This privacy policy applies to our websites https://www.maxhaust.com, https://www.maxhaust.de, https://www.electric-sound.de/, https://www.maxhaust.support/ and https://sound-booster.de, as well as to our social media profiles on various third-party platforms and to our eBay shop.

Personal data (hereinafter mostly referred to as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly online presence, including its contents and the services offered there.

Pursuant to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter “GDPR”), “processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we either alone or jointly with others decide on the purposes and means of processing. In addition, we inform you below about third-party components used by us for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the controller

II. Rights of users and data subjects

III. Information on data processing

IV. Information on data processing for social media pages and eBay

I. Information about us as the controller

The responsible provider of this online presence within the meaning of data protection law is:

Media-CarTec GmbH
Place of jurisdiction: Seligenstadt
Commercial Register No.: HRB 43281
VAT ID No.: DE 258360606

Jahnstraße 27
63533 Mainhausen

Tel: +49 (0) 6182 – 89 59 781

Managing Director
Patrick Schart

Contact for data protection inquiries

Name: Patrick Schart

Email: [email protected]

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

• to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing, and to copies of the data (see also Art. 15 GDPR);
• to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
• to immediate erasure of data concerning them (see also Art. 17 GDPR) or, alternatively, where further processing is necessary pursuant to Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
• to receive the data concerning them and which they have provided and to transmit those data to other providers/controllers (see also Art. 20 GDPR);
• to lodge a complaint with the supervisory authority if they consider that the data concerning them are being processed by the provider in breach of data protection provisions (see also Art. 77 GDPR).

Furthermore, the provider is obliged to notify all recipients to whom data have been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17 (1), 18 GDPR. This obligation does not apply insofar as such notification is impossible or would involve a disproportionate effort. Notwithstanding the foregoing, the user has the right to obtain information about these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of data concerning them, provided that the data are processed by the provider pursuant to Art. 6 (1) (f) GDPR. In particular, an objection to processing for the purposes of direct advertising is permissible.

 

III. Information on data processing

The data processed when you use our online presence will be erased or blocked as soon as the purpose of storage ceases to apply, there are no statutory retention obligations preventing erasure, and no differing information regarding individual processing procedures is provided below.

Server data

For technical reasons, in particular to ensure a secure and stable online presence, data are transmitted by your internet browser to us or to our web space provider. With these so-called server log files, the type and version of your internet browser, the operating system, the website from which you switched to our online presence (referrer URL), the websites of our online presence that you visit, the date and time of each access, and the IP address of the internet connection from which our online presence is used are collected, among other things.

Such data collected are stored temporarily, but not together with other data about you.

This storage is based on the legal basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our online presence.

The data will be deleted at the latest after seven days, unless further retention is required for evidentiary reasons. Otherwise, the data are wholly or partially exempt from deletion until an incident has been finally clarified.

Cookies

a) Session cookies

We use so-called cookies on our online presence. Cookies are small text files or other storage technologies that are placed and stored on your end device by the internet browser you use. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed to an individual extent.

This processing makes our online presence more user-friendly, effective, and secure, as the processing enables, for example, the display of our online presence in different languages or the provision of a shopping cart function.

The legal basis for this processing is Art. 6 (1) (b) GDPR, insofar as these cookies process data for the initiation or performance of a contract.

If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our online presence. The legal basis is then Art. 6 (1) (f) GDPR.

These session cookies are deleted when you close your internet browser.

b) Third-party cookies

Where applicable, cookies from partner companies with whom we cooperate for the purposes of advertising, analysis, or the functionalities of our online presence are also used.

Details, in particular regarding the purposes and legal basis of such third-party cookie processing, can be found in the information below.

c) Options for removal

You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete cookies already stored at any time. The necessary steps and measures depend on the specific internet browser you are using. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. However, the processing of so-called Flash cookies cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, not all functions of our online presence may be fully usable.

Contract processing

The data you transmit to use our goods and/or service offering are processed by us for the purpose of contract processing and are necessary in this respect. The conclusion and performance of a contract are not possible without providing your data.

The legal basis for processing is Art. 6 (1) (b) GDPR.

We delete the data upon complete contract performance, but must observe the statutory tax and commercial retention periods.

As part of contract processing, we pass on your data to the transport company commissioned with the goods delivery or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.

The legal basis for the transfer of data is then Art. 6 (1) (b) GDPR.

Customer account / registration function

If you create a customer account with us via our online presence, we will collect and store the data you enter during registration (e.g., your name, address, or email address) exclusively for pre-contractual services, for the performance of the contract, or for the purpose of customer care (e.g., to provide you with an overview of your previous orders with us or to offer you the so-called wish list function). At the same time, we store the IP address and the date and time of your registration. This data is, of course, not passed on to third parties.

As part of the further login process, your consent to this processing is obtained and reference is made to this privacy policy. The data we collect is used exclusively for the provision of the customer account.

Insofar as you consent to this processing, Art. 6 (1) (a) GDPR is the legal basis for processing.

If the opening of the customer account also serves pre-contractual measures or the performance of the contract, Art. 6 (1) (b) GDPR is also the legal basis for this processing.

You can revoke your consent to the opening and maintenance of the customer account at any time with effect for the future in accordance with Art. 7 (3) GDPR. You only need to inform us of your revocation.

The data collected in this respect will be deleted as soon as processing is no longer necessary. In this regard, we must observe tax and commercial retention periods.

Newsletter2go

If you would like to receive the newsletter offered on the website, we require an email address from you and information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter.

To ensure a consensual newsletter dispatch, we use the so-called double-opt-in procedure. In the course of this, the potential recipient can be added to a distribution list. The user then receives a confirmation email, giving them the opportunity to confirm the registration in a legally compliant manner. Only when confirmation is received will the address be actively included in the distribution list.

We use this data exclusively for sending the requested information and offers.

The newsletter software Newsletter2Go is used. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and from using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

Further information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/.

The legal basis here is Art. 6 (1) (a) GDPR.

You can revoke your consent to the newsletter at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, simply notify us of your revocation or click the unsubscribe link contained in every newsletter.

Contact inquiries / contact option

If you contact us via contact form or email, the data you provide will be used to process your inquiry. Providing the data is necessary to process and answer your inquiry—without providing it, we cannot process your inquiry or can do so only to a limited extent.

The legal basis for this processing is Art. 6 (1) (b) GDPR.

Your data will be deleted when your inquiry has been conclusively answered and there are no legal retention obligations preventing deletion, such as in the event of a subsequent contract processing.

User posts, comments, and ratings

We offer you the opportunity to publish questions, answers, opinions, or ratings—hereinafter referred to as “posts”—on our websites. If you use this option, we will process and publish your post, the date and time of submission, and the pseudonym you may have used.

The legal basis here is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, simply inform us of your revocation.

We also process your IP address and email address. The IP address is processed because we have a legitimate interest in taking or supporting further steps if your post infringes the rights of third parties and/or is otherwise unlawful.

The legal basis in this case is Art. 6 (1) (f) GDPR. Our legitimate interest lies in any necessary legal defense.

Google Analytics

We use Google Analytics on our online presence. This is a web analytics service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”

Through certification under the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.

The Google Analytics service is used to analyze usage behavior of our online presence. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our online presence.

Usage and user-related information, such as IP address, location, time, or frequency of visits to our online presence, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google shortens the IP address within the EU or the EEA.

The data collected in this way are used by Google to provide us with an evaluation of visits to our online presence and usage activities there. These data may also be used to provide other services related to the use of our online presence and internet usage.

Google states that it will not combine your IP address with other data. In addition, Google provides further data protection information at

https://www.google.com/intl/de/policies/privacy/partners

for you, such as information on how to prevent the use of data.

Google also offers at

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on along with further information. This add-on can be installed in the common internet browsers and provides you with more control over the data that Google collects when our online presence is accessed. The add-on informs the Google Analytics JavaScript (ga.js) that information about your visit to our online presence should not be transmitted to Google Analytics. This does not prevent information from being transmitted to us or to other web analytics services. Whether and which other web analytics services are used by us can also be found in this privacy policy.

Google Maps

We use Google Maps in our online presence to display our location and create directions. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”

Through certification under the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.

To enable the display of certain fonts on our online presence, a connection to the Google server in the USA is established when our online presence is accessed.

If you access the Google Maps component embedded in our online presence, Google stores a cookie on your end device via your internet browser. To display our location and create directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in optimizing the functionality of our online presence.

Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions are to be sent.

If you do not agree with this processing, you have the option to prevent the installation of cookies by the corresponding settings in your internet browser. Details can be found above under “Cookies.”

In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms of Service for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.

Google also offers further information at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

.

Google reCAPTCHA

We use Google reCAPTCHA on our online presence to check and prevent interactions on our website by automated accesses, e.g., by so-called bots. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”

Through certification under the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.

Through this service, Google can determine from which website a request is sent and from which IP address you use the reCAPTCHA input box. In addition to your IP address, other information may be collected by Google that is necessary for the provision and guarantee of this service.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the security of our online presence and in defending against unwanted, automated accesses in the form of spam or similar.

Google provides further information on the general handling of your user data at

https://policies.google.com/privacy

.

Google Fonts

We use Google Fonts to display external fonts on our online presence. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”

Through certification under the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.

To enable the display of certain fonts on our online presence, a connection to the Google server in the USA is established when our online presence is accessed.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the optimization and economic operation of our online presence.

Through the connection to Google established when our online presence is accessed, Google can determine from which website your request was sent and to which IP address the display of the font is to be transmitted.

Google provides further information and, in particular, information on options for preventing the use of data at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

.

Google Tag Manager

MediaCartec GmbH uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access these data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

We may ask you for permission to share some product data (e.g., your account information) with other Google products to enable certain features, such as simplifying the addition of new conversion tracking tags for AdWords. In addition, our developers occasionally review product usage information to further optimize the product. However, we will never share such data with other Google products without your consent.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online presence.

YouTube

We use YouTube in our online presence. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube.”

YouTube is a subsidiary of Google LLC., Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google.”

Through certification under the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google, and thus also the subsidiary YouTube, guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.

We use YouTube in conjunction with the “extended data protection mode” function to be able to show you videos. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online presence. According to YouTube, the “extended data protection mode” function means that the data described below is only transmitted to YouTube’s server if you actually start a video.

Without this “extended data protection,” a connection to the YouTube server in the USA is established as soon as you visit one of our web pages on which a YouTube video is embedded.

This connection is necessary to display the respective video on our website via your internet browser. In this context, YouTube will at least record and process your IP address, the date and time, and the web page you visited. A connection to Google’s “DoubleClick” advertising network is also established.

If you are logged in to YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our online presence or make the appropriate settings in your YouTube user account.

For the purposes of functionality and analysis of usage behavior, YouTube stores cookies permanently on your end device via your internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by changing the settings in your internet browser. For more information, see “Cookies” above.

Further information on the collection and use of data and your rights and protection options is provided by Google in the privacy notices available at

https://policies.google.com/privacy

ChatLab (Chat Widget)

We use the chat service “ChatLab” on our website, provided by ChatLab. The chat is loaded as an external widget and delivered via the provider’s servers.

Type and Scope of Processing

When using the chat widget, the following data is processed:

• Content of chat communications (messages entered)
• Any personal data provided (e.g., name, email address)
• Technical data (e.g., IP address, browser type, timestamps)
• Usage data (interactions with the chat)

This data is transmitted to ChatLab servers and processed there.

Purpose of Processing

• Provision of an interactive chat and support system
• Responding to user inquiries
• Improving our services

Use of AI Services / Third-Party Providers

ChatLab uses AI services from external providers to generate responses, in particular OpenAI, as well as potentially other providers. Entered content may be transmitted to these providers and processed there.

According to ChatLab, processing is carried out for the purpose of generating responses and ensuring system security (e.g., abuse detection), and generally without using the data to train the models.

Data Transfer to Third Countries

It cannot be ruled out that data may be transferred to countries outside the European Union (in particular the United States). Such transfers are carried out on the basis of appropriate safeguards in accordance with Art. 44 et seq. GDPR, in particular Standard Contractual Clauses (SCCs) and, where applicable, participation in the EU-U.S. Data Privacy Framework.

Legal Basis

The use of the chat widget is based on your consent pursuant to Art. 6(1)(a) GDPR (e.g., via a consent banner or by actively using the chat), as well as on our legitimate interest pursuant to Art. 6(1)(f) GDPR in efficient user communication.

Data Retention

Data collected in the context of chat usage is stored only as long as necessary for the respective purposes or as required by legal retention obligations. According to ChatLab, content may be stored temporarily, in particular to ensure operation and security.

Notice on Use

Please note that you should not transmit any sensitive personal data (e.g., health data, passwords, or confidential information) via the chat.

Further Information

For more information on data processing, please visit: https://www.chatlab.com/privacy/

CloudFlare

To secure our online presence and to optimize loading times, we use the CloudFlare service as a CDN (Content Delivery Network). This is a service of Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA, hereinafter “CloudFlare.”

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure operation of our online presence and its optimization.

When you access our online presence, your requests are routed through CloudFlare’s servers. In this process, statistical access data about the visit to our online presence are collected and a cookie is stored by CloudFlare via your internet browser on your end device. Access data include

– your IP address,

– the web page(s) of our online presence you access,

– the type and version of the internet browser you use,

– the operating system you use,

– the web page from which you switched to our online presence (referrer URL),

– your dwell time on our online presence, and

– the frequency with which our web pages are accessed.

CloudFlare uses the data for statistical evaluation of accesses as well as for security and optimization of the offering.

If you do not agree with this processing, you have the option to prevent the installation of cookies by adjusting the settings in your internet browser. Details can be found above under “Cookies.”

CloudFlare provides further information on the collection and use of data as well as your rights and options to protect your privacy at

https://www.cloudflare.com/privacypolicy/

.

WIX

a) Use of the Wix shop software

The provider uses the “WIX” shop system of Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel, for presenting offers, processing contracts, and hosting.

The legal basis here is the initiation and/or performance of a contract pursuant to Art. 6 (1) (b) GDPR.

Due to WIX’s international locations, processing outside the EU cannot be ruled out. WIX must ensure that processing by Wix and its subcontractors only takes place in third countries where processing is permitted under the GDPR—e.g., via an EU adequacy decision or so-called standard contractual clauses.

“WIX” processes the following user data on behalf of the provider:

Name, email address, shipping and billing address, payment data, company name, where applicable telephone number, IP address, information about orders, as well as information about the device and browser used.

b) Web analytics WIX

Through the use of WIX, cookies for web analytics are also used on the website. The cookies transmit information, for example, time, location, and frequency of the user’s website visits to a WIX server, where it is evaluated.

If you have given consent for this processing, the legal basis is Art. 6 (1) (a) GDPR. The legal basis can also be Art. 6 (1) (f) GDPR. The legitimate interest lies in the analysis, optimization, and economic operation of the website.

If the user does not agree to the storage of cookies, they can prevent or terminate the installation of cookies by making the appropriate browser settings.

Further information on data processing by WIX is available at the following link:

https://de.wix.com/about/privacy

Google AdWords with conversion tracking

We use the Google AdWords advertising component and conversion tracking. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google.”

Through certification under the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.

We use conversion tracking to target the promotion of our offering. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our online presence.

If you click on an ad placed by Google, the conversion tracking we use stores a cookie on your end device. These so-called conversion cookies expire after 30 days and are not used for personal identification.

If the cookie is still valid and you visit a specific page of our online presence, both we and Google can evaluate that you clicked on one of our ads placed on Google and were subsequently redirected to our online presence.

The information obtained in this way enables Google to compile statistics about visits to our online presence. We also receive information about the number of users who clicked on our ad(s) and the subsequently visited pages of our online presence. Neither we nor third parties who also use Google AdWords are thereby enabled to identify you in this way.

You can also prevent or restrict the installation of cookies through the appropriate settings of your internet browser. At the same time, you can delete cookies already stored at any time. The steps and measures required for this depend on the specific internet browser you are using. If you have questions, please use the help function or documentation of your internet browser or contact the manufacturer or support.

Furthermore, Google provides further information on this topic and, in particular, on options to prevent the use of data at

https://services.google.com/sitestats/de.html

http://www.google.com/policies/technologies/ads/

http://www.google.de/policies/privacy/

.

Google Remarketing or “Similar Audiences” component from Google

We use the remarketing or “Similar Audiences” function. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google.”

Through certification under the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.

We use this function to place interest-based, personalized advertising on third-party websites that also participate in Google’s advertising network.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our online presence.

To enable this advertising service, Google stores a cookie with a sequence of numbers on your end device via your internet browser during your visit to our online presence. This cookie records, in anonymized form, both your visit and the use of our online presence. Personal data is not disclosed. If you subsequently visit a third party’s online presence that also uses Google’s advertising network, advertisements may appear that relate to our online presence or to our offers there.

For permanent deactivation of this function, Google offers a browser plugin for the most common internet browsers at

https://www.google.com/settings/ads/plugin

.

The use of cookies by certain providers can also be deactivated via

http://www.youronlinechoices.com/uk/your-ad-choices

or

http://www.networkadvertising.org/choices/

by opting out.

Through so-called cross-device marketing, Google may be able to track your usage behavior across multiple devices so that you may be shown interest-based, personalized advertising even when you change devices. However, this presupposes that you have consented to the linking of your browser histories with your existing Google account.

Google provides further information on Google Remarketing at

http://www.google.com/privacy/ads/

.

IV. Information on data processing for social media pages and eBay

Facebook and Instagram

We are the owners of social media profiles at

https://www.facebook.com/www.maxhaust.de/

and

https://www.instagram.com/maxhaust.de/

The content on our Facebook fan page is part of the Facebook social network, and the content on our Instagram profile page is part of the Instagram social network.

Facebook and Instagram are internet services of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, these services are operated by the subsidiary Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. It cannot be ruled out that data will also be transferred to non-European countries when using the profiles.

By being certified under the EU-US Privacy Shield (international agreement “EU-US Privacy Shield,” https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), the provider undertakes to ensure that the level of data protection in the EU is also complied with when processing data in the USA.

The operator of the Facebook fan page or an Instagram profile has no influence on the data protection provisions of this platform or the collection, analysis, and use of user data. In its privacy policies, Facebook explains which data are collected when using the service: https://www.facebook.com/policy. Instagram’s privacy policy can be found at https://help.instagram.com/519522125107875.

Facebook processes personal data in particular via the so-called “Page Insights.” Primary responsibility for “Page Insights” lies with Facebook. Facebook Ireland fulfills the requirements of the GDPR with regard to Page Insights. Further information from Facebook can be found at https://www.facebook.com/legal/terms/page_controller_addendum.

As the operator of the fan page and the Instagram profile, we do not make any decisions regarding the processing of Insights data and the other information resulting from Art. 13 GDPR, including the legal basis, identity of the controller, and storage duration of cookies on user devices.

You can assert data subject rights with Facebook Ireland and with the operator of the Facebook fan page or the Instagram profile.

The legal basis for our own processing of fan page data and profile data is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online presence by linking to social networks and their interaction options with our customers, as well as in our interest in being able to respond to customer inquiries promptly.

YouTube

We operate a profile on the video platform YouTube at

https://www.youtube.com/user/MediaCarTecGmbH

The content on our YouTube channel is part of the YouTube video platform, which in the EU is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

Through certification of Google LLC under the EU-US Privacy Shield (international agreement “EU-US Privacy Shield,” https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), the provider undertakes to ensure that the level of data protection in the EU is also complied with when processing data in the USA.

The operator of the YouTube channel has no influence on the data protection provisions of this platform or the collection, analysis, and use of user data. In its privacy policy, Google explains which data are collected when using YouTube: https://policies.google.com/privacy?gl=DE&hl=de. Google processes personal data and may provide the channel operator with analyses of its videos and channel in anonymized form. Primary responsibility for the analyses lies with Google. As the operator of the YouTube channel, we do not make any decisions regarding the processing of analytics data and the other information resulting from Art. 13 GDPR, including the legal basis, identity of the controller, and storage duration of cookies on user devices.

You can assert data subject rights with Google Ireland and with the operator of the YouTube channel.

The legal basis for our own processing of the channel data provided to us by Google is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online presence by linking to social video networks and their interaction options with our customers, as well as in our interest in being able to respond to customer inquiries promptly.

Twitter

We operate the Twitter profile at

https://twitter.com/MAXHAUSTnews.

The content on our Twitter profile is part of the Twitter short message service, which in the EU is operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, a subsidiary of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Through certification of Twitter Inc. under the EU-US Privacy Shield (international agreement “EU-US Privacy Shield,” https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active), the provider undertakes to ensure that the level of data protection in the EU is also complied with when processing data in the USA.

The operator of the Twitter profile has no influence on the data protection provisions of the platform or the collection, analysis, and use of user data. In its privacy policy, Twitter explains which data are collected when using Twitter: https://twitter.com/de/privacy

Twitter processes personal data and may provide the profile owner with analyses in anonymized form. Primary responsibility for the analyses lies with Twitter. As the operator of the Twitter profile, we do not make any decisions regarding the processing of analytics data and the other information resulting from Art. 13 GDPR, including the legal basis, identity of the controller, and storage duration of cookies on user devices.

You can assert data subject rights with Twitter International Company and with the operator of the Twitter profile.

The legal basis for our own processing of the profile analytics data provided to us by Twitter is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online presence by linking to social networks and their interaction options with our customers, as well as in our interest in being able to respond to customer inquiries promptly.

Pinterest

We operate a Pinterest profile at

https://www.pinterest.de/patricks5192/

The Pinterest social network is a service of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter “Pinterest”), a subsidiary of Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA.

By being certified under the EU-US Privacy Shield (international agreement “EU-US Privacy Shield,” https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM&status=Active), the provider undertakes to ensure that the level of data protection in the EU is also complied with when processing data in the USA.

However, the operator of the Pinterest profile has no influence on the platform’s data protection provisions or on the collection, analysis, and use of user data.

The scope and purpose of data collection and the further processing and use of data by Pinterest, as well as your rights and options to protect your privacy, can be found in Pinterest’s privacy policy at: https://policy.pinterest.com/de/privacy-policy

The legal basis for our own processing of posts on the Pinterest profile, such as sharing your content on our page or communicating with you via the social media platform, is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our online presence by linking to social networks and their interaction options.

eBay shop

We also operate a merchant shop on the eBay online marketplace at

https://www.ebay.de/str/mediacartecgmbheshop.

The marketplace is a platform for which eBay GmbH, Albert-Einstein-Ring 2–6, 14532 Kleinmachnow, GERMANY, is responsible under data protection law.

You have already been informed in eBay’s privacy policy (available at: https://pages.ebay.de/help/policies/privacy-policy.html) about the collection and storage of your personal data, as well as the type and purpose of their use. Your consent in this respect was obtained by eBay as part of your registration. We do not collect any additional personal data about you beyond those provided by eBay. You have already consented to eBay transmitting your personal data to us for the purpose of contract processing. The personal data transmitted by eBay to us are stored by us. We use this data

a) to identify you as our customer;

b) to be able to process, fulfill, and execute your order;

c) to correspond with you;

d) for invoicing;

e) for handling any existing liability claims and asserting any claims against you.

As part of your registration with eBay and during order processing, your consent to the processing of this data is obtained.

Data processing takes place at your request and is necessary under Art. 6 (1) sentence 1 (b) GDPR for the purposes mentioned for the proper handling of your order and for the mutual fulfillment of obligations arising from the purchase contract.

The personal data collected by eBay for the processing of your order and transmitted to us will be stored by us until the expiry of the statutory retention period and then deleted, unless we are obliged to longer storage pursuant to Art. 6 (1) sentence 1 (c) GDPR due to tax and commercial retention and documentation obligations (from the German Commercial Code, Criminal Code, or Fiscal Code) or you have consented to storage beyond this pursuant to Art. 6 (1) sentence 1 (a) GDPR. Further information on the storage of your personal data by eBay can be found in eBay’s privacy policy.

Payment service provider PayPal

 

As a payment service provider for processing online payments, we optionally offer payment via PayPal in the shop and in the eBay shop.

The European provider of PayPal is PayPal (Europe) S.à r.l. & Cie. S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg, Luxembourg. PayPal’s privacy principles can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev#1.

When paying via the “purchase on account via PayPal” payment method, the purchase price claim is assigned to PayPal (Europe) S.à r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). The data required for payment processing are transmitted from eBay to PayPal. For the purpose of its own credit check, PayPal transmits data to credit agencies and receives information from them and, if necessary, credit information based on mathematical-statistical procedures (probability or score values), in the calculation of which, among other things, address data are included. By selecting the aforementioned payment method, you agree to the transmission of data to PayPal and to credit checks by PayPal. In the context of credit information, PayPal cooperates with credit agencies. Detailed information on this and the credit agencies used can be found in PayPal’s privacy policy https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE

Duration of storage

After the contract has been fully performed, the data will first be stored for the duration of the warranty period and then, taking into account statutory, in particular tax and commercial retention periods, deleted after the period has expired, unless you have agreed to further processing and use.

The personal data transmitted to PayPal are generally data related to the respective order and necessary for payment processing.

a) payment amount

b) description of payment purpose

c) first name

d) last name

e) address

f) order number

g) IP address

h) possibly email address

i) possibly telephone number, mobile phone number

The processing of your data serves the performance of a contract to which you are party or the implementation of pre-contractual measures, namely for payment processing for an order in our shop or eBay shop. The legal basis for the processing of the data is Art. 6 (1) (b) GDPR.

You have the option of withdrawing your consent to the processing of personal data at any time vis-à-vis PayPal. However, a withdrawal does not affect personal data that must be processed, used, or transmitted for contractual payment processing.

Data collection and processing for payment by installments via easyCredit

For payment by installments via easyCredit, the supplementary data protection information applies: https://www.easycredit-ratenkauf.de/wp-content/uploads/2020/04/rk_ergaenzende_datenschutzhinweise_zum_ratenkauf_by-easycredit_2.0.pdf

Data collection and processing for payment via Klarna

If you choose Klarna’s payment services, we ask for your consent to transmit the data necessary for payment processing and an identity and credit check to Klarna. In Germany, the credit agencies named in Klarna’s privacy policy may be used for identity and credit checks. You can revoke your consent to this use of personal data at any time vis-à-vis Klarna.

With material from the sample privacy policy of the law firm Weiß & Partner