Privacy Policy

1) Introduction and contact details of the controller


1.1 We warmly welcome you to our website and thank you for your interest. Below we explain how
we process your personal data when you visit our website. Personal data is
all data with which you can be personally identified. For detailed information on
data protection, please refer to our privacy policy listed below this text.
1.2 The controller responsible for the collection, processing and use of your personal data within the meaning of Art.
4 No. 7 GDPR is Max Racer GmbH; Ostendstraße 214B; 90482, Nuremberg. Email: info@maxpodium.com
Commercial Register Charlottenburg Berlin HRB231189B
VAT ID No. DE344343246
Tax number 241/132/14151
1.3 If you wish to object to the collection, processing or use of your data by us in accordance with these
privacy policy provisions in their entirety or for individual measures, you can direct your
objection to the controller.
You can save and print this privacy policy at any time.
For security reasons and to protect the transmission of personal data and
other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or
TLS encryption.

 

2) Data collection when visiting our website


2.1 We collect information about you when you use this website. We automatically collect information
about your usage behavior and your interaction with us and record data about your computer or mobile device.
We collect, store and use data about every access to our online offer (so-called server log files).
The access data includes:
- Name and URL of the retrieved file
- Date and time of retrieval
- Amount of data transmitted
- Message about successful retrieval (HTTP response code)
- Browser type and browser version
- Operating system
- Referrer URL (i.e. the previously visited page)
- Websites accessed via the user's system through our website
- User's Internet Service Provider

- IP address and the requesting provider
2.2 We use this log data without attributing it to your person or creating any other profile for statistical
evaluations for the purpose of operating, securing and optimizing our online offer, but also
for the anonymous collection of the number of visitors to our website (traffic) as well as the scope and nature of the
use of our website and services, and also for billing purposes to measure the number of
clicks received from cooperation partners. Based on this information, we can provide personalized and
location-based content, analyze traffic, search for and fix errors, and
improve our services. This also constitutes our legitimate interest pursuant to Art. 6 Para. 1 Sentence 1 f) GDPR. We
reserve the right to review the log data ex post if there are concrete indications of
a justified suspicion of unlawful use. We store IP addresses for a limited period
in the log files if this is necessary for security purposes or for the provision or billing
of a service, e.g. if you use one of our offers. After termination of the

 

3) Hosting

3.1 Hostinger
For the hosting of our website and the display of the page content, we use the system of the following
provider: HOSTINGER operations, UAB
Švitrigailos str. 34, Vilnius 03230 Lithuania
Telephone: +37064503378
Email: domains@hostinger.com
3.2 When you visit our website, Hostinger automatically collects various technical data, including:
● Visitor's IP address
● Browser type and version
● Operating system
● Date and time of access
● Referrer URL (the previously visited page)
This data is stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a
legitimate interest in the secure and efficient provision of its website by a professional
hosting service provider.
Further information on data processing by Hostinger can be found in their privacy policy:
https://www.hostinger.de/datenschutzrichtlinie.
3.3 All data collected on our website is processed on the provider's servers. We have
concluded a data processing agreement with the provider, which ensures the protection of the data of our
page visitors and prohibits unauthorized disclosure to third parties.

 

4) Cookies


4.1 To make visiting our website attractive and to enable the use of certain functions,
we use cookies, i.e. small text files that are stored on your end device. Some of these
cookies are automatically deleted again after closing the browser (so-called "session cookies"), while some
cookies remain on your end device longer and enable the storage of page settings (so-called "persistent
cookies"). In the latter case, you can find the storage duration in the overview of your
web browser's cookie settings.
4.2 If some of the cookies we use also process personal data,
the processing takes place pursuant to Art. 6 Para. 1 lit. b GDPR either for the performance of the contract, pursuant to Art. 6 Para. 1
lit. a GDPR in the event of given consent, or pursuant to Art. 6 Para. 1 lit. f GDPR to safeguard our
legitimate interests in the best possible functionality of the website as well as a customer-friendly and
effective design of the page visit.
4.3 You can set your browser so that you are informed about the setting of cookies and can decide individually
on their acceptance or exclude the acceptance of cookies for certain cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be limited.

 

5) Contact

5.1 When contacting us (e.g. via contact form or email), personal data is processed – exclusively for the
purpose of processing and answering your inquiry and only to the extent necessary for this purpose –
personal data is processed.
The legal basis for the processing of this data is our legitimate interest in answering your
inquiry pursuant to Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, then the additional
legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the

circumstances that the matter concerned has been conclusively clarified and provided that no statutory
retention obligations prevent this.
5.2 If you contact us via email or message, we store your message as well as our response to
process your request and, if necessary, answer future questions more efficiently. The storage takes place
on the basis of Art. 6 Para. 1 lit. b GDPR (performance of contract or pre-contractual measures) or Art. 6
Para. 1 lit. f GDPR (legitimate interest in efficient communication and documentation).
Your data will only be stored for as long as is necessary for the respective purpose. If statutory
retention obligations exist (e.g. under tax or commercial law regulations), we will retain the
data in accordance with the statutory periods.
5.3 You have the right to request information about the stored data at any time or request its deletion,
provided that no statutory retention obligations prevent this.

 

6) Data processing upon opening an


customer account
6.1 Pursuant to Art. 6 Para. 1 lit. b GDPR, personal data will continue to be
collected and processed to the extent necessary when you provide it to us when opening a customer account. Which data are required for the
account opening can be found in the input mask of the corresponding form on our
website.
6.2 Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the
controller. After deletion of your customer account, your data will be deleted, provided that all contracts
concluded regarding it have been fully settled, no statutory retention periods prevent this, and
we no longer have a legitimate interest in further storage.

 

7) Use of customer data for direct advertising


7.1 Registration for our email newsletter
If you register for our email newsletter, we will regularly send you information about our
offers. The mandatory information for sending the newsletter is solely your email address. Providing further
data is voluntary and will be used to be able to address you personally. For newsletter distribution
we use the so-called double opt-in procedure, with which it is ensured that you only receive the newsletter after you have expressly
confirmed your consent to receive the newsletter by clicking a verification link sent to the provided email address.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6 Para. 1 lit. a GDPR. Here, we store your IP address entered by the Internet Service Provider (ISP)
as well as the date and time of registration to be able to trace a possible misuse of your email address
at a later time. The data collected by us when registering for the newsletter will be used strictly for its intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding
message to the controller mentioned at the beginning. After unsubscribing, your
email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further
use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this declaration.
7.2 Product availability notification via email
For temporarily unavailable items, you can sign up to receive
email product availability notifications. Here, we will send you a one-time
message via email about the availability of the respective item you have selected. The mandatory information for sending
this notification is solely your email address. Providing further data is voluntary and will be used, if necessary,
to be able to address you personally. For email distribution, we use the so-called double opt-in
procedure, with which it is ensured that you only receive a notification after you have expressly confirmed your consent
by clicking a verification link sent to the provided email address.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6 Para. 1 lit. a GDPR. Here, we store your IP address entered by the Internet Service Provider (ISP)
as well as the date and time of registration to be able to trace a possible misuse of your email address
at a later time. The data collected by us when registering for our
email notification service for product availability will be used strictly for its intended purpose.
You can unsubscribe from the availability notifications at any time by sending a corresponding message to the
controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from
our distribution list set up for this purpose, unless you have expressly consented to further use of your data
or we reserve the right to use the data beyond this, which is legally permitted
and about which we inform you in this declaration.
7.3 Cart reminders via email
In the event of abandoning your purchase with us before completing the order, you have the option to be
reminded once via email of the contents of your virtual shopping cart.
The mandatory information for sending this reminder is solely your email address. Providing further data is
voluntary and will be used, if necessary, to be able to address you personally. For email distribution, we use the
so-called double opt-in procedure, with which it is ensured that you only receive a notification after you have expressly confirmed your
consent by clicking a verification link sent to the provided email address.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6 Para. 1 lit. a GDPR for sending a cart reminder. Here, we store your
IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to
be able to trace a possible misuse of your email address at a later time. The data collected by
us when registering for our email notification service will be used strictly for its intended purpose.

You can unsubscribe from the cart reminders at any time by sending a corresponding message to the controller mentioned at the beginning.
After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data
or we reserve the right to use the data beyond this, which is legally permitted and about which we inform
you in this declaration.


8) Data processing for order fulfillment


8.1 As far as necessary for contract fulfillment for delivery and payment purposes, the personal data
collected by us will be passed on to the appointed transport company and the
appointed credit institution pursuant to Art. 6 Para. 1 lit. b GDPR. If we owe you updates for goods with digital elements
or for digital products based on a corresponding contract, we process the contact data you provided when ordering
(name, address, email address) to personally inform you about upcoming updates within the legally prescribed period
pursuant to our statutory information obligations pursuant to Art. 6 Para. 1
lit. c GDPR via a suitable communication channel (e.g. by post or email). Your contact data will be used strictly
for the purpose of communicating updates that we owe you and will only be processed for this purpose to the extent
that is necessary for the respective information.
To fulfill your order, we also work with the following service provider(s), who
assist us wholly or partially in the performance of concluded contracts. Certain personal data is transmitted to these service providers
in accordance with the following information.
8.2 As a transport service provider, we use the following provider:
- DPD Deutschland GmbH (https://www.dpd.com/de/de/datenschutz/)
- General Logistics Systems Germany GmbH & Co. OHG
(https://gls-group.com/DE/de/datenschutz-standard/)
- Hermes Germany GmbH (https://www.myhermes.de/datenschutz/)
-
8.3 We pass on your email address and/or telephone number pursuant to Art. 6 Para. 1 lit. a GDPR before the
delivery of the goods for the purpose of coordinating a delivery date or announcing the delivery to the
provider, provided that you have expressly given your consent to this in the ordering process.
Otherwise, for the purpose of delivery pursuant to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the
recipient and the delivery address to the provider. The disclosure takes place only to the extent that this is necessary for the
delivery of goods. In this case, prior coordination of the delivery date with the
provider or the delivery announcement is not possible.
The consent can be revoked at any time with future effect towards the controller designated above or
towards the provider.
8.4 Use of payment service providers (payment services)

PayPal
If you decide to pay via PayPal, the payment processing takes place via PayPal (Europe) S.à
r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Your payment data will be transmitted to PayPal
to carry out the payment.
The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR (performance of contract). Further
information can be found in PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
WooPayments
In the event of payment via WooPayments, the transaction is processed by Automattic Inc., 60 29th Street #343, San
Francisco, CA 94110, USA. Personal data, including your
payment information, may be processed.
The processing takes place pursuant to Art. 6 Para. 1 lit. b GDPR. Further details can be found in the privacy policy
of WooPayments:
https://automattic.com/privacy/
Stripe
If you decide to pay via Stripe, the payment processing takes place by Stripe Payments
Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe processes personal data
to carry out the payment.
The processing is based on Art. 6 Para. 1 lit. b GDPR. Further information can be found in the
privacy policy of Stripe:
https://stripe.com/de/privacy
Data disclosure and retention period
The payment service providers process the transmitted data independently and store it in accordance with their
respective privacy policies. We have no influence on the duration of storage by these providers.
You can object to the processing of your data at any time, unless contractual or statutory reasons
prevent this.

 

9) Analysis tools and advertising


9.1 Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies
on our website. Google Tag Manager itself does not create user profiles, store any
cookies, or conduct any independent analysis. It is solely used to manage and deploy the tools
integrated through it. However, Google Tag Manager collects your IP address, which may also be transferred to
Google's parent company in the United States.
Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has
a legitimate interest in the quick and easy integration and management of various tools
on its website. Where appropriate consent has been requested, processing is carried out exclusively
on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of
cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the
TDDDG. Consent can be revoked at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is
an agreement between the European Union and the United States designed to ensure compliance with European
data protection standards when data is processed in the United States. Every company certified under the DPF
undertakes to comply with these data protection standards. Further information on this can be obtained
from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

9.2 Google Analytics
This website uses features of the Google Analytics web analytics service. The provider is Google Ireland Limited
("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze the behavior of website visitors. In doing so,
the website operator receives various usage data, such as page views, time spent on the site, operating
systems used, and the user's origin. This data is aggregated into a user ID and assigned to the
website visitor's respective device.
Furthermore, we can use Google Analytics to record, among other things, your mouse and scroll movements and clicks.
Google Analytics also uses various modeling approaches to supplement the collected data sets
and employs machine learning technologies in data analysis.
Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing
user behavior (e.g. cookies or device fingerprinting). The information collected by Google
about the use of this website is generally transferred to a Google server in the United States and stored there.
This service is used on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1)
TDDDG. Consent can be revoked at any time.

Data transfers to the United States are based on the European Commission's standard contractual clauses. Details can
be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is
an agreement between the European Union and the United States designed to ensure compliance with European
data protection standards when data is processed in the United States. Every company certified under the DPF
undertakes to comply with these data protection standards. Further information on this can be obtained
from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
IP Anonymization
Google Analytics IP anonymization is enabled. This means that Google truncates your IP address within
the member states of the European Union or other member states of the agreement on the European
Economic Area before it is transferred to the United States. Only in exceptional cases is the full IP address transferred to a
Google server in the United States and truncated there. On behalf of the operator of this website, Google
will use this information to evaluate your use of the website, compile reports on website activity,
and provide additional services related to website and internet use
to the website operator. The IP address submitted by your browser within the framework of Google Analytics
is not combined with other data from Google.
Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin
available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.
More information on how Google Analytics handles user data can be found in Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de.
Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the
German data protection authorities when using Google Analytics.
Google Analytics E-Commerce Measurement
This website uses Google Analytics' "E-Commerce Measurement" feature. With the help of
E-Commerce Measurement, the website operator can analyze the purchasing behavior of website visitors to improve its
online marketing campaigns. This involves collecting information such as orders placed,
average order values, shipping costs, and the time from viewing to purchasing a
product. This data can be aggregated by Google under a transaction ID, which is assigned to the
respective user or their device.
9.3 Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited
("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display ads in the Google search engine or on third-party websites
when a user enters certain search terms on Google (keyword targeting). Furthermore, targeted
ads can be displayed based on user data available on Google (e.g. location data and interests)
(audience targeting). As the website operator, we can quantitatively evaluate this data by,
for example, analyzing which search terms led to the display of our ads and how
many ads led to corresponding clicks.
This service is used on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1)
TDDDG. Consent can be revoked at any time.
Data transfers to the United States are based on the European Commission's standard contractual clauses. Details can
be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is
an agreement between the European Union and the United States designed to ensure compliance with European
data protection standards when data is processed in the United States. Every company certified under the DPF
undertakes to comply with these data protection standards. Further information on this can be obtained
from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
9.4 Google AdSense (Non-Personalized)
This website uses Google AdSense, a service for integrating ads. The provider of this
service is Google
Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google AdSense in "non-personalized" mode. Unlike personalized mode,
ads are therefore not based on your past user behavior, and no user profile is created for you.
Instead, so-called "contextual information" is used when selecting ads. The
selected ads are then based, for example, on your location, the content of the website
you are visiting, or your current search terms. More about the differences between personalized
and non-personalized targeting with Google AdSense can be found at:
https://support.google.com/adsense/answer/9007336.
Please note that even when using Google AdSense in non-personalized mode, cookies or
comparable recognition technologies (e.g. device fingerprinting) may be used. According to Google,
these are used to combat fraud and abuse.
This service is used on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1)
TDDDG. Consent can be revoked at any time.

9.5 Google Ads Remarketing
This website uses Google Ads Remarketing features. The provider is Google Ireland Limited ("Google"),
Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign individuals who interact with our online offer to specific
audiences, and subsequently show them interest-based ads within the Google advertising network
(remarketing or retargeting).
Furthermore, the advertising audiences created with Google Ads Remarketing can be linked with Google's cross-device
features. In this way, interest-based, personalized
ad messages that have been tailored to you based on your past usage and browsing behavior on a device (e.g.
mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).
If you have a Google account, you can object to personalized advertising at the following link:
https://adssettings.google.com/anonymous?hl=de.
This service is used on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1)
TDDDG. Consent can be revoked at any time.
Further information and the privacy policy can be found in Google's privacy policy at:
https://policies.google.com/technologies/ads?hl=de.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is
an agreement between the European Union and the United States designed to ensure compliance with European
data protection standards when data is processed in the United States. Every company certified under the DPF
undertakes to comply with these data protection standards. Further information on this can be obtained
from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Audience Building with Customer Matching
To build audiences, we use Google Ads Remarketing customer matching, among other methods. Here,
we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If the
customers in question are Google users and are logged into their Google account, they will be shown relevant
ad messages within the Google network (e.g. on YouTube, Gmail, or in the search engine).
9.6 Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House,
Barrow Street, Dublin 4, Ireland.
With the help of Google Conversion Tracking, Google and we can determine whether the user has performed certain actions.
This allows us to evaluate, for example, how frequently buttons on our website are clicked
and which products are viewed or purchased particularly often. This information is used to

create conversion statistics. We learn the total number of users who have clicked on our ads
and which actions they have performed. We do not receive any information that would allow us to identify the user
personally. Google itself uses cookies or comparable
recognition technologies for identification.
This service is used on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1)
TDDDG. Consent can be revoked at any time.
More information about Google Conversion Tracking can be found in Google's privacy policy:
https://policies.google.com/privacy?hl=de.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is
an agreement between the European Union and the United States designed to ensure compliance with European
data protection standards when data is processed in the United States. Every company certified under the DPF
undertakes to comply with these data protection standards. Further information on this can be obtained
from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
9.7 Meta Pixel
This website uses Facebook/Meta's visitor action pixel to measure conversions. The provider of this
service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, Facebook states that the collected data is also transferred
to the United States and other third countries.
This allows the behavior of website visitors to be tracked after they have been redirected to the provider's website by clicking on a
Facebook ad. This enables the effectiveness of the
Facebook ads to be evaluated for statistical and market research purposes and future
advertising measures to be optimized.
The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions about the
identity of the users. However, the data is stored and processed by Facebook, so that a
connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance
with the Facebook Data Use Policy (https://de-de.facebook.com/about/privacy/). This allows Facebook
to enable the display of ads on Facebook pages as well as off Facebook.
We, as the website operator, cannot influence this use of the data.
This service is used on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1)
TDDDG. Consent can be revoked at any time.
We use the enhanced matching feature within the Meta Pixel.
Enhanced matching allows us to submit various types of data (e.g. place of residence, state, zip code,
hashed email addresses, names, gender, date of birth, or phone number) of our customers and

prospects that we collect via our website to Meta (Facebook). By enabling this,
we can tailor our advertising campaigns on Facebook even more precisely to individuals who are interested in our
offers. Enhanced matching also improves the attribution of website conversions and
expands Custom Audiences.
To the extent that personal data is collected on our website with the help of the tool described here and forwarded to
Facebook, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand
Canal Harbour, Dublin 2, Ireland, and we are jointly responsible for this data processing (Art. 26 GDPR). The
joint responsibility is limited exclusively to the collection of the data and its
disclosure to Facebook. Processing by Facebook after disclosure is not part of the
joint responsibility. Our mutual obligations are set out in a joint processing agreement.
The wording of the agreement can be found at:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the
privacy information when using the Facebook tool and for the data-secure
implementation of the tool on our website. Facebook is responsible for the data security of Facebook products.
Data subjects' rights (e.g. requests for information) regarding the data processed by Facebook
can be asserted directly with Facebook. If you assert data subject rights with us,
we are obliged to forward them to Facebook.
Data transfers to the United States are based on the European Commission's standard contractual clauses. Details can
be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and
https://de-de.facebook.com/help/566994660333381.
Further information on the protection of your privacy can be found in Facebook's privacy notices:
https://de-de.facebook.com/about/privacy/.
You can also disable the "Custom Audiences" remarketing feature in the ad settings section
at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must
be logged in to Facebook.
If you do not have a Facebook account, you can disable interest-based advertising from Facebook on the website of the
European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is
an agreement between the European Union and the United States designed to ensure compliance with European
data protection standards when data is processed in the United States. Every company certified under the DPF
undertakes to comply with these data protection standards. Further information on this can be obtained
from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452

 

10) Retargeting/ Remarketing Conversion Tracking


10.1 Meta Pixel with enhanced data matching
Within our online offer, we use the "Meta
Pixel" service from the following provider in enhanced data matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")
If a user clicks on an advertisement we have placed on Facebook or Instagram, the URL of our linked page is appended with a parameter using the "Meta
Pixel". This URL parameter is then entered into the user's browser after
redirection by a cookie set by our linked page itself.
In addition, this cookie captures specific customer data, such as the email address, which we collect on our website linked to the
Facebook or Instagram ad during processes such as completing a purchase,
account registration, or registration (enhanced data matching). The cookie is then read
and enables the transmission of the data, including the specific customer data, to Meta.
We use the "Meta Pixel" with enhanced data matching to make our advertisements (so-called "Ads") on Facebook
and/or Instagram more effective and to ensure that they correspond to the users' interests or
exhibit certain characteristics (e.g., interests in certain topics or products, determined based on the visited
websites), which we transmit to Meta (so-called "Custom Audiences").
Furthermore, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after
clicking on an advertisement (Conversion). Compared to the
standard version of the "Meta Pixel", the enhanced data matching function helps us better measure the effectiveness of our
advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Meta so that it can be assigned to the respective
user profile and Meta can use the data for its own advertising purposes in accordance with Meta's
data usage policies (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners
to place ads on and off Facebook.
All processing described above, in particular the setting of cookies to read information
on the device used, only takes place if you have given us your express consent to this pursuant to Art. 6(1)(a) GDPR.
You can revoke your consent at any time with future effect by
deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our
page visitors and prohibits unauthorized disclosure to third parties.
The information generated by Meta is generally transferred to a server of Meta and stored there;
in this context, it may also be transferred to servers of Meta Platforms Inc. in the
USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy
Framework, which ensures the
compliance with the European level of data protection based on an adequacy decision by the European Commission.
10.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4
Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google sets a cookie in your device's browser, which automatically enables interest-based advertising
using a pseudonymous cookie ID and based on the pages you visit.
Further data processing only takes place if you have agreed to Google
that your internet and app browser history will be linked by Google with your Google account and
information from your Google account will be used to personalize the ads you view on the web.
If you are logged in to Google during your visit to our website, Google uses
your data together with Google Analytics data to create and define audience lists for cross-device
remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data
to form audiences. As part of the use of
Google Ads Remarketing, personal data may also be transmitted to the servers of
Google LLC. in the USA.
All processing described above, in particular the setting of cookies to read information
on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without this consent, the use of
retargeting technology during your visit to the page will be omitted.
You can revoke your consent at any time with future effect. To exercise your revocation,
please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy
Framework, which ensures the
compliance with the European level of data protection based on an adequacy decision by the European Commission.
Details on the processing initiated by Google and Google's handling of data from websites
can be found here: https://policies.google.com/technologies/partner-sites
Further information on Google's privacy policies can be found here:
https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

 

11) Page functionalities


11.1 Youtube
This website uses plugins to display and play videos from the following provider: Google Ireland
Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
If you visit a page on our website that contains such a plugin, your browser establishes a direct
connection to the provider's servers to load the plugin. During this process, certain information,
including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also sets cookies to
collect information about user behavior, create playback statistics, and prevent abusive
behavior.
If you are logged in to a user account with the provider during your visit to the page, your data will be directly assigned to your account when you click
on a video. If you do not wish for the assignment to your account, you must
log out before clicking the playback button.
All aforementioned processing, in particular the setting of cookies to read information on
the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a)
GDPR. You can revoke the consent at any time with future effect by
deactivating this service via the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy
Framework, which ensures the
compliance with the European level of data protection based on an adequacy decision by the European Commission.

11.2 Google Web Fonts

This page uses so-called web fonts from the following provider for a consistent display of fonts:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you visit a page, your browser loads the required web fonts into its browser cache to display texts and fonts
correctly and establishes a direct connection to the provider's servers. During this process, certain
browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data during the connection establishment with the font provider
only takes place if you have given us your express
consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by
deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser
does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy
Framework, which ensures the
compliance with the European level of data protection based on an adequacy decision by the European Commission.
Further information on Google's privacy policies can be found here:
https://business.safety.google/intl/de/privacy/
11.3 hCaptcha
On this website, we use the CAPTCHA service from the following provider: Intuition Machines, Inc., 350
Alabama St, San Francisco, CA 94110, USA
The service checks whether an input is made by a natural person or through abusive machine and
automated processing, and blocks spam, DDoS attacks, and similar automated malicious access.
To ensure that an action is performed by a human and not by an automated bot,
the provider collects the IP address of the device used, detection data of the
browser and operating system type used, as well as the date and duration of the visit, and transmits this for
evaluation to the provider's servers.
The legal basis is our legitimate interest in establishing individual personal responsibility on the
internet and preventing abuse and spam pursuant to Art. 6(1)(f) GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our
page visitors and prohibits unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European
Commission, which are intended to ensure compliance with the European level of data protection.


12) Tools and Other Items


12.1 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain valid user consent for cookies and
cookie-based applications that require consent.
The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when
visiting the page, on which consent for certain cookies and/or cookie-based applications can be given by checking a box.
Hereby, through

the use of the tool, all cookies/services requiring consent are only loaded if the respective user
gives the corresponding consent by checking a box. This ensures that such cookies are only set on the respective device of the user
in the event of given consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal
user data is generally not processed here.
If, in individual cases, for the purpose of storing, assigning, or logging cookie settings,
personal data (such as the IP address) is nevertheless processed, this takes place pursuant to Art. 6(1)(f)
GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and
user-friendly consent management for cookies and thus in a legally compliant design of
our website.
Another legal basis for processing is Art. 6(1)(c) GDPR. As the
data controller, we are legally obliged to make the use of cookies that are not technically necessary dependent on the respective
user consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the
data of our page visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the setting options of the Cookie Consent Tool can be found directly
in the corresponding user interface on our website.

 

13) Data Subject Rights


13.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) against the controller regarding the processing
of your personal data, about which we
inform you below:
Right of access pursuant to Art. 15 GDPR: You have, in particular, a right to information about your personal data processed by us,
the purposes of processing, the categories of processed
personal data, the recipients or categories of recipients to whom your data
has been or will be disclosed, the planned storage period or the criteria for determining the
storage period, the existence of a right to rectification, erasure, restriction of processing,
objection to processing, complaint to a supervisory authority, the origin of your data, if this
was not collected by us from you, the existence of automated decision-making including
profiling and, if applicable, meaningful information about the logic involved and the extent to which it affects you and the
intended consequences of such processing, as well as your right to be informed about which guarantees pursuant to
Art. 46 GDPR exist when your data is transferred to third countries;
Right to rectification pursuant to Art. 16 GDPR: You have a right to the prompt rectification of incorrect data affecting you
and/or completion of your incomplete data stored with us;
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data
if the requirements of Art. 17(1) GDPR are met. However, this right does not exist,
in particular, if the processing is necessary for the exercise of the right to freedom of expression and

information, for compliance with a legal obligation, for reasons of public interest, or for the
establishment, exercise, or defense of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the
processing of your personal data while the accuracy of your data, which you dispute, is being
verified, if you refuse the erasure of your data due to unlawful processing and
instead request the restriction of the processing of your data if you need your data to establish,
exercise, or defend legal claims after we no longer need this data after the purpose has been achieved,
or if you have objected for reasons related to your particular situation, as long as
it is not yet established whether our legitimate grounds outweigh yours;
Right to be informed pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or
restriction of processing against the controller, the controller is obliged to inform all
recipients to whom your personal data has been disclosed of this rectification or
erasure of the data or restriction of processing, unless this proves to be impossible
or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which
you have provided to us, in a structured, commonly used, and machine-readable format or to request the
transmission to another controller, insofar as this is technically feasible;
Right to revoke consent pursuant to Art. 7(3) GDPR: You have the right to revoke a once given
consent to the processing of data at any time with future effect. Upon revocation,
we will immediately delete the affected data, unless further processing can be based on a
legal basis for processing without consent. The revocation of consent does not
affect the lawfulness of the processing carried out based on consent until the revocation;
Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative
or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the
Member State of your place of residence, place of work, or the place of the alleged infringement, if you are of the
opinion that the processing of your personal data violates the GDPR.


14) Duration of storage of personal data


14.1 The duration of storage of personal data is determined by the respective
legal basis, the purpose of processing, and – where applicable – additionally by the respective statutory
retention period (e.g., commercial and tax retention periods).

When processing personal data on the basis of express consent pursuant to Art. 6
paragraph 1(a) GDPR, the affected data will be stored until you revoke your consent.
If statutory retention periods exist for data processed pursuant to Art. 6(1)(b) GDPR in the context of legal transactions or
legal transaction-like obligations,
this data will be routinely deleted after the retention periods expire, unless it is no longer required for
contract fulfillment or contract formation and/or we no longer have a legitimate interest in its
continued storage.
14.2 When processing personal data on the basis of Art. 6(1)(f) GDPR, this
data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we
can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and
freedoms, or the processing is necessary for the establishment, exercise, or defense of
legal claims.
14.3 When processing personal data for direct marketing pursuant to Art. 6
paragraph 1(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2)
GDPR. Unless otherwise stated in the other information of this declaration regarding specific processing situations,
stored personal data will otherwise be deleted when it is no longer necessary for the purposes
for which it was collected or otherwise processed.


15) Right to Object


15.1 You have the right to object at any time to the processing of your personal data
if it is based on our legitimate interests and there are grounds arising from your particular situation.
The objection will take effect for the future.
Upon receipt of your objection, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests,
rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of
legal claims.
15.2 If your personal data is processed for direct marketing purposes, you have the right
to object to such processing at any time. This also applies to profiling insofar as it is related to such
direct marketing. As soon as you object to the processing for marketing purposes, we will no longer use your
personal data for these purposes.
To exercise your right to object, you can contact us at any time at:
Email: info@maxpodium.com