Privacy Policy

§ 1 Information on the Collection of Personal Data and Provider Identification

(1) In the following, we inform you about the collection of personal data when using this website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior.

(2) The controller pursuant to Art. 4 No. 7 EU General Data Protection Regulation (GDPR) is Trigema W. Grupp KG, Josef-Mayer-Str. 31-35, 72393 Burladingen, datenschutz@trigema.de (see our legal notice). Our data protection officer is Ms. Nicole Motiee Tehrani, info@ap-datenschutz.de.

(3) If we use commissioned service providers for individual functions of our offering or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we will also state the defined criteria for the storage period.

§ 2 Rights, in particular the Right to Information and Withdrawal

(1) You have the following rights vis-à-vis us with regard to the personal data concerning you:

• Right of access,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.

(2) If you have given consent to the use of data, you may revoke this at any time. If the lawfulness of the processing is based on consent, it remains valid until the withdrawal is exercised.

(3) Please send all requests for information, access requests or objections to data processing by email to datenschutz@trigema.de or to the address stated in § 1 para. 2.

(4) You may request that we delete your data at any time. Legal retention periods may apply that allow us to retain your data until the expiry of the period.

(5) If your data is incorrect, you have the right to request rectification. We will comply with this request without delay.

(6) You have the right to receive the personal data you have provided to us, where technically possible, in a readable format in order to provide it to another company (right to data portability).

(7) You have the right to lodge a complaint with the supervisory authority responsible for you. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

§ 3 Data Security

(1) We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from unauthorized access by third parties. These are adapted in accordance with the current state of the art.

(2) The SSL - Extended Validation transmission used by us guarantees encryption of up to 256 bits, with a minimum encryption of 128 bits. This ensures that your personal data cannot be read by third parties. In the case of Extended Validation, the green address bar is displayed in highly secure browsers.

(3) Certain computer and internet configurations (e.g. browser settings, provider, firewalls, etc.) may block access to the SSL server. Please check, if necessary, whether your firewall and browser are correctly configured and whether your provider allows SSL.

(4) The password selected by you should be at least 6 characters long. It should not contain any already known name components or other personal data (i.e. not your first or last name, not your date of birth or parts of your telephone number or email address, etc.). Login and password should under no circumstances be identical.

§ 4 Collection of Personal Data for Informational Use and Contact

(1) When using the website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific webpage)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

(2) When you contact us by email or via the contact form, your email address, your name and, if you provide it, your salutation, your company and your request will be stored by us. The purpose of this storage is solely to contact you in order to answer your questions.

(3) The legal basis for collection when contacting us is the consent you have expressed by sending the contact form (Art. 6 para. 1 sentence 1 lit. a GDPR).

(4) We will only use your data for advertising purposes to the extent permitted by law. In particular, we only use your email address for direct advertising of our own similar goods or services. You may object to the use of your data for advertising purposes at any time in writing or in text form (email to datenschutz@trigema.de). In doing so, we rely on your consent or, where applicable, our legitimate interest in promoting our products to our customers pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

(5) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you use, and through which certain information flows to the party setting the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.

§ 5 Cookies

(1) We use cookies on our website. Such cookies are necessary so that you can move freely around the website and use its features; this includes, among other things, access to secure areas of the website. Cookies allow us to track who has visited the website(s) and to derive from this how frequently certain webpages are visited and which parts of the site are particularly popular. Session cookies store information about your activities on our website.

(2) This website uses the following types of cookies, the scope and functioning of which are explained below:

• Transient cookies (temporary use)
• Persistent cookies (time-limited use)
• Third-party cookies

(3) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognized when you return to the website. The session cookies are deleted when you log out or close your browser.

(4) Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

(5) You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that you may then not be able to use all functions of this website.

(6) In order to use our shopping cart, (temporary/permanent) cookies must be allowed. Alternatively, you may also order by telephone or fax. You can reach us by phone Monday to Thursday between 08:00 and 17:00, Fridays from 08:00 to 15:30 at +49 (0) 7475/88 - 0 or by fax at +49 (0) 7475/88 - 228.

(7) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

(8) The cookies used are described by us in the cookie banner.

§ 6 Use of Cookiebot

(1) We use functions of the provider Cookiebot on our website. Cookiebot is operated by Cybot A/S, Havnegade 39, 1058 Copenhagen, DK. Cookiebot offers us, among other things, the option of providing you with a comprehensive cookie notice (also called a cookie banner or cookie notice). By using this function, your data may be sent to, stored and processed by Cybot.

(2) We use Cookiebot in order to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection compliant manner. In addition, the technology behind Cookiebot scans, monitors and evaluates all cookies and tracking measures on this website.

(3) The data mentioned in § 4 is processed by Cookiebot. In addition, an encrypted, anonymous key is generated and stored, which stores proof of consent (via a cookie).

(4) With regard to the use and storage of consent, we rely on Art. 6 para. 1 lit. c GDPR, as we are legally obliged to be able to prove consent (Art. 5 para. 2 GDPR). The option to disable cookies is made possible through the so-called cookie banners. Obtaining consent when setting cookies is a requirement under § 15 para. 3 TMG in conjunction with Art. 7 GDPR (see also ECJ “Planet 49” ECLI:EU:C:2019:801)

§ 7 Hosting/Maintenance of the Website

(1) This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

(2) The hoster is used for the purpose of contract fulfillment vis-à-vis our prospective and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

(3) Our hoster will only process your data insofar as this is necessary to fulfill its performance obligations and will follow our instructions with regard to this data.

(4) In order to ensure processing in compliance with data protection law, we have concluded a data processing agreement with our hoster.

(5) We will not disclose your personal data to third parties unless we inform you about such disclosure.

(6) Our IT service providers have access to our stored data in order to remedy errors and enable us to implement the required technical and organizational measures. In doing so, we rely on our legitimate interest in securing our IT pursuant to Art. 6 para. 1 lit. f GDPR or on the fulfillment of legal obligations pursuant to Art. 6 para. 1 lit. c GDPR.

(7) The IT service provider(s) were carefully selected and commissioned by us in writing. They are bound by our instructions and are regularly monitored by us. The service providers will not pass this data on to third parties.

(8) Your data is not transferred outside the EU/EEA.

§ 8 Use of Our Webshop

(1) If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information required for contract processing is marked separately; all other information is voluntary. We process the data you provide for the purpose of handling your order, including billing. For this purpose, we may pass on your payment data to our principal bank. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

(2) You may voluntarily create a customer account through which we can store your data for future purchases. When creating an account under “My Account”, the data you provide is stored revocably. You can delete all further data, including your user account, at any time in the customer area.

(3) The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods (e.g. under commercial and tax law) remain unaffected.

(4) We use the data you provide to process your order. For this purpose, we pass on your address data to a commissioned shipping company. We delete this data after completion of the contract and expiry of the retention obligations under tax and commercial law. The legal basis for the stated collection is your consent, which you have expressed by creating the customer account or by placing the order (Art. 6 para. 1 lit. a GDPR).

(5) In order to prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted using SSL technology.

§ 9 Mollie

(1) If you choose a payment method (credit card, PayPal or Sofort transfer) from the payment service provider Mollie B.V. (Mollie), payment processing takes place via this payment service provider, to whom we transmit the information you provided during the order process together with the information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number). Your data is passed on solely for the purpose of payment processing with the payment service provider.

(2) Mollie then authenticates the transaction using the authentication procedure deposited with the bank for this purpose. The payment amount is then transferred from your account to our account. Neither we nor third parties have access to your account data.

(3) For more detailed information on payments with Mollie, please refer to Mollie’s terms and conditions and privacy policy at: https://www.mollie.com/de/privacy

§ 10 PayPal

(1) If you choose the payment method “PayPal”, payment is processed via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

(2) Your data is transmitted to PayPal on the basis of Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). Please note PayPal’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

§ 11 Sofort Transfer

(1) If you choose the payment method “Sofort Transfer”, payment is processed via Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”). If you select payment via Sofort Transfer, the payment data you enter will be transmitted to Sofort GmbH.

(2) Using the “Sofort Transfer” procedure, we receive real-time confirmation of payment from Sofort GmbH and can immediately begin fulfilling our obligations.

(3) The transaction is carried out by Sofort GmbH using PIN and valid TAN. In addition to the PIN and TAN, the payment data you entered as well as data concerning your person are transmitted to Sofort GmbH. The data concerning your person includes first and last name, address, telephone number(s), email address, IP address and, if applicable, further data required for payment processing. The transmission of this data is necessary in order to establish your identity beyond doubt and prevent fraud attempts.

(4) Data processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract).

(5) For details on payment with Sofort Transfer, please refer to the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

§ 12 Amazon Pay

(1) If you choose the payment method “Amazon Pay”, payment is processed via the payment service provider Amazon Pay of Amazon Payments Europe s.c.a., 5 Rue Plaetis, 2338 Luxembourg (hereinafter “Amazon Pay”).

(2) With Amazon Pay, you can pay on our website without having to disclose your payment data to us. If you pay with your Amazon account, you will be redirected to Amazon’s website. There you can log in with your account data and authorize the payment. We do not have access to the personal data collected by Amazon Pay. Amazon Pay is responsible for its processing. Further information on data protection in connection with Amazon Pay can be found in Amazon Pay’s Privacy Policy.

§ 13 Creditreform GmbH

(1) Our company regularly checks your creditworthiness when contracts are concluded and, in certain cases where there is a legitimate interest, also for existing customers. For this purpose, we work with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from whom we receive the necessary data. For this purpose, we transmit your name and contact details to Creditreform Boniversum GmbH. The information pursuant to Art. 14 of the EU General Data Protection Regulation concerning the data processing carried out by Creditreform Boniversum GmbH can be found here: www.boniversum.de/eu-dsgvo/

§ 14 VR Payment

(1) Your payment data (IBAN, BIC, card expiry date and sequence number, date, time, amount, terminal identifier, location, company, branch) in the case of a card payment in our trigema stores is passed on to VR Payment and its contractor InterCard AG, Mehlbeerenstr. 4, 82024 Taufkirchen near Munich (“InterCard”) for card verification and payment processing. To prevent card misuse and limit the risk of payment defaults, VR Payment uses InterCard’s services on the basis of Art. 6 para. 1 lit. f GDPR.

§ 15 Use of Our Customer Account

(1) If you wish to use our webshop as a registered user, you must register by providing your email address, a password of your own choosing and your billing address. We use the so-called double opt-in procedure for registration, i.e. your registration is only complete once you have confirmed it by clicking the link contained in the confirmation email sent to you for this purpose. If this confirmation is not received within 24 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory; all further information may be provided voluntarily when using our shop.

(2) If you use our shop as a customer, we store the data required for contract fulfillment, including information on payment methods, until you permanently delete your access. In addition, we store the voluntary data you provide for the duration of your use of the account unless you delete it beforehand. You can manage and modify all information in the protected customer area. The legal basis is Art. 6 para. 1 lit. f GDPR.

(3) In order to prevent unauthorized access by third parties to your personal data, especially financial data, the connection is encrypted using TLS technology.

§ 16 eKomi

(1) “eKomi” is a service of eKomi Holding GmbH (Zimmerstraße 11, 10969 Berlin) for collecting provider and product reviews. Reviews are recorded in the eKomi system, checked and then made available online.

(2) Following your order, eKomi gives you the opportunity to submit a testimonial or review for other persons. For this purpose, you may optionally provide your email address to eKomi so that, for example, you can be informed if your review violates communication rules or laws. In any case, the IP address from which the review was written is stored to prevent misuse. Your review is displayed on our website in anonymized form.

(3) In connection with an online review, we transmit the following data to eKomi in order to enable you to review us or our products: Order number, products ordered, salutation, first/last name, email address, telephone number (if stored) and date of the transaction This data is used to assign reviews to orders and prevent multiple reviews in order to verify them.

(4) You can obtain further information about data protection at eKomi at: https://www.ekomi.de/de/datenschutz/.

(5) The legal basis for data processing is your consent (Art. 6 para. 1 lit. a GDPR) in order to obtain authentic customer reviews and contribute to the company’s public image and positive customer loyalty. You may revoke your consent to this data processing at any time with effect for the future by sending a message to the contact details above.

§ 17 Social Media

(1) On our website, we provide references to various social media. These are merely links to external websites of third-party social media providers and not plugins. When visiting our website, no links are established and no personal data is transmitted to the third-party providers. When clicking the respective button marked with the provider’s symbol, you will be redirected to that provider’s website. At that moment, you leave our website. If you have questions regarding data collection by the third-party providers, please read their privacy policies. We refer to the following social media:

(2) Facebook
Our website links via the “f” button to the social network facebook.com, which for users outside the USA and Canada is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland. Information on data protection can be found here: https://de-de.facebook.com/about/privacy/.
By entering into so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 para. 2 GDPR, Facebook Ireland ensures a comparable level of data protection for data transfers to its parent company in the USA. Further information can be found at: https://www.facebook.com/legal/EU_data_transfer_addendum..

(3) X (Twitter)
By clicking the button with the bird symbol, you will be taken to the microblogging service of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland; by entering into so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 para. 2 GDPR, Twitter ensures a comparable level of data protection for data transfers to its parent company in the USA. Further information can be found at: https://gdpr.twitter.com/en/controller-to-controller-transfers.html, and information on data protection can be found here: https://twitter.com/de/privacy

(4) Instagram
Instagram is a service of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
Further information can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.

(5) YouTube
YouTube is a video platform of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Further information on YouTube’s data processing and possible privacy settings can be found at: https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/#your-data-in-youtube.

(6) TikTok,
TikTok is a video platform for short clips that also offers functions of a social network. It is operated by the Chinese company ByteDance (Chinese name: Douyin/抖音短视频). Further information can be found at: https://www.tiktok.com/legal/page/eea/privacy-policy/de.

§ 18 Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our latest interesting new products and offers. When registering to use the user account or participating in one of our competitions, you can choose to subscribe to the trigema newsletter. To do so, you must tick the box next to “Subscribe to the email newsletter”.

(2) We use the so-called double opt-in procedure for newsletter registration. This means that after your registration we send an email to the email address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses used and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, clarify any possible misuse of your personal data. The legal basis is Art. 6 para. 1 lit. f GDPR.

(3) The only mandatory information required for sending the newsletter is your email address and billing address. The provision of further separately marked data is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 lit. a GDPR.

(4) The data you provide to us for the purpose of receiving the newsletter will be stored by us or by the newsletter service provider (Inxmail GmbH) until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.

(5) After you have been removed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist in order to prevent future mailings. The data from the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You may object to storage if your interests outweigh our legitimate interest.

(6) You may revoke your consent to receiving the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter email, by email to datenschutz@trigema.de or by sending a message to the contact details stated in the legal notice.

(7) Please note that when sending the newsletter, we evaluate your user behavior. For this evaluation, the emails sent contain so-called web beacons, also known as tracking pixels. These are one-pixel image files that link to our website and thus enable us to evaluate your user behavior. This is done by collecting the data mentioned in § 4 of this declaration as well as web beacons assigned to your email address and linked to an individual ID. Links received in the newsletter also contain this ID. With the data obtained in this way, we create a user profile in order to tailor the newsletter to your interests. In doing so, we record when you read our newsletters, which links you click in them and infer your personal interests from this. We link this data with actions you have taken on our website. The newsletter provider stores the information collected in this way on its server in Germany.

(8) You may object to this tracking at any time by clicking the separate link provided in each email or by informing us at datenschutz@trigema.de).

§ 19 Web Tracking - Google Analytics

(1) If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”: text files stored on your computer that enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a server of Google LLC in the USA. If IP anonymization is activated on this website, however, your IP address will first be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services related to website use and internet use to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in shortened form, so that personal reference can be ruled out. Insofar as the data collected about you is personally identifiable, this is immediately excluded and the personal data is therefore promptly deleted.

(5) We use Google Analytics in order to analyze the use of our website and regularly improve it. The statistics obtained allow us to improve our offering and make it more interesting for you as a user.

(6) For the exceptional cases in which personal data is transferred to the USA, Google Ireland assures through certification under the EU-US Data Privacy Framework pursuant to Art. 46 para. 2 lit. b GDPR that a comparable level of data protection is ensured for data transfers to this third country. Further information can be found at: https://privacy.google.com/businesses/compliance/#!#gdpr

(7) The legal basis for the use of Google Analytics is your consent, i.e. Art. 6 para. 1 lit. a GDPR.

(8) Third-party provider information: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland,
Terms of use: http://www.google.com/analytics/terms/de.html,
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

(9) We use enhanced matching, whereby additional data such as your email address is transmitted to Google as hash values. In hashing, an input value (such as your email address) is converted into a checksum from which the original input value cannot be inferred. Therefore, Google cannot directly view the transmitted hashed data. However, the hash value enables Google to track which websites were visited and whether purchases were made.

§ 20 Google Analytics Remarketing

(1) This website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

(2) This function makes it possible to link advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google Ads and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and browsing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).

(3) If you have given the corresponding consent, Google will link your web and app browsing history with your Google account for this purpose. In this way, the same personalized advertising messages can be placed on every device on which you sign in with your Google account.

(4) To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked with our Google Analytics data in order to define and create audiences for cross-device advertising.

(5) You can permanently object to cross-device remarketing/targeting by disabling personalized advertising; please follow this link: https://www.google.com/settings/ads/onweb/.

(6) The aggregation of the data collected in your Google account takes place exclusively on the basis of your consent, which you may give or revoke vis-à-vis Google (Art. 6 para. 1 lit. a GDPR). In the case of data collection processes that are not merged into your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of the data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the website operator’s interest in the anonymized analysis of website visitors for advertising purposes.

(7) Further information and Google’s privacy policy can be found at: https://policies.google.com/technologies/ads?hl=de.

§ 21 Use of Google Ads

(1) This website uses the online advertising service Google Ads, through which advertising tailored to your interests can be presented to you. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We pursue the interest of showing you advertisements that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These ads can be recognized by the “Google Ads” notice in the respective advertisement.

(2) By visiting our website, Google receives the information that you have accessed our website. The data mentioned in § 4 of this declaration is transmitted. We have neither influence over the data collected, nor do we know the full extent of data collection and the storage period. Your data is transferred to the USA and evaluated there. If you are logged into your Google account, your data can be assigned directly to it. If you do not want the association with your Google profile, you must log out first. It is possible that this data may be disclosed by Google to contractual partners, other third parties and authorities. The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR. This website has also activated Google AdSense advertisements from third parties. The aforementioned data may be transmitted to these third parties (named at https://support.google.com/dfp_sb/answer/94149).

(3) The legal basis for the transfer of personal data to Google is your consent, i.e. Art. 6 para. 1 lit. a GDPR.

(4) You can prevent the installation of Google AdSense cookies in various ways: a) by configuring your browser software accordingly. In particular, suppressing third-party cookies means that you will not receive ads from third-party providers. b) By disabling interest-based ads at Google via the link http://www.google.de/ads/preferences, although this setting will be deleted if you delete your cookies. c) By disabling the interest-based ads of providers that are part of the self-regulatory campaign “About Ads” via the link http://www.aboutads.info/choices, although this setting will be deleted if you delete your cookies. d) By permanently disabling them in your browsers Firefox, Internet Explorer or Google Chrome via the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offering in full.

(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland assures through certification under the EU-US Data Privacy Framework pursuant to Art. 46 para. 2 lit. b GDPR that a comparable level of data protection is ensured for data transfers to this third country. Further information can be found at: https://privacy.google.com/businesses/compliance/#!#gdpr

(6) Further information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options to protect your privacy, can be obtained from: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Terms of use: http://www.google.com/analytics/terms/de.html,
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

(7) We use enhanced matching, whereby additional data such as your email address is transmitted to Google as hash values. In hashing, an input value (such as your email address) is converted into a checksum from which the original input value cannot be inferred. Therefore, Google cannot directly view the transmitted hashed data. However, the hash value enables Google to track which websites were visited and whether purchases were made.

(8) For the formation of target groups, we also use Google Ads Remarketing customer matching. In this process, certain customer data, such as email addresses from our customer lists, is transferred to Google. If the relevant Google users are logged into their Google account, they may be shown appropriate advertising messages within the Google network, such as on Gmail, YouTube or in Google Search.

§ 22 Use of Google Tag Manager

(1) Google Tag Manager is a tool that allows marketers to manage website tags via an interface. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

(2) The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager. For further information, see: https://www.google.de/analytics/terms/tag-manager/.

(3) The legal basis for the transfer of personal data to Google is your consent, i.e. Art. 6 para. 1 lit. a GDPR.

(4) For the exceptional cases in which personal data is transferred to the USA, Google Ireland assures through certification under the EU-US Data Privacy Framework pursuant to Art. 46 para. 2 lit. b GDPR that a comparable level of data protection is ensured for data transfers to this third country. Further information can be found at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 23 Use of Google Adwords Conversion

(1) We use Google Adwords in order to draw attention to our attractive offers on external websites by means of advertising material (so-called Google Adwords). In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. In doing so, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting to you and achieving a fair calculation of advertising costs.

(2) This advertising material is delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, by means of which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you reach our website via a Google ad, a cookie is stored by Google Adwords on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are generally stored as analysis values.

(3) These cookies allow Google to recognize your internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify the users based on this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google may assign the visit to your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will learn and store your IP address.

(5) You can prevent participation in this tracking process in various ways: a) by configuring your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive ads from third-party providers; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently disabling them in your browsers Firefox, Internet Explorer or Google Chrome via the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offering in full.

(6) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

(7) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has agreed by concluding so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 para. 2 lit. c GDPR that a comparable level of data protection is ensured for data transfers to this third country. Further information can be found at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 24 Bing Ads

(1) Our online offerings also use Microsoft conversion tracking (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). In this process, Microsoft Bing Ads places a cookie on your computer if you have reached our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognize that someone clicked on an ad, was redirected to our website and reached a previously defined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the user’s identity is disclosed.

(2) If you do not wish to participate in the tracking process, you may also refuse the setting of the cookie required for this purpose – for example via a browser setting that generally disables the automatic setting of cookies.

(3) Further information on data protection and the cookies used by Microsoft Bing can be found on Microsoft’s website: https://privacy.microsoft.com/de-de/privacystatement

§ 25 Econda

(1) For the needs-based design and optimization of this website, anonymized data is collected and stored using solutions and technologies from econda GmbH, and usage profiles are created from this data using pseudonyms. For this purpose, cookies may be used that enable the recognition of an internet browser. However, usage profiles are not merged with data about the bearer of the pseudonym without the express consent of the visitor. In particular, IP addresses are rendered unrecognizable immediately upon receipt, so that it is not possible to assign usage profiles to IP addresses.

(2) Visitors to this website may object to this data collection and storage at any time with effect for the future here. Data protection at Econda: https://www.econda.de/datenschutzerklaerung/

§ 26 Pinterest

(1) This website uses the “Pinterest Tag” of Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter: “Pinterest”). This tracking instrument collects information about visitors’ interactions with this website and transmits it to Pinterest. This includes, for example, information such as viewing product detail pages, adding products to the shopping cart or purchased products.

(2) Pinterest processes the transmitted information independently and may combine this information with data that Pinterest has collected about you on other websites as well as data that Pinterest has collected about your user behavior on the Pinterest platform. Based on this information, Pinterest may create advertising profiles and display interest-based advertisements in the form of sponsored pins on and outside the Pinterest platform. Pinterest may also use information about the behavior of visitors to this website to advertise third-party offers. Pinterest may also aggregate the collected information and use it for its own advertising purposes and for the advertising purposes of third parties. The website operator can use the information collected to evaluate the effectiveness of Pinterest advertisements for statistical and market research purposes and optimize future advertising measures.

(3) The data collected is anonymous for the website operator, i.e. no conclusions can be drawn about the identity of website visitors. Pinterest uses the collected data on the basis of its privacy policy, which can be consulted here: https://policy.pinterest.com/de/privacy-policy

§ 27 Facebook Pixel

(1) Our website uses so-called conversion and retargeting tags (also “Facebook Pixel”) of the social network Facebook for marketing purposes. The provider is Facebook Ireland Ltd., 4 Grand Canal Square, Dublin, Ireland Dublin 2 (“Facebook”). We use Facebook Pixel to analyze the general use of our website and to track the effectiveness of Facebook advertising (“conversion”). We also use Facebook Pixel to show you individualized advertising messages based on your interest in our products (“retargeting”).

(2) The legal basis for the collection of data by Facebook Pixel is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which is obtained beforehand (e.g. in the cookie banner).

(3) Facebook processes data that the service collects via cookies and similar technologies on our website. The data arising in this context may be transferred by Facebook to a server of the parent company Facebook Inc. in the USA for evaluation and stored there. Through certification under the EU-US Data Privacy Framework pursuant to Art. 46 para. 2 lit. c GDPR, Facebook ensures a comparable level of data protection for data transfers to its parent company in the USA.

(4) If you are a Facebook member and have allowed Facebook to do so via the privacy settings of your account, Facebook may also link the information collected about your visit to us with your member account and use it for the targeted placement of Facebook ads.

(5) You can view and change the privacy settings of your Facebook profile at any time. You can prevent data processing by clicking the following link: https://de-de.facebook.com/help/193677450678703

(6) If you deactivate Facebook’s data processing, Facebook will only display general Facebook ads that are not selected on the basis of the information collected about you.

§ 28 Kamelooon

(1) This website uses the test and web analytics service Kameleoon. The program enables analysis of user behavior based on user segmentations. By evaluating the log file data, we can determine how the individual user segments visit the website, which landing pages are visited and how click-through rates can be increased.

(2) For the analyses, as described above, cookies/local storage of the browser are used, which are linked to a pseudonymized ID. Your IP address is completely anonymized and not stored. The information generated by the cookie/local storage about your use of this website is transmitted to a server of Kameleoon in Germany and stored there in aggregated and pseudonymized form. The IP address transmitted by your browser in the context of Kameleoon is not merged with other Kameleoon data.

(3) The use of Kameleoon serves to evaluate your use of the website and compile reports on website activities so that we can regularly improve our offering. The legal basis for storing the cookie is the consent given (Art. 6 para. 1 sentence 1 lit. a GDPR). Further analysis of the data collected is carried out over a period of max. 380 days on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) You can prevent the storage of cookies/local storage by setting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. In addition, you can deactivate Kameleoon tracking at any time (and thus prevent the collection of the data generated by the cookie and relating to your use of the website for Kameleoon as well as the processing of this data by Kameleoon) by clicking the following link: http://www.trigema.de#kameleoonOptout=true

§ 29 Plugin: YouTube

(1) We have integrated YouTube videos into our online offering that are stored on http://www.youtube.com and can be played directly from our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The videos are all integrated in “enhanced privacy mode”, meaning that no data about you as a user is transmitted to YouTube if you do not play the videos. Only if you play the videos will the data mentioned in para. 2 be transmitted. We have no influence on this data transmission.

(2) By visiting the website, YouTube (and therefore always Google) receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 4 of this declaration is transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want the assignment to your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses it for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) The legal basis for the transfer of personal data to YouTube is your consent, i.e. Art. 6 para. 1 lit. a GDPR.

(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de.

(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland assures through certification under the EU-US Data Privacy Framework pursuant to Art. 46 para. 2 lit. b GDPR that a comparable level of data protection is ensured for data transfers to the USA. Further information can be found at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 30 Plugin: Google Maps

(1) On this website, we use the Google Maps service. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google). This enables us to display interactive maps directly on the website and allows you to use the map function conveniently.

(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 4 of this declaration is transmitted. This takes place regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want the assignment to your Google profile, you must log out before activating the button. Google stores your data as user profiles and uses it for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

(3) The legal basis for the transfer of personal data to Google is your consent, i.e. Art. 6 para. 1 lit. a GDPR.

(4) Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider’s privacy policies. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland assures through certification under the EU-US Data Privacy Framework pursuant to Art. 46 para. 2 lit. b GDPR that a comparable level of data protection is ensured for data transfers to the USA. Further information can be found at: https://privacy.google.com/businesses/compliance/#!#gdpr

§ 31 Use of jQuery

(1) Our website uses the JavaScript extension jQuery, which is loaded via the website code.jquery.com. In this context, program libraries are called from StackPath servers. The provider is The OpenJS Foundation, 1 Letterman Drive, Building D, Suite D4700, San Francisco, CA 94129, USA.

(2) When a webpage is accessed, your browser loads the required program libraries into your browser cache. For this purpose, the browser you use must connect to jQuery servers located in the USA. The use of jQuery is in the interest of an optimized and appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.

(3) By entering into so-called Standard Contractual Clauses (SCCs) pursuant to Art. 46 para. 2 lit. c GDPR, jQuery ensures a comparable level of data protection for data transfers to the USA.

(4) Further information on jQuery can be found at www.jquery.com.

§ 32 Google reCAPTCHA

(1) We use the Google reCAPTCHA service on our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This service is used to distinguish natural persons from so-called “bots” (machine and automated processing) during logins. In this context, the IP address may be transmitted to Google. This results in the transfer of personal data to Google.

(2) The legal basis for the transfer of personal data to Google is our legitimate interest in the security and availability of our website, i.e. Art. 6 para. 1 lit. f GDPR.

(3) In the event of the transfer of personal data by Google to the parent company based in the USA (Google LLC), Google Ireland assures through certification under the EU-US Data Privacy Framework pursuant to Art. 46 para. 2 lit. b GDPR that a comparable level of data protection is ensured for data transfers to this third country. Further information can be found at: https://privacy.google.com/businesses/compliance/#!#gdpr

(4) Further information on Google reCAPTCHA and Google’s privacy policy can be viewed at: https://policies.google.com/privacy?hl=de

§ 33 Data Collection for the Purpose of Application Procedures

(1) We offer vacancies on our homepage. If you apply for a position, we will store your application documents submitted by post, contact form or email until the application process has ended.

(2) If we decide not to select you, we will destroy your application documents four months after the end of the application process. In this context, we rely on our legitimate interest in an efficient legal defense pursuant to Art. 6 para. 1 lit. f GDPR in conjunction with § 21 para. 5 AGG. The preclusion period for such claims is 2 months.

(3) The processing of your applicant data is based on § 26 para. 1 BDSG, as it is necessary for establishing an employment relationship.

§ 34 Security/Video Surveillance

(1) The trigema petrol stations are under video surveillance on the basis of Art. 6 para. 1 lit. f GDPR in the legitimate interest of Trigema W. Grupp KG.

(2) You are informed of the surveillance by a notice at the entrance to the trigema petrol stations.

(3) The data processing serves to safeguard domiciliary rights, prevent theft, protect our customers, suppliers and employees from dangerous situations and robberies, protect property, namely buildings including furnishings, cash holdings and goods, and preserve evidence after criminal offences.

(4) The data is deleted automatically by the system after two months, provided that no incidents within the meaning of the legitimate interest of Trigema W. Grupp KG have occurred.