Last update: 26 Ağustos 2026
Thank you for your interest in the information on our website!
With the help of this Privacy Policy we would like to inform the users of our website about the type, scope and purpose of the personal data processed. Personal data in this context is all information that can be used to personally identify you as a user of our website (theoretically in an alternative way or by linking various data), including your IP address. Information that is stored in cookies is generally not or only in exceptional cases personally identifiable; however, cookies are covered by specific regulations that makes the permissibility of the use of cookies dependent on their purpose to a large extent on the active consent of the user.
In a general section of this Privacy Policy, we provide you with information on data protection, which generally applies to our processing of data, including data collection on our website. In particular, you as a data subject will be informed about the rights to which you are entitled.
The terms used in our Privacy Policy and our data protection practice are based on the provisions of the EU General Data Protection Regulation ("GDPR") and other relevant national legal provisions.
On the one hand, personal data is collected from you when you expressly communicate such data to us, on the other hand, data, especially technical data, is automatically collected when you visit our website. Some of this data is collected to ensure that our website functions without errors. Other data may be used for analysis purposes. However, you can use our website without a need to provide personal information.
We would like to explicitly point out that as of July 10, 2023, the EU Commission has issued an adequacy decision on the EU-US data protection framework (Data Privacy Framework) pursuant to Art. 45 paragraph 1 GDPR. Accordingly, organizations or companies (as data importers) in the US that are registered in a public list as part of the self-certification of the Data Privacy Framework provide an adequate level of protection for data transfers. Whether the specific provider of a service is already certified can be found here: https://www.dataprivacyframework.gov/s/participant-search
The Data Privacy Framework provides a valid legal basis for the transfer of personal data to the USA. This creates binding guarantees to comply with all ECJ requirements; for example, it provides that access by U.S. intelligence services to EU data is limited to a necessary and proportionate level and that a data protection review court is created to which individuals in the EU also have access.
If a transfer of data by us to the US takes place at all or if a service provider based in the US is used by us, we refer to this explicitly in this Privacy Policy (see in particular the description of the technologies used on our website).
It should be noted that aside from significant improvements, the Data Privacy Framework is only partial and only applies to data transfers to those data importers in the U.S. that appear on the public list of certified organizations/companies.
What can the transfer of personal data to the US mean for you as a user and what risks are involved?
Risks for you as a user as far as data importers in the USA are concerned, which are not covered by the Data Privacy Framework, are in any case the powers of the US secret services and the legal situation in the U.S., which currently, according to the European Court of Justice, no longer ensure an adequate level of data protection. Among others, these are the following:
Section 702 of the Foreign Intelligence Surveillance Act (FISA) does not provide for any restrictions on the surveillance measures of the secret services or guarantees for non-US citizens.
Presidential Policy Directive 28 (PPD-28) does not provide effective remedies for those affected against actions by U.S. authorities and does not provide barriers to ensuring proportionate measures.
The ombudsman provided for in the Privacy Shield does not have sufficient independence from the executive; he cannot issue binding orders to the U.S. secret services.
Legally compliant transfer of data to the U.S. on the basis of the standard contractual clauses for data importers not covered by the Data Privacy Framework?
In June 2021, the European Commission adopted new Standard Contractual Clauses (SCC) in Decision 2021/914/EU. These create a new legal basis for data transfers where the level of data protection is not the same as in the EU.
Legally compliant transfer of data to the U.S. based on consent?
If a data transfer to a service provider based in the U.S. takes place that is not covered by the Data Privacy Framework and this data transfer is based on explicit consent, we provide explicit information about this in this privacy policy, in particular in the description of the technologies used on our website.
What measures do we take to ensure that data transfers to the U.S. are legally compliant?
Where US providers offer the option, we choose to process data on EU servers. This should technically ensure that the data is located within the European Union and that access by US authorities is not possible.
Friendly Captcha
Purpose: Technically required
Recipient country: EU
Legal basis: legitimate interest
On our website, to protect against abuse by non-human visitors (bots) and to prevent spam, the Friendly Captcha service is used by the provider Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany ("FriendlyCapcha).
Friendly Captcha is intended to verify whether data entry on our website is done by a human or by an automated program.
Friendly Captcha does not let the visitor solve manual picture puzzles, but generates a cryptographic task, which is solved by your browser completely automatically in the background. Based on the technical information collected, the difficulty can be adjusted to make it more difficult for potential bots to proceed.
According to our information, the following data is processed by Friendly Captcha for the automated processing of a task:
the anonymized IP address of the requesting end device
information about the browser and operating system used
an anonymized counter per IP address to control cryptographic tasks
the referer URL
information about the cryptographic task itself
the version of the Friendly Captcha service
a timestamp
An anonymized counter per IP address is stored for setting task difficulty to detect malicious users and minimize blocking of legitimate users. This data is stored separately from other data and cannot be associated with specific websites or users. IP addresses are anonymized through a state-of-the-art hashing process so that you, as a user of the website, cannot be personally identified. No cookies of any kind are used by Friendly Captcha.
The legal basis for the processing of your data using Friendly Captcha is our legitimate interest pursuant to Art 6 paragraph 1 lit f GDPR in protecting against misuse of our website.
For more information about Friendly Captcha, please click here:
https://friendlycaptcha.com/de/
For extended information on Friendly Captcha's data protection, please see the following link: https://friendlycaptcha.com/de/legal/privacy-end-users/
Category: General processing activity
Purpose: Execution and processing of orders
Types of data: Order, payment, and address data, technical transaction data
Data subjects: Customers
Recipients: Payment providers, logistics and shipping service providers, internal departments
Technologies: Shop system, order and payment processing
Legal basis: Contract fulfillment (order processing), legitimate interest (documentation & security processes), consent (voluntary additional information)
Our website provides order functions for products or digital services. All data necessary for processing is processed in order to accept orders, assign payments, provide deliveries, and clarify queries. In addition, technical information is processed in order to operate order processes securely and transparently.
The following data in particular is processed:
Name and contact details
Delivery and billing address
Product and order information
Price, payment, and billing information
Communication and service details
Technical metadata such as time of order or IP address
Processing is carried out in order to accept, process, deliver, and invoice orders and to be able to communicate in the event of queries or warranty and service cases. In addition, processing may be carried out for fraud prevention, quality assurance, and internal documentation purposes. The legal basis is the necessity of data processing for the execution of the order and delivery process as well as our legitimate interest in efficient processing and internal organization. Voluntary additional information is processed on the basis of consent.
The data is only stored for as long as is necessary for the processing of the order or as long as there are legal retention obligations. Data will only be passed on to third parties if this is necessary for the execution of the order, for example to delivery services, payment service providers, logistics companies, or technical service providers.
We use cookies to make our website as user-friendly and functional as possible for you. Some of these cookies are stored on the device you use to access the site.
Cookies are small packages of data that are exchanged between your browser and our web server whenever you visit our website. They do not cause any damage and are used solely to recognise website visitors. Cookies can only store information provided by your browser, e.g. information that you have entered into your browser or that is available on the website. Cookies cannot execute code and cannot be used to access your terminal device.
The next time you access our website using the same device, the information stored in the cookies can then either be sent back to us (“first-party cookie”) or to a web application of third party to whom the cookie belongs (“third-party cookie”). The information that is stored and sent back allows each web application to recognise that you have already accessed and visited the website using the browser on your device.
Cookies contain the following information:
Cookie name
Name of the server from which the cookie originates
Cookie ID number
An expiry date, after which the cookie will be automatically deleted
We classify cookies in the following categories depending on their purpose and function:
Technically necessary cookies, to ensure the technical operation and basic functions of our website. These types of cookies are used, for example, to maintain your settings while you navigate our website; or they can ensure that important information is retained throughout the session (e.g. login, shopping cart).
Statistics cookies, to understand how visitors interact with our website by collecting and analysing information on an anonymous basis only. In this way we gain valuable insights to optimize both the website and our products and services.
Marketing cookies, to provide targeted promotional and marketing activities for users on our website.
Unclassified cookies are cookies that we are trying to classify together with individual cookie providers.
Depending on the storage period, we also divide cookies into session and persistent cookies. Session cookies store information that is used during your current browser session. These cookies are automatically deleted when the browser is closed. No information remains on your device. Persistent cookies store information between two visits to the website. Based on this information, you will be recognized as a returning visitor on your next visit and the website will react accordingly. The lifespan of a persistent cookie is determined by the provider of the cookie.
The legal basis for using technically necessary cookies is our legitimate interest in the technically fault-free operation and smooth functionality of our website. The use of statistics and marketing cookies is subject to your consent. These technologies are only activated after you have provided explicit consent via the cookie banner. You can withdraw your consent for the future use of cookies at any time. Your consent is voluntary. If consent is not given, no disadvantages arise. For more information about the cookies we actually use (specifically, their purpose and lifespan), refer to this Privacy Policy and to the information in our cookie banner about the cookies we use.
You can also set your web browser so that it does not store any cookies in general on your device or so that you will be asked each time you visit the site whether you accept the use of cookies. Cookies that have already been stored can be deleted at any time. Refer to the Help section of your browser to learn how to do this.
Please note that a general deactivation of cookies may lead to functional restrictions on our website.
On our website, we also use so-called local storage functions (also called "local data"). This means that data is stored locally in the cache of your browser, which continues to exist and can be read even after you close the browser - as long as you do not delete the cache or data is stored within the session storage.
Third parties cannot access the data stored in the local storage. If special plug-ins or tools use the local storage functions, you are informed within the description of the respective plug-in or tool.
If you do not wish plug-ins or tools to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this may result in functional restrictions.
In the context of hosting our website, all data that arises in connection with the operation and use of the website is processed. This includes, in particular, content data, usage data, communication data, and technical data that are necessary for providing and securely operating the website.
The storage and processing of this data is necessary to enable access to the website, ensure the stability and security of the online offering, and to technically optimize the website.
To provide our online presence, we use the services of external web hosting providers. In this context, the data generated during the operation of the website is transmitted to these service providers or processed by them on our behalf. Processing is carried out exclusively in accordance with legal requirements and based on contractual agreements for data processing on behalf.
Further information on the handling of personal data in connection with hosting can be found in the privacy policy of this website.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Email: support-de@google.com
Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Web analytics, performance measurement, conversion tracking, collection of statistical data
Category: Statistics
Recipients: EU, USA
Data Processed: Information about website visits (see detailed list below), user data. The IP address is used only briefly for rough location determination and is not stored afterward (see below).
Data Subjects: Website visitors
Technology: JavaScript call (Google tag / gtag.js), cookies (details in the cookie list), local storage
Legal basis: Consent
Legal basis for data transfer: EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework
Further information:
https://policies.google.com/privacy
https://safety.google/intl/de/principles/
https://business.safety.google/privacy/
https://business.safety.google/adsprocessorterms/
https://policies.google.com/technologies/ads
https://www.google.com/about/company/user-consent-policy-help
Here you can find out exactly where Google data centers are located: https://www.google.com/about/datacenters/locations/
Web and app activities collected via Google Analytics can be viewed and deleted by signed-in Google users under “My Activity” (myaccount.google.com/data-and-privacy).
On our website, we use the features of the web analytics service Google Analytics 4 (GA4) to analyze user behavior and optimize our website.
Google Analytics uses cookies that enable the analysis of our website’s usage. Full details (name, purpose, retention period) regarding these cookies can be found in our specific list of cookies used. As an alternative to cookies, GA4 may use local storage to store the client ID in order to track user behavior even without a traditional cookie.
Information about website usage—such as browser type and version, operating system used, the previously visited page, the time of the server request, and approximate location—is transmitted to Google and processed there. We have entered into a contract with Google for this purpose.
With regard to IP addresses, there is no traditional “anonymization” in the sense of truncation after transmission; rather, GA4 is designed from the ground up so that IP addresses are neither logged nor stored for visitors from the EU, Switzerland, and the UK. The IP address is used only briefly to determine a rough location (city, region, country) and is then irrevocably discarded before it is stored on Google’s servers. This is a feature built into GA4 that cannot be disabled; it is not an optional setting.
On our behalf, Google will use this information to analyze the use of our website, compile reports on activity on our website, and provide us with other services related to the use of our website.
During a visit to the website, user behavior is recorded in the form of so-called events. These may include the following:
Page views, a user’s click path
First-time visit to our website
Websites visited
Start of a session
Interaction with our website
User behavior (e.g., clicks, scrolling, time spent on page, bounce rates)
File downloads
Ads viewed/clicked (only if Google Ads is linked to this property and Google Signals is enabled)
Interaction with videos
Internal search queries
The following is also collected:
Approximate location (region, derived from the IP address, without storing the IP address itself)
Date and time of the visit
Technical information about the browser or the devices used (e.g., language setting, screen resolution)
Internet service provider
Referrer URL (the website or advertising channel through which a user arrived at our website)
This data is primarily processed by Google for its own purposes, such as profiling (over which we have no control).
Data regarding the use of our website is deleted immediately upon expiration of the retention period we have set. By default, Google Analytics specifies a retention period of 2 months for user and event data, with a maximum retention period of 14 months. This retention period also applies to conversion data. For all other event data, the following options are available: 2 months, 14 months, 26 months (Google Analytics 360 only), 38 months (Google Analytics 360 only), 50 months (Google Analytics 360 only). We select the shortest retention period that meets our intended purpose. You may inquire with us at any time regarding the retention period currently set by us. Data for which the retention period has expired is automatically deleted once a month.
Additional details can be found in the linked supplementary information. We recommend checking these links regularly for changes, as Google Analytics may update its features and privacy policies. Further information regarding your rights and our contact information can be found in the general section of this privacy policy.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Management, marketing, and display of advertising space on our website, including programmatic ad sales (real-time bidding) across multiple ad networks and exchanges
Recipients: EU, USA, and, where applicable, other third-party providers involved in the bidding process (demand-side platforms, ad networks)
Category: Marketing
Data processed: IP address (briefly for approximate location determination), cookie/device ID, information on page content and ad placements viewed, technical device information (browser, screen resolution)
Data subjects: Website visitors
Technology: JavaScript (Google Publisher Tag / gpt.js), cookies, and, if applicable, additional header bidding scripts from other providers participating in the bidding process
Legal basis: Consent
Legal basis for data transfer: Data Privacy Framework (Google LLC); for participating third-party providers without their own DPF certification, Standard Contractual Clauses (SCCs) apply
Website: https://www.google.com
Further information:
https://policies.google.com/privacy
https://safety.google/intl/de/principles/
https://business.safety.google/privacy/
https://business.safety.google/adsprocessorterms/
https://policies.google.com/technologies/ads
https://www.google.com/about/company/user-consent-policy-help
Here you can find out exactly where Google’s data centers are located: https://www.google.com/about/datacenters/inside/locations/
This website uses the Google Ad Manager service to market and display our ad spaces. When a page containing an ad space is loaded, the browser sends a request to the Google ad server, whereupon the gpt.js script generates an ad request and forwards it to the server. The ad server checks the transmitted target values for the ad space (size, position, and, if applicable, targeting criteria) and delivers the appropriate ad. If ad spaces are sold programmatically via real-time bidding, multiple ad exchanges and third-party providers may participate in the auction simultaneously and process data in the process. In this case, granular consent is required that covers the individual providers involved, not just a blanket entry for “Google.”
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC (USA)
Purpose: Launching Tools and Plugins
Category: Technically Required
Recipients: EU, USA (possible)
Data processed: IP Address
Data subjects: User
Technology: JavaScript Call
Legal basis: legitimate interest, Data Privacy Framework, https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Website: https://www.google.com
Further information:
https://policies.google.com/privacy
https://safety.google/intl/en/principles/
https://business.safety.google/adsprocessorterms/
Here you can find out where exactly Google data centers are located: https://www.google.com/about/datacenters/locations/
The Google Tag Manager service is used on our website.
The Tag Manager is a service that allows us to manage website tags via an interface. This allows us to include code snippets such as tracking codes or conversion pixels on websites without interfering with the source code. In doing so, the data is only forwarded by the Tag Manager, but neither collected nor stored. The Tag Manager itself is a cookie-less domain and serves purely to manage other services in our online offering.
When the Google Tag Manager is started, the browser establishes a connection to Google's servers. These are mainly located in the U.S. Through this, Google obtains knowledge that our website was called up via the IP address of a user.
The Tag Manager ensures the resolution of other tags, which in turn may collect data. However, the Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags that are implemented with the Tag Manager.
Our website offers various options for contacting us, for example via contact forms or e-mail addresses provided. When contacting us, the personal data provided will be processed exclusively for the purpose of processing and responding to the respective inquiry. The processing takes place insofar as this is necessary to carry out pre-contractual measures or to fulfill a contract, or on the basis of legitimate interests, for example to maintain customer relationships or to document processes.
It may be necessary to provide certain data in order to fully process an inquiry. Without this information, it may not be possible to process the request, or only to a limited extent.
Personal data from contact requests may also be stored in a customer or prospective customer database on the basis of legitimate interests in order to optimize communication and support. Use for marketing purposes only takes place if separate consent has been obtained or a legitimate interest exists and there are no overriding interests of the data subject that require protection.
Personal data from contact inquiries will only be stored for as long as is necessary for the processing and handling of the inquiry or for as long as there are statutory retention obligations. After final processing of the inquiry and expiry of any legal deadlines, the data will be deleted or anonymized. As a rule, deletion takes place at the latest after three years without further contact, unless there are longer statutory or contractual retention obligations.
Additional information on the rights of data subjects and the relevant contact details are listed in the general section of this privacy policy.
Category: General processing activity
Purpose: Technical security, stability, and error analysis
Data types: Technical connection data and access data
Data subjects: Visitors to the online offering
Recipients: Hosting providers or technical service providers
Technologies: Server logs
Legal basis: Legitimate interest (technical operation & security)
When you visit our website, so-called server log files are automatically created. These log files contain the following data, which is automatically transmitted by the browser:
IP address
Date and time of access
File or page accessed
Amount of data transferred
Notification of successful retrieval
Browser type and version used
Operating system used
Referrer URL (previously visited page)
Host name of the accessing device
This data is processed to ensure the functionality, security, and stability of our website, in particular to defend against or track attacks (e.g., DDoS attacks), for error analysis, and for the technical provision of the website. The legal basis for this is a legitimate interest in the secure and error-free provision of the website.
The log file data is automatically deleted after a standard technical period – after 12 weeks at the latest– once it is no longer required for the aforementioned purposes. Longer storage may occur in individual cases if data is required for evidence purposes (e.g., to investigate security-related incidents). This data is not merged with other data sources.
Within your visit to our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We use this encryption procedure on the basis of our justified interest in the use of suitable encryption techniques.
We also make use of suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments and kept state-of-the-art.
On our website, we use the payment service provider Stripe to process payments. The provider of this service is Stripe Inc, 510 Townsend Street San Francisco, California 94103. The European representative of this service provider is Stripe Payments Europe Ltd, North Wall Quay Dublin 1, Dublin, Ireland.
Legal basis: Contract, Data Privacy Framework,
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TQOUAA4&status=Active
In the course of a payment transaction, we send the service provider the information you have provided regarding your ID data (such as name, address), your order and the data required to process the payment, such as bank data, possibly credit card number, invoice amount, currency, etc. The processing of this data is based on our obligation to fulfil the contract or is based on our legitimate interest in the proper execution of payments. The transfer of data takes place exclusively for the purpose of payment processing and only insofar as this is necessary for this purpose.
We do not have direct access to the payment data entered by you, but we do receive information from the service provider as to whether payments could be properly processed. In the course of payment processing, the service provider may forward your data to a credit agency to check your creditworthiness. In this regard, we refer to the General Terms and Conditions and the privacy policy on the part of Stripe.
Further information on data protection via this service can be found at https://stripe.com/privacy
Provider: DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria.
Purpose: Consent Management
Category: technically required
Recipient: EU, AT
Data processed: IP Address, Consent Data
Data subjects: Users
Technology: JavaScript call, Cookies, Swarmcrawler
Legal basis: Legitimate interest, consent (swarmcrawler to evaluate search results)
Website: https://www.datareporter.eu/
Further information: https://www.datareporter.eu/company/info
On our website, we use the Webcare tool for consent management. Webcare records and stores the decision of each user of our website. Our Consent Banner ensures that statistical and marketing technologies such as cookies or external tools are only set or started if the user has expressly consented to their use.
We store information on the extent to which the user has confirmed the use of cookies. The user's decision can be revoked at any time by accessing the cookie setting and managing the declaration of consent. Existing cookies are deleted after revocation of consent. For the storage of information about the status of the consent of the user, a cookie is also set, which is referred to in the cookie details. Furthermore, the IP address of the respective user(s) is transmitted to DataReporter's servers when this service is called up. The IP address is neither stored nor associated with any other data of the user, it is only used for the correct execution of the service.
With the help of Webcare, our website is regularly checked for technologies relevant to data protection. This investigation is only carried out for those users who have expressly given their consent (for statistical or marketing purposes). The search results of the users are evaluated by Webcare in an anonymous form and only in relation to technologies and used for the fulfillment of our information obligations. To start the Swarmcrawler technology, a request is sent to our servers and the IP address of the user is transmitted for the purpose of data transfer. Servers are selected which are geographically close to the respective location of the user. It can be assumed that for users within the EU, a server with a location within the EU will also be selected. The IP address of the user is not stored and is removed immediately after the end of the communication.
The WebCare Consent Conserve function enables us both to prove the consent of users of our website via our Consent Banner and to make the users' personal consent history transparent and traceable.
This function generates a unique Consent ID for each user and records every action concerning consent or revocation via our Consent Banner in connection with the Consent ID. The history of the user's decisions is stored in a protected memory area and can be viewed by the user at any time. For us as the website operator, an assignment of a history to a specific person can only take place after knowledge of the respective Consent ID.
Each action via the Consent Banner of a user is stored for 60 days and then automatically deleted. The storage location for the Consent ID is Frankfurt / Germany (EU). Only the Consent ID, the IP address and the data on the actions are saved.
The use of this function is based on our documentation and accountability obligations and our legitimate interest in this regard.
More information on this function can be found in the provider's help section at: https://help.datareporter.eu/docs/webcare/webcare_consent_conserve/
Further information on data protection can be found at: https://www.datareporter.eu/company/info
The WebCare statistics function enables us to anonymously record the interactions of the users of our website with our Consent Banner. The statistics only record whether the Consent Banner was opened and which actions were carried out (purposes of consent, revocation). Only statistical data and no activities related to the specific user are stored. The visitor's IP address is only used for the purpose of the connection and is completely deleted after the connection is terminated.
The use of the WebCare statistics function is based on our legitimate interest in reviewing the performance of our Consent Banner and the related accessibility of our online offer.
The statistical data is stored for 30 days, older data is automatically deleted.
You can find more information about this function in the provider's help section at: https://help.datareporter.eu/docs/webcare/webcare_consent_statistic/
Further information on data protection can be found at: https://www.datareporter.eu/company/info
The following provisions in its principles apply not only to the data collection on our website, but also in general to other processing of personal data.
Personal data is information that can be assigned to you individually. Examples include your address, your name as well as your postal address, email address or telephone number. Information such as the number of users who visit a website is not personal data because it is not assigned to a person.
Unless more specific information is provided in this Privacy Policy (e.g. in the case of the technologies used), we may process personal data from you on the basis of the following legal principles:
consent in accordance with Art. 6 paragraph 1 lit. a of the GDPR - The data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes.
Fulfillment of a contract and pre-contractual measures pursuant to Art. 6 paragraph 1 lit. b of the GDPR - Processing is necessary for the fulfillment of a contract to which the data subject is a party or for the implementation of pre-contractual measures.
Legal obligation pursuant to Art. 6 paragraph 1 lit. c of the GDPR - Processing is necessary for the performance of a legal obligation.
Protection of vital interests pursuant to Art. 6 paragraph 1 lit. d of the GDPR - Processing is necessary to protect the vital interests of the data subject or of another natural person.
Reasonable interests pursuant to Art. 6 paragraph 1 lit. f of the GDPR - The processing is necessary to protect the legitimate interests of the controller or of a third party unless the interests or fundamental rights and freedoms of the data subject prevail.
Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our home country.
Your personal data will not be transferred to third parties for purposes other than those listed in this Privacy Policy.
We will only transfer your personal data to third parties if:
you have given your express consent in accordance with Art. 6 paragraph 1 lit. a of the GDPR,
the transfer pursuant to Art. 6 paragraph 1 lit. f of the GDPR is necessary to safeguard reasonable interests, as well as to assert, exercise or defend legal claims and there is no reason to assume that you have a prevailing interest worthy of protection by not disclosing your data,
there is a legal obligation to transfer the data in accordance with Art. 6 paragraph 1 lit. c of the GDPR, as well as this is legally permissible and / or
it is required according to Art. 6 paragraph 1 lit. b of the GDPR for the processing of contractual relationships with you.
We carefully select our service providers who process personal data on our behalf. If we commission third parties to process personal data on the basis of a data processing agreement, this is done in accordance with Art. 28 of the GDPR.
If we process data to a third country or if this is done in the context of using the services of third parties or disclosure or transfer of data to other persons or companies, this is only done on the legal basis described above for the transfer of data.
Subject to express consent or contractual necessity, we process or allow data to be processed only in third countries in accordance with Art. 44 - 49 of the GDPR with a recognized level of data protection or on the basis of special guarantees, such as contractual obligations through so-called standard contractual clauses of the EU Commission, the existence of certifications or binding corporate rules.
We would like to expressly point out that as of July 16, 2020, due to a legal dispute between a private individual and the Irish supervisory authority, the so-called "Privacy-Shield", an adequacy decision of the EU Commission according to Art 45 GDPR, which confirmed an adequate level of data protection for the US under certain circumstances, is no longer valid with immediate effect.
The Privacy Shield therefore no longer constitutes a valid legal basis for the transfer of personal data to the United States!
If a transfer of data by us to the US takes place at all or if a service provider based in the US is used by us, we refer to this explicitly in this Privacy Policy (see in particular the description of the technologies used on our website).
What can the transfer of personal data to the US mean for you as a user and what risks are involved?
Risks for you as a user are at any rate the powers of the US secret services and the legal situation in the US, which, in the opinion of the European Court of Justice, no longer ensure an adequate level of data protection. Among other things, this concerns the following points:
Section 702 of the Foreign Intelligence Surveillance Act (FISA) does not provide for any restrictions on the surveillance measures of the secret services or guarantees for non-US citizens.
Presidential Policy Directive 28 (PPD-28) does not provide effective remedies for those affected against actions by U.S. authorities and does not provide barriers to ensuring proportionate measures.
The ombudsman provided for in the Privacy Shield does not have sufficient independence from the executive; he cannot issue binding orders to the U.S. secret services.
Legally compliant transfer of data to the US on the basis of standard contractual clauses?
The standard contractual clauses adopted by the Commission in 2010 (2010/87/EU of 05.02.2010), Art. 46 paragraph 2 lit. c GDPR, are still valid, but a level of protection for personal data must be ensured which is equivalent to the level in the European Union. Therefore, not only the contractual relationships with our service providers are relevant, but also the possibility of access to the data by U.S. authorities and the legal system of the U.S. (legislation and jurisdiction, administrative practice of authorities).
The standard contractual clauses cannot bind authorities in the US and therefore do not yet provide adequate protection in cases in which the authorities are authorized under the law in the US to intervene in the rights of the data subjects without additional measures by us and our service provider.
Legally compliant transfer of data to the US on the basis of your consent?
It is currently controversial whether informed consent and thus a deliberate and knowingly restriction of parts of your basic right to data protection is legally possible at all.
What measures do we take to ensure that a data transfer to the US complies with the law?
Insofar as US providers offer the option, we choose to process data on EU servers. This should technically ensure that the data is located within the European Union and cannot be accessed by US authorities.
Furthermore, we carefully examine European alternatives to US tools used. However, this is a process that does not happen overnight, as it also involves technical and economic consequences for us. Only if the use of European tools and / or the immediate switch off of the US tools is impossible for us for technical and / or economic reasons, US service providers are currently still used.
For the further use of US tools we take the following measures:
As far as possible, your consent will be asked for before using a US tool and you will be informed in advance in a transparent manner about the functioning of a service. The risks involved in transferring data to the USA can be found in this section.
We make every effort to conclude standard contract clauses with US service providers and to demand additional guarantees. In particular, we require the use of technologies that do not allow access to data, e.g. the use of encryption that cannot be broken even by US services or anonymization or pseudonymization of data, where only the service provider can make the assignment to a person. At the same time, we require additional information from the service provider if data is actually accessed by third parties or the service provider exhausts all legal remedies until access to data is granted at all.
If no explicit storage period is specified during the collection of data (e.g. in the context of a declaration of consent), we are obliged to delete personal data in accordance with Art. 5 paragraph 1 lit. e of the GDPR as soon as the purpose for processing has been fulfilled. In this context, we would like to point out that legal storage obligations represent a legitimate purpose for the further processing of affected personal data.
Personal data will be stored and retained by us in principle until the termination of a business relationship or until the expiry of any applicable guarantee, warranty or limitation periods, in addition, until the end of any legal disputes in which the data is required as evidence, or in any event until the expiry of the third year following the last contact with a business partner.
As part of the description of individual technologies on our website, there are specific references to the storage period of data. In our cookie table, you will be informed about the storage period of individual cookies. In addition, you always have the possibility to ask us directly about the specific storage period of data. To do so, please use the contact data listed in this Privacy Policy.
Data subject have the right:
(i) in accordance with Art. 15 of the GDPR, to request information about your personal data processed by us. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right of rectification, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, where applicable, meaningful information on the details thereof;
(ii) in accordance with Art. 16 of the GDPR, to demand without delay the correction of incorrect or incomplete personal data stored by us;
(iii) in accordance with Art. 17 of the GDPR, under specific circumstances to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
(iv) in accordance with Art. 18 of the GDPR, to demand the (temporary) restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing in accordance with Art. 21 of the GDPR;
(v) in accordance with Art. 20 of the GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller; However, this only covers those of your personal data that we process with the help of automated processes after your consent or on the basis of a contract with you;
(vi) in accordance with Art. 21 of the GDPR, if your personal data are processed on the basis of our legitimate interest, to object to the processing of your personal data for reasons arising from your specific situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without indicating a specific situation.
(vii) in accordance with Art. 7 paragraph 3 of the GDPR, you may at any time revoke your consent to us. As a result, we may no longer continue the data processing based on this consent in the future. Among other things, you have the option of revoking your consent to the use of cookies on our website with effect for the future by calling up our Cookie Settings.
(viii) in accordance with Art. 77 of the GDPR to complain to a data protection authority regarding the illegal processing of your data by us. As a rule, you can contact the data protection authority at your usual place of residence or workplace or at the headquarters of our company.
The responsible data protection authority for W&H Dentalwerk is:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Österreich
Tel.: +43 1 52 152-0, dsb@dsb.gv.at
You yourself decide on the use of your personal data. Should you therefore wish to exercise one of your above-mentioned rights towards us, you are welcome to contact us by email at dataprotection@wh.com or by post, as well as by telephone.
Please assist us in specifying your request by answering questions from our responsible employees regarding the specific processing of your personal data. If there are reasonable doubts about your identity, we may request a copy of your identification.
For questions regarding data protection, you can reach us at dataprotection@wh.com or at the other contact details stated in this Privacy Policy.
Bürmoos, on 26 Ağustos 2026
Çerezler, tarayıcınız ve web sunucumuz arasında değiş tokuş edilen küçük veri paketleridir. Çerezler yalnızca tarayıcınız tarafından sağlanan bilgileri saklayabilir.
Kullanım amacına bağlı olarak çerezler ya teknik olarak gereklidir ya da istatistiksel veya pazarlama amaçları için kullanılır. Teknik olarak gerekli tanımlama bilgilerinin kullanımı, web sitemizin teknik olarak doğru ve sorunsuz çalışmasına yönelik meşru menfaatimize dayanmaktadır. İstatistiklerin ve pazarlama çerezlerinin kullanımında ise sizin onayınızı gerektirir. Bu isteğe bağlıdır ve gelecekte herhangi bir zamanda çerez ayarlarımızı çağırarak iptal edilebilir.
Ayrıca tarayıcınızı genel olarak çerezlerin saklanmasını engelleyecek şekilde ayarlayabilirsiniz. Çerezler ayarlandıktan sonra, bunları istediğiniz zaman silebilirsiniz. Tüm bunların nasıl çalıştığıyla alakalı ayrıntılı bilgiler, tarayıcınızın yardım bölümünde bulunabilir. Lütfen çerezlerin genel olarak devre dışı bırakılmasının web sitemizde işlevsel kısıtlamalara yol açabileceğini unutmayın.
Çerezlerde hangi verilerin saklandığı, hangi amaçlarla kullanıldığı ve verilerin ne kadar süreyle saklandığı hakkında daha ayrıntılı bilgiyi veri koruma beyanımızda ve çerez başlığımızda bulabilirsiniz.
Teknik olarak gerekli çerezler, bir web sitesinin teknik işleyişini sağlamak ve sizin için işlevsel hale getirmek için kullanılır. Kullanım, teknik olarak kusursuz bir web sitesi sağlama konusundaki meşru menfaatimize dayanmaktadır. Ancak, tarayıcınızda çerez kullanımını genel olarak devre dışı bırakabilirsiniz.
| Soyad | Amaç | Oluşturan | Saklama süresi | Alan adı |
|---|---|---|---|---|
| __stripe_mid | bir Web Mağazasındaki siparişler için ürün sepetinin geçici olarak depolanmasına hizmet eder. | Stripe | Oturum | shop-tr.wh.com |
| _webcare_consentid | kullanıcının çerez kullanımını ne ölçüde onayladığı bilgisini içerir. | DataReporter GmbH | 12 ay | shop-tr.wh.com |
| cookieconsent_mode | kullanıcının çerez kullanımını ne ölçüde onayladığı bilgisini içerir. | DataReporter GmbH | 12 ay | shop-tr.wh.com |
| cookieconsent_status | kullanıcının çerez kullanımını ne ölçüde onayladığı bilgisini içerir. | DataReporter GmbH | 12 ay | shop-tr.wh.com |
İstatistik çerezleri, web sitelerinin çekiciliğini, içeriğini ve işlevselliğini geliştirmek için nasıl kullanıldığı hakkında bilgi toplar. Bir kullanım, yalnızca sizin izninizle ve yalnızca ilgili çerezi devre dışı bırakmadığınız sürece devam eder.
| Soyad | Amaç | Oluşturan | Saklama süresi | Alan adı |
|---|---|---|---|---|
| _ga | Kullanıcıları sayfadan ayırt etmeye yardımcı olacak bilgileri içerir. Hangi sayfaların alakalı olduğu gibi kullanıcı ziyaretleriyle ilgili verileri toplar. | 1 yıl | wh.com | |
| _ga_(GA4-ID) | Kullanıcıları sayfadan ayırt etmeye yardımcı olacak bilgileri içerir. Hangi sayfaların alakalı olduğu gibi kullanıcı ziyaretleriyle ilgili verileri toplar. | Oturum | shop-tr.wh.com |
Pazarlama çerezleri, harici reklam şirketlerinden elde edilir ve kullanıcı tarafından ziyaret edilen web siteleri hakkında bilgi toplamak için kullanılır. Bir kullanım, yalnızca sizin izninizle ve yalnızca ilgili çerezi devre dışı bırakmadığınız sürece gerçekleşir.
| Soyad | Amaç | Oluşturan | Saklama süresi | Alan adı |
|---|---|---|---|---|
| _gcl_au | kullanıcıyı tanımlayan ve tanıyan benzersiz bir kimlik kaydeder. Hedefli reklamcılık için kullanılır. | 3 ay | wh.com | |
| IDE | kullanıcıyı tanımlayan ve tanıyan benzersiz bir kimlik kaydeder. Hedefli reklamcılık için kullanılır. | 1 yıl | doubleclick.net | |
| NID | kullanıcıyı tanımlayan ve tanıyan benzersiz bir kimlik kaydeder. Hedefli reklamcılık için kullanılır. | www.google.com |