Privacy policy of CLICKCONCEPTS GmbH (Version 1.0, as of: 10.03.2025)
From May 25, 2018, the provisions of the EU General Data Protection Regulation will apply throughout Europe http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EN (hereinafter: GDPR) will apply throughout Europe. In the following, we would like to inform you about the processing of personal data by CLICKCONCEPTS GmbH in accordance with this new regulation (see Article 13 GDPR). Please read our data protection information carefully. If you have any questions or comments about this data protection notice, you can send them at any time to the e-mail address given in section 1.1.
Table of contents
1. overview
1.1 Name and contact details of the controller and the company data protection officer
2. purposes of data processing, legal bases and legitimate interests pursued by CLICKCONCEPTS GmbH or a third party and categories of recipients
2.1 Access to our website
3. conclusion, performance or termination of a contract
3.1 Data processing upon conclusion of a contract
3.1.1 Software (store or website)
3.1.2 Payment processing
3.1.3 Shipping
3.1.4 Identity, creditworthiness and transmission to credit agencies
4. data processing for advertising purposes
4.1 Interest-based advertising
4.2 Right to object
4.3 Newsletter dispatch
4.4 Notification of product availability (back in stock notification)
5 Online presence and website optimization
5.1 Google Analytics
5.2 Google Ads
5.3 YouTube
5.4 Facebook Pixel
5.5 Online presence in social media
6 Customer account
6.1 Other purposes of use
6.1.1 Making contact
6.1.2. competitions
6.1.3 Verifications
7. transfer to recipients outside the EU
8. your rights
9. data security measures
1. Overview
This privacy policy applies to the website www.fitzandhuxley.com, hereinafter referred to as the CLICKCONCEPTS GmbH website.
The following data protection information informs you about the type and scope of the processing of so-called personal data by CLICKCONCEPTS GmbH. Personal data is information that is or can be directly or indirectly assigned to your person.
The data processing by CLICKCONCEPTS GmbH can be essentially be divided into three categories:
In accordance with the provisions of the GDPR, you have various rightswhich you can assert against us. These include the right to object to selected data processing, in particular data processing for advertising purposes.
1.1 Name and contact details of the controller and the company data protection officer
This data protection information applies to data processing by CLICKCONCEPTS GmbH, Ferdinand-Porsche-Straße 4, 73479 Ellwangen ("controller") and the website mentioned under point 1.
The company data protection officer of CLICKCONCEPTS GmbH can be contacted at the above address, for the attention of the data protection officer, or at datenschutz@clickconcepts.de.
2. Purposes of data processing, legal bases and legitimate interests pursued by CLICKCONCEPTS GmbH or a third party and categories of recipients
2.1 Calling up our website
When you visit our website, the browser used on your device automatically sends information to the server of our website and stores it temporarily in a log file. We have no influence on this. Also The following information is also recorded without any action on your part and stored until it is automatically deleted:
The legal basis for the processing of the IP address is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes of data collection listed below. Please note at this point that we cannot and do not draw any direct conclusions about your identity from the data collected.
We use the IP address of your end device and the other data mentioned above for the following purposes the following purposes:
The data is stored for a period of six months and then deleted automatically. We also use cookies and tracking tools on our website. The exact nature of these procedures and how your data is used for them is explained in more detail in section 5 below.
If you have deactivated the so-called geolocalization in your browser, operating system or other settings of your terminal device. geolocalization we use this function to offer you individual services based on your current location (default setting of the language version of the website). We process your location data processed in this way exclusively for these functions. If you stop using the services, the data will be deleted.
3. Conclusion, performance or termination of a contract
3.1 Data processing upon conclusion of a contract
The object of CLICKCONCEPTS GmbH is the distance selling and rental of goods. In this context, we process the data necessary for the conclusion, execution or termination of a contract with you. with you. This includes
The legal basis for this is Article 6 (1) (b) of the GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us. We are also obliged to process your e-mail address on the basis of a provision of the German Civil Code (BGB) in order to send you an electronic order confirmation (Article 6 (1) (c) of the GDPR). If we do not use your contact data for advertising purposes (see section 4), we store the data collected for contract processing until the expiry of the statutory or any contractual warranty and guarantee rights. After expiry of this period, we store the information required under commercial and tax law about the contractual relationship for the legally prescribed periods. During this period (generally ten years from the conclusion of the contract), the data will only be processed further in the event of a tax audit by the tax authorities.
In addition, the following data processing is necessary for the processing of the purchase contract:
3.1.1 Software (store or website)
For the creation and operation of our websites or stores, we use third-party software services to which your data is passed on for the purpose of performing the contract. The legal basis for this is Art. 6 para. 1 lit. a. GDPR. The recipients of your data are the following third parties:
-
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland / Privacy Policy: https://www.shopify.de/legal/datenschutz.
Categories of data processed: Address data, contact data, order data, IP address
As part of the use of this software, data is transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in a data transfer to the USA, for which there is no adequate level of protection. This data transfer to a third country takes place on the basis of the EU standard contractual clauses.
The deletion of your data is governed by the data protection declarations of the respective providers.
3.1.2 Payment processing
If you have selected a payment method other than prepayment or cash on delivery, we will provide the required payment details. payment data to a payment service provider commissioned by us. We would like to point out that all transactions carried out via the respective payment service provider are subject to the current data protection declaration of the respective payment service provider.
3.1.3 Shipping
Details of your delivery address and your e-mail address to a logistics company commissioned by us for the purpose of processing the purchase contract. Only in the case of forwarding we transmit your telephone number and, if applicable, your e-mail address to the logistics company commissioned by us to ensure that the goods are delivered in accordance with your wishes.
3.1.4 Identity, creditworthiness and transmission to credit agencies
If necessary, we will check your identity or creditworthiness using information from service providers or credit agencies. identity or creditworthiness. For this purpose, we transmit the following types of data to the relevant service provider or credit agency: Name, address. The legal basis for this is Article 6(1)(b) and (f) GDPR. The authorization for this arises from the protection of your identity and the avoidance of fraud attempts to our detriment. The circumstance and the result of our request will be stored in your customer account for the duration of the contractual relationship.
In addition, the payment service provider may carry out a credit check, depending on the payment method you have selected.
4. Data processing for advertising purposes
The following statements relate to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6(1)(f) as conceivable in principle and as a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles, but is based on the question of whether the data is still required for processing for advertising purposes. If you object to the processing, the data will no longer be processed for advertising purposes. Please refer to section 4.2 for information on how to proceed in the event of your objection.
4.1 Interest-based advertising
We categorize and add further information to your customer profile so that you only receive advertising information that is supposedly of interest to you. Both statistical information and personal information (e.g. basic data from your customer profile) are used for this purpose. The aim is to send you advertising based solely on your actual or perceived needs and not to bother you with unnecessary advertising. The legal basis for this is §7 (3) UWG.
4.2 Right of objection
You can object to data processing for the aforementioned purposes at any time free of charge, separately for the respective communication channel and with effect for the future. All you need to do is send an e-mail or a letter by post to the contact details given under 2.
If you object, the contact address concerned will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after we have received your objection. This is technically due to the necessary lead time for advertisements and does not mean that we will not implement your objection. Thank you for your understanding.
4.3 Newsletter dispatch
On our website we offer you the opportunity to register for our newsletter to register. In order to ensure that no errors have been made when entering the e-mail address, we use the so-called double opt-in procedure: After you have entered your e-mail address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your e-mail address be added to our mailing list. Your electronic contact data will be processed at this point solely on the basis of your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time with effect for the future revoke. All you need to do is send a brief e-mail to the e-mail address given under 1.1 or click on the "Unsubscribe" button at the end of each newsletter.
4.4 Notification of product availability (Back in Stock Notification)
On our website, we offer you the option of registering for a reminder if a product is unavailable. As soon as the product is available again, you will be informed by e-mail. This is a one-off purpose. Your electronic contact data is processed at this point solely on the basis of your consent (Article 6 (1) (a) GDPR, Section 7 (3) UWG). You can revoke your consent at any time with effect for the future revoke. All you need to do is send a brief notification by email to the email address provided under 1.1.
For 4. data processing for advertising purposes we use the services of third parties to whom your data is passed on for processing. The legal basis for this is Art. 6 para. 1 lit. a. DSGVO and § 7 Abs. 3 UWG. The recipient of your data is the following third party:
- Omnisend Group Limited (22 Mare Street, London E8 4RT, United Kingdom), Privacy Policy: https://www.omnisend.com/privacy/
Categories of data processed: E-mail address, IP address, date and time of registration
As part of this service, data may be transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in a data transfer to the USA, for which there is no adequate level of protection. This data transfer to a third country takes place on the basis of the EU standard contractual clauses. The newsletter will be discontinued immediately after unsubscribing from the newsletter. For technical reasons, the data will be deleted after 4 weeks at the latest. Your electronic contact data will be deleted after you have been informed about product availability, for technical reasons after 3 weeks at the latest.
5. Online presence and optimization of the website
We use cookies to provide the website technically (essential cookies). We use third-party tracking/analytics technologies to provide and continuously improve our services.
Accepting cookies is not a prerequisite for visiting our website. However, we would like to point out that our website and service will only have limited functionality if you do not allow us to set cookies.
We use cookies on our website. If these cookies are personal data, they are used on the basis of Article 6(1)(f) GDPR. Our interest in optimizing our website is to be regarded as legitimate within the meaning of the aforementioned provision.
Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in a cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our website more convenient for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website or that you have already logged into your customer account. If you visit our site again to make use of our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
If you have a customer account and are logged in or activate the "stay logged in" function, the information stored in cookies will be added to your customer account.
On the other hand, we use cookies to record the use of our website statistically record and and to evaluate it for the purpose of optimizing our offer for you and to display information specifically tailored to you. These cookies enable us to automatically recognize that you have already visited our website when you return to it
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website. The storage duration of cookies depends on their purpose and is not the same for everyone.
The cookies we use are stored for different lengths of time. You can view a detailed list of the cookies we set and their duration in your browser settings. Via this link you can set which cookies may be set at any time.
5.1 Google Analytics
We use Google Analytics, a web analysis service of Google LLC ("Google"), on the basis of Art. 6 para. 1 lit. f) GDPR for the needs-based design and continuous optimization of our pages. In this context pseudonymized user profiles created and cookies are used. The information generated by the cookie about your use of this website, such as
are transmitted to a Google server in the USA and stored there. This may result in data being transferred to the USA. The legal basis for the transfer of data to the USA is the EU-U.S. Data Privacy Framework. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible is not possible (so-called IP masking).
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link https://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid for this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website https://support.google.com/analytics/answer/6004245?hl=de.
5.2 Google Ads
Use of Google Adwords Conversion Tracking.
We use the online advertising program "Google Ads" and conversion tracking as part of Google Ads. Google Conversion Tracking is an analysis service of Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
If you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that there is no way to track cookies across the websites of Ads customers.
The information obtained using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. This tells customers the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found at https://www.google.com/policies/technologies/ads/, https://www.google.de/policies/privacy/
This processing involves the transfer of data to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in data being transferred to the USA. The legal basis for data transfer to the USA is the EU-U.S. Data Privacy Framework.
5.3 YouTube
We use components (videos) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "YouTube"), a Google company, on our website. The implementation is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. By loading the videos on our website, data is forwarded to Google. In particular, Google is informed which of our websites you have visited as well as device-specific information including the IP address.
Here we use the "extended data protection mode" option provided by YouTube. If you call up a page that has an embedded video, this only establishes a connection to the YouTube servers and the content is displayed on the website by notifying your browser when you actually watch the video.
If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. Your data will be deleted as soon as it is no longer required for the purpose of processing.
Further information on data protection in connection with YouTube can be found in the Google's privacy policy.
Further information on the purpose and scope of data collection and its processing by Google can be found here https://www.google.com/intl/de/policies/privacy/.
Google transmits the information to Google servers in the USA. The transmitted data are only pseudonyms; it is not possible to draw conclusions about your name. We will only transmit your data if you expressly consent to the processing by Google. In this case, you consent to your data being transferred to the USA in accordance with Art. 49 para. 1 lit. a GDPR. You can revoke your consent at any time for the future via the consent management tool.
5.3 Facebook Pixel
This website uses the so-called Facebook pixel in its non-enhanced form. This is a JavaScript with which we can track actions on our website and on the basis of which we can show you product information based on your interests. Details on how this works can be found on the Facebook website at https://www.facebook.com/business/help/742478679120153 can be accessed. The pixel acts as a so-called pseudonym, i.e. the pixel is not directly linked to you personally.
The use of Facebook Pixel and the storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.
For the processing of data for which Facebook acts as a commissioned data processor, we have concluded a commissioned data processing agreement with Facebook, in which we oblige Facebook to protect our customers' data and not to pass it on to third parties.
You can change the use at any time by adjusting the cookie settings, see point no. 5.
The following third party will receive your data:
- Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland/ Privacy Policy: https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer
This processing involves a transfer of data to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in the transfer of data to the USA. The legal basis for the transfer of data to the USA is the EU-US Privacy Shield Framework.
5.5 Online presence in social networks
We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services.
We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. The data transfer takes place on the basis of so-called standard contractual clauses of the EU Commission.
Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of users' personal data is based on our legitimate interests in effective user information and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. If the users are asked by the respective providers of the platforms for consent to the data processing described above, the legal basis for the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.
For a detailed description of the respective processing and the opt-out options, we refer to the following linked information from the providers.
The deletion of your data is governed by the data protection declarations of the respective providers.
In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
- Facebook, Pages, Groups, (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basis of an agreement on joint processing of personal data - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
-Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy Policy: https://policies.google.com/privacyOpt-Out: https://adssettings.google.com/authenticated
- Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - Privacy Policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
- LinkedIn (LinkedIn, 1000 W Maude, Sunnyvale, CA 94085, USA) - Privacy Policy/ Opt-Out: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
- TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) - Privacy Policy/ Opt-Out: https://www.tiktok.com/legal/privacy-policy?lang=de-DE
- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: https://twitter.com/personalization
- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) - Privacy Policy / Opt-Out: https://about.pinterest.com/de/privacy-policy
6. Customer account
In order to provide you with the greatest possible convenience when shopping, we offer you the permanent storage of your personal data in a password-protected customer account. A customer account is required to access our retailer store. The creation of the customer account is voluntary and is based on your consent within the meaning of Article 6 (1) (a) GDPR. After setting up a customer account, you do not need to enter your data again. You can also view and change the data stored about you in your customer account at any time.
In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This is used together with your e-mail address to access your customer account. Please treat your personal access data confidentially and in particular do not make it accessible to unauthorized third parties. We cannot accept any liability for misused passwords unless we are responsible for the misuse. Please note that you will automatically remain logged in even after leaving our website, unless you actively log out. You have the option of deleting your customer account at any time. Please note, however, that this does not also delete the data that can be viewed in the customer account.
Depending on the respective store or website, access to a customer account is also possible without registration and is realized via a one-time password by e-mail.
6.1 Further uses
6.1.1 Making contact
If you contact us by e-mail or via our returns portal, the data you provide (in addition to your inquiry itself, your e-mail address, your name and telephone number if applicable) will be stored in order to answer your questions. The legal basis for this is Art. 6 (1) point a GDPR, i.e. you provide us with your data on the basis of your consent. Of course, we use the personal data transmitted to us in this way exclusively for the purpose for which you provided it to us when you contacted us. You can your consent to the data processing explained above at any time with effect for the future free of charge by sending a short message to the contact details below revoke . The legality of the processing carried out on the basis of your consent up to the time of your withdrawal remains unaffected by this. However, we would like to point out that it will no longer be possible to process your request from the time you withdraw your consent. If you do not withdraw your consent, your data relating to the request will be deleted. Insofar as a statutory retention period applies in rare individual cases, we store the required data in blocked form (usually six or ten years) on the basis of Art. 6 para. 1 lit. c GDPR in conjunction with the corresponding provision of the German Fiscal Code (see Section 147 AO) or the German Commercial Code (see Section 257 HGB).
To contact you, we use the services of third parties to whom the data you provide will be passed on to process your request. The legal basis is Art. 6 (1) point f GDPR. The recipients of your data are the following third parties:
- Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA) - Privacy Policy/Opt-Out: https://privacy.microsoft.com/de-de/privacystatement
- Usercentrics GmbH (Sendlinger Straße 7, 80331 Munich, Germany) - Privacy Policy/ Opt-Out: https://usercentrics.com/de/datenschutzerklaerung/
- 8returns UG (haftungsbeschränkt) (Lohmühlenstraße 65, 12435 Berlin, Germany) - Privacy Policy/ Opt-Out: https://www.8returns.com/privacy-policy
As part of these services, data is transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This data transfer to a third country takes place on the basis of the EU standard contractual clauses. This may result in a data transfer to the USA, for which there is no adequate level of protection. The data is stored by our service providers for a period of 6 months and then automatically deleted.
6.1.2 Sweepstakes
When you take part in competitions, we collect data that is required to carry out the competition. This is usually an individual competition entry (e.g. a comment or a photo), as well as your name and contact details. Participation in the competition and the associated data collection is, of course, voluntary. Your data will only be used in the context of the competition in order to send you a prize notification. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The statements made above apply accordingly to the revocation of your consent, which is possible at any time, and any further storage. As soon as the competition has ended and your data is no longer required, we will delete it. If winners are published, they will remain online permanently.
6.1.3 Checks
To collect reviews, we use the services of third parties to whom the data is passed on for processing. The legal basis is Art. 6 para. 1 lit. a, f GDPR. The recipient of your data is the following third party:
- REVIEWS.io 2020 GmbH (Skalitzer Straße 104, 10997 Berlin) - Privacy Policy/ Opt-Out: https://www.reviews.io/legal/user-privacy-policy
As part of this service, data may be transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This data transfer to a third country takes place on the basis of the EU standard contractual clauses. This may result in a data transfer to the USA, for which there is no adequate level of protection. The deletion of your data can be found in the privacy policy of the service provider.
7. Transfer to recipients outside the EU
Unless otherwise stated, we do not pass on your data for the aforementioned processing to recipients based outside the European Union or the European Economic Area.
A transfer of your data to a third country (i.e. to a country outside the European Union (EU) or the European Economic Area (EEA)) takes place in accordance with Art. 44 ff GDPR. The transfer takes place on the basis of the applicable EU standard contractual clauses or the EU-U.S. Data Privacy Framework.
8. Your rights
In addition to the right to withdraw the consent you have given us, you have the following additional rights if the relevant legal requirements are met:
8.1 Right of objection
Under the conditions of Art. 21 (1) GDPR, data processing may be objected to for reasons arising from the particular situation of the data subject.
The above-mentioned general right to object applies to all processing purposes described in this data protection information that are processed on the basis of Article 6(1)(f) GDPR. In contrast to the special right to object to data processing for advertising purposes (see 4.2 above), we are only obliged under the GDPR to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health). You also have the option of contacting the supervisory authority responsible for CLICKCONCEPTS GmbH in Baden-Württemberg, Stuttgart.
9. Data security measures
All data that you transmit personally, including your payment data, is transmitted via the common and secure SSL standard (Secure Socket Layer). SSL is a secure and proven standard that is also used for online banking, for example. You can recognize a secure SSL connection by the s appended to http (e.g. https://...) in the address line of your browser or by the lock symbol at the bottom of your browser.
In addition, we use suitable technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.