Privacy

General information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed under this text.

Data collection on our website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?
The data processing on this website is carried out by the website operator. Its contact details you can the Imprint this website.

How do we record your data?
On the one hand, your data is collected when you communicate it to us. This can, for example, be data that you enter in a contact form.

Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter our website.

What are the purposes we use your data for?
Part of the data is collected in order to ensure that the website is provided without errors and to process a purchase smoothly. Other data can be used to analyze your user behavior.

What rights do you have as far as your information is concerned?
At any time you have the right to obtain free information about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction, blocking or deletion of this data. For further information on privacy, please contact us at any time Imprint given address to contact us. You also have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and tools provided by third parties
When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Details can be found in our data protection declaration under the heading “Third-party modules and analysis tools”.

You can object to this analysis. We will inform you below about how to exercise your options in this regard.

2. Customer Account & Orders

Account
When opening a customer account, we collect your personal data in the scope indicated there. The purpose of data processing is to improve your shopping experience and simplify order processing. The processing takes place on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. You may revoke your consent at any time by notifying us without affecting the legality of the processing based on the consent to revocation. Your customer account will be deleted afterwards.

Collection, processing and transfer of personal data during orders
When ordering, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and to process your requests. The provision of the data is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. The processing takes place on the basis of Art. 6 para. 1 lit. b DSGVO and is required to fulfill a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers you have selected. In all cases, we strictly observe the legal requirements. The amount of data transmission is limited to a minimum. The legal basis for the transfer of data is Article 6 (1) (b) GDPR.

Contact, Reviews & Newsletter

Using the e-mail address to receive newsletters
Irrespective of contract processing, we use your e-mail address exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this or are already listed as having a business relationship with us or as an existing customer (§7 Para. 3 UWG). For the selection of the advertising purposes, we primarily use your previous purchase data and interest data, from which we derive your product interests, taking your purchasing activities into account, in accordance with the statutory provisions. The processing takes place on the basis of Article 6 Paragraph 1 lit. a GDPR with your consent or the purchase in our web shop. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by sending us an informal message without incurring any costs other than the transmission costs according to the basic tariffs (e.g. internet connection costs, postage). Your e-mail address will then be removed from the mailing list.

Your data will be passed on to a service provider for e-mail marketing as part of order processing. A transfer to other third parties does not take place.

payment service

Use of PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. These can be found under
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Using Stripe
On our website we offer, among other things, payment via Stripe and the associated payment methods. provider of these payment services

Stripe Payments Europe Ltd
Block 4, Harcourt Centre
Harcourt Rd
Dublin 2

If you choose to pay via Stripe, the payment details you enter will be sent to Stripe.

Your data is transmitted to Stripe on the basis of Article 6 Paragraph 1 Letter a GDPR (consent) and Article 6 Paragraph 1 Letter b GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations. All data required for payment processing is used exclusively for making payments and is transmitted via the “SSL” procedure. Stripe is PCI DSS certified. Stripe may transfer, process and store personal data outside of the EU. Stripe is subject to the Safe Harbor Agreement. Information on Stripe’s data protection is available here: https://stripe.com/de/privacy.

3. GENERAL NOTES AND OBLIGATORY INFORMATION

Privacy

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

But please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third parties cannot be entirely guaranteed.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

udoq the
Trogerstr. 38
81675 Munich

Represented by the managing director Marcus Kuchler
Contact: Telephone: 089-28809212
Email: shop@udoq.de
Internet address: www.udoq.de

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to the processing of data
Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. An informal message by e-mail to us is sufficient. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.

Right to log a complaint with the competent supervisory agency
f there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of personal data.

Opposition to advertising emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.

4. DATA COLLECTION ON OUR WEBSITE

Google Login / Sign In
We offer you the option of registering and logging in to AMBOSS with Google Sign-In. This is done exclusively with your express consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. GDPR. Google Sign-In is a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. An additional registration or login is therefore not necessary. To log in or register, you will be redirected to the Google site, where you can log in with your usage data. This will link your Google profile or your Google email address and our service. Through the link, we automatically receive the following data from Google Ireland Limited:

First and Last Name

Email address

Your Google user ID (if different from the email address)

From this data, we only use those that are mentioned under point 3 and used to complete the user profile. This information is mandatory for our services to be able to identify you.

For more information about Google Sign-In and privacy settings, please see the privacy policy (https://policies.google.com/privacy) and the Terms of Use (https://policies.google.com/terms) from Google Ireland Limited.

Facebook Connect
On this website it is possible to register via the Facebook account.

Facebook Connect is an offer from Facebook, Inc. Use of Facebook Connect is subject to the Facebook Privacy Policy and Terms of Service.

When using Facebook Connect, Facebook profile data and on Facebook public data from your Facebook profile are transmitted to us. Conversely, data can be transferred from us to your Facebook profile. Your transmitted data will be stored and processed by us for the purpose of registering on our site.

By registering on our website via Facebook Connect, you agree to the transfer of profile data from your Facebook profile to us and the transfer of data on the use of our website to Facebook. The data that is available as public data in your Facebook profile will be transmitted. We would like to point out that after changes to Facebook’s data protection conditions and terms of use, the Facebook profile owner’s “friends list” may also be transferred if this has been marked as “public” in the Facebook privacy settings.

The legal basis for using the service is Art. 6 I f GDPR – legitimate interest. Our legitimate interest in using this service lies in enabling users to easily share content on Facebook.

For more information, see: https://www.facebook.com/about/privacy/your-info-on-other

Cookies
Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to carry out the electronic communication process or to provide certain functions you want (e.g. shopping cart function) are stored on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behaviour) are stored, these are treated separately in this data protection declaration.

Hosting services by a third party
As part of processing on our behalf, a third-party provider provides the services for hosting and displaying the website. This serves to protect our overriding legitimate interests in a correct presentation of our offer within the framework of a balancing of interests. All data that is collected as part of the use of this website or in the forms provided in the online shop as described below is processed on its servers. Processing on other servers only takes place within the framework explained here. This service provider is based in a country of the European Union or the European Economic Area.

Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:

• The type and version of browser used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address
• This data is not merged with other data sources.

The basis for the processing of data is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.

Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

The processing of the data entered in the contact form is therefore exclusively based on your consent (Article 6 (1) (a) GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations that took place up until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Data transfer to shipping service providers
If you have given us your express consent to this during or after your order, we will pass on your e-mail address to the selected shipping service provider so that they can contact you before delivery for the purpose of delivery notification or coordination Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data that goes beyond this, which is permitted by law and about which we will inform you in this declaration.
DHL Paket GmbH
At Dreistock 11
97318
Kitzingen

5. ANALYTICAL TOOLS & ADVERTISING

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Using Google Adwords Conversion Tracking

We use the online advertising program “Google AdWords” and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you click on an ad placed by Google, a conversion tracking cookie will be placed on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification.
If you visit certain web pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. As a result, there is no way that cookies can be tracked through AdWords advertisers’ websites.
The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Here, customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. You can find more information and Google’s privacy policy at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/

Use of the remarketing or “similar target groups” function of Google Inc.

The provider uses the remarketing or “similar target groups” function of Google Inc. (“Google”) on the website. Using this function, the provider can target visitors to the website with advertising by placing personalized, interest-based advertising ads for visitors to the provider’s website when they visit other websites in the Google Display Network. Google uses so-called cookies to carry out the analysis of website usage, which forms the basis for the creation of interest-based advertisements. For this purpose, Google saves a small file with a sequence of numbers in the browsers of the website visitors. This number is used to record visits to the website and anonymous data on website use. There is no storage of personal data of visitors to the website. If you then visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas. You can permanently disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. Alternatively, you can opt out of the use of cookies by third parties by visiting the Network Advertising Initiative opt-out page at http://www.networkadvertising.org/choices/and implement the further information on the opt-out mentioned there. Further information on Google Remarketing and Google’s data protection declaration can be found at:http://www.google.com/privacy/ads/.

Browser plug-in

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Outsourced data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Facebook Custom Audiences

We use Facebook Website Custom Audiences on our websites. For this purpose, so-called Facebook pixels are integrated on our websites. This is Javascript code. These pixels generate a checksum (hash value) from your usage data, which is transmitted to Facebook, eg browser information. If available, the Facebook cookie is also addressed and your Facebook ID is transmitted. If you have a Facebook profile and log in there, the data transmitted by the pixels can be used to present you with targeted, individualized advertising for products and offers. Data from users who do not have a Facebook profile will be discarded unused by Facebook. For more information about the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your setting options to protect your privacy, please refer to Facebook’s data protection guidelines at https://de-de.facebook.com/privacy/explanation.

6. PLUGINS AND TOOLS

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.

Google Maps

This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.

Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.

Facebook plugin

You will find plugins from the social network Facebook on our website. Its provider is Facebook Inc. It is based in the USA, California 94025, 1 Hacker Way, Menlo Park. The Facebook logo or the “Like button” (“Like” button) on our site identify the Facebook plugins for you to recognize. Please also note the overview of the Facebook plugins http://developers.facebook.com/docs/plugins/. When you visit our website, we connect directly to the Facebook server via the plugin. You are then switched there via your browser. For Facebook, this means that you have visited our website with your IP address. By clicking on the Facebook “Like” button, you link content from our website to your profile on Facebook. For Facebook, the visit to our site can be assigned to your user account. We have no knowledge of the type of content that is transmitted to Facebook and how Facebook uses it. Get more information about data collection and data use in the Facebook data protection declaration, which you can find under http://de-de.facebook.com/policy.phpFind. You can prevent your visit to our site from being associated with your Facebook profile by simply logging out of your Facebook account beforehand.

Instagram plugin

We also integrate functions of the online service Instagram on our website. The provider of these functions is Instagram Inc. It is based in the USA, CA 94025, 1601 Willow Road, Menlo Park. The Instagram button enables you to link to your Instagram account when you visit our site, provided you are logged in to Instagram. Instagram receives the information about your visit to our website and can assign this visit to your Instagram profile. We have no knowledge of the content of the information transmitted or how it is used by Instagram. You can find more information about data collection and data use by Instagram in the Instagram data protection declaration at http://instagram.com/about/legal/privacy/.

7. NEWSLETTER