Data privacy for the website www.einhell.de

The legal basis for the processing of your personal data depends on the purpose underlying the processing.

5.1 Technical administration of the website

The legal basis for the processing of personal data for the purpose specified above is Art. 6(1) lit. b of the General Data Protection Regulation (GDPR), provided a contractual relationship exists with you. Where no contractual relationship exists between the company and you, the legal basis fordata processing is Art. 6(1) lit. f GDPR. A transfer of personal data (see figure 2) is necessary in order to establish a connection to the website and to display website content.

5.2 Services

The legal basis for the processing of personal data for the purpose specified above is Art. 6(1) lit. b GDPR. We provide our services as part of fulfilling contractual obligations. We are unable to fulfil or perform the contract with you if we are unable to process personal data.

The following services are available on our website www.einhell.de for which we store personal data: 

• Customer Login
• Order
• Revocation
• Warranty Service
• Newsletter
• 30-Days Money Back Warranty
• 3 Years product warranty on Einhell products
• 3 Year Battery Warranty
• 10 Year PurePOWER Brushless Warranty
• Questions and answers (via Bazaarvoice Inc.; see Nr. 5.11)
• Product reviews (via Bazaarvoice Inc.; see Nr. 5.11)

5.3 Google Tag Manager

Our website uses Google Tag Manager, a service provided for persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other persons by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The Tag Manager is used to manage the tools and external services we use on our website and allows the use of so-called tags. A tag is a code element that is stored in the source code of the website, for example to control which page or service elements and tools are activated and loaded in which order. The tool triggers other tags, which in turn may collect data and which are further explained in this privacy policy. Some of the data is processed on a Google server in the USA.

We have concluded a data processing agreement with Google Ireland Limited for the use of Google Tag Manager. In the event that personal data is transferred from Google Ireland Limited to the USA, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) pursuant to Art. 46(2)(c) GDPR. In addition, we also obtain your explicit consent for the transfer of your data to third countries in accordance with Art. 49(1)(a) GDPR.

Google’s Data Privacy Policy as it relates to this tool can be found here: https://www.google.com/analytics/terms/tag-manager/.

5.4 Google Analytics 4

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Scope of processing
Google Analytics 4 uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

Google Analytics 4 has IP address anonymization enabled by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics 4 will not be merged with other Google data.

We use Google Signals. This allows Google Analytics to collect additional information about users who have personalized ads enabled (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.

During your website visit, your user behavior is recorded in the form of "events". Events can be:

• Page views
• First visit to the website
• Start of session
• Your "click path", interaction with the website
• Scrolls (whenever a user scrolls to the bottom of the page (90%))
• Clicks on external links
• Internal search queries
• Interaction with videos
• File downloads
• Seen / clicked ads
• Language settings
• Purchase of products (if function is available on the website)

Also recorded:

• Your approximate location (region)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your internet service provider
• The referrer URL (via which website/advertising medium you came to this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics 4 serve to analyse the performance of our website and the success of our marketing campaigns.

Recipients
Recipients of the data are/may be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (as processor under Art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.

Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Duration of storage
The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

Legal basis
The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit. a GDPR.

Revocation
You can revoke your consent at any time with effect for the future by accessing the cookie settings (privacy button at the bottom left of the page) and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.

In addition, you can prevent the collection of data generated by the cookie and related to your use of the website to Google and the processing of this data by Google, by

• downloading and installing the browser add-on to disable Google Analytics 4. his will install an opt-out cookie on your device. This prevents the collection by Google Analytics 4 for this website and for this browser in the future, as long as the cookie remains installed in your browser.
• disabling Google Analytics 4 by via the following link: Disable Google Analytics 4. This will set an opt-out cookie on your device. This prevents the collection by Google Analytics 4 for this website and for this browser in the future, as long as the cookie remains installed in your browser.

For more information on Google Analytics 4 terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ or https://policies.google.com/?hl=en.

5.5 Meta Pixel and Meta Remarketing

Based on our legitimate interest in the analysis, optimisation and economic operation of our website, the site employs the so-called "Meta pixel" from the social network Meta, operated by Meta Platforms Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) or, if you are resident in the EU, Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, “Meta”).

The Meta pixel enables Meta to identify visitors to our website as target groups for the display of adverts, so-called "Meta ads". We use Meta pixel accordingly in order to show the Meta-delivered ads only to those users who have demonstrated an interest in our internet services or who exhibit the specific characteristics that we communicate to Meta (also referred to as "pixel events" and which contain, for example, user email addresses). In other words, by using the Meta pixel, we seek to ensure that our Meta ads reflect the potential interests of our users and are not simply an annoyance. With the aid of the Meta pixel we are also better able to track the effectiveness of Meta advertisements for statistical and marketing purposes by seeing whether users were directed to our website after clicking on a Meta ad.

The Meta pixel is inserted immediately by Meta when our website is accessed and can store a cookie, i.e. a small file, on your device. If you then log into Meta or visit Meta while logged in, your visit to our website will be recorded in your profile. The data collected about you remains anonymous to us, so it does not enable us to draw any conclusions as to the identity of the user. However, the data is stored and processed by Meta, which means that it is possible to associate it with the respective user profile. If we transmit data to Meta for the purposes of synchronisation, this data is encrypted
locally in your browser and only then sent to Meta over a secure https connection. This is only done for the purpose of synchronisation with data similarly encrypted by Meta.

The processing of data by Meta occurs within the scope of Meta's data utilisation guidelines. Accordingly, general information on the display of Meta ads can be found in Meta's data usage policy: https://www.facebook.com/policy.php. You can find specific information and details about the Meta pixel and how it works in the Meta Help section: https://www.facebook.com/business/help/651294705016616.

You can object to the collection of data via the Meta pixel and the use of your data to display Meta ads. To do so, visit the following webpage provided by Meta and follow the instructions there concerning usage-based advertising settings: https://www.facebook.com/settings?tabs=ads, or declare your objection via the US site: https://www.aboutads.com/choices or the EU site: https://www.youronlinechoices.com/uk/your-ad-choices/. The settings are platform- independent, which means they are used across all devices, whether desktop computers or mobile devices.

5.6 Youtube-Videos

We embed YouTube videos on some of our websites. The provider of the corresponsing plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a site with the YouTube plug-in, a connection to the servers at YouTube is established. YouTube is thereby notified of which sites you visit. If you are logged into your YouTube account, YouTube can associate your surfing history to you personally. You can prevent this by logging out of your YouTube account.

If a YouTube video is launched, the provider uses cookies to collect information on user interactions.

If you have deactivated the storage of cookies for the Google ad program, then you need not be concerned about this type of cookie when viewing YouTube videos. However, YouTube also collects non-personal user information in other cookies. If you wish to prevent this, you must block cookies from being saved to your browser.

You can find additional information on data privacy at "Youtube“ in the provider's data protection notice at: https://policies.google.com/privacy?hl=en.

5.7 Google AdWords

Our website uses Google conversion tracking. If you arrive at website via an advert served by Google, a cookie will be placed on your computer by Google AdWords. The cookie for conversion tracking is set when the user clicks on an advert placed by Google. These cookies expire at the end of 30 days and do not serve to identify you personally. If the user visits certain pages on our website and the cookie has not yet expired, we and Google can detect that the user clicked on the ad and was routed to this site. Each Google AdWords customer receives a different cookie. Cookies therefore cannot be tracked via websites of AdWords customers. The information obtained with the aid of conversion cookies serves to compile conversion statistics for AdWords customers that have opted into conversion tracking. These customers learn the total number of users that clicked on their ad and that were routed to a page with a conversion tracking tag. However, they do not obtain any information that can be used to identify users personally.

If you do not want to participate in tracking, you can refuse the required cookie being set, for example by using browser settings that block the automatic setting of all cookies, or by configuring your browser to block cookies from the domain "googleleadservices.com".

Please note that if you do not want measurement data to be recorded, you should not delete the opt-out cookie. If you delete all cookies from your browser, you will need to set the relevant opt-out cookie again.

5.8 Use of Google Remarketing

This website uses the remarketing feature from Google Inc. ("Google"). This feature serves to present interest-related advertisements to website visitors in the Google ad network. A cookie is saved to the website visitor's browser that makes it possible to recognize the visitor when he/she accesses websites that belong to Google's ad network. Visitors to these websites can be presented with advertisements relating to content that the visitor accessed previously on websites that use Google's remarketing feature.

According to information from the provider, Google does not collect any personal data as part of this process. If you do not wish to make use of the Google remarketing feature, you can completely deactivate it by changing the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising through the Network Advertising Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp. You can find additional information about Google remarketing as well as Google's privacy policy at http://www.google.com/privacy/ads/.

5.9 Google Maps

This website uses Google Maps API in order to visually display geographic information. When using Google Maps, Google collects, processes and utilises data on use of the map function by users. You can obtain further information on data processing by Google in Google's data protection notice. There you can also make changes to your personal data privacy settings in the data protection centre.

5.10 Use of script libraries (Google webfonts)

We use script libraries and font libraries on this website, such as, for example, Google Webfonts, in order to display our content correctly and in a graphically appealing manner on all browsers (https://www.google.com/webfonts/). Google Webfonts are used to avoid repeat downloads to your browser's cache. If the browser does not support Google Webfonts or blocks access, the content will be displayed in standard font.

Accessing script libraries or font libraries automatically establishes a connection to the provider of the library. It is theoretically possible - though it is currently unclear whether and for what purpose - providers collect data on these libraries.

You can find the data privacy guielines for the library provider Google here: https://policies.google.com/privacy?hl=en.

5.11 Bazaarvoice

The IT service provider Bazaarvoice enables Einhell to submit questions and answers (Q&A service) as well as product reviews. 

When using the Q&A service provided by our technical customer support, your personal data will be transmitted to and processed by the IT service provider Bazaarvoice. The company provides technical and administrative support that allows us to respond to your questions as quickly as possible. Bazaarvoice also manages the technical systems associated with product evaluation services (reviews and ratings).

If you use the 2+1 warranty extension service or the Bazaarvoice interface, you can give us your explicit consent for user-specific emails in which we ask you for an evaluation of or your experiences with our products. These emails are sent on a one-off basis via Bazaarvoice's IT infrastructure. To facilitate this, we transmit the following data a single time to Bazaarvoice via a technical interface:

• Firstname
• Lastname
• UserID (generated Hash)
• Email Adress
• Product registered
• Time of device registration
• Language Setting

The Bazaarvoice privacy policy can be found at https://www.bazaarvoice.com/legal/privacy-policy/.

5.12 Issuu

Our website incorporates a Flash application (Flash plugin) from Issuu Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA (Issuu). This enables the retrieval of digital versions of print publications.

As part of this service, Issuu uses cookies that enable an analysis of your use of the website. This involves the collection and storage of personal data such as your IP address and information about the time and duration of use. The transmission will take place if you have JavaScript enabled in your browser. Further information on Issuu's terms of use and data protection can be found at https://issuu.com/legal/privacy.

If the do-not-track feature of your browser is active, no external Issue plugins will be loaded without your consent, but only the reference to this option will be shown.

5.13 Cloudflare

Our pages use features from Cloudflare. The provider is Cloudflare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.

Cloudflare provides a globally distributed content delivery network with DNS. The technical transfer of information between your browser and our website is routed via the Cloudflare network. Cloudflare is thus able to analyse the data traffic between users and our websites; for example, to speed up the loading time of our pages or to detect and ward off attacks on our services.

In addition, Cloudflare may store cookies on your computer for optimisation and analysis. This safeguards our legitimate interests in the security, performance and reliability of our advertising offer in accordance with Art. 6(1)(f) GDPR. We have concluded a corresponding contract processing agreement with Cloudflare on the basis of the GDPR. The data is generally processed in Germany or other states in the European Union. Insofar as processing is carried out in third countries in certain cases, processing is only carried out if the adequacy of the level of data protection in the third country has been asserted by the EU Commission in accordance with Article 45 GDPR, on the basis of the EU standard contractual clauses or if an adequate level of data protection is ensured by the data recipient in another way. Cloudflare collects statistical data about your visit to this website. Access data includes:

• IP address
• Date and time of the request
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser, operating system and its interface, language and version of the browser software

Cloudflare uses the log data for statistical evaluations for the purpose of operation, security and optimisation of the offer. You can find information about the data collected there and about security and data protection at Cloudflare here.

5.14 Friendly Captcha

Einhell uses the "Friendly Captcha" service to prevent fraudulent activity and to protect you as an end user from becoming a potential victim of cybercrime.

The Friendly Captcha services provides a JavaScript element that is integrated into the source code of the website / webshop. The inclusion of the JavaScript element loads software in the background that provides crypto puzzles. Your device solves this crypto puzzle automatically, and you do not have to solve any arithmetic problems or picture puzzles.

The solution of the crypto puzzle is used to track whether the website / webshop is being used fraudulently or through automated machine processing, e.g. using bots, and to confirm the visitors are real people. The service is used in forms (contact forms, prize draw forms, registration and login forms, etc.) and in the order process.

To provide the service, Friendly Captcha stores the following data:

• the User Agent, Origin and Referer request headers.
• The puzzle itself, which contains information about the Friendly Captcha account and the identifier of the website to which the puzzle relates.
• The version of the Friendly Captcha service being used.
• Timestamp (Date / Time) that the puzzle was requested and solved.

Friendly Captcha stores an anonymised counter for each IP address to enable dynamic scaling of the puzzle complexity in the edge network, in order to detect malicious/automated use and minimise the banning of real people. The IP addresses are anonymised by one-way hashing, and thus are not personally identifiable. The use of Friendly Captcha does not involve the storage of personal data such as your name, email address, online profile, etc.

No cookies are set when using Friendly Captcha.

Provider of the service:
Friendly Captcha GmbH, Wörthsee, Deutschland

You can find further information about Friendly Captcha's data protection policy here. Friendlycaptcha.com - Privacy policy for end users

In accordance with article 6, section 1(f) of the General Data Protection Regulation (GDPR), iSC GmbH and its subsidiaries have a legitimate interest in the use of Friendly Captcha, as the service helps to prevent potentially fraudulent activity on our website / webshop which could put our infrastructure at risk.

5.15 TeamViewer Co-Browsing

To help you navigate our online presence, we also offer you the option of surfing together with a member of the Einhell service team through temporary and limited sharing of your browser window ('co-browsing'). When you start co-browsing, you consent to sharing your browser display with a member of the service team. This gives them read-only rights: they can see the browser windows displayed on your screen, read this content and assist you with a pointer function. The team member cannot view other browser content or parts of your screen. Only if you expressly wish to do so, you can also grant the service team member write or edit rights. While co-browsing, you must be in telephone contact with the service team member. You can revoke your consent at any time, for example by aborting the process. Co-browsing will end either when the process is aborted or by an automatic timeout.

Data processing is based on a unique session ID. We do not record or store data from the browser view. To prevent misuse, we collect the following data on a temporary basis:

• Session ID,
• Agent Actions,
• User Actions,
• Agents who are participating,
• Date and time of the session,
• Duration oft he session,
• Operating system and browser.

We will delete your co-browsing data immediately after the communication has finished.

The legal basis for the processing is Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR based on our legitimate interest in providing you with effective and secure alternative communication channels. Co-browsing requires your prior consent in accordance with Art.

5.16 Matomo (self-hosted)

Description of Service
This is an open source web analytics service. Matomo is providing the technology. However, Matomo is not processing any data as the data is not being transferred to Matomo due to the self-hosting solution. Self-hosting means that iSC GmbH hosts the web analytics service Matomo on its own servers and thus has sole sovereignty over the analytics data.

Data Purposes
This list represents the purposes of the data collection and processing..

• Analytics
• Event tracking

Technologies Used
We use Matomo without any tracking cookies - instead we rely on cookieless tracking. Cookieless tracking is an alternative form of tracking that uses methods such as counting unique IP addresses or browser fingerprinting to identify users instead of cookies.

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• Time of users previous visit
• Screen resolution
• Files clicked or downloaded
• Links to outside domain clicked
• Page speed
• Page URL
• Number of users visits
• Anonymized user IP
• User agent
• Browser information
• Time zone
• Time of users first visit
• Date and time of visit
• Page title
• Referrer URL
• Usage data
• Device information
• Geographic location
• Anonymized order ID

We use IP anonymization for the analysis with Matomo. In this case, your IP address is shortened before analysis so that it can no longer be clearly assigned to you. The same applies to the order ID, which is also anonymized when the shopping functionality is available on the website.

Legal Basis
In the following the required legal basis for the processing of data is listed.

• Art. 6 para. 1 s. 1 lit. f GDPR
• §25 para. 2 no. 2 TTDSG

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

• European Union

Deactivate Matomo
If you do not agree to the storage and use of your data, you can deactivate the data processing here. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this will have the effect that the Matomo opt-out cookie will also be deleted. The opt-out must then be reactivated when you visit our site again.

Our website uses cookies. Cookies are small text files, which are saved in a user’s internet browser or by the user’s internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic character string, which allows the browser to be clearly identified when the website is called up again. We use cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognize your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognized again after a page change.

Cookies will be stored on your computer. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.

Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:

• Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

You can adjust your cookie settings at any time and revoke any previously conceded consents.

Processing is carried out on the basis of § 15 (3) TMG (Telemedia Act) as well as art. 6 (1) lit. f GDPR due to our justified interest in the purposes above. The data collected in this way is pseudonymised using technological measures. It is therefore not possible to connect the data to your person. The data will not be stored together with other personal data pertaining to you.

External cookies, that are used when visiting the website can be found in figure 5.