We place the utmost importance on protecting your data and safeguarding your privacy.

The following information is therefore provided to inform you about how we collect and use personal data when you use our website. This privacy policy applies to resellerinterace.com and resellerinterace.de.

Controller :
Greenmark IT GmbH
Leinstr. 3
31061 Alfeld
Deutschland

Telefon: +49 (0) 5181 286 9039
E-Mail: info(at)resellerinterface.com

1. Pseudonymized data collection a. You may visit our websites without disclosing any personal information. We do not collect or store any personal data in this context without your consent. To enhance our services, we solely analyze statistical data that cannot be used to identify you personally.

When you access our website, the following data is collected:

Date, time, and duration of the visit – Web browser utilized and browser configuration – Internet service provider – Approximate geographical location, including country – IP address
2. Collection of Access Data and Log Files

2.1. In accordance with our legitimate interests as defined in Article 6(1)(f) of the General Data Protection Regulation (GDPR), we collect data regarding each access to the server hosting this service (commonly referred to as server log files). The access data encompasses: name of the accessed website, file, date and time of access, volume of data transferred, confirmation of successful access, type and version of the web browser, the user’s operating system, referrer URL (the preceding webpage), IP address, and the requesting Internet service provider.

2.2. Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum period of 4 weeks and then deleted. Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

3. Registration on Our Website 3.1. You have the option to register on this website to access additional features. The data you provide during the registration process will be used solely for the purpose of utilizing the respective offer or service for which you have registered. The mandatory information required during registration must be provided in its entirety; failure to do so will result in the rejection of your registration.

3.2. Due to our special services, an ongoing customer account is required. It is therefore not possible to order via a guest account.

4. Basic Information on Data Processing and Legal Bases

4.1. This privacy policy provides an overview of the type, scope, and purpose of the processing of personal data within the context of our online services and associated websites, features, and content (hereinafter collectively referred to as the “online services” or “website”).

4.2. For the terms used, such as “personal data” or their “processing”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

4.3. The personal data of users processed in the context of this online offering includes inventory data (e.g. names and addresses of customers), contract data (e.g. services used, payment information), usage data (e.g. the websites visited on our online offering, interest in our products) and content data (e.g. entries in the contact form).

4.4. The term “user” includes all categories of data subjects affected by data processing. These include our business partners, customers, interested parties and other visitors to our online offering. The terms used, such as “user”, are to be understood as gender-neutral.

4.5. We only process users’ personal data in compliance with the relevant data protection regulations. This means that user data will only be processed if we have legal permission to do so. This means, in particular, if the data processing is necessary for the provision of our contractual services (e.g. processing of orders) and online services or is required by law, if the user has given their consent, as well as on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR, in particular in the case of range measurement and the collection of access data). GDPR, in particular when measuring reach and collecting access data).

5. Security Measures
5.1. We implement organizational, contractual, and technical security measures that are in accordance with the applicable legal standards and best practices to ensure compliance with data protection regulations and to protect the personal data processed by us against accidental or unlawful alteration, loss, destruction, or unauthorized access.

5.2. This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, e.g. orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6. Collection and Processing of Data for Inquiries via Email, Telephone, or Fax
6.1. If you contact us via email, telephone, or fax, your inquiry, including all personal data arising therefrom (such as name and inquiry details), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. The data you send us in the context of a contact inquiry will remain with us until the purpose for data storage ceases to apply (e.g., after your request has been fully addressed). Mandatory statutory provisions – in particular, statutory retention periods – remain unaffected.

7. Use of the Live Chat System: Live Helper Chat
7.1. We utilize the live helper chat system (Remigijus Kiminas, Lithuania) on our website. This system facilitates communication between you and us, as the service provider. The personal data of users necessary for processing and managing the chat inquiries are processed in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR). The transmission of your inquiry occurs via an encrypted connection (HTTPS) directly to our servers. For further information regarding the handling of personal data, please refer to the privacy policy of Live Helper Chat: https://livehelperchat.com/gdpr- compliance-504a.html

8. Use of OpenAI
8.1. We utilize the OpenAI service provided by OpenAI Ireland Ltd. (1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, “OpenAI”) as part of our processing activities under a data processing agreement. We wish to inform you about the purposes for which your personal data is processed. The utilization of OpenAI is intended for generating domain names or domain suggestions based on the input data you have provided, utilizing artificial intelligence. Additionally, we employ OpenAI products to develop our proprietary solutions and applications for our organization. Below, we provide further details regarding the data we process. The specific data processed by OpenAI is contingent upon the text inputs submitted to OpenAI. The following categories of data may be collected:

– Information pertaining to the nature of the text input – Information regarding the type of device, browser, and operating system – Information about the user’s IP address – Information related to visited pages and geolocation data
It is important to note that the information you enter into OpenAI is not utilized for the training of OpenAI models. OpenAI retains your data for a duration of 30 days following its collection or your submission.

8.2. Your data may be transferred to the United States, which is classified as a third country from a European Union perspective. When personal data is transferred to a third country, an appropriate legal basis for data protection must exist in accordance with Articles 44 et seq. of the General Data Protection Regulation (GDPR). The EU-U.S. Data Privacy Framework establishes an adequate level of data protection for certified entities in the United States. However, OpenAI is not a certified entity under this framework. In order to ensure compliance with data protection regulations for the transfer of data, supplementary Standard Contractual Clauses (SCCs) are necessary. The data transfer is based, among other things, on these Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be reviewed at: https://openai.com/policies/data-processing-addendum

8.3. To ensure the legality of the processing of your data, a suitable legal basis must be established. The processing of your personal data for the creation of domain names or domain suggestions is conducted based on Article 6(1)(b) GDPR, which pertains to the performance of the contract concluded with us or for the implementation of pre- contractual measures taken at your request. Additional information regarding data processing by OpenAI can be found at https://openai.com/policies/privacy-policy

9. Newsletter

9.1. In the following, we provide clarification regarding the content of our newsletter, as well as the registration, distribution, and statistical evaluation processes, including your rights to object. By subscribing to our newsletter, you consent to receive it and to the procedures outlined herein.

9.2. Content of the newsletter

We distribute newsletters, emails, and other electronic communications containing promotional information (hereinafter referred to as “newsletters”) solely with the consent of the recipients or on the basis of a legitimate interest, specifically when you have purchased a product from us, and we wish to offer you discounts or promotions related to those and similar products.

9.3. Double opt-in and logging

Registration for our newsletter is conducted through a so-called double opt-in procedure, except when this occurs during the creation of a customer account. This means that after registration, you will receive an email prompting you to confirm your registration. This confirmation is necessary to prevent unauthorized registrations using third-party email addresses. All newsletter registrations are logged to ensure compliance with legal requirements. This includes the documentation of the registration date and time, the confirmation date and time, as well as the IP address used for registration. Additionally, any changes made to your data stored with the delivery service provider are also logged.

9.4. No shipping service provider

The newsletter is dispatched using an internally developed delivery tool. Consequently, no personal data is transferred to external parties.

9.5. Login data

To subscribe to the newsletter, simply enter your e-mail address. Optionally, you can enter a name so that we can address you personally in the newsletter.

9.6. Unsubscribe/revocation

You have the right to withdraw your consent to receive our newsletter at any time, thereby terminating your subscription.

10. Cookies

10.1. Cookies are data packets transmitted from our web server or third-party web servers to the user’s web browser, which are stored there for subsequent retrieval. Cookies may consist of small files or other forms of data storage. For further information regarding the use of cookies, please visit: Change privacy settings. Change privacy settings

10.2. We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal basis for the processing of personal data in this context is provided by Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the administration of the cookies and similar technologies employed, as well as in managing the associated consents.

10.3. The provision of personal data is not contractually mandated nor is it necessary for the conclusion of a contract. You are not obligated to provide personal data; however, if you choose not to do so, we will be unable to manage your consent. For additional information regarding the use of cookies, please visit: Change privacy settings. Change privacy settings

11. Transfer of data to third parties, third-party providers and the United States

11.1. Data shall only be transferred to third parties in accordance with applicable legal provisions. We disclose user data to third parties only if this is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, for contractual purposes pursuant to Art. 6 para. 1 lit. b GDPR, or based on legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR that are necessary for the economic and effective operation of our business.

11.2. If we use subcontractors to provide our services, we take appropriate legal precautions and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations.

11.3. For all other data processing where we do not control the processing ourselves, in particular for domain registration services, the data controller is the registry operator of the respective TLD as well as ICANN or vicarious agents as joint data controller with the registry operator.

11.4. If content, tools or other means from other providers (hereinafter jointly referred to as “third-party providers”) are used within the scope of this privacy policy and their registered office is located in a third country, it is to be assumed that data is transferred to the countries in which the third-party providers are based. Third countries are countries in which the GDPR is not directly applicable law, i.e. generally countries outside the EU or the European Economic Area. The transfer of data to third countries takes place either if there is an adequate level of data protection, user consent or other legal permission.

11.5. Note on data transfer to the USA

Our website incorporates tools from companies based in the United States, among others. When these tools are activated, your personal data may be transmitted to the respective companies’ servers in the United States. It is important to note that the United States is not recognized as a safe third country under EU data protection law. US companies may be compelled to disclose personal data to security authorities without you having the opportunity to pursue legal remedies against such disclosures. Consequently, it cannot be ruled out that US authorities (e.g., intelligence services) may process, evaluate, and permanently store your data on US servers for surveillance purposes. We have no influence over these processing activities.

11.6. EU-US Trans-Atlantic Data Privacy Framework

As part of the so-called “Data Privacy Framework” (DPF), the European Commission has recognized the level of data protection for certain companies in the United States through the adequacy decision issued on July 10, 2023. A list of certified companies and further information regarding the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/ (in English). We will inform you in the context of this data protection notice about which of our service providers are certified under the Data Privacy Framework.

12. Use of Google AdWords Conversion Tracking
12.1. We utilize the online advertising program “Google AdWords” and, as part of this program, we implement conversion tracking. Google Conversion Tracking is an analytical service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). Upon clicking on an advertisement placed by Google, a conversion tracking cookie is installed on your device. These cookies possess a limited validity period, do not contain any personal data, and are therefore not utilized for the identification of individuals.
12.2. When you navigate to specific pages on our website, both we and Google may ascertain that you have clicked on the advertisement and were subsequently redirected to this page. The information gathered through the conversion cookie is utilized to generate conversion statistics for our purposes. This enables us to determine the total number of users who clicked on our advertisement and were redirected to a page featuring a conversion tracking tag. However, we do not obtain any information that allows for the personal identification of users.

12.3. The processing of your user data for the purpose of advertising measures via Google AdWords conversion tracking is predicated upon your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR), which you have provided through the cookie banner. You may modify or revoke your consent at any time via the following link: Please provide a `type` attribute in your shortcode. Allowed: history,revoke,change!. Upon revocation, you will not be included in the conversion tracking statistics. Change privacy settings

12.4. For additional information regarding Google’s data usage, options for configuring settings, and means of objection, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) as well as the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

13. Verwendung von Google Ads Remarketing
13.1. Unsere Website nutzt die Funktionen von Google Ads Remarketing. Hiermit werben wir für diese Website in den Google-Suchergebnissen, sowie auf Dritt-Websites. Anbieter ist die Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google”). Zu diesem Zweck setzt Google ein Cookie im Browser Ihres Endgeräts, welches automatisch mittels einer pseudonymen Cookie-ID und auf Grundlage der von Ihnen besuchten Seiten eine interessensbasierte Werbung ermöglicht.

Processing is carried out based on your consent, as provided through our cookie banner, in accordance with Art. 6 (1) (a) GDPR. Any additional data processing only occurs if you have consented to Google linking your internet and app browser history to your Google account, allowing information from your Google account to personalize ads. If you are logged into Google while visiting our website, Google uses your data in conjunction with Google Analytics data to compile and define cross-device target audience lists for remarketing. In this process, your personal data from Google is temporarily linked with Google Analytics data to create target audiences.
As part of Google Ads Remarketing, personal data may also be transferred to Google LLC servers in the United States.

You can permanently disable cookie-based advertising preferences by downloading and installing the browser plugin available at: https://www.google.com/settings/ads/onweb/ Alternatively, you can learn more about cookie settings and options for adjusting preferences by visiting the Digital Advertising Alliance at http://www.aboutads.info.

Additionally, you can adjust your browser settings to receive notifications about cookie placement and decide to accept cookies on a case-by-case basis, in specific cases, or to reject them entirely. Please note that disabling cookies may limit the functionality of our website. Further information regarding advertising and Google’s data protection provisions can be found at: https://www.google.com/policies/technologies/ads/
You may revoke your consent at any time with future effect. To exercise your right of revocation, please follow the above-described options for objecting to data processing.

14. Use of Google reCAPTCHA
14.1. We employ the web service Google reCAPTCHA provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google reCAPTCHA”) to enhance the security of our website by preventing unauthorized automated access and abuse. In this process, your browser may transmit personal data to Google reCAPTCHA. The processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. The collected data will be retained only for as long as necessary to fulfill the purpose for which it was collected. For more information on Google’s processing of data, please refer to Google’s Privacy Policy available at https://policies.google.com/privacy.

15. Use of Google Analytics
15.1. On our website, we employ Google Analytics , a web analytics service provided by Google Ireland Limited , Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google Analytics places cookies on your device that facilitate an assessment of your usage of our website. Through these cookies, Google collects data enabling a unique identification of your browser, information on the frequency and timing of your visits to our website, duration of your visits, and your interactions with the website.

We have implemented the Google Analytics code extension “get._anonymizeIP();” to ensure IP anonymization, which truncates your IP address within the European Union or European Economic Area prior to processing. Only in exceptional cases is the full IP address transferred to a Google server in the United States and truncated there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

Data collected via cookies is typically transferred to and stored on a Google server in the United States. Google has undertaken to uphold European data protection standards and protect your rights through the application of EU standard contractual clauses. Data transfer to third parties occurs exclusively where consent has been provided, where required by legal obligations, or where third parties process data on behalf of Google.

16. Use of Facebook Pixel (Facebook Custom Audiences)

16.1. We employ the Facebook Pixel provided by Meta Platforms Ireland Limited , 4 Grand Canal Square, Dublin 2, Ireland (formerly “Facebook”) to display interest-based advertisements (hereinafter “Facebook Ads”) to users of our website on Facebook and other websites utilizing this process. This tool allows Meta to show ads based on user interests. When the Facebook Pixel is active, your browser automatically establishes a direct connection with Meta’s servers if you are logged into your Facebook account.

16.2. We have no control over the scope and further use of the data that Meta collects through this tool. According to our current understanding, Meta receives information via the Facebook Pixel regarding actions taken on our website, such as clicking on our ads or visiting specific pages. If you are registered with a Facebook service, Meta can link this visit to your Facebook account. If you are not logged into Facebook or are not a registered user, it is still possible for Meta to process and store your IP address and other identifying information.

16.3. The purpose of the Facebook Pixel is to ensure that our Facebook Ads reach users who have shown an interest in our website, enabling us to tailor ads more precisely and avoid unnecessary or disruptive advertisements. Additionally, we use the Facebook Pixel to measure the effectiveness of Facebook Ads for statistical purposes by verifying if users have been redirected to our website after interacting with a Facebook Ad.

16.4. The legal basis for the use of the Facebook Pixel is your consent pursuant to Art. 6 (1)(a) GDPR. The Pixel is only activated upon your consent, which you provide through our cookie banner.

16.5. You may withdraw your consent and object to the use of the Facebook Pixel at any time by accessing the following link and adjusting your preferences in the cookie banner: “Change.Change privacy settings

16.6. For further information, please refer to Meta’s Privacy Policy : http://www.facebook.com/policy.php and details on data collection at: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

Further information on data collection: http://www.facebook.com/about/privacy/your-info-on-other#applica

17. Use of Bunny Content Delivery Network (CDN)
17.1. To enhance the loading speed of this website, we utilize the services of a content delivery network (CDN) provided by bunny.net (BunnyWay informacijske storitve d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). Static elements of the website, such as images and script files, are delivered via the bunny.net network.

17.2. In using bunny.net services, it is necessary to transmit the IP address of the accessing device. All personal data is anonymized to the greatest extent possible and is not disclosed to third parties.

Further details on data handling by bunny.net can be found in their GDPR compliance statement at https://bunny.net/gdpr and Privacy Policy at https://bunny.net/privacy.

17.3. The integration of bunny.net is aimed at ensuring a consistent and visually appealing presentation of this website, which constitutes a legitimate interest pursuant to Article 6(1)(f) GDPR.

18. Use of Vimeo

18.1. We integrate video content from the provider Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.

To facilitate this, we employ Vimeo plugins on our website. When you access a page on our website with such a plugin, a connection to Vimeo servers is established, and the plugin content is loaded directly from Vimeo. In this process, the Vimeo server is informed of the specific page on our website that you have accessed.
18.2. If you are logged into Vimeo as a registered user, this interaction allows Vimeo to associate your website activity with your personal Vimeo user account. Similarly, any interaction with the plugin, such as playing a video, is also linked to your user account. You can prevent this association by logging out of your Vimeo account before visiting our website and by deleting corresponding Vimeo cookies. Additionally, the option to disable third-party cookies is available in the cookie settings located in the footer menu, although disabling them may restrict access to certain video content on our site.

18.3. Further details regarding the scope of data collection, subsequent processing, usage by Vimeo, and your rights as a data subject, as well as available privacy settings, can be found in Vimeo’s privacy policy: https://vimeo.com/privacy

19. Payment methods

19.1. Upon the conclusion of a fee-based agreement, you are generally required to provide us with your payment credentials (e.g., bank account details for direct debit authorization). This information is essential to facilitate the payment transaction. Payment transactions conducted through standard payment methods (such as Visa/MasterCard, or direct debit) are executed exclusively via an encrypted SSL or TLS connection. Encrypted connections can be identified by the change in the browser’s address line from “http://” to “https://” and by the presence of a padlock icon in the browser’s address bar. Encrypted communication ensures that third parties cannot intercept or access your payment data during transmission.

20. Use of PayPal as a Payment Method

20.1. The Controller has integrated PayPal components into this website. PayPal serves as an online payment service provider. Payments may be processed through individual PayPal accounts, which represent virtual accounts for private or business use. Additionally, users without a PayPal account may execute virtual payments via credit card through PayPal Checkout. A PayPal account is linked to an email address, obviating the need for a traditional account number. PayPal facilitates the initiation of online payments to third parties and receipt of payments. Furthermore, PayPal acts as a trustee, offering buyer protection services for certain transactions.

20.2. The European operating entity for PayPal is PayPal (Europe) S.à.r.l. et Cie, S.C.A., headquartered at 22- 24 Boulevard Royal, L-2449 Luxembourg, Luxembourg.

20.3. The personal data transmitted to PayPal is usually first name, last name, address, e-mail address, IP address, telephone number, cell phone number or other data necessary for payment processing. Personal data that is necessary for processing the purchase contract is also data that is related to the respective order.

20.4. The purpose of transmitting the data is to process payments and prevent fraud. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit reference agencies. The purpose of this transmission is to check identity and creditworthiness. PayPal may use other payment services for payment processing; if special payment terms apply, you will be informed of these separately by PayPal.

20.5. The applicable data protection provisions of PayPal may be retrieved under https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

21. Credit Assessment and Scoring in Case of Purchase on Account

21.1. Should we render services in advance, such as in the case of purchase on account, we reserve the right, for the protection of our legitimate interests (Art. 6 para. 1 lit. f GDPR), to perform an identity and creditworthiness assessment through a specialized credit reporting agency. For this purpose, the personal data required for the credit assessment will be transferred to Tesch Mediafinanz GmbH, Weiße Breite 5, 49084 Osnabrück, Germany (www.mediafinanz.de).

21.2. The following data may be transmitted: last name, first name, street, house number, postal code, and city. This creditworthiness assessment may include probability values (score values), calculated through scientifically recognized mathematical-statistical procedures, with address data among the factors considered in the calculation. The resulting information on the statistical likelihood of payment default is utilized for a balanced decision regarding the initiation, performance, or termination of the contractual relationship. Your legitimate interests will be protected in accordance with statutory provisions.

21.3. For further information on the data processing practices of Tesch Mediafinanz GmbH, please refer to their data protection notice at: https://www.mediafinanz.de/datenschutzerklaerung.

22. Use of Stripe (Credit Card Payment) as a Payment Method

22.1. When processing credit card payments, we transfer your payment data to Stripe Payments Europe, Ltd., located at 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”). This transfer is made in accordance with Art. 6 para. 1 lit. b GDPR and is limited to the data necessary for the execution of the payment transaction. Any data provided to Stripe is processed under Stripe’s own data protection policies, available here: https://stripe.com/de/privacy#translation.

22.2. We do not store any credit card numbers and do not obtain any credit rating information ourselves.

23. Use of Klarna as a Payment Method
23.1. We have integrated the payment service provider Klarna onto our website. Klarna, as a financial service provider, offers various payment methods, enabling us to process payments securely and efficiently.

23.2. Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden is responsible for processing your personal data when you use Klarna. If you opt for payment processing via Klarna during the order process, we will transmit your personal data to Klarna on your behalf. This transfer takes place on the basis of the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR and to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.

23.3. The following data is transmitted to Klarna as part of the checkout process: First name, last name, address, e-mail address, IP address, telephone number, cell phone number and other data required for payment processing. Klarna processes this data in order to process the payment and to send the online merchant a confirmation of the financial transaction. Klarna also carries out a technical and financial check to confirm solvency.

23.4. For certain payment options, such as “Pay Later” (invoice), “Pay Now” (direct debit, credit card), and “Financing” (installment purchase), Klarna may, if necessary, perform a creditworthiness assessment based on scientifically recognized mathematical-statistical processes via credit reference agencies.

To conduct such an assessment, Klarna may transfer the personal data necessary for the credit check—such as first and last name, address, gender, email address, IP address, and order-related information—to a credit reference agency for identity and credit verification. Klarna then uses the information obtained about the statistical likelihood of payment default to make an informed decision about the establishment, performance, or termination of the contractual relationship.
This credit report may include probability values (score values) calculated through scientifically recognized statistical methods, which may also consider address data. Legitimate interests are respected in accordance with statutory requirements, and data processing is specifically aimed at assessing creditworthiness to facilitate the initiation of a contract. This processing is conducted based on Art. 6 (1) lit. f GDPR, as Klarna has a predominant legitimate interest in protecting against payment default when providing advance services.

You have the right to object at any time, on grounds related to your particular situation, to this processing of your personal data under Art. 6 (1) lit. f GDPR, by informing Klarna. Further information on potential data recipients is available at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

23.5 As part of payment processing, cookies may be stored that temporarily save the payment made and recognize your browser. The resulting data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.
Translated with DeepL.com (free version)

23.6. For more information on how Klarna processes your data and what rights you have with regard to your data and how you can exercise them, please refer to Klarna’s privacy policy. This is available at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

24. Amazon Pay

24.1. We offer the option of using the payment service provider Amazon Pay (Amazon Payments Europe s.c.a., 38 Avenue J.F. Kennedy, L-1855 Luxembourg). In this context, we transmit the following personal data to Amazon Payments, to the extent necessary for contract performance (Art. 6 para. 1 lit. b GDPR): first name, last name, address, email address, and telephone number.

24.2. The processing of the data provided (first name, surname, address, email address, telephone number) is not required by law or contract. Without the transmission of your personal data, we cannot process a payment via Amazon Pay. You can choose a different payment method at any time.

24.3. Amazon Payments Europe reserves the right to carry out a credit check to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Amazon Payments Europe (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the execution of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). Your data will be passed on to credit agencies and online retailers for this purpose. In addition, your data may be used for interest-based advertising and marketing purposes by Amazon Pay if you have consented to this in your account settings https://www.amazon.de/adprefs. As part of payment processing, you conclude a contract with Amazon Pay. We have no influence on this process and only receive the result of whether the payment has been made or rejected.

24.4. Further information on processing by Amazon Payments Europe can be found at: https://pay.amazon.de/help/201212490?ld=1.

25. Overview of Social Media Platforms

25.1. Data Processing on Social Media Networks

The networks Facebook, X (Twitter) etc. have functions to extensively evaluate your usage behavior if you access their relevant website either yourself or through social media integrations (such as like fields). Visiting our social media profiles therefore involves some data protection-related processing operations. When you visit our social media profile, if you are logged into your account, we and the platform operator will associate your visit with your user account. In certain cases, personally identifiable data is also collected without your login or registration. This is done, for example, with the help of cookies that are stored on your end device. The platform operator creates user profiles and evaluates your interests. This allows us to show you interest-specific advertising outside of the social media presence. These personalized advertising measures can appear on any of your end devices with which you were logged into the respective portal. Please note that not all processing of the networks is recognizable from our side. These measures vary in their design from provider to provider, which is why you should obtain them directly from the providers concerned in the form of the data protection notices or terms of use.

25.2. Legal basis Measures and analyses of the portals on which Greenmark IT GmbH is represented with social media profiles are carried out on legal bases which the portals must declare bindingly in accordance with Art. 6 para. 1 a) GDPR.

25.3. Responsibilities

As both we and the social network operators are jointly responsible for data processing when you access our profiles, you may exercise your data protection rights with either party. These rights include, but are not limited to, the right to access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint.

25.4. Storage duration

We will delete your data when the purpose of storage has been fulfilled, if you request its deletion, withdraw your consent, or if the basis for storing the data is no longer applicable.

25.5. Facebook & Instagram

We operate a Facebook and Instagram account provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. To manage your advertising settings in your Facebook profile, please refer to this link: https://www.facebook.com/settings?tab=ads. The Facebook privacy policy is available here: https://www.facebook.com/about/privacy/.

25.6. X (Twitter)

We use an X (Twitter) account of the operator Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. To adjust your settings for advertising measures in your profile on X (Twitter) , please use this link: https://x.com/settings/account/personalization You can find Twitter’s privacy policy here: https://x.com/de/privacy

25.7. Xing

We maintain a Xing account operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Xing’s privacy policy is accessible here: https://privacy.xing.com/de/datenschutzerklaerung.

26. Rights of data subject

26.1. Users have the right to request, at no cost, information on the personal data we have stored about them.

26.2. In addition, users have the right to rectification of inaccurate data, restriction of processing and erasure of their personal data, if applicable, to assert their rights to data portability and, in the event of the assumption of unlawful data processing, to lodge a complaint with the competent supervisory authority. Supervisory authorities: https://www.datenschutz-bayern.de/infoquel/ds-inst/deutschland-privat.html

26.3. Users can also revoke their consent, generally with effect for the future. Send us your request to datenschutz(at)greenmark-it.de

27. Information for Applicants

27.1. We have set up a dedicated mailbox for job applications, accessible at bewerbung(at)greenmark-it.de. This mailbox is exempt from email archiving. If you submit your application to a different email address, we cannot ensure that it will not be archived.

27.2. Application documents will be kept for a maximum of 6 months after receipt, unless you would like us to consider your application for subsequent vacancies.

27.3. If you would like us to consider you for other vacancies in our company and keep your application for the maximum retention period of 6 months, please let us know.

27.4. We assume that we may also reply to unencrypted application emails in unencrypted form. If you do not wish us to do so, please let us know in your application email.

28. Data Deletion

28.1. Data stored by us will be deleted once it is no longer necessary for its original purpose and no statutory retention requirements apply. If user data cannot be deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and will not be processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax-related reasons.

28.2. In accordance with legal requirements, the retention period is 6 years pursuant to Section 257 (1) HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and 10 years pursuant to Section 147 (1) AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

29. Right of Objection
29.1. IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF AN INTEREST BALANCING TEST, YOU HAVE THE RIGHT, AT ANY TIME AND FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

29.2. IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH PURPOSES AT ANY TIME. IF YOU EXERCISE THIS RIGHT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

30. Data Protection Officer

30.1. If you have any questions regarding this Privacy Policy or our handling of your data, please feel free to contact our Data Protection Officer:

HB E-Commerce Rechtsanwaltsgesellschaft mbH
Kohlgartenstraße 11-13
04315 Leipzig
datenschutz(at)greenmark-it.de

30.2. If we have not responded to your request to your satisfaction or within a reasonable period of time, you have the option of contacting the data protection supervisory authorities.

31. Changes to the Privacy Policy: We periodically amend our Privacy policy to remain compliant with applicable legal regulations. Your rights to access, rectification, erasure, and objection remain unaffected by such amendments. Please note the date of the latest update.

31.2. Users are requested to inform themselves regularly about the content of the privacy policy

Status: 05/2025

Change privacy settings