page from which you reached us)
• Meta Pixel ID
• Conversion data (including page views, clicks on specific buttons, shopping carts, shopping baskets and submitted forms) We may use Meta Pixel’s advanced matching feature to optimise our campaigns.
In this context, the following additional categories of data may be collected and processed:
• Personal identifiers (including name, email address and telephone number)
• Sensitive data (including gender)
• Approximate geolocation based on your IP address (including country, city and postcode) Meta Pixel may also store and read the following cookies on your device: lastExternalReferrer Service: Meta Pixel Domain: .juvia.com Purpose: Tracking Type: LocalStorage Validity: persistent Legal basis: Article 6(1)(a) GDPR Consent required: Yes lastExternalReferrerTime Service: Meta Pixel Domain: .juvia.com Purpose: Tracking Type: LocalStorage Validity: persistent Legal basis: Article 6(1)(a) GDPR Consent required: Yes _fbp Service: Meta Pixel Domain: .juvia.com Purpose: Tracking Type: First-party cookie Validity: 3 months Legal basis: Article 6(1)(a) GDPR Consent required: Yes This data is transmitted to Meta’s servers, where it is processed and stored.
2. Storage of and access to browser data (cookies and similar technologies)
If you have given your consent, Meta places cookies and similar technologies in your device’s browser to collect and read usage statistics and web analytics data. The specific cookies set and stored depend on the technical method of integration. The cookies used are listed in the cookie overview.
3. Legal basis for processing
The legal basis for storing information on the end user’s terminal equipment or accessing that information is your consent under section 25(1) TDDDG. The legal basis for subsequent processing of the data collected is your consent under Article 6(1)(a) GDPR.
4. Purpose of processing
The purpose of processing is to measure and evaluate the behaviour of visitors to our Website. This enables us to improve our Website’s design, compile statistics, deliver targeted online advertising campaigns and continuously optimise them.
5. Transfers of data to third countries
To provide its services, Meta will also process data outside the European Economic Area (in particular in the USA). Meta provides appropriate safeguards to ensure a level of protection consistent with the GDPR, including for transfers to third countries. In particular, Meta relies on certification under the EU-U.S. Data Privacy Framework (DPF) in accordance with the European Commission’s adequacy decision and on entering into EU standard contractual clauses.
6. Retention period
The data collected is erased as soon as the purpose of processing ceases to apply. The specific retention period varies depending on the method of integration, the individual cookies and the statutory provisions.
7. Options for objection and erasure
You can view the status of your consent through our consent manager and withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Consent applies only to this browser and must be renewed after the stated validity period expires.
8. Further information
Further information on Meta Pixel’s privacy practices is available at: https://www.facebook.com/privacy/policy.
38. Contacting us
Our Website provides contact details such as postal addresses, telephone numbers and email addresses that enable you to contact us quickly and communicate directly with us and our designated contacts.
1. Scope of processing
When you contact us, we process the personal data you provide, depending on the communication method chosen. This may include your full name, postal address, the telephone number and email address used, and other personal data you provide during the communication.
2. Legal basis for processing
The legal basis for processing personal data when communicating with you is Article 6(1)(f) GDPR. If the contact is aimed at entering into a contract, Article 6(1)(b) GDPR is an additional legal basis for processing.
3. Purpose of processing
Data transmitted when you contact us by email or telephone is processed exclusively to handle your enquiry, communicate with you further, and document and follow up on the matter. These purposes also constitute our legitimate interest in processing the data.
4. Retention period
The data is erased or blocked as soon as it is no longer necessary to fulfil the purpose for which it was stored.
5. Options for objection and erasure
Data subjects may object to the processing of their personal data. You can reach us for this purpose using the contact details provided.
39. Contacting us
We reserve the right to amend this Privacy Policy so that it always complies with current legal requirements or to reflect changes to our services. The new Privacy Policy will then apply to your next visit.
