Privacy Policy

§ 1 Information on the Collection of Personal Data and Provider Identification

(1) Below we provide information on the collection of personal data when using this website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behavior.

(2) The controller pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is Trigema W. Grupp KG, Josef-Mayer-Str. 31-35, 72393 Burladingen, datenschutz@trigema.club (see our legal notice). Our data protection officer is Ms. Nicole Motiee Tehrani, info@ap-datenschutz.de.

(3) Where we use commissioned service providers for individual functions of our offering, or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we also state the defined criteria for the retention period.

§ 2 Rights, in Particular the Right to Information and Withdrawal

(1) You have the following rights against us with regard to the personal data concerning you:

• Right to information,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.

(2) If you have given consent to the use of data, you can withdraw this consent at any time. If the lawfulness of processing is based on consent, this remains valid until the withdrawal is exercised.

(3) Please direct all requests for information, inquiries, or objections regarding data processing by email to datenschutz@trigema.club or to the address stated in § 1 (2).

(4) You may request the deletion of your data from us at any time. In this respect, statutory retention periods may apply that permit us to retain your data until the expiry of the period.

(5) If your data should be incorrect, you have the right to request that we correct it. We will comply with such a request without delay.

(6) You have the right to receive the personal data you have provided to us, insofar as technically feasible, in a readable format in order to make it available to another company (right to data portability).

(7) You have the right to lodge a complaint with the supervisory authority responsible for you. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

§ 3 Data Security

(1) We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from unauthorized access by third parties. These measures are adapted in accordance with the current state of the art.

(2) The SSL Extended Validation transmission we use guarantees encryption of up to 256 bits, with a minimum encryption of 128 bits. This ensures that your personal data cannot be read by third parties. With Extended Validation, high-security browsers display a green address bar.

(3) Certain computer and internet configurations (e.g. browser settings, provider, firewalls, etc.) may block access to the SSL server. If necessary, please check whether your firewall and browser are correctly configured and whether your provider permits SSL.

(4) The password you select should be at least 6 characters long. It should not contain any known parts of your name or other personal data (i.e. not your first or last name, not your date of birth or parts of your phone number or email address, etc.). Under no circumstances should your login and password be identical.

§ 4 Collection of Personal Data for Informational Use and Contact

(1) When you use the website purely for informational purposes, i.e. when you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 (1) sentence 1 lit. f GDPR):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

(2) When you contact us by email or via the contact form, we store your email address, your name, and, if you provide them, your salutation, your company, and your inquiry. The purpose of this storage is solely to handle your contact request and answer your questions.

(3) The legal basis for the collection of data when making contact is the consent you have given by submitting the contact form (Art. 6 (1) sentence 1 lit. a GDPR).

(4) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you use, and through which certain information flows to the party that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective.

§ 5 Cookies

(1) We use cookies on our website. Such cookies are necessary so that you can move freely around the website and use its features; this includes, among other things, access to secure areas of the website. Cookies allow us to determine who has visited the website(s), and to derive from this how frequently certain pages are visited and which parts of the site are particularly popular. Session cookies store information about your activities on our website.

(2) This website uses the following types of cookies, the scope and function of which are explained below:

• Transient cookies (temporary use)
• Persistent cookies (time-limited use)
• Third-party cookies

(3) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to a shared session. This allows your computer to be recognized when you return to the website. Session cookies are deleted when you log out or close your browser.

(4) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.

(5) You can configure your browser settings as you wish, for example by refusing to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website in this case.

(6) In order to use our shopping cart, (temporary/permanent) cookies must be permitted. Alternatively, you can also order by phone or fax. You can reach us by phone Monday to Thursday between 8:00 a.m. and 5:00 p.m., and Fridays from 8:00 a.m. to 3:30 p.m., at +49 (0) 7475/88 - 0, or by fax at +49 (0) 7475/88 - 228.

(7) We use cookies to be able to identify you for subsequent visits, if you have an account with us. Otherwise, you would have to log in again for each visit.

(8) The cookies used are described by us in the cookie banner.

§ 6 Use of Cookiebot

(1) We use functions of the provider Cookiebot on our website. Cookiebot is operated by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Among other things, Cookiebot enables us to provide you with a comprehensive cookie notice (also referred to as a cookie banner or cookie notice). By using this function, data about you may be sent to, stored, and processed by Cybot.

(2) We use Cookiebot to obtain your consent to the storage of certain cookies in your browser and to document this consent in a manner compliant with data protection law. In addition, the technology behind Cookiebot scans, checks, and evaluates all cookies and tracking measures on this website.

(3) The data mentioned in § 4 is processed by Cookiebot. Furthermore, an encrypted, anonymous key is generated and stored, which stores proof of consent (via a cookie).

(4) With regard to the use and storage of consent, we rely on Art. 6 (1) lit. c GDPR, as we are legally obligated to be able to prove consent (Art. 5 (2) GDPR). The ability to disable cookies is made possible through the so-called cookie banner. Obtaining consent when setting cookies is a requirement under § 15 (3) TMG in conjunction with Art. 7 GDPR (see also CJEU "Planet 49" ECLI:EU:C:2019:801).

§ 7 Hosting/Maintenance of the Website

(1) This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website visits, and other data generated via a website.

(2) The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR).

(3) Our host will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.

(4) To ensure processing in compliance with data protection law, we have concluded a data processing agreement with our host.

(5) We will not disclose your personal data to third parties unless we inform you of such disclosure.

(6) Our IT service providers have access to our stored data in order to fix errors and enable us to carry out the required technical and organizational measures. In this regard, we rely on our legitimate interest in securing our IT pursuant to Art. 6 (1) lit. f GDPR, or on the fulfillment of legal obligations pursuant to Art. 6 (1) lit. c GDPR.

(7) The IT service provider(s) have been carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly monitored by us. The service providers will not disclose this data to third parties.

(8) Your data is not transferred outside the EU/EEA.

§ 8 Use of Our Web Shop

(1) If you wish to place an order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. The mandatory fields required to process contracts are marked separately; other information is voluntary. We process the data you provide to process your order, including billing. To this end, we may pass your payment data on to our house bank. The legal basis for this is Art. 6 (1) lit. b GDPR.

(2) You may voluntarily create a customer account, through which we can store your data for future purchases. When you create an account under "My Account," the data you provide is stored on a revocable basis. You can delete all further data, including your user account, at any time in the customer area.

(3) The customer data collected is deleted after completion of the order or termination of the business relationship. Statutory retention periods (e.g. under commercial and tax law) remain unaffected.

(4) We use the data you provide to process your order. To this end, we pass your address data on to a commissioned shipping company, and also to the service provider Paqato GmbH (Wienburgstraße 207, 48159 Münster, hereinafter "Paqato") for the purpose of shipment tracking. We delete this data after the contract has been fulfilled and the tax and commercial retention obligations have expired. The legal basis for the collection and processing of your data for the purpose of processing the order is Art. 6 (1) lit. b GDPR, as the processing is necessary for the fulfillment of the contract concluded with you. The involvement of the service provider Paqato, and the associated disclosure of your personal data to Paqato, is necessary to safeguard our legitimate interests, Art. 6 (1) lit. f GDPR. Our legitimate interest lies in offering the most reliable and transparent shipping process possible, from which you as a customer also benefit.

(5) To prevent unauthorized third-party access to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.

(6) We may also use the personal data you provide during the ordering process, in particular the email address you provide, to send you direct advertising for similar goods or services. This applies in particular to emails from us asking you to rate the order you have placed, or specifically the products you have ordered. The legal basis for the processing of your personal data for such advertising purposes is § 7 (3) UWG (German Act Against Unfair Competition).

§ 9 Mollie

(1) If you choose a payment method (credit card, PayPal, or Sofortüberweisung) offered by the payment service provider Mollie B.V. ("Mollie"), payment processing takes place via this payment service provider, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency, and transaction number). Your data is disclosed exclusively for the purpose of payment processing with the payment service provider.

(2) Mollie then authenticates the transaction using the authentication procedure deposited with the bank for this purpose. The payment amount is then transferred from your account to our account. Neither we nor third parties have access to your account details.

(3) For further information on payment with Mollie, please refer to Mollie's terms and conditions and privacy policy at: https://www.mollie.com/de/privacy

§ 10 PayPal

(1) If you choose the "PayPal" payment method, payment is made via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

(2) The transmission of your data to PayPal is based on Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. b GDPR (processing for the performance of a contract). Please note the privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

§ 11 Sofortüberweisung

(1) If you choose the "Sofortüberweisung" payment method, payment is made via Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH"). If you select payment via Sofortüberweisung, the payment data you enter will be transmitted to Sofort GmbH.

(2) Using the "Sofortüberweisung" procedure, we receive real-time payment confirmation from Sofort GmbH and can immediately begin fulfilling our obligations.

(3) The transaction is carried out by Sofort GmbH using a PIN and a valid TAN. In addition to the PIN and TAN, the payment data you enter as well as personal data are transmitted to Sofort GmbH. Your personal data includes your first and last name, address, phone number(s), email address, IP address, and any other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud attempts.

(4) Data processing is based on Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. b GDPR (processing for the performance of a contract).

(5) For details on payment via Sofortüberweisung, please refer to the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

§ 12 Amazon Pay

(1) If you choose the "Amazon Pay" payment method, payment is made using the payment service provider Amazon Pay operated by Amazon Payments Europe s.c.a., 5 Rue Plaetis, 2338 Luxembourg (hereinafter "Amazon Pay").

(2) With Amazon Pay, you can pay on our website without having to disclose your payment data to us. When you pay with your Amazon account, you are redirected to the Amazon website. There, you can log in with your account details and authorize the payment. We have no access to the personal data collected by Amazon Pay. Amazon Pay is responsible for processing this data. Further information on data protection in connection with Amazon Pay can be found in Amazon Pay's privacy policy.

§ 13 Creditreform GmbH

(1) Our company regularly checks your creditworthiness when concluding contracts and, in certain cases where a legitimate interest exists, also for existing customers. For this purpose, we work with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from which we receive the data required for this purpose. For this purpose, we transmit your name and contact details to Creditreform Boniversum GmbH. Information pursuant to Art. 14 of the EU General Data Protection Regulation regarding the data processing carried out by Creditreform Boniversum GmbH can be found here: www.boniversum.de/eu-dsgvo/

§ 14 VR Payment

(1) Your payment data (IBAN, BIC, card expiry date and sequence number, date, time, amount, terminal ID, location, company, branch) for card payments in our trigema stores is passed on to VR Payment and its subcontractor InterCard AG, Mehlbeerenstr. 4, 82024 Taufkirchen near Munich ("InterCard") for card verification and payment processing. To prevent card misuse and limit the risk of payment defaults, VR Payment uses the services of InterCard on the basis of Art. 6 (1) lit. f GDPR.

§ 15 Use of Our Customer Account

(1) If you wish to use our web shop while logged in, you must register by providing your email address, a password of your choice, and your billing address. We use the double opt-in procedure for registration, meaning that your registration is only complete once you have confirmed it by clicking the link contained in a confirmation email sent to you for this purpose. If you do not confirm your registration within 24 hours, it will be automatically deleted from our database. Providing the aforementioned data is mandatory; all other information may be provided voluntarily when using our shop.

(2) When you use our shop as a customer, we store the data necessary to fulfill the contract, including payment method details, until you permanently delete your account. We also store any voluntary data you provide for the duration of your use of the account, unless you delete it beforehand. You can manage and change all details in the protected customer area. The legal basis is Art. 6 (1) lit. f GDPR.

(3) To prevent unauthorized third-party access to your personal data, in particular financial data, the connection is encrypted using TLS technology.

§ 16 eKomi

(1) "eKomi" is a service provided by eKomi Holding GmbH (Zimmerstraße 11, 10969 Berlin) for collecting provider and product reviews. Reviews are recorded in the eKomi system, checked, and then made available online.

(2) Following your order, eKomi gives you the opportunity to submit a review or feedback for other people to see. To do so, you can optionally provide your email address to eKomi, for example to be notified in the event of a violation of communication rules or laws relating to your review. In any case, the IP address from which the review was written is stored to prevent misuse. Your review is displayed on our website in anonymized form.

(3) In connection with an online review, we pass the following data on to eKomi to enable you to submit a review of us or our products: order number, products ordered, salutation, first/last name, email address, phone number (if provided), and date of the transaction. This data is used to match reviews to orders and to prevent and verify multiple reviews.

(4) Further information on data protection at eKomi can be found at: https://www.ekomi.de/de/datenschutz/.

(5) The legal basis for data processing is your consent (Art. 6 (1) lit. a GDPR), in order to obtain authentic customer reviews and contribute to the company's external image and positive customer loyalty. You can withdraw your consent to this data processing at any time with effect for the future by sending a message to the contact details provided above.

§ 17 Social Media

(1) On our website, we provide links to various social media platforms. These are merely links to external websites of third-party social media providers and not plugins. Consequently, no connections are established or personal data transmitted to third-party providers simply by visiting our website. By clicking on the respective button marked with the provider's icon, you will be redirected to that provider's website. At that moment, you leave our website. If you have questions about the collection of data by third-party providers, please read the privacy policies provided by those third-party providers. We provide links to the following social media platforms:

Facebook

Our website links, via the "f" button, to the social network facebook.com, whose operator for users outside the USA and Canada is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland. Information on data protection can be found here: https://de-de.facebook.com/about/privacy/.

Facebook Ireland ensures a comparable level of data protection for data transfers to its parent company in the USA by concluding so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) GDPR. Further information is available at: https://www.facebook.com/legal/EU_data_transfer_addendum.

X (Twitter)

By clicking on the button with the bird icon, you will be taken to the microblogging service operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Twitter ensures a comparable level of data protection for data transfers to its parent company in the USA by concluding so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) GDPR. Further information is available at: https://gdpr.twitter.com/en/controller-to-controller-transfers.html. Information on data protection can be found here: https://twitter.com/de/privacy

Instagram

Instagram is a service provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Further information can be found in Instagram's privacy policy: http://instagram.com/about/legal/privacy/.

YouTube

YouTube is a video platform operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Further information on YouTube's data processing and possible privacy settings can be found at: https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/#your-data-in-youtube.

TikTok

TikTok is a video portal for short clips that also offers social network functions. It is operated by the Chinese company ByteDance (Chinese name: Douyin/抖音短视频). Further information is available at: https://www.tiktok.com/legal/page/eea/privacy-policy/de.

§ 18 Newsletter

(1) With your consent, you can subscribe to our newsletter, which informs you about our current, interesting new products and offers. When registering to use your user account or participating in one of our prize draws, you can choose to subscribe to the trigema newsletter. To do so, you must check the box for "Sign up for the email newsletter."

(2) We use the double opt-in procedure to register for our newsletter. This means that after you register, we send an email to the email address provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store the IP addresses you used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, clarify any possible misuse of your personal data. The legal basis is Art. 6 (1) lit. f GDPR.

(3) The only mandatory information required to send the newsletter is your email and billing address. Providing further, separately marked information is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) lit. a GDPR.

(4) The data you provide us for the purpose of subscribing to the newsletter is stored by us and/or the newsletter service provider (Inxmail GmbH) until you unsubscribe from the newsletter, and is deleted from the newsletter distribution list after you unsubscribe. Data stored with us for other purposes remains unaffected by this.

(5) After you have been removed from the newsletter distribution list, your email address may be stored by us and/or the newsletter service provider on a blacklist to prevent future mailings. The data on the blacklist is used solely for this purpose and is not merged with other data. This serves both your interests and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). Storage on the blacklist is not limited in time. You can object to this storage if your interests outweigh our legitimate interest.

(6) You may withdraw your consent to receiving the newsletter and unsubscribe from it at any time. You can declare your withdrawal by clicking the link provided in every newsletter email, by emailing datenschutz@trigema.club, or by sending a message to the contact details given in the legal notice.

(7) Please note that we analyze your user behavior when sending the newsletter. For this analysis, the emails sent contain so-called web beacons, also known as tracking pixels. These are single-pixel image files that link to our website and thereby allow us to analyze your user behavior. This is done by collecting the data described in § 4 of this policy, along with web beacons that are linked to your email address and associated with a unique ID. Links contained in the newsletter also carry this ID. We use the data obtained in this way to create a user profile in order to be able to provide you with a newsletter tailored to your interests. In doing so, we record when you read our newsletters, which links you click on within them, and draw conclusions about your personal interests from this. We link this data with actions you have taken on our website. The information collected in this way is stored by the newsletter provider on its server in Germany.

(8) You can object to this tracking at any time by clicking the separate link provided in every email, or by informing us at datenschutz@trigema.club.

§ 19 Web Tracking – Google Analytics

(1) If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies": text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google LLC server in the USA. However, if IP anonymization is activated on this website, your IP address will first be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services relating to website and internet usage.

(2) The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

(3) You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie relating to your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the "_anonymizeIp()" extension. This means that IP addresses are processed in shortened form, which excludes any possibility of identifying individuals. Insofar as the data collected about you has any personal reference, this is therefore immediately excluded and the personal data is deleted without delay.

(5) We use Google Analytics to analyze the use of our website and thereby improve it on an ongoing basis. The statistics obtained allow us to improve our offering and make it more interesting for you as a user.

(6) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has certified, via certification under the EU-US Data Privacy Framework pursuant to Art. 46 (2) lit. b GDPR, that a comparable level of data protection is ensured for data transfers to that third country. Further information is available at: https://privacy.google.com/businesses/compliance/#!#gdpr

(7) The legal basis for the use of Google Analytics is your consent, i.e. Art. 6 (1) lit. a GDPR.

(8) Third-party provider information: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Terms of use: http://www.google.com/analytics/terms/de.html. Privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

(9) We use enhanced matching, whereby additional data such as your email address is transmitted to Google as hash values. Hashing converts an input value (such as your email address) into a checksum from which the original input value cannot be inferred. Google therefore cannot directly view the data transmitted as hash values. However, the hash value allows Google to determine which websites were visited and whether purchases were made.

§ 20 Google Analytics Remarketing

(1) This website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

(2) This function enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google Ads and Google DoubleClick. This makes it possible for interest-based, personalized advertising messages that were tailored to you based on your previous usage and browsing behavior on one device (e.g. mobile phone) to also be displayed on another of your devices (e.g. tablet or PC).

(3) If you have given your consent, Google links your web and app browsing history to your Google account for this purpose. This allows the same personalized advertising messages to be displayed on any device on which you log in with your Google account.

(4) To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.

(5) You can permanently object to cross-device remarketing/targeting by disabling personalized advertising; to do so, follow this link: https://www.google.com/settings/ads/onweb/.

(6) The consolidation of collected data in your Google account is based exclusively on your consent, which you can give to or withdraw from Google (Art. 6 (1) lit. a GDPR). For data collection processes that are not consolidated in your Google account (e.g. because you do not have a Google account or have objected to the consolidation), the collection of data is based on Art. 6 (1) lit. f GDPR. The legitimate interest arises from the website operator's interest in the anonymized analysis of website visitors for advertising purposes.

(7) Further information and Google's privacy policy can be found at: https://policies.google.com/technologies/ads?hl=de.

§ 21 Use of Google Ads

(1) This website uses the online advertising service Google Ads, through which advertising tailored to your interests can be presented to you. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). In doing so, we pursue the interest of showing you advertising that may be of interest to you, in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These advertisements can be identified by the "Google Ads" notice on the respective advertisement.

(2) By visiting our website, Google receives the information that you have accessed our website. The data described in § 4 of this policy is transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data collection or the retention period. Your data is transferred to and evaluated in the USA. If you are logged into your Google account, your data may be directly linked to that account. If you do not wish for this association with your Google profile, you must log out beforehand. It is possible that this data may be passed on by Google to contractual partners, other third parties, and authorities. The legal basis for the processing of your data is Art. 6 (1) lit. f GDPR. This website has also activated Google AdSense ads from third-party providers. The data mentioned above may be transmitted to these third-party providers (named at https://support.google.com/dfp_sb/answer/94149).

(3) The legal basis for the disclosure of personal data to Google is your consent, i.e. Art. 6 (1) lit. a GDPR.

(4) You can prevent the installation of Google AdSense cookies in various ways: a) through an appropriate setting in your browser software. In particular, suppressing third-party cookies will result in you not receiving advertisements from third-party providers. b) By disabling interest-based ads at Google via the link http://www.google.de/ads/preferences, although this setting will be deleted if you delete your cookies. c) By disabling interest-based advertising from providers that are part of the "About Ads" self-regulatory campaign via the link http://www.aboutads.info/choices, although this setting will be deleted if you delete your cookies. d) By permanently disabling this in your Firefox, Internet Explorer, or Google Chrome browsers at http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this offering to their full extent.

(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has certified, via certification under the EU-US Data Privacy Framework pursuant to Art. 46 (2) lit. b GDPR, that a comparable level of data protection is ensured for data transfers to that third country. Further information is available at: https://privacy.google.com/businesses/compliance/#!#gdpr

(6) Further information on the purpose and scope of data collection and its processing, as well as further information on your related rights and options for protecting your privacy, can be obtained from: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Terms of use: http://www.google.com/analytics/terms/de.html. Privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

(7) We use enhanced matching, whereby additional data such as your email address is transmitted to Google as hash values. Hashing converts an input value (such as your email address) into a checksum from which the original input value cannot be inferred. Google therefore cannot directly view the data transmitted as hash values. However, the hash value allows Google to determine which websites were visited and whether purchases were made.

(8) To build target groups, we use, among other things, Google Ads Remarketing customer matching. In this process, certain customer data, such as email addresses, is transferred from our customer lists to Google. If the relevant Google users are logged into their Google account, matching advertising messages may be displayed to them within the Google network, such as on Gmail, YouTube, or in Google Search.

§ 22 Use of Google Tag Manager

(1) Google Tag Manager is a tool that enables marketers to manage website tags via an interface. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

(2) The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager. For further information, see: https://www.google.de/analytics/terms/tag-manager/.

(3) The legal basis for the disclosure of personal data to Google is your consent, i.e. Art. 6 (1) lit. a GDPR.

(4) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has certified, via certification under the EU-US Data Privacy Framework pursuant to Art. 46 (2) lit. b GDPR, that a comparable level of data protection is ensured for data transfers to that third country. Further information is available at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 23 Use of Google Ads Conversion

(1) We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Ads). We are able to determine the success of individual advertising measures in relation to the campaign data. In doing so, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.

(2) These advertising materials are delivered by Google via so-called "ad servers." For this purpose, we use ad server cookies, which allow certain parameters to be measured for success tracking, such as ad impressions or clicks by users. If you reach our website via a Google ad, a cookie is stored on your computer by Google Ads. These cookies generally expire after 30 days and are not intended to personally identify you. This cookie generally stores, as analysis values, the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (a marker indicating that the user no longer wishes to be targeted).

(3) These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each Ads customer is assigned a different cookie. Cookies therefore cannot be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data as part of the advertising measures described. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials, and in particular we cannot identify users based on this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool, and we therefore inform you according to our level of knowledge: through the integration of Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on an advertisement of ours. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may obtain and store your IP address.

(5) You can prevent participation in this tracking procedure in various ways: a) through an appropriate setting in your browser software; in particular, suppressing third-party cookies will result in you not receiving advertisements from third-party providers; b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain "www.googleadservices.com," https://www.google.de/settings/ads, although these settings will be deleted if you delete your cookies; c) by disabling interest-based advertising from providers that are part of the "About Ads" self-regulatory campaign via the link http://www.aboutads.info/choices, although this setting will be deleted if you delete your cookies; d) by permanently disabling this in your Firefox, Internet Explorer, or Google Chrome browsers at http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this offering to their full extent.

(6) The legal basis for the processing of your data is Art. 6 (1) sentence 1 lit. f GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

(7) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has agreed, by concluding so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) lit. c GDPR, that a comparable level of data protection is ensured for data transfers to that third country. Further information is available at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 24 Bing Ads

(1) Our online offerings also use Microsoft's conversion tracking (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). In this process, a cookie is set on your computer by Microsoft Bing Ads if you reached our website via a Microsoft Bing advertisement. Microsoft Bing and we can thereby recognize that someone clicked on an advertisement, was redirected to our website, and reached a previously defined target page (conversion page). We only learn the total number of users who clicked on a Bing advertisement and were then redirected to the conversion page. No personal information regarding the user's identity is disclosed.

(2) If you do not wish to take part in this tracking procedure, you can also refuse the setting of the cookie required for this – for example, through a browser setting that generally deactivates the automatic setting of cookies.

(3) Further information on data protection and the cookies used by Microsoft Bing can be found on Microsoft's website: https://privacy.microsoft.com/de-de/privacystatement

§ 25 Econda

(1) For the purpose of tailoring and optimizing this website, anonymized data is collected and stored using solutions and technologies provided by econda GmbH, and user profiles are created from this data using pseudonyms. Cookies may be used for this purpose, enabling recognition of an internet browser. However, user profiles are not merged with data about the holder of the pseudonym without the visitor's express consent. In particular, IP addresses are made unrecognizable immediately upon receipt, meaning that it is not possible to assign user profiles to IP addresses.

(2) Visitors to this website can object to this data collection and storage for the future at any time here. Data protection at Econda: https://www.econda.de/datenschutzerklaerung/

§ 26 Pinterest

(1) This website uses the "Pinterest Tag" of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter "Pinterest"). This tracking tool collects information about visitors' interactions with this website and transmits it to Pinterest. This includes, for example, information such as viewing product detail pages, adding products to the shopping cart, or purchased products.

(2) Pinterest processes the transmitted information under its own responsibility and may link this information with data that Pinterest has collected about you on other websites, as well as with data that Pinterest collects about your usage behavior on the Pinterest platform. Based on this information, Pinterest may create advertising profiles and display interest-based advertisements in the form of sponsored pins on and off the Pinterest platform. Pinterest may also use information about the behavior of this website's visitors to promote third-party offers. Pinterest may also aggregate the collected information and use it for its own advertising purposes as well as for third-party advertising purposes. The website operator can use the collected information to evaluate the effectiveness of Pinterest advertisements for statistical and market research purposes and to optimize future advertising measures.

(3) The data collected is anonymous to the website operator, meaning that no conclusions can be drawn about the identity of website visitors. Pinterest uses the collected data based on its privacy policy, which can be found here: https://policy.pinterest.com/de/privacy-policy

§ 27 Facebook Pixel

(1) Our website uses so-called conversion and retargeting tags (also known as "Facebook Pixel") from the social network Facebook for marketing purposes. The provider is Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). We use Facebook Pixel to analyze the general use of our website and to track the effectiveness of Facebook advertising ("conversion"). We also use Facebook Pixel to display personalized advertising messages to you based on your interest in our products ("retargeting").

(2) The legal basis for the collection of data by Facebook Pixel is your consent pursuant to Art. 6 (1) lit. a GDPR, which is obtained beforehand (e.g. via the cookie banner).

(3) Facebook processes data that the service collects via cookies and similar technologies on our website. The data generated in this context may be transmitted by Facebook to a server of its parent company, Facebook Inc., in the USA for evaluation and stored there. Facebook ensures a comparable level of data protection for data transfers to its parent company in the USA through certification under the EU-US Data Privacy Framework pursuant to Art. 46 (2) lit. c GDPR.

(4) If you are a member of Facebook and have allowed Facebook, via your account's privacy settings, to do so, Facebook may also link the information collected during your visit to us with your member account and use it for targeted Facebook advertising.

(5) You can view and change the privacy settings of your Facebook profile at any time. You can prevent this data processing by clicking the following link: https://de-de.facebook.com/help/193677450678703

(6) If you disable data processing by Facebook, Facebook will only display general Facebook ads that are not selected based on the information collected about you.

§ 28 Kameleoon

(1) This website uses the testing and web analytics service Kameleoon. The program enables an analysis of user behavior based on user segmentation. By evaluating log file data, we can determine how individual user segments visit the website, which landing pages are accessed, and how click-through rates can be improved.

(2) As described above, cookies/the browser's local storage are used for the analyses, linked to a pseudonymized ID. Your IP address is fully anonymized for this purpose and is not stored. The information generated by the cookie/local storage about your use of this website is transmitted to a Kameleoon server in Germany and stored there in aggregated and pseudonymized form. The IP address transmitted by your browser as part of Kameleoon is not merged with other Kameleoon data.

(3) The use of Kameleoon serves to evaluate your use of the website and compile reports on website activity, allowing us to regularly improve our offering. The legal basis for storing the cookie is the consent given (Art. 6 (1) sentence 1 lit. a GDPR). Further evaluation of the data collected takes place over a period of up to 380 days based on Art. 6 (1) sentence 1 lit. f GDPR.

(4) You can prevent the storage of cookies/local storage by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also deactivate Kameleoon tracking at any time (thereby preventing the collection of data generated by the cookie relating to your use of the website and its processing by Kameleoon) by clicking the following link: http://www.trigema.club#kameleoonOptout=true

§ 29 Plugin: YouTube

(1) We have integrated YouTube videos into our online offering, which are stored on http://www.youtube.com and can be played directly from our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). All videos are embedded in "enhanced privacy mode," meaning that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos is the data described in paragraph 2 transmitted. We have no influence over this data transmission.

(2) By visiting the website, YouTube (and therefore always Google) receives the information that you have accessed the relevant subpage of our website. In addition, the data described in § 4 of this policy is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly linked to your account. If you do not wish for this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses it for advertising, market research, and/or to tailor its website to demand. Such an evaluation takes place in particular (even for users who are not logged in) to provide demand-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and must contact YouTube to exercise this right.

(3) The legal basis for the disclosure of personal data to YouTube is your consent, i.e. Art. 6 (1) lit. a GDPR.

(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and options for protecting your privacy: https://policies.google.com/privacy?hl=de&gl=de.

(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has certified, via certification under the EU-US Data Privacy Framework pursuant to Art. 46 (2) lit. b GDPR, that a comparable level of data protection is ensured for data transfers to the USA. Further information is available at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 30 Plugin: Google Maps

(1) We use Google Maps on this website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google). This enables us to display interactive maps directly on the website and allows you to conveniently use the map function.

(2) By visiting the website, Google receives the information that you have accessed the relevant subpage of our website. In addition, the data described in § 4 of this policy is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly linked to your account. If you do not wish for this association with your Google profile, you must log out before activating the button. Google stores your data as user profiles and uses it for advertising, market research, and/or to tailor its website to demand. Such an evaluation takes place in particular (even for users who are not logged in) to provide demand-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and must contact Google to exercise this right.

(3) The legal basis for the disclosure of personal data to Google is your consent, i.e. Art. 6 (1) lit. a GDPR.

(4) Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider's privacy policy. There you will also find further information on your related rights and options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.

(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has certified, via certification under the EU-US Data Privacy Framework pursuant to Art. 46 (2) lit. b GDPR, that a comparable level of data protection is ensured for data transfers to the USA. Further information is available at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 31 Use of jQuery

(1) Our website uses the JavaScript extension jQuery, which is loaded from the website code.jquery.com. In this regard, program libraries are called from StackPath servers. The provider is The OpenJS Foundation, 1 Letterman Drive, Building D, Suite D4700, San Francisco, CA 94129, USA.

(2) When a website is accessed, your browser loads the required program libraries into your browser cache. For this purpose, the browser you use must establish a connection to jQuery's servers located in the USA. The use of jQuery serves the interest of an optimized and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f GDPR.

(3) jQuery ensures a comparable level of data protection for data transfers to the USA by concluding so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) lit. c GDPR.

(4) Further information on jQuery can be found at www.jquery.com.

§ 32 Google reCAPTCHA

(1) We use the Google reCAPTCHA service on our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This service is used to distinguish natural persons from so-called "bots" (automated and machine-based processes) during logins. In this process, your IP address may be transmitted to Google. This results in the transmission of personal data to Google.

(2) The legal basis for the disclosure of personal data to Google is our legitimate interest in the security and availability of our website, i.e. Art. 6 (1) lit. f GDPR.

(3) In the event that personal data is transmitted by Google to its parent company based in the USA (Google LLC), Google Ireland has certified, via certification under the EU-US Data Privacy Framework pursuant to Art. 46 (2) lit. b GDPR, that a comparable level of data protection is ensured for data transfers to that third country. Further information is available at: https://privacy.google.com/businesses/compliance/#!#gdpr

(4) Further information on Google reCAPTCHA, as well as Google's privacy policy, can be found at: https://policies.google.com/privacy?hl=de

§ 33 Collection of Data for the Purpose of Applications

(1) We offer open positions on our homepage. If you apply for a position, we will store your application documents received by mail, contact form, or email until the application process has ended.

(2) If we do not select you, we will destroy your application documents four months after the end of the application process. We rely on our legitimate interest in an efficient legal defense pursuant to Art. 6 (1) lit. f GDPR in conjunction with § 21 (5) AGG (German General Equal Treatment Act). The preclusion period for such claims is 2 months.

(3) The processing of your applicant data is based on § 26 (1) BDSG (German Federal Data Protection Act), as it is necessary to establish an employment relationship.

§ 34 Security/Video Surveillance

(1) trigema gas stations are monitored by video surveillance on the basis of Art. 6 (1) lit. f GDPR, in the legitimate interest of Trigema W. Grupp KG.

(2) You are informed of this monitoring by a notice posted at the entrance of trigema gas stations.

(3) This data processing serves to protect our property rights, prevent theft, protect our customers, suppliers, and employees from dangerous situations and robberies, protect property (namely buildings and their fixtures, cash holdings, and goods), and secure evidence following criminal offenses.

(4) Data is automatically deleted by the system after two months, provided no incidents relevant to the legitimate interest of Trigema W. Grupp KG have occurred.