We place the utmost importance on protecting your data and safeguarding your privacy.

The following information is therefore provided to inform you about how we collect and use personal data when you use our website. This privacy policy applies to resellerinterace.com and resellerinterace.de.

Controller :
Greenmark IT GmbH
Leinstr. 3
31061 Alfeld
Deutschland

Telefon: +49 (0) 5181 286 9039
E-Mail: info(at)resellerinterface.com

1. Pseudonymized data collection a. You may visit our websites without disclosing any personal information. We do not collect or store any personal data in this context without your consent. To enhance our services, we solely analyze statistical data that cannot be used to identify you personally.

When you access our website, the following data is collected:

Date, time, and duration of the visit – Web browser utilized and browser configuration – Internet service provider – Approximate geographical location, including country – IP address
2. Collection of Access Data and Log Files

2.1. In accordance with our legitimate interests as defined in Article 6(1)(f) of the General Data Protection Regulation (GDPR), we collect data regarding each access to the server hosting this service (commonly referred to as server log files). The access data encompasses: name of the accessed website, file, date and time of access, volume of data transferred, confirmation of successful access, type and version of the web browser, the user’s operating system, referrer URL (the preceding webpage), IP address, and the requesting Internet service provider.

2.2. Log file information is retained for security purposes (e.g., to investigate abusive or fraudulent activities) for a maximum duration of four weeks and is subsequently deleted. Data that must be retained for evidential purposes shall be exempt from deletion until the final resolution of the respective incident.

3. Registration on Our Website 3.1. You have the option to register on this website to access additional features. The data you provide during the registration process will be used solely for the purpose of utilizing the respective offer or service for which you have registered. The mandatory information required during registration must be provided in its entirety; failure to do so will result in the rejection of your registration.

3.2. Given the nature of our services, a continuous customer account is required, it is not permissible to place an order using a guest account.

4. Basic Information on Data Processing and Legal Bases

4.1. This privacy policy provides an overview of the type, scope, and purpose of the processing of personal data within the context of our online services and associated websites, features, and content (hereinafter collectively referred to as the “online services” or “website”).

4.2. The terms used, such as “personal data” and “processing,” shall be understood in accordance with the definitions provided in Article 4 of the General Data Protection Regulation (GDPR).

4.3. The personal data of users processed in the context of this online service includes identification data (e.g., names and addresses of customers), contractual data (e.g., services utilized, payment details), usage data (e.g., websites accessed within our online service, interest in our products), and content data (e.g., submissions made in the contact form).

4.4. The term “user” encompasses all categories of individuals impacted by data processing. This includes our business partners, customers, interested parties, and other visitors to our online service. The terms employed, such as “user,” are to be interpreted as gender- neutral.

4.5. We process the personal data of users solely in accordance with applicable data protection legislation. This means that user data will be processed only if there is a legal basis for such processing. In particular, this includes situations where data processing is necessary for the performance of our contractual obligations (e.g., order processing) and online services, where consent from the user has been obtained, or where processing is based on our legitimate interests (i.e., interests in the analysis, optimization, economic operation, and security of our online offerings within the meaning of Article 6(1)(f) of the General Data Protection Regulation (GDPR), specifically in the context of reach measurement and the collection of access data).

5. Security Measures
5.1. We implement organizational, contractual, and technical security measures that are in accordance with the applicable legal standards and best practices to ensure compliance with data protection regulations and to protect the personal data processed by us against accidental or unlawful alteration, loss, destruction, or unauthorized access.

5.2. This website utilizes SSL (Secure Sockets Layer) or TLS (Transport Layer Security) encryption to enhance security and protect the transmission of sensitive information, such as inquiries submitted to us as the data controller. An encrypted connection is indicated by the change in the browser’s address bar from “http://” to “https://” and the presence of a padlock icon in the browser’s address bar. When SSL or TLS encryption is activated, the data transmitted to us is safeguarded against access by unauthorized third parties.

6. Collection and Processing of Data for Inquiries via Email, Telephone, or Fax
6.1. If you contact us via email, telephone, or fax, your inquiry, including all personal data arising therefrom (such as name and inquiry details), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. The data you send us in the context of a contact inquiry will remain with us until the purpose for data storage ceases to apply (e.g., after your request has been fully addressed). Mandatory statutory provisions – in particular, statutory retention periods – remain unaffected.

7. Use of the Live Chat System: Live Helper Chat
7.1. We utilize the live helper chat system (Remigijus Kiminas, Lithuania) on our website. This system facilitates communication between you and us, as the service provider. The personal data of users necessary for processing and managing the chat inquiries are processed in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR). The transmission of your inquiry occurs via an encrypted connection (HTTPS) directly to our servers. For further information regarding the handling of personal data, please refer to the privacy policy of Live Helper Chat: https://livehelperchat.com/gdpr- compliance-504a.html

8. Use of OpenAI
8.1. We utilize the OpenAI service provided by OpenAI Ireland Ltd. (1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, “OpenAI”) as part of our processing activities under a data processing agreement. We wish to inform you about the purposes for which your personal data is processed. The utilization of OpenAI is intended for generating domain names or domain suggestions based on the input data you have provided, utilizing artificial intelligence. Additionally, we employ OpenAI products to develop our proprietary solutions and applications for our organization. Below, we provide further details regarding the data we process. The specific data processed by OpenAI is contingent upon the text inputs submitted to OpenAI. The following categories of data may be collected:

– Information pertaining to the nature of the text input – Information regarding the type of device, browser, and operating system – Information about the user’s IP address – Information related to visited pages and geolocation data
It is important to note that the information you enter into OpenAI is not utilized for the training of OpenAI models. OpenAI retains your data for a duration of 30 days following its collection or your submission.

8.2. Your data may be transferred to the United States, which is classified as a third country from a European Union perspective. When personal data is transferred to a third country, an appropriate legal basis for data protection must exist in accordance with Articles 44 et seq. of the General Data Protection Regulation (GDPR). The EU-U.S. Data Privacy Framework establishes an adequate level of data protection for certified entities in the United States. However, OpenAI is not a certified entity under this framework. In order to ensure compliance with data protection regulations for the transfer of data, supplementary Standard Contractual Clauses (SCCs) are necessary. The data transfer is based, among other things, on these Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be reviewed at: https://openai.com/policies/data-processing-addendum

8.3. To ensure the legality of the processing of your data, a suitable legal basis must be established. The processing of your personal data for the creation of domain names or domain suggestions is conducted based on Article 6(1)(b) GDPR, which pertains to the performance of the contract concluded with us or for the implementation of pre- contractual measures taken at your request. Additional information regarding data processing by OpenAI can be found at https://openai.com/policies/privacy-policy

9. Newsletter

9.1. In the following, we provide clarification regarding the content of our newsletter, as well as the registration, distribution, and statistical evaluation processes, including your rights to object. By subscribing to our newsletter, you consent to receive it and to the procedures outlined herein.

9.2. Content of the Newsletter

We distribute newsletters, emails, and other electronic communications containing promotional information (hereinafter referred to as “newsletters”) solely with the consent of the recipients or on the basis of a legitimate interest, specifically when you have purchased a product from us, and we wish to offer you discounts or promotions related to those and similar products.

9.3. Double Opt-In and Logging

Registration for our newsletter is conducted through a so-called double opt-in procedure, except when this occurs during the creation of a customer account. This means that after registration, you will receive an email prompting you to confirm your registration. This confirmation is necessary to prevent unauthorized registrations using third-party email addresses. All newsletter registrations are logged to ensure compliance with legal requirements. This includes the documentation of the registration date and time, the confirmation date and time, as well as the IP address used for registration. Additionally, any changes made to your data stored with the delivery service provider are also logged.

9.4.

The newsletter is dispatched using an internally developed delivery tool. Consequently, no personal data is transferred to external parties.

9.5. Registration Data

To subscribe to the newsletter, simply enter your e-mail address. Optionally, you can enter a name so that we can address you personally in the newsletter.

9.6. Withdrawal of Consent

You have the right to withdraw your consent to receive our newsletter at any time, thereby terminating your subscription.

10. Cookies

10.1. Cookies are data packets transmitted from our web server or third-party web servers to the user’s web browser, which are stored there for subsequent retrieval. Cookies may consist of small files or other forms of data storage. For further information regarding the use of cookies, please visit: Change privacy settings. Change privacy settings

10.2. To manage the cookies and similar tracking technologies employed (such as tracking pixels, web beacons, etc.) and the associated consents, we utilize the consent management tool “Real Cookie Banner.” Detailed information regarding the functionality of “Real Cookie Banner” can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal basis for the processing of personal data in this context is provided by Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the administration of the cookies and similar technologies employed, as well as in managing the associated consents.

10.3. The provision of personal data is not contractually mandated nor is it necessary for the conclusion of a contract. You are not obligated to provide personal data; however, if you choose not to do so, we will be unable to manage your consent. For additional information regarding the use of cookies, please visit: Change privacy settings. Change privacy settings

11. Transfer of data to third parties, third-party providers and the United States

11.1. Data shall only be transferred to third parties in accordance with applicable legal provisions. We disclose user data to third parties only if this is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, for contractual purposes pursuant to Art. 6 para. 1 lit. b GDPR, or based on legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR that are necessary for the economic and effective operation of our business.

11.2. In the event that we engage subcontractors to perform our services, we implement appropriate legal safeguards and appropriate technical and organizational measures to ensure the protection of personal data in accordance with relevant legal requirements.

11.3. For all other data processing activities where we do not control the processing ourselves, particularly for domain registration services, the data controller is the registry operator of the respective top-level domain (TLD), as well as ICANN or its agents acting as joint data controllers with the registry operator.

11.4. If, in the context of this privacy policy content, tools, or other means from other providers (hereinafter collectively referred to as “third-party providers”) are utilized and their registered office is located in a third country, it is to be assumed that a data transfer to the countries in which the third-party providers are established will occur. Third countries are jurisdictions where the GDPR is not directly applicable law, generally referring to countries outside the EU or the European Economic Area (EEA). Data transfer to third countries occurs only if an adequate level of data protection is ensured, the consent of the user has been obtained, or other legal bases permit such transfer.

11.5. Notice on Data Transfer to the United States

Our website incorporates tools from companies based in the United States, among others. When these tools are activated, your personal data may be transmitted to the respective companies’ servers in the United States. It is important to note that the United States is not recognized as a safe third country under EU data protection law. US companies may be compelled to disclose personal data to security authorities without you having the opportunity to pursue legal remedies against such disclosures. Consequently, it cannot be ruled out that US authorities (e.g., intelligence services) may process, evaluate, and permanently store your data on US servers for surveillance purposes. We have no influence over these processing activities.

11.6. EU-US Transatlantic Data Privacy Framework

As part of the so-called “Data Privacy Framework” (DPF), the European Commission has recognized the level of data protection for certain companies in the United States through the adequacy decision issued on July 10, 2023. A list of certified companies and further information regarding the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/ (in English). We will inform you in the context of this data protection notice about which of our service providers are certified under the Data Privacy Framework.

12. Use of Google AdWords Conversion Tracking
12.1. We utilize the online advertising program “Google AdWords” and, as part of this program, we implement conversion tracking. Google Conversion Tracking is an analytical service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). Upon clicking on an advertisement placed by Google, a conversion tracking cookie is installed on your device. These cookies possess a limited validity period, do not contain any personal data, and are therefore not utilized for the identification of individuals.
12.2. When you navigate to specific pages on our website, both we and Google may ascertain that you have clicked on the advertisement and were subsequently redirected to this page. The information gathered through the conversion cookie is utilized to generate conversion statistics for our purposes. This enables us to determine the total number of users who clicked on our advertisement and were redirected to a page featuring a conversion tracking tag. However, we do not obtain any information that allows for the personal identification of users.

12.3. The processing of your user data for the purpose of advertising measures via Google AdWords conversion tracking is predicated upon your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR), which you have provided through the cookie banner. You may modify or revoke your consent at any time via the following link: Please provide a `type` attribute in your shortcode. Allowed: history,revoke,change!. Upon revocation, you will not be included in the conversion tracking statistics. Change privacy settings

12.4. For additional information regarding Google’s data usage, options for configuring settings, and means of objection, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) as well as the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

13. Verwendung von Google Ads Remarketing
13.1. Unsere Website nutzt die Funktionen von Google Ads Remarketing. Hiermit werben wir für diese Website in den Google-Suchergebnissen, sowie auf Dritt-Websites. Anbieter ist die Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google”). Zu diesem Zweck setzt Google ein Cookie im Browser Ihres Endgeräts, welches automatisch mittels einer pseudonymen Cookie-ID und auf Grundlage der von Ihnen besuchten Seiten eine interessensbasierte Werbung ermöglicht.

Processing is carried out based on your consent, as provided through our cookie banner, in accordance with Art. 6 (1) (a) GDPR. Any additional data processing only occurs if you have consented to Google linking your internet and app browser history to your Google account, allowing information from your Google account to personalize ads. If you are logged into Google while visiting our website, Google uses your data in conjunction with Google Analytics data to compile and define cross-device target audience lists for remarketing. In this process, your personal data from Google is temporarily linked with Google Analytics data to create target audiences.
As part of Google Ads Remarketing, personal data may also be transferred to Google LLC servers in the United States.

You can permanently disable cookie-based advertising preferences by downloading and installing the browser plugin available at: https://www.google.com/settings/ads/onweb/ Alternatively, you can learn more about cookie settings and options for adjusting preferences by visiting the Digital Advertising Alliance at http://www.aboutads.info.

Additionally, you can adjust your browser settings to receive notifications about cookie placement and decide to accept cookies on a case-by-case basis, in specific cases, or to reject them entirely. Please note that disabling cookies may limit the functionality of our website. Further information regarding advertising and Google’s data protection provisions can be found at: https://www.google.com/policies/technologies/ads/
You may revoke your consent at any time with future effect. To exercise your right of revocation, please follow the above-described options for objecting to data processing.

14. Use of Google reCAPTCHA
14.1. We employ the web service Google reCAPTCHA provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google reCAPTCHA”) to enhance the security of our website by preventing unauthorized automated access and abuse. In this process, your browser may transmit personal data to Google reCAPTCHA. The processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. The collected data will be retained only for as long as necessary to fulfill the purpose for which it was collected. For more information on Google’s processing of data, please refer to Google’s Privacy Policy available at https://policies.google.com/privacy.

15. Use of Google Analytics
15.1. On our website, we employ Google Analytics , a web analytics service provided by Google Ireland Limited , Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google Analytics places cookies on your device that facilitate an assessment of your usage of our website. Through these cookies, Google collects data enabling a unique identification of your browser, information on the frequency and timing of your visits to our website, duration of your visits, and your interactions with the website.

We have implemented the Google Analytics code extension “get._anonymizeIP();” to ensure IP anonymization, which truncates your IP address within the European Union or European Economic Area prior to processing. Only in exceptional cases is the full IP address transferred to a Google server in the United States and truncated there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

Data collected via cookies is typically transferred to and stored on a Google server in the United States. Google has undertaken to uphold European data protection standards and protect your rights through the application of EU standard contractual clauses. Data transfer to third parties occurs exclusively where consent has been provided, where required by legal obligations, or where third parties process data on behalf of Google.

16. Use of Facebook Pixel (Facebook Custom Audiences)

16.1. We employ the Facebook Pixel provided by Meta Platforms Ireland Limited , 4 Grand Canal Square, Dublin 2, Ireland (formerly “Facebook”) to display interest-based advertisements (hereinafter “Facebook Ads”) to users of our website on Facebook and other websites utilizing this process. This tool allows Meta to show ads based on user interests. When the Facebook Pixel is active, your browser automatically establishes a direct connection with Meta’s servers if you are logged into your Facebook account.

16.2. We have no control over the scope and further use of the data that Meta collects through this tool. According to our current understanding, Meta receives information via the Facebook Pixel regarding actions taken on our website, such as clicking on our ads or visiting specific pages. If you are registered with a Facebook service, Meta can link this visit to your Facebook account. If you are not logged into Facebook or are not a registered user, it is still possible for Meta to process and store your IP address and other identifying information.

16.3. The purpose of the Facebook Pixel is to ensure that our Facebook Ads reach users who have shown an interest in our website, enabling us to tailor ads more precisely and avoid unnecessary or disruptive advertisements. Additionally, we use the Facebook Pixel to measure the effectiveness of Facebook Ads for statistical purposes by verifying if users have been redirected to our website after interacting with a Facebook Ad.

16.4. The legal basis for the use of the Facebook Pixel is your consent pursuant to Art. 6 (1)(a) GDPR. The Pixel is only activated upon your consent, which you provide through our cookie banner.

16.5. You may withdraw your consent and object to the use of the Facebook Pixel at any time by accessing the following link and adjusting your preferences in the cookie banner: “Change.Change privacy settings

16.6. For further information, please refer to Meta’s Privacy Policy : http://www.facebook.com/policy.php and details on data collection at: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

Further information on data collection: http://www.facebook.com/about/privacy/your-info-on-other#applica

17. Use of Bunny Content Delivery Network (CDN)
17.1. To enhance the loading speed of this website, we utilize the services of a content delivery network (CDN) provided by bunny.net (BunnyWay informacijske storitve d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). Static elements of the website, such as images and script files, are delivered via the bunny.net network.

17.2. In using bunny.net services, it is necessary to transmit the IP address of the accessing device. All personal data is anonymized to the greatest extent possible and is not disclosed to third parties.

Further details on data handling by bunny.net can be found in their GDPR compliance statement at https://bunny.net/gdpr and Privacy Policy at https://bunny.net/privacy.

17.3. The integration of bunny.net is aimed at ensuring a consistent and visually appealing presentation of this website, which constitutes a legitimate interest pursuant to Article 6(1)(f) GDPR.

18. Use of Vimeo

18.1. We integrate video content from the provider Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.

To facilitate this, we employ Vimeo plugins on our website. When you access a page on our website with such a plugin, a connection to Vimeo servers is established, and the plugin content is loaded directly from Vimeo. In this process, the Vimeo server is informed of the specific page on our website that you have accessed.
18.2. If you are logged into Vimeo as a registered user, this interaction allows Vimeo to associate your website activity with your personal Vimeo user account. Similarly, any interaction with the plugin, such as playing a video, is also linked to your user account. You can prevent this association by logging out of your Vimeo account before visiting our website and by deleting corresponding Vimeo cookies. Additionally, the option to disable third-party cookies is available in the cookie settings located in the footer menu, although disabling them may restrict access to certain video content on our site.

18.3. Further details regarding the scope of data collection, subsequent processing, usage by Vimeo, and your rights as a data subject, as well as available privacy settings, can be found in Vimeo’s privacy policy: https://vimeo.com/privacy

19. Payment methods

19.1. Upon the conclusion of a fee-based agreement, you are generally required to provide us with your payment credentials (e.g., bank account details for direct debit authorization). This information is essential to facilitate the payment transaction. Payment transactions conducted through standard payment methods (such as Visa/MasterCard, or direct debit) are executed exclusively via an encrypted SSL or TLS connection. Encrypted connections can be identified by the change in the browser’s address line from “http://” to “https://” and by the presence of a padlock icon in the browser’s address bar. Encrypted communication ensures that third parties cannot intercept or access your payment data during transmission.

20. Use of PayPal as a Payment Method

20.1. The Controller has integrated PayPal components into this website. PayPal serves as an online payment service provider. Payments may be processed through individual PayPal accounts, which represent virtual accounts for private or business use. Additionally, users without a PayPal account may execute virtual payments via credit card through PayPal Checkout. A PayPal account is linked to an email address, obviating the need for a traditional account number. PayPal facilitates the initiation of online payments to third parties and receipt of payments. Furthermore, PayPal acts as a trustee, offering buyer protection services for certain transactions.

20.2. The European operating entity for PayPal is PayPal (Europe) S.à.r.l. et Cie, S.C.A., headquartered at 22- 24 Boulevard Royal, L-2449 Luxembourg, Luxembourg.

20.3. Should the Data Subject select “PayPal” as the payment option during the online ordering process, personal data will be transmitted automatically from the Data Subject to PayPal. The personal data typically transmitted includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. This data, required for the respective order, is also necessary to fulfill the obligations under the purchase agreement.

20.4. The purpose of this data transmission is to execute payments and prevent fraud. Personal data exchanged between PayPal and the Controller may be transferred by PayPal to credit agencies, with the intent of conducting identity and creditworthiness checks. PayPal may employ other payment service providers for processing payments; should specific payment terms apply, these will be communicated separately by PayPal.

20.5. The applicable data protection provisions of PayPal can be accessed at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

21. Credit Assessment and Scoring in Case of Purchase on Account

21.1. Should we render services in advance, such as in the case of purchase on account, we reserve the right, for the protection of our legitimate interests (Art. 6 para. 1 lit. f GDPR), to perform an identity and creditworthiness assessment through a specialized credit reporting agency. For this purpose, the personal data required for the credit assessment will be transferred to Tesch Mediafinanz GmbH, Weiße Breite 5, 49084 Osnabrück, Germany (www.mediafinanz.de).

21.2. The following data may be transmitted: last name, first name, street, house number, postal code, and city. This creditworthiness assessment may include probability values (score values), calculated through scientifically recognized mathematical-statistical procedures, with address data among the factors considered in the calculation. The resulting information on the statistical likelihood of payment default is utilized for a balanced decision regarding the initiation, performance, or termination of the contractual relationship. Your legitimate interests will be protected in accordance with statutory provisions.

21.3. For further information on the data processing practices of Tesch Mediafinanz GmbH, please refer to their data protection notice at: https://www.mediafinanz.de/datenschutzerklaerung.

22. Use of Stripe (Credit Card Payment) as a Payment Method

22.1. When processing credit card payments, we transfer your payment data to Stripe Payments Europe, Ltd., located at 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”). This transfer is made in accordance with Art. 6 para. 1 lit. b GDPR and is limited to the data necessary for the execution of the payment transaction. Any data provided to Stripe is processed under Stripe’s own data protection policies, available here: https://stripe.com/de/privacy#translation.

22.2. We do not store credit card numbers nor do we independently collect any credit information.

23. Use of Klarna as a Payment Method
23.1. We have integrated the payment service provider Klarna onto our website. Klarna, as a financial service provider, offers various payment methods, enabling us to process payments securely and efficiently.

23.2. The responsible entity for processing personal data in connection with Klarna payments is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. Should you select Klarna as your payment option during the ordering process, your personal data will be transferred to Klarna on the basis of contractual performance under Art. 6 para. 1 lit. b GDPR and our legitimate interests as per Art. 6 para. 1 lit. f GDPR.

23.3. In the course of payment processing, the following data is transmitted to Klarna: first name, last name, address, email address, IP address, telephone number, mobile number, and other data necessary for payment processing. Klarna processes this information to carry out the transaction and to confirm the financial transfer to the merchant. Klarna may also perform technical and financial checks to assess creditworthiness.

23.4. For certain payment options, such as “Pay Later” (invoice), “Pay Now” (direct debit, credit card), and “Financing” (installment purchase), Klarna may, if necessary, perform a creditworthiness assessment based on scientifically recognized mathematical-statistical processes via credit reference agencies.

To conduct such an assessment, Klarna may transfer the personal data necessary for the credit check—such as first and last name, address, gender, email address, IP address, and order-related information—to a credit reference agency for identity and credit verification. Klarna then uses the information obtained about the statistical likelihood of payment default to make an informed decision about the establishment, performance, or termination of the contractual relationship.
This credit report may include probability values (score values) calculated through scientifically recognized statistical methods, which may also consider address data. Legitimate interests are respected in accordance with statutory requirements, and data processing is specifically aimed at assessing creditworthiness to facilitate the initiation of a contract. This processing is conducted based on Art. 6 (1) lit. f GDPR, as Klarna has a predominant legitimate interest in protecting against payment default when providing advance services.

You have the right to object at any time, on grounds related to your particular situation, to this processing of your personal data under Art. 6 (1) lit. f GDPR, by informing Klarna. Further information on potential data recipients is available at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

23.5 As part of payment processing, cookies may be stored that temporarily save the payment made and recognize your browser. The resulting data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
Translated with DeepL.com (free version)

23.6 For more information on how Klarna processes your data and what rights you have with regard to your data and how you can exercise them, please refer to Klarna’s privacy policy. This is available at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

24. Amazon Pay

24.1. We offer the option of using the payment service provider Amazon Pay (Amazon Payments Europe s.c.a., 38 Avenue J.F. Kennedy, L-1855 Luxembourg). In this context, we transmit the following personal data to Amazon Payments, to the extent necessary for contract performance (Art. 6 para. 1 lit. b GDPR): first name, last name, address, email address, and telephone number.

24.2. The processing of this specified data is neither legally nor contractually required; however, without providing this data, payment via Amazon Pay cannot be processed. You are free to choose an alternative payment method at any time.

24.3. Amazon Payments Europe reserves the right to conduct a credit assessment to verify your creditworthiness and ability to pay. This serves the legitimate interest of Amazon Payments Europe (Art. 6 para. 1 lit. f GDPR) and the purpose of contract execution (Art. 6 para. 1 lit. b GDPR). For this purpose, your personal data may be forwarded to credit reference agencies and online retailers. Additionally, your data may be used for interest- based advertising and marketing by Amazon Pay, provided that you have consented to this in your Amazon account settings at https://www.amazon.de/adprefs. During payment processing, you enter a separate contractual relationship with Amazon Pay. We have no control over this process and only receive the transaction outcome, indicating whether the payment was successful or declined.

24.4. For further details on data processing by Amazon Payments Europe, please refer to: https://pay.amazon.de/help/201212490?ld=1.

25. Overview of Social Media Platforms

25.1. Data Processing on Social Media Networks

The networks Facebook, X (Twitter) etc. have functions to extensively evaluate your usage behavior if you access their relevant website either yourself or through social media integrations (such as like fields). Visiting our social media profiles therefore involves some data protection-related processing operations. When you visit our social media profile, if you are logged into your account, we and the platform operator will associate your visit with your user account. In certain cases, personally identifiable data is also collected without your login or registration. This is done, for example, with the help of cookies that are stored on your end device. The platform operator creates user profiles and evaluates your interests. This allows us to show you interest-specific advertising outside of the social media presence. These personalized advertising measures can appear on any of your end devices with which you were logged into the respective portal. Please note that not all processing of the networks is recognizable from our side. These measures vary in their design from provider to provider, which is why you should obtain them directly from the providers concerned in the form of the data protection notices or terms of use.

25.2. Legal Basis The measures and analyses conducted by the platforms on which Greenmark IT GmbH maintains social media profiles are based on the legal grounds that each platform must disclose as required by Art. 6 (1) a) GDPR.

25.3. Responsibilities

As both we and the social network operators are jointly responsible for data processing when you access our profiles, you may exercise your data protection rights with either party. These rights include, but are not limited to, the right to access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint.

25.4. Storage Period

We will delete your data when the purpose of storage has been fulfilled, if you request its deletion, withdraw your consent, or if the basis for storing the data is no longer applicable.

25.5. Facebook & Instagram

We operate a Facebook and Instagram account provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. To manage your advertising settings in your Facebook profile, please refer to this link: https://www.facebook.com/settings?tab=ads. The Facebook privacy policy is available here: https://www.facebook.com/about/privacy/.

25.6. X (Twitter)

We use an X (Twitter) account of the operator Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. To adjust your settings for advertising measures in your profile on X (Twitter) , please use this link: https://x.com/settings/account/personalization You can find Twitter’s privacy policy here: https://x.com/de/privacy

25.7. Xing

We maintain a Xing account operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Xing’s privacy policy is accessible here: https://privacy.xing.com/de/datenschutzerklaerung.

26. Rights of data subject

26.1. Users have the right to request, at no cost, information on the personal data we have stored about them.

26.2. Additionally, users have the right to request rectification of inaccurate data, restriction of processing, erasure of personal data where applicable, to assert their right to data portability, and to lodge a complaint with the competent supervisory authority in cases of suspected unlawful data processing. Supervisory authorities: https://www.datenschutz-bayern.de/infoquel/ds- inst/deutschland-privat.html

26.3. Users may withdraw consent for future data processing by contacting us at datenschutz(at)greenmark-it.de

27. Information for Applicants

27.1. We have set up a dedicated mailbox for job applications, accessible at bewerbung(at)greenmark-it.de. This mailbox is exempt from email archiving. If you submit your application to a different email address, we cannot ensure that it will not be archived.

27.2. Application documents are stored for a maximum period of six months after receipt, unless you specifically request that we retain your application for consideration in future job openings.

27.3. If you would like us to retain your application beyond the six-month retention period to consider you for other vacancies, please indicate this in your application.

27.4. We assume that we may respond to unencrypted application emails in unencrypted form. If you prefer not to receive responses in this manner, please state this in your application email.

28. Data Deletion

28.1. Data stored by us will be deleted once it is no longer necessary for its original purpose and no statutory retention requirements apply. If user data cannot be deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and will not be processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax-related reasons.

28.2. In accordance with statutory requirements, storage is maintained for six years under Section 257 (1) of the German Commercial Code (HGB) (commercial books, inventories, opening balance sheets, annual financial statements, commercial correspondence, accounting records, etc.) and for ten years under Section 147 (1) of the German Fiscal Code (AO) (books, records, management reports, accounting records, commercial and business correspondence, documents relevant to taxation, etc.).

29. Right of Objection
29.1. IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF AN INTEREST BALANCING TEST, YOU HAVE THE RIGHT, AT ANY TIME AND FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

29.2. IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH PURPOSES AT ANY TIME. IF YOU EXERCISE THIS RIGHT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

30. Data Protection Officer

30.1. If you have any questions regarding this Privacy Policy or our handling of your data, please feel free to contact our Data Protection Officer:

PSW GROUP GmbH & Co. KG
Frau Ludwig
datenschutz(at)greenmark-it.de

30.2. If we have not satisfactorily addressed your inquiry or responded within a reasonable timeframe, you have the option of contacting the competent Data Protection Supervisory Authorities.

31. Changes to the Privacy Policy: We periodically amend our Privacy policy to remain compliant with applicable legal regulations. Your rights to access, rectification, erasure, and objection remain unaffected by such amendments. Please note the date of the latest update.

Users are encouraged to regularly review the content of the Privacy policy.

Status: 09/2024https://x.com/de/privacy”