for the xeno-kitchen.com website in accordance with Art. 13 GDPR
We are delighted that you are visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. We would like to use this data protection information to inform you about the processing of your personal data in connection with our website.
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
MHK Holding UK LTD
1310 Solihull Parkway
GB-B37 7YB Birmingham / West Midlands
Telephone: 0)121-7965310
Fax: 0)121-7965310
E-Mail: info@mhkgroup.co.uk
Name and address of the data protection officer
The data protection officer of the controller is:
Kanzlei Krüger
Edith Krüger, lawyer
Bahnhofstraße 44-46
65185 Wiesbaden
Germany
Phone: +49 (0) 611 23 60 176 0
Email: kanzlei@datenschutz-krueger.de
General information on data processing
Legal basis for the processing of personal data
We would like to inform you about the basis of our data processing, as required by Art. 13 GDPR:
• When we ask for your consent, we refer to Art. 6(1)(a) in conjunction with Art. 7 GDPR.
• When processing your data in order to provide our services, fulfil contracts or respond to your enquiries, we rely on Article 6(1)(b) of the GDPR.
• To fulfil our legal obligations, we rely on Article 6(1)(c) of the GDPR.
• If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, the legal basis is Art. 6(1)(e) GDPR.
• Sometimes we need to process your data to protect the legitimate interests of our company or a third party – but only if your rights do not override these interests. In such cases, Art. 6(1)(f) GDPR is our basis.
• In the event that vital interests of the data subject or another natural person require the processing of personal data, we use Art. 6(1)(d) GDPR as the basis.
Data deletion and storage period
We adhere to the principles of data minimisation in accordance with Art. 5 (1) (c) GDPR and storage limitation in accordance with Art. 5 (1) (e) GDPR.
We only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the retention periods stipulated by law. Once the respective purpose no longer applies or once these retention periods have expired, the corresponding data will be deleted as quickly as possible.
Note on data transfer to third countries
Our website also incorporates tools from companies based in third countries. If these tools are active, your personal data may be transferred to the servers of the respective companies.
The level of data protection in third countries does not generally comply with EU data protection law. This means that there is a risk that your data may be passed on to authorities in these countries. We have no influence on these processing activities.
External links
This website may contain links to third-party websites or other websites for which we are responsible. If you follow a link to one of the websites outside our responsibility, please note that these websites have their own privacy policies. We accept no responsibility or liability for these external websites and their privacy policies. Therefore, before using these websites, please check whether you agree with their privacy policies.
External links can be recognised either by the fact that they are slightly different in colour from the rest of the text or by the fact that they are underlined. Your cursor will indicate external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. In doing so, the operator of the other website will receive, in particular, your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and other information that you will find in the privacy policy of the respective provider.
Please also note that individual links may lead to data being transferred outside the European Economic Area. This could give foreign authorities access to your data. You may have no legal recourse against such access to your data. If you do not want your personal data to be transferred to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.
Rights of the data subject
We would like to explain your rights with regard to your personal data. These rights are set out in the General Data Protection Regulation (GDPR):
• Right of access (Art. 15 GDPR): You have the right to know what data we have stored about you, why we store it and to whom it is disclosed.If you submit a request for information that is not in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.
• Right to rectification (Art. 16 GDPR): If something about your data is incorrect, you can ask us to correct it.
• Right to erasure (Art. 17 GDPR): You can request that we delete your data if there is no longer a valid reason to store it.
•Right to restriction of processing (Art. 18 GDPR): Sometimes you may not want us to delete your data completely, but you also do not want us to actively use it. In this case, you can ask us to restrict the processing of your data.
• Right to object (Art. 21 GDPR): If we use your data for certain purposes, you can object to this. You always have the right to say no, especially when it comes to direct marketing.
• Right to data portability (Art. 20 GDPR): You can receive your data in a commonly used format and have it transferred to another service.
• Right to lodge a complaint with a supervisory authority: If you believe that we are not handling your data correctly, you can lodge a complaint with a data protection authority. You can lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.
• Right to withdraw consent: If you have given us permission to use your data, you can withdraw this permission at any time.
Provision of the website (webhosting)
When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.
This includes:
• IP address of the website visitor's device
• Device used
• Host name of the accessing computer
• Operating system of the visitor
• Browser type and version
• Name of the file accessed
• Time of the server request
• Amount of data
• Information on whether the data was successfully retrieved
This data is not merged with other data sources.
Instead of operating this website on our own server, we can also have it operated on the server of an external service provider (hosting company), which we have mentioned above in this case. The personal data collected by this website is then stored on the servers of the hosting company.
In addition to the above-mentioned data, the web host also stores contact enquiries, contact details, names, website access data, meta and communication data and other data generated via a website for us.
Data processing on our website is primarily based on Art. 6(1)(f) GDPR. Our goal is to offer you a technically flawless and optimised website. This is our legitimate interest.
If you visit our website to enter into contract negotiations with us or to conclude a contract, Art. 6 (1) lit. b GDPR also applies as a legal basis.
In the event that we have commissioned a hosting company for our website, we would like to inform you that we have a special contract with this provider for order processing, which ensures the protection of your data.
Use of local storage items, session storage items and cookies
Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your device. This data usually includes user preferences, such as the ‘day’ or ‘night mode’ of a website, and remains stored until you manually delete it. Session storage is very similar to local storage, except that the storage period only lasts for the current session, i.e. until the current tab is closed. After that, the session storage items are deleted from your device. Cookies are pieces of information that a web server (server that provides web content) stores on your device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after you leave a website, or stored permanently (permanent cookies) on your device until you delete them yourself or your web browser automatically deletes them.
These objects may also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us as the operator and you as a visitor to this website to use certain services from third parties that are installed on this website. Examples of this include the processing of payment services or the display of videos.
These mechanisms have a wide range of uses. They can improve the functionality of a website, control shopping basket functions, increase the security and convenience of website use, and perform analyses of visitor flows and behaviour. Depending on the individual functions, these are classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping basket function) or serve to optimise the website (e.g. cookies to measure visitor behaviour), their use is based on Art. 6 (1) lit. f GDPR. As a website operator, we have a legitimate interest in storing local storage items, session storage items and cookies for the technically error-free and optimised provision of our services. In all other cases, local storage items, session storage items and cookies are only stored with your express consent (Art. 6(1)(a) GDPR).
If local storage items, session storage or cookies from third-party companies or for analysis purposes are used, we will inform you separately in this privacy policy. Your required consent will be requested and can be revoked at any time.
Use of external services
External services are used on our website. External services are services from third-party providers that are used on our website. This may be done for various reasons, for example to embed videos or for the security of the website. When using these services, personal data is also passed on to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website before using them, which you can revoke at any time (Art. 6 (1) (a) GDPR).
Analytics
We process personal data from website visitors to analyse user behaviour. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This enables us to increase the user-friendliness of our website. Using the analysis tools employed, we can, for example, create user profiles for the display of targeted or interest-based advertising messages, recognise our website visitors the next time they visit our website, measure their click/scroll behaviour and downloads, create heat maps, recognise page views, measure the duration of visits or bounce rates, and trace the origin of website visitors (city, country, which page the visitor comes from). With the help of the analysis tools, we can improve our market research and marketing activities.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
Google Analytics
We use the Google Analytics service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the United States). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Microsoft Advertising Web Analytics
We use the Microsoft Advertising Web Analytics service on our website. The provider of this service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Use of the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://privacy.microsoft.com/de-de/privacystatement
Consent Management
In order to comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for setting cookies or using external services. The consents are stored.
The processing is necessary for the fulfilment of a legal obligation to which the controller (website operator) is subject. The legal basis for the processing is therefore Art. 6 (1) (c) GDPR.
Cookiebot
We use the Cookiebot service on our website. The provider of the service is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
Further information can be found in the provider's privacy policy at the following URL: https://www.cookiebot.com/de/privacy-policy/
Content Delivery Network (CDN)
We use a Content Delivery Network (CDN) to optimise the performance and availability of our website. To do this, the service provider that provides this network processes your IP address and information about when you visited our website. All further information on data processing by this service provider can be found in its privacy policy.
We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.
CloudFlare
We use the CloudFlare service on our website. The provider of this service is Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.
As this service is hosted locally on the web server, no data is transferred to third parties.
Interface software / tracking tool
Business processes run more cost-effectively, faster and with fewer errors when they are automated using software via interfaces. This allows them to be efficiently integrated into company processes via the company's own website or social networks. We use interface software on our website to link different applications and to transfer personal data securely from one application to another.
Processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing will not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
Google Tag Manager
We use the Google Tag Manager service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.
Search Engine
To make it easier to find content on our website, a search engine from a third-party provider has been integrated. Integrating the search engine on the website results in technical data such as the IP address being transmitted to the third-party provider.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you revoke your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until revocation remains unaffected.
We use the Google service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using the service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Social media
We use social media plugins to connect our website to our social media channels. The integration of plugins is intended to make it easier for visitors to our website to follow our channels on social networks, share content, like or comment on it. Some social media plugins enable the analysis of the user behaviour of website visitors with regard to their behaviour on social networks. The use of plugins is intended to increase the awareness and number of followers of our channels.
The plugins also process personal data and transfer data to these social networks. This transfer takes place as soon as the website is accessed. Processed data includes, for example: name, address, email address, telephone number, access time, device information, IP address.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing will not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
We use the Facebook service on our website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, D02x525, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://www.facebook.com/privacy/policy
The service uses cookies on our website and stores data in the browser's local or session storage:
Facebook Connect
We use the Facebook Connect service on our website. The provider of the service is Meta Platforms Ireland Limited (Marketplace), 4 Grand Canal Square Grand Canal Harbour Dublin 2, Ireland.
Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://de-de.facebook.com/policy.php
We use the Pinterest service on our website. The provider of this service is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
Using this service may result in data being transferred to a third country (the United States).
Further information can be found in the provider's privacy policy at the following URL: https://policy.pinterest.com/en/privacy-policy
Web security
We use tools on our website that protect against unauthorised access, spam or other attacks. These increase the security and functionality of our website.
We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest is to ensure the security and functionality of our website and to protect ourselves against unauthorised access, spam and other attacks.
Friendly Captcha
We use the Friendly Captcha service on our website. The provider of this service is Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.
Further information can be found in the provider's privacy policy at the following URL: https://friendlycaptcha.com/de/legal/privacy-end-users/
Advertising
Our website uses tools that facilitate or enable the placement of advertisements and the evaluation of the success of placed advertisements. For this purpose, personal data is processed, in particular the IP address, access times and device information.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
Google Ads
We use the Google Ads service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Google Ad Sense
We use the Google Ad Sense service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the United States). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Google Double Click
We use the Google Double Click service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Email marketing tool
Maileon
Our website uses the Maileon email marketing tool from XQueue GmbH. Maileon is an all-in-one platform for email marketing and automation that helps us communicate with you and send you relevant information.
Type of data processed
If you subscribe to our newsletter or use other services provided via Maileon, the following personal data may be processed:
• Email address
• Name (if provided)
• Additional information that you voluntarily provide
• Technical information such as IP address, browser type, operating system
• Information about your usage behaviour (e.g. opening the newsletter, clicking on links)
Purpose of data processing
Your data is processed for the following purposes:
• Sending newsletters and other electronic communications
• Personalising content based on your interests
• Analysing the effectiveness of our communication
• Optimising our offers and services
• Statistical evaluation of user behaviour
Legal basis for processing
Your data is processed on the basis of:
• Your consent in accordance with Art. 6(1)(a) GDPR (e.g. when registering for the newsletter)
• Our legitimate interest in accordance with Art. 6(1)(f) GDPR in the analysis, optimisation and economic operation of our offering
Newsletter tracking
Our newsletters sent via Maileon contain so-called tracking pixels (also known as ‘web beacons’). A tracking pixel is a miniature graphic embedded in HTML emails that enables log file recording and analysis. This allows us to statistically evaluate whether and when you have opened an email and which links you have clicked on. We use this information to optimise our newsletters and better tailor them to your interests.
Recipients of the data
Your data will be transmitted to XQueue GmbH, Christian-Pless-Str. 11-13, 63069 Offenbach am Main, Germany, as the operator of Maileon. XQueue GmbH processes your data within the scope of order processing in accordance with Art. 28 GDPR. Your data will not be passed on to third parties unless we are legally obliged to do so or you have expressly consented to this.
Data protection information for contacting us
Contacting us by letter, email or telephone
If you send us enquiries by email, telephone or fax, the data you provide us with by email or telephone will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.
The data you send us by email, telephone or fax will remain with us for 6 months, unless you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). If a contractual relationship is established or the data is subsequently required for billing purposes, we are subject to the statutory retention periods of up to 10 years and will delete your data after these periods have expired.
Current status and changes to this privacy policy
This privacy policy is currently valid and was last updated on 9 January 2026.
Due to the further development of our website and the services offered on it, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.
for the xeno-kitchen.com website in accordance with Art. 13 GDPR
We are delighted that you are visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. We would like to use this data protection information to inform you about the processing of your personal data in connection with our website.
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
MHK Holding UK LTD
1310 Solihull Parkway
GB-B37 7YB Birmingham / West Midlands
Telephone: 0)121-7965310
Fax: 0)121-7965310
E-Mail: info@mhkgroup.co.uk
Name and address of the data protection officer
The data protection officer of the controller is:
Kanzlei Krüger
Edith Krüger, lawyer
Bahnhofstraße 44-46
65185 Wiesbaden
Germany
Phone: +49 (0) 611 23 60 176 0
Email: kanzlei@datenschutz-krueger.de
General information on data processing
Legal basis for the processing of personal data
We would like to inform you about the basis of our data processing, as required by Art. 13 GDPR:
• When we ask for your consent, we refer to Art. 6(1)(a) in conjunction with Art. 7 GDPR.
• When processing your data in order to provide our services, fulfil contracts or respond to your enquiries, we rely on Article 6(1)(b) of the GDPR.
• To fulfil our legal obligations, we rely on Article 6(1)(c) of the GDPR.
• If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, the legal basis is Art. 6(1)(e) GDPR.
• Sometimes we need to process your data to protect the legitimate interests of our company or a third party – but only if your rights do not override these interests. In such cases, Art. 6(1)(f) GDPR is our basis.
• In the event that vital interests of the data subject or another natural person require the processing of personal data, we use Art. 6(1)(d) GDPR as the basis.
Data deletion and storage period
We adhere to the principles of data minimisation in accordance with Art. 5 (1) (c) GDPR and storage limitation in accordance with Art. 5 (1) (e) GDPR.
We only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the retention periods stipulated by law. Once the respective purpose no longer applies or once these retention periods have expired, the corresponding data will be deleted as quickly as possible.
Note on data transfer to third countries
Our website also incorporates tools from companies based in third countries. If these tools are active, your personal data may be transferred to the servers of the respective companies.
The level of data protection in third countries does not generally comply with EU data protection law. This means that there is a risk that your data may be passed on to authorities in these countries. We have no influence on these processing activities.
External links
This website may contain links to third-party websites or other websites for which we are responsible. If you follow a link to one of the websites outside our responsibility, please note that these websites have their own privacy policies. We accept no responsibility or liability for these external websites and their privacy policies. Therefore, before using these websites, please check whether you agree with their privacy policies.
External links can be recognised either by the fact that they are slightly different in colour from the rest of the text or by the fact that they are underlined. Your cursor will indicate external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. In doing so, the operator of the other website will receive, in particular, your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and other information that you will find in the privacy policy of the respective provider.
Please also note that individual links may lead to data being transferred outside the European Economic Area. This could give foreign authorities access to your data. You may have no legal recourse against such access to your data. If you do not want your personal data to be transferred to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.
Rights of the data subject
We would like to explain your rights with regard to your personal data. These rights are set out in the General Data Protection Regulation (GDPR):
• Right of access (Art. 15 GDPR): You have the right to know what data we have stored about you, why we store it and to whom it is disclosed.If you submit a request for information that is not in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.
• Right to rectification (Art. 16 GDPR): If something about your data is incorrect, you can ask us to correct it.
• Right to erasure (Art. 17 GDPR): You can request that we delete your data if there is no longer a valid reason to store it.
•Right to restriction of processing (Art. 18 GDPR): Sometimes you may not want us to delete your data completely, but you also do not want us to actively use it. In this case, you can ask us to restrict the processing of your data.
• Right to object (Art. 21 GDPR): If we use your data for certain purposes, you can object to this. You always have the right to say no, especially when it comes to direct marketing.
• Right to data portability (Art. 20 GDPR): You can receive your data in a commonly used format and have it transferred to another service.
• Right to lodge a complaint with a supervisory authority: If you believe that we are not handling your data correctly, you can lodge a complaint with a data protection authority. You can lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.
• Right to withdraw consent: If you have given us permission to use your data, you can withdraw this permission at any time.
Provision of the website (webhosting)
When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.
This includes:
• IP address of the website visitor's device
• Device used
• Host name of the accessing computer
• Operating system of the visitor
• Browser type and version
• Name of the file accessed
• Time of the server request
• Amount of data
• Information on whether the data was successfully retrieved
This data is not merged with other data sources.
Instead of operating this website on our own server, we can also have it operated on the server of an external service provider (hosting company), which we have mentioned above in this case. The personal data collected by this website is then stored on the servers of the hosting company.
In addition to the above-mentioned data, the web host also stores contact enquiries, contact details, names, website access data, meta and communication data and other data generated via a website for us.
Data processing on our website is primarily based on Art. 6(1)(f) GDPR. Our goal is to offer you a technically flawless and optimised website. This is our legitimate interest.
If you visit our website to enter into contract negotiations with us or to conclude a contract, Art. 6 (1) lit. b GDPR also applies as a legal basis.
In the event that we have commissioned a hosting company for our website, we would like to inform you that we have a special contract with this provider for order processing, which ensures the protection of your data.
Use of local storage items, session storage items and cookies
Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your device. This data usually includes user preferences, such as the ‘day’ or ‘night mode’ of a website, and remains stored until you manually delete it. Session storage is very similar to local storage, except that the storage period only lasts for the current session, i.e. until the current tab is closed. After that, the session storage items are deleted from your device. Cookies are pieces of information that a web server (server that provides web content) stores on your device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after you leave a website, or stored permanently (permanent cookies) on your device until you delete them yourself or your web browser automatically deletes them.
These objects may also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us as the operator and you as a visitor to this website to use certain services from third parties that are installed on this website. Examples of this include the processing of payment services or the display of videos.
These mechanisms have a wide range of uses. They can improve the functionality of a website, control shopping basket functions, increase the security and convenience of website use, and perform analyses of visitor flows and behaviour. Depending on the individual functions, these are classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping basket function) or serve to optimise the website (e.g. cookies to measure visitor behaviour), their use is based on Art. 6 (1) lit. f GDPR. As a website operator, we have a legitimate interest in storing local storage items, session storage items and cookies for the technically error-free and optimised provision of our services. In all other cases, local storage items, session storage items and cookies are only stored with your express consent (Art. 6(1)(a) GDPR).
If local storage items, session storage or cookies from third-party companies or for analysis purposes are used, we will inform you separately in this privacy policy. Your required consent will be requested and can be revoked at any time.
Use of external services
External services are used on our website. External services are services from third-party providers that are used on our website. This may be done for various reasons, for example to embed videos or for the security of the website. When using these services, personal data is also passed on to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website before using them, which you can revoke at any time (Art. 6 (1) (a) GDPR).
Analytics
We process personal data from website visitors to analyse user behaviour. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This enables us to increase the user-friendliness of our website. Using the analysis tools employed, we can, for example, create user profiles for the display of targeted or interest-based advertising messages, recognise our website visitors the next time they visit our website, measure their click/scroll behaviour and downloads, create heat maps, recognise page views, measure the duration of visits or bounce rates, and trace the origin of website visitors (city, country, which page the visitor comes from). With the help of the analysis tools, we can improve our market research and marketing activities.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
Google Analytics
We use the Google Analytics service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the United States). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Microsoft Advertising Web Analytics
We use the Microsoft Advertising Web Analytics service on our website. The provider of this service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Use of the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://privacy.microsoft.com/de-de/privacystatement
Consent Management
In order to comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for setting cookies or using external services. The consents are stored.
The processing is necessary for the fulfilment of a legal obligation to which the controller (website operator) is subject. The legal basis for the processing is therefore Art. 6 (1) (c) GDPR.
Cookiebot
We use the Cookiebot service on our website. The provider of the service is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
Further information can be found in the provider's privacy policy at the following URL: https://www.cookiebot.com/de/privacy-policy/
Content Delivery Network (CDN)
We use a Content Delivery Network (CDN) to optimise the performance and availability of our website. To do this, the service provider that provides this network processes your IP address and information about when you visited our website. All further information on data processing by this service provider can be found in its privacy policy.
We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.
CloudFlare
We use the CloudFlare service on our website. The provider of this service is Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.
As this service is hosted locally on the web server, no data is transferred to third parties.
Interface software / tracking tool
Business processes run more cost-effectively, faster and with fewer errors when they are automated using software via interfaces. This allows them to be efficiently integrated into company processes via the company's own website or social networks. We use interface software on our website to link different applications and to transfer personal data securely from one application to another.
Processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing will not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
Google Tag Manager
We use the Google Tag Manager service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.
Search Engine
To make it easier to find content on our website, a search engine from a third-party provider has been integrated. Integrating the search engine on the website results in technical data such as the IP address being transmitted to the third-party provider.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you revoke your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until revocation remains unaffected.
We use the Google service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using the service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Social media
We use social media plugins to connect our website to our social media channels. The integration of plugins is intended to make it easier for visitors to our website to follow our channels on social networks, share content, like or comment on it. Some social media plugins enable the analysis of the user behaviour of website visitors with regard to their behaviour on social networks. The use of plugins is intended to increase the awareness and number of followers of our channels.
The plugins also process personal data and transfer data to these social networks. This transfer takes place as soon as the website is accessed. Processed data includes, for example: name, address, email address, telephone number, access time, device information, IP address.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing will not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
We use the Facebook service on our website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, D02x525, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://www.facebook.com/privacy/policy
The service uses cookies on our website and stores data in the browser's local or session storage:
Facebook Connect
We use the Facebook Connect service on our website. The provider of the service is Meta Platforms Ireland Limited (Marketplace), 4 Grand Canal Square Grand Canal Harbour Dublin 2, Ireland.
Using the service may result in data being transferred to a third country (USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://de-de.facebook.com/policy.php
We use the Pinterest service on our website. The provider of this service is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
Using this service may result in data being transferred to a third country (the United States).
Further information can be found in the provider's privacy policy at the following URL: https://policy.pinterest.com/en/privacy-policy
Web security
We use tools on our website that protect against unauthorised access, spam or other attacks. These increase the security and functionality of our website.
We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest is to ensure the security and functionality of our website and to protect ourselves against unauthorised access, spam and other attacks.
Friendly Captcha
We use the Friendly Captcha service on our website. The provider of this service is Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.
Further information can be found in the provider's privacy policy at the following URL: https://friendlycaptcha.com/de/legal/privacy-end-users/
Advertising
Our website uses tools that facilitate or enable the placement of advertisements and the evaluation of the success of placed advertisements. For this purpose, personal data is processed, in particular the IP address, access times and device information.
Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.
Google Ads
We use the Google Ads service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Google Ad Sense
We use the Google Ad Sense service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the United States). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Google Double Click
We use the Google Double Click service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy
Email marketing tool
Maileon
Our website uses the Maileon email marketing tool from XQueue GmbH. Maileon is an all-in-one platform for email marketing and automation that helps us communicate with you and send you relevant information.
Type of data processed
If you subscribe to our newsletter or use other services provided via Maileon, the following personal data may be processed:
• Email address
• Name (if provided)
• Additional information that you voluntarily provide
• Technical information such as IP address, browser type, operating system
• Information about your usage behaviour (e.g. opening the newsletter, clicking on links)
Purpose of data processing
Your data is processed for the following purposes:
• Sending newsletters and other electronic communications
• Personalising content based on your interests
• Analysing the effectiveness of our communication
• Optimising our offers and services
• Statistical evaluation of user behaviour
Legal basis for processing
Your data is processed on the basis of:
• Your consent in accordance with Art. 6(1)(a) GDPR (e.g. when registering for the newsletter)
• Our legitimate interest in accordance with Art. 6(1)(f) GDPR in the analysis, optimisation and economic operation of our offering
Newsletter tracking
Our newsletters sent via Maileon contain so-called tracking pixels (also known as ‘web beacons’). A tracking pixel is a miniature graphic embedded in HTML emails that enables log file recording and analysis. This allows us to statistically evaluate whether and when you have opened an email and which links you have clicked on. We use this information to optimise our newsletters and better tailor them to your interests.
Recipients of the data
Your data will be transmitted to XQueue GmbH, Christian-Pless-Str. 11-13, 63069 Offenbach am Main, Germany, as the operator of Maileon. XQueue GmbH processes your data within the scope of order processing in accordance with Art. 28 GDPR. Your data will not be passed on to third parties unless we are legally obliged to do so or you have expressly consented to this.
Data protection information for contacting us
Contacting us by letter, email or telephone
If you send us enquiries by email, telephone or fax, the data you provide us with by email or telephone will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.
The data you send us by email, telephone or fax will remain with us for 6 months, unless you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). If a contractual relationship is established or the data is subsequently required for billing purposes, we are subject to the statutory retention periods of up to 10 years and will delete your data after these periods have expired.
Current status and changes to this privacy policy
This privacy policy is currently valid and was last updated on 9 January 2026.
Due to the further development of our website and the services offered on it, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.
