Privacy policy
Privacy Policy
Version: 15/06/2026
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This only applies insofar as no other information is provided in the following processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.
Server Log Files
You may visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or to our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s Standard Contractual Clauses.
Contact
Controller
You may contact us at any time. The controller responsible for data processing is:
Fonteino OÜ, Betooni tn 7, EE-13816 Tallinn, Estonia, +49 (0) 6461 9265411, shop@fonteno.shop
Customer-Initiated Contact via Email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of handling and responding to your inquiry.
If the contact is made for the implementation of pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) lit. b GDPR.
If contact is made for other reasons, processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing When Using the Contact Form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of establishing contact.
If the contact is made for the implementation of pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, processing is based on Art. 6 (1) lit. b GDPR.
If contact is made for other reasons, processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) lit. f GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing When Using the Withdrawal Button
If you have concluded a contract through our online presence, we provide you with a withdrawal function (withdrawal button), through which you can submit your declaration of withdrawal directly.
When using the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract you wish to withdraw from, as well as the time (date and time) at which the declaration of withdrawal was submitted) only to the extent provided by you. Data processing serves the purpose of providing you with the legally required option to withdraw from your contract and of properly processing your withdrawal.
If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Otherwise, data processing is carried out on the basis of Art. 6 (1) lit. c GDPR, as we are legally obliged to provide you with a withdrawal function on our online presence.
We use your email address solely to process your declaration of withdrawal. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Disclosure to Third-Party Providers (Use of Plugins)
For the technical provision and management of the withdrawal function on our online presence, we use, as part of commissioned processing, a software solution from the third-party provider seuwiderrufsbutton.de. Your collected personal data is transmitted to the servers of the above-mentioned third-party provider when the withdrawal function is used.
The processing of your personal data serves the purpose of fulfilling the legal requirements for the legally compliant design of the withdrawal function and is carried out on the basis of Art. 6 (1) lit. c GDPR. This data processing is also carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly withdrawal option. In this case, you have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR.
Customer Account Orders
Customer Account
When opening a customer account, we collect your personal data to the extent specified there. Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal. Your customer account will then be deleted.
Collection, Processing, and Disclosure of Personal Data for Orders
When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and for handling your inquiries. The provision of data is required for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. Processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to the minimum necessary.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s Standard Contractual Clauses.
Reviews and Advertising
Use of the Email Address for Sending Newsletters
We use your email address to send information and offers via newsletter, provided that you have expressly consented to this. Data processing serves exclusively the purpose of advertising communication. For this purpose, we process your email address and, where applicable, additional data that you voluntarily provided when subscribing to our newsletter.
Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address on a so-called blacklist in order to prevent future newsletter emails from being sent to you. This storage is based on Art. 6 (1) lit. f GDPR and our as well as your legitimate interest in preventing the repeated use of your email address for sending newsletters. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.
Use of the Email Address for Direct Advertising
We use your email address, which we received in connection with the sale of a product or service, to send electronic advertising for our own products or services that are similar to those you have already purchased from us, provided that you have not objected to such use. The provision of the email address is required for the conclusion of the contract. Failure to provide the email address will result in no contract being concluded. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct advertising.
You may object to the use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the legal notice (Imprint). You may also use the corresponding link included in the advertising email. No costs other than the transmission costs according to the basic rates will be incurred.
Shipping Service Providers
Disclosure of the Email Address to Shipping Companies for Information About Shipping Status
As part of contract processing, we pass on your email address to the shipping company, provided that you have expressly consented to this during the ordering process. The disclosure serves the purpose of informing you about the shipping status by email. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time by notifying us or the shipping company, without affecting the lawfulness of processing carried out before the withdrawal.
Payment Service Providers
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website.
Data processing serves the purpose of enabling payment via the PayPal Express payment service. To integrate this payment service, PayPal must collect, store, and analyze data when you access the website (e.g., IP address, device type, operating system, browser type, and device location). Cookies may also be used for this purpose. The cookies enable recognition of your browser.
Processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment options. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Further information on data processing when using the PayPal Express payment service can be found in PayPal’s privacy policy at:
www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. Data processing serves the purpose of enabling payment via this payment service.
When selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Cookies may be stored that enable recognition of your browser. The resulting data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment options. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.
Credit Card via PayPal, Direct Debit via PayPal & “Pay Later” via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check using mathematical-statistical methods and credit agencies.
For this purpose, PayPal transmits the personal data required for a credit assessment to a credit agency and uses the information received regarding the statistical probability of payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
The credit report may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which may include address data in their calculation. Your legitimate interests are taken into account in accordance with legal requirements.
The data processing serves the purpose of credit assessment prior to entering into a contract. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal provides services in advance.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying PayPal.
The provision of data is required for concluding the contract using your chosen payment method. Failure to provide the data will result in the contract not being concluded with the selected payment method.
Third-Party Providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
To process this payment method, PayPal may subsequently forward the data to the respective provider. This processing is also carried out on the basis of Art. 6 (1) lit. b GDPR.
Local third-party providers may include, for example:
-
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
-
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Use of Shopify Payments
We use the payment service “Shopify Payments” provided by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; “Stripe”).
Data processing serves the purpose of enabling payment via the Shopify Payments service. When you select and use a corresponding Shopify Payments payment method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Stripe reserves the right to obtain a credit check using mathematical-statistical methods and credit agencies where applicable. For this purpose, Stripe transmits the personal data required for a credit assessment to a credit agency and uses the information received regarding the statistical probability of payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
The credit report may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which may include address data in their calculation. Your legitimate interests are taken into account in accordance with legal requirements.
The data processing serves the purpose of credit assessment prior to entering into a contract. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in protection against payment default when Stripe provides services in advance.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying Stripe.
The provision of data is required for concluding the contract using your chosen payment method. Failure to provide the data will result in the contract not being concluded with the selected payment method.
Further information on data processing when using the Shopify Payments service can be found in Shopify’s Privacy Policy at:
https://www.shopify.com/de/legal/datenschutz
Further information on data processing carried out by the payment service provider Stripe can be found in Stripe’s Privacy Policy at:
https://stripe.com/de/privacy
Klarna via Shopify Payments
Within the Shopify Payments service, we offer payment methods provided by Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”), such as invoice purchase, installment payments, and instant payment.
Data processing serves the purpose of enabling payment via the payment methods offered by Klarna.
When you select and use a Klarna payment method, the data required for payment processing (in particular name, address, email address, order details, and invoice amount) is transmitted to Klarna via the payment service provider Stripe Payments Europe, Ltd. in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Klarna acts as an independent controller with regard to the processing of your data.
For payment methods where Klarna provides services in advance (e.g., invoice purchase or installment payments), Klarna reserves the right to obtain a credit check using mathematical-statistical methods and credit agencies.
For this purpose, Klarna transmits the personal data required for a credit assessment to a credit agency and uses the information received regarding the statistical probability of payment default to make a balanced decision on the establishment, execution, or termination of the contractual relationship.
The credit report may include probability values (score values) calculated using scientifically recognized mathematical-statistical methods, which may include address data in their calculation. Your legitimate interests are taken into account in accordance with legal requirements.
The data processing for the purpose of credit assessment is carried out on the basis of Art. 6 (1) lit. f GDPR due to our and Klarna’s overriding legitimate interest in protection against payment default. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying Klarna.
The provision of data is required for concluding the contract using your chosen payment method. Failure to provide the data will result in the contract not being concluded with the selected payment method.
Your data may be transferred by Klarna to other recipients within the Klarna Group as well as to third countries outside the EEA. Klarna relies on appropriate safeguards for such transfers, in particular the European Commission’s Standard Contractual Clauses.
Further information on data processing when using Klarna can be found in Klarna’s Privacy Policy at:
https://www.klarna.com/de/datenschutz/
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to use all functions of this website to their full extent.
You can find information on how to manage (including disable) cookies in the most important browsers at the following links:
Chrome:
https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge:
https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lBschen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari:
https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically Necessary Cookies
Unless otherwise stated below in this Privacy Policy, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary that the browser can be recognized again after a page change.
The use of cookies or comparable technologies is carried out on the basis of Section 25 (2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the consent tool “Shopify Privacy & Compliance” provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. Shopify is affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to grant consent to data processing via the website, particularly the setting of cookies, and to exercise your right to withdraw consent that has already been granted.
The data processing serves the purpose of obtaining and documenting the necessary consents for data processing and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
Data processing is carried out in order to fulfill a legal obligation on the basis of Art. 6 (1) lit. c GDPR.
Further information on data protection at Shopify can be found at:
https://www.shopify.com/de/legal/datenschutz
Analytics and Advertising Tracking
Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet usage to the website operator.
The following information may be collected, among others:
-
IP address
-
Date and time of page access
-
Click path
-
Information about the browser you use
-
Information about the device you use
-
Visited pages
-
Referrer URL (the website from which you accessed our website)
-
Location data
-
Purchase activities
Your data may be linked by Google with other data, such as your search history, personal accounts, usage data from other devices, and any other information Google may have about you.
The IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission.
The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
The information generated about your use of this website is generally transmitted to and stored on a Google server in the USA. For the USA, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles. Both Google and U.S. government authorities may have access to your data.
Further information on terms of use and privacy can be found at:
https://policies.google.com/technologies/partner-sites
https://policies.google.com/privacy?hl=de&gl=de
https://business.safety.google/privacy/
Use of the Meta Pixel
We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website.
Meta and we are jointly responsible for the collection of your data and the transmission of this data to Meta when the service is integrated. This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines the respective responsibilities.
The agreement can be viewed at:
https://de-de.facebook.com/legal/terms/businesstools
Accordingly, we are particularly responsible for fulfilling the information obligations under Articles 13 and 14 GDPR, complying with the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service, and complying with the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement.
Meta is responsible for enabling data subject rights under Articles 15–20 GDPR, complying with the security requirements of Article 32 GDPR regarding the security of the service, and complying with the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns Meta’s obligations under the joint processing agreement.
The application serves the purpose of targeting visitors to the website with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta’s remarketing tag has been implemented on the website.
Through this tag, a direct connection to Meta’s servers is established when you visit the website. This informs Meta which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit Facebook or Instagram, you may then be shown personalized, interest-based advertisements.
The application also serves the purpose of creating conversion statistics. We learn the total number of users who clicked on one of our advertisements and were redirected to a page equipped with a conversion tracking tag, as well as which actions were performed after being redirected to this website. However, we do not receive any information that would personally identify users.
Your data may be transferred to the USA. For the USA, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
You can deactivate the “Custom Audiences” remarketing function here.
Further information on the collection and use of data by Meta, your rights in this regard, and options for protecting your privacy can be found in Meta’s Privacy Policy at:
https://www.facebook.com/about/privacy/
Use of Google Ads Conversion Tracking
We use the online advertising program “Google Ads” and, as part of it, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
If you click on an advertisement placed by Google, a cookie for conversion tracking will be stored on your computer. These cookies have a limited validity period, do not contain any personal data, and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the advertisement and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, it is not possible to track cookies across the websites of Ads customers.
The information collected through the conversion cookie is used to create conversion statistics. We learn the total number of users who clicked on one of our advertisements and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that would personally identify users.
Your data may be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Further information and Google’s Privacy Policy can be found at:
https://www.google.de/policies/privacy/
or
https://business.safety.google/privacy/
Plugins and Miscellaneous
Use of Google Invisible reCAPTCHA
We use the Invisible reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This service serves the purpose of distinguishing whether an input is made by a human or through automated, machine-based processing. In the background, Google collects and analyzes usage data, which Invisible reCAPTCHA uses to distinguish legitimate users from bots.
For this purpose, your input is transmitted to Google and further processed there. In addition, your IP address and, where applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Further information about Google reCAPTCHA and Google’s Privacy Policy can be found at:
https://www.google.com/recaptcha/intro/android.html
https://www.google.com/privacy
Use of YouTube
We use the YouTube video embedding function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This function displays videos stored on YouTube within an iFrame on the website. The “Enhanced Privacy Mode” option is activated. As a result, YouTube does not store information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there.
Your data may be transferred to the USA. For the USA, an adequacy decision by the European Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Rights of Data Subjects and Storage Period
Duration of Storage
After complete contract fulfillment, the data is initially stored for the duration of the warranty period and thereafter in accordance with statutory retention periods, particularly those under tax and commercial law. The data is then deleted after the retention periods have expired, unless you have consented to further processing and use.
Rights of the Data Subject
Provided the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR:
-
Right of access
-
Right to rectification
-
Right to erasure
-
Right to restriction of processing
-
Right to data portability
In addition, pursuant to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) lit. f GDPR, as well as to processing for direct marketing purposes.
Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.
You may submit a complaint, among others, to the supervisory authority responsible for us:
Andmekaitse Inspektsioon (Estonian Data Protection Authority)
Väike-Ameerika 19
10129 Tallinn, Estonia
Tel.: +372 627 4135
Email: info@aki.ee
Right to Object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, you have the right, on grounds relating to your particular situation, to object to such processing at any time with future effect.
Once you object, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. Once you object, we will cease processing the affected data for direct marketing purposes.
