The controller responsible for data processing is:

EMK Münzen + Edelmetalle GmbH

Otto-Hahn-Allee 31

50374 Erftstadt

Email: datenschutz@emk.com

Phone: 022359273747

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal data. Each time a webpage is accessed, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offering. This serves to safeguard our overriding legitimate interests, as part of a balancing of interests, in a correct presentation of our offering in accordance with Art. 6(1) sentence 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit.

Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected in the forms provided on this website is processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA

The adequacy decision for the USA serves as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.

2. Data processing for contract performance and for contacting us

2.1 Data processing for contract performance

For the purpose of contract performance (including inquiries and processing of any existing warranty and performance disruption claims as well as any statutory update obligations) pursuant to Art. 6(1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because in these cases we require the data for contract performance and we cannot ship the order without it. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods pursuant to Art. 6(1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

Merchandise management system

For order and contract processing we use merchandise management systems from external service providers. Our service providers act on our behalf as processors. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA

The adequacy decision for the USA serves as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.

2.2 Customer account

We collect personal data if you voluntarily provide it to us when opening a customer account. Mandatory fields are marked as such because in these cases we require the data to open the customer account and you cannot complete the account opening without providing it. Which data is collected can be seen from the respective input forms. We use the data you provide for contract performance and to process your inquiries pursuant to Art. 6(1) sentence 1 lit. b GDPR. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

2.3 Contact

As part of customer communication, we collect personal data to process your inquiries pursuant to Art. 6(1) sentence 1 lit. b GDPR if you voluntarily provide it to us when contacting us (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such because in these cases we require the data to process your contact request. Which data is collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

3. Data processing for the purpose of shipping

To fulfill the contract pursuant to Art. 6(1) sentence 1 lit. b GDPR, we pass your data on to the shipping service provider commissioned with delivery, insofar as this is necessary for the delivery of ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

4. Data processing for payment processing

When processing payments in our online shop, we work together with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers or to the commissioned credit institutions or to the selected payment service provider, insofar as this is required to process the payment. This serves contract performance pursuant to Art. 6(1) sentence 1 lit. b GDPR. In some cases, the payment service providers themselves collect the data required to process the payment, e.g., on their own website or via technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined an adequate level of data protection by decision. If data is transferred to third countries outside the EU/EEA for which the European Commission has not adopted an adequacy decision, the cooperation is based on the European Commission’s standard contractual clauses.

If you have any questions about our partners for payment processing or the basis of our cooperation with them, please contact the contact option specified in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and optimizing our payment processes

If applicable, we pass on additional data to the above-mentioned service providers, which they use together with the data required for processing the payment for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, processing disputed payments, supporting accounting). This serves to safeguard our overriding legitimate interests, as part of a balancing of interests, in protecting against fraud and in efficient payment management pursuant to Art. 6(1) sentence 1 lit. f GDPR.

5. Advertising by email, post

5.1 Email newsletter with subscription and newsletter tracking

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

We would like to point out that we analyze your user behavior when sending the newsletter. To do so, we also analyze your interaction with our newsletter by measuring, storing, and evaluating open rates and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

For this evaluation, the emails sent contain one-pixel technologies (e.g., so-called web beacons, tracking pixels) that are stored on our website. For the evaluations, we link in particular the following “newsletter data”

• the page from which the page was requested (referrer URL),
• the date and time of access,
• the description of the type of web browser used,
• the IP address of the requesting computer,
• the email address,
• the date and time of registration and confirmation

and the one-pixel technologies with your email address or your IP address and, if applicable, an individual ID. Links contained in the newsletter may also include this ID.

If you do not want newsletter tracking, you can unsubscribe from the newsletter at any time as described above.

The information is stored for as long as you are subscribed to the newsletter.

5.2 Newsletter delivery

The newsletter and the newsletter tracking described above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

5.3 Sending review requests by email

If you have given us your express consent pursuant to Art. 6(1) sentence 1 lit. a GDPR during or after your order, we use your email address to ask you to submit a review of your order via the review system we use. This consent can be withdrawn at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the review request. After your consent has been withdrawn, we will delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

The review requests may also be sent by our service provider Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

In doing so, we receive information from Trusted Shops about the respective status as part of sending review requests (e.g., whether the review request has been sent and whether it has arrived). This is carried out pursuant to Art. 6(1) sentence 1 lit. f GDPR to fulfill our legitimate interest in receiving information about the review invitations in order to make optimizations based on this if necessary, as well as to fulfill Trusted Shops’ legitimate interest in being able to offer this service.

We and Trusted Shops are jointly responsible for the sending of review requests and for the collection and display of review and status information.

Within the framework of the joint responsibility between us and Trusted Shops, please preferably contact Trusted Shops with data protection questions and to assert your rights; their contact options can be found here. Further information on data protection can be found here. Regardless of this, you can also always contact us via the contact option described in this privacy policy. Your request will then be forwarded to the other responsible party for answering, if necessary.

5.4 Postal advertising and your right to object

In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., to send interesting offers and information about our products by letter post. This serves to safeguard our overriding legitimate interests, as part of a balancing of interests, in advertising to our customers pursuant to Art. 6(1) sentence 1 lit. f GDPR. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described in this privacy policy.
After your consent has been withdrawn, we will delete your address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

6. Cookies and other technologies

6.1 General information

To make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). You can find the storage duration in the overview in your web browser’s cookie settings.

Protection of privacy on end devices

When using our online offering, we use strictly necessary technologies in order to be able to provide the expressly requested telemedia service. The storage of information on your end device or access to information already stored on your end device does not require consent in this respect.

For functions that are not strictly necessary, the storage of information on your end device or access to information already stored on your end device requires your consent. We would like to point out that if consent is not granted, parts of the website may not be fully usable. Any consents you have given remain in place until you adjust or reset the respective settings on your device.

Any downstream data processing by cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions of our website (e.g., shopping cart function). Through these technologies, the IP address, time of visit, device and browser information, as well as information about your use of our website (e.g., information about the contents of the shopping cart) are collected and processed. This serves to safeguard our overriding legitimate interests, as part of a balancing of interests, in an optimized presentation of our offering pursuant to Art. 6(1) sentence 1 lit. f GDPR.

In addition, we use technologies to fulfill legal obligations to which we are subject (e.g., to be able to prove consents to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy.

Cookie settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of the technologies pursuant to Art. 6(1) sentence 1 lit. a GDPR, you can withdraw your consent at any time by sending a message to the contact option described in the privacy policy. Alternatively, you can click on the privacy button. If cookies are not accepted, the functionality of our website may be limited.

6.2 Consent Manager Platform (CMP)

On our website, we use a consent management service (“Consent Manager Platform (CMP)”) to inform you about the cookies and other technologies we use on our website and to obtain, manage, and document your consent, where required, to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1) sentence 1 lit. c GDPR to fulfill our legal obligation under Art. 7(1) GDPR to be able to prove your consent to the processing of your personal data, which we are subject to. The Consent Manager Platform (CMP) used is an offering of Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany, which processes your data on our behalf.

After you submit your cookie declaration on our website, the web server stores the following data: IP address, device information, browser information, set language, accessed website or its URL, date and time of your consent declaration, as well as information about your consent behavior.

In addition, the following technologies are used, which contain information about your consent behavior: Local Storage

The data is stored exclusively on the end device; no personal data is transmitted to the provider of the Consent Manager Platform (CMP). Your data will be deleted after one year unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

6.3 Information on third-country transfers (data transfers to third countries)

We use technologies from service providers on our website whose registered office and/or server locations may be in third countries outside the EU or the EEA. If there is no adequacy decision of the EU Commission for this country, an adequate level of data protection must be ensured by other appropriate safeguards.

Appropriate safeguards in the form of the EU Commission’s standard contractual clauses or binding internal data protection rules (Binding Corporate Rules) are generally possible, but require a prior assessment by the contracting parties of whether an adequate level of protection can be ensured. According to the case law of the CJEU, it may be necessary to take additional protective measures.
 
As a rule, we have agreed the standard contractual clauses issued by the EU Commission with the technology providers we use who process personal data in a third country. Where possible, we also agree additional safeguards intended to ensure that adequate data protection is guaranteed in third countries without an adequacy decision.

Notwithstanding this, it may happen that despite all contractual and technical measures, the level of data protection in the third country does not correspond to that in the EU. In such cases, if necessary, we ask you to provide your consent under Art. 49(1) lit. a GDPR for the transfer of your personal data to a third country as part of the cookie consent.
In particular, there is a risk that local authorities in the third country may obtain access rights to your personal data that may not be sufficiently restricted from a European data protection perspective, that we as the data exporter or you as the data subject may not become aware of this, and/or that you may not have sufficient legal remedies available to prevent and/or take action against such access.

In particular, the following countries currently count as third countries without an adequacy decision by the EU Commission (example list):

• China
• Russia
• Taiwan

You can find out to which third countries data is transferred by us in the privacy information for the respective tool and/or the consent management service/Consent Manager Platform (CMP) used by us.

7. Use of cookies and other technologies

On our website, we use the following cookies and other technologies from third-party providers. Unless otherwise stated for the individual technologies, this takes place on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. After the purpose has ceased and we have ended the use of the respective technology, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information on your options for withdrawal can be found in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

7.1 Use of Google services

We use the technologies presented below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by the Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise stated for the individual technologies, data processing takes place on the basis of an agreement concluded for the respective technology between joint controllers pursuant to Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy.

Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers in countries outside the EU and the EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses.

Google Analytics

For the purpose of website analysis, data (IP address, time of visit, device and browser information as well as information about your use of our website) is automatically collected and stored with Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and then immediately deleted before the traffic is forwarded for processing on other Google servers. Data processing takes place on the basis of a data processing agreement with Google.

For the purpose of optimized marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and then use it to improve Google services. The data sharing to Google within the scope of these data sharing settings takes place on the basis of an additional agreement between controllers. We have no influence on Google’s subsequent data processing.

For the purpose of optimized marketing of our website, we use the so-called User-ID function. With the help of this function, we can assign a unique, permanent ID to your interaction data from one or more sessions on our online presences and thus analyze your user behavior across devices and sessions.

For web analytics, Google Analytics’ extension function Google Signals enables so-called “cross-device tracking”. If your internet-enabled devices are linked to your Google account and you have activated the “personalized advertising” setting in your Google account, Google can create reports about your usage behavior (in particular cross-device user numbers), even if you change your end device. We do not process personal data in this respect; we only receive statistics created on the basis of Google Signals.

For web analytics and advertising purposes, Google Analytics’ extension function uses the so-called DoubleClick cookie to recognize your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide further services associated with website usage.

If you do not give consent pursuant to Art. 6(1) sentence 1 lit. a GDPR for the use of Google Analytics, no cookies will be stored on or read from your device. The data processing described in the previous paragraphs does not take place. To close gaps in web analytics through behavior and conversion modeling, pings with data (user agent, information about your consent behavior, screen resolution, IP address) are sent to Google.

Google Ads

For advertising purposes in Google search results as well as on third-party websites, the so-called Google remarketing cookie is set when you visit our website, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information as well as information about your use of our website) and by means of a pseudonymous cookie ID, based on the pages you visited. Further data processing only takes place if you have activated the “personalized advertising” setting in your Google account. If you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads conversion tracking to measure your subsequent usage behavior if you reached our website via a Google Ads advertisement. Cookies may be used for this purpose and data (IP address, time of visit, device and browser information as well as information about your use of our website based on events defined by us, such as visiting a webpage or subscribing to the newsletter) may be collected, from which usage profiles are created using pseudonyms.

If you do not give consent pursuant to Art. 6(1) sentence 1 lit. a GDPR for the use of Google Ads, no cookies will be stored on or read from your device. The data processing described in the previous paragraphs does not take place. To close gaps in web analytics through behavior and conversion modeling, pings with data (user agent, information about your consent behavior, screen resolution, IP address, page URL, information about ad clicks in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

Google Fonts

For a consistent presentation of content on our website, data (IP address, time of visit, device and browser information) is collected via the script code “Google Fonts”, transmitted to Google, and then processed by Google. We have no influence on this subsequent data processing.

Google Tag Manager

With Google Tag Manager, we can manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g., IP address, online identifiers (including cookies)). Data processing takes place on the basis of a data processing agreement with Google.

The use of Google Tag Manager makes it possible to integrate various services/technologies.
If you do not want the use of individual tracking services and have therefore deactivated them, the deactivation will remain in place for all affected tracking tags that are integrated via Google Tag Manager.

YouTube Video Plugin

To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the enhanced privacy mode used by us, transmitted to Google, and then processed by Google only when you play a video.

7.2 Use of Facebook services

Facebook Ads (Ads Manager)

We use Facebook Ads to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the specific implementation, in particular the decision on the placement of ads for individual users. Unless otherwise stated for the individual technologies, data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this.

8. Integration of the Trusted Shops Trustbadge/other widgets

If you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g., seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order.

The Trustbadge and the services advertised with it are an offering of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly responsible under data protection law pursuant to Art. 26 GDPR. In the following, we inform you about the essential contractual content pursuant to Art. 26(2) GDPR as part of this privacy information.

Within the framework of the joint responsibility existing between us and Trusted Shops SE, please preferably contact Trusted Shops using the contact options provided in the data protection information for data protection questions and to assert your rights. Regardless of this, you can always contact the controller of your choice. Your request will then be forwarded to the other controller for answering, if necessary.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a US-based CDN provider (Content Delivery Network). An adequate level of data protection is ensured in each case by an EU Commission adequacy decision, which for the USA can be accessed here. Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access. The IP address is anonymized immediately after collection so that the stored data cannot be attributed to your person. The anonymized data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after order completion

If you have given your consent, after your order is completed the Trustbadge accesses order information stored on your end device (order total, order number, if applicable purchased product) as well as your email address, and your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information pursuant to Art. 6(1) sentence 1 lit. a GDPR.
This serves to check whether you are already registered for Trusted Shops services. If this is the case, further processing is carried out in accordance with the  contractual agreement  between you and Trusted Shops. If you are not yet registered for the services or do not give your consent for automatic recognition via the Trustbadge, you will subsequently be given the opportunity to register manually for the use of the services and/or to conclude the protection within the framework of your existing user contract, if applicable.

For this purpose, after your order is completed the Trustbadge accesses the following information stored on the end device you use: order total, order number, and email address. This is required so that we can offer you buyer protection. Data is only transmitted to Trusted Shops if you actively choose to conclude buyer protection by clicking on the corresponding button in the so-called Trustcard. If you decide to use the services, further processing is based on the contractual agreement with Trusted Shops pursuant to Art. 6(1) lit. b GDPR in order to complete your registration for buyer protection and secure the order, and to be able to send you review invitations by email afterwards, if applicable.

Trusted Shops uses service providers in the areas of hosting, monitoring, and logging. The legal basis is Art. 6(1) lit. f GDPR for the purpose of ensuring smooth operation. Processing in third countries (USA, United Kingdom, and Israel) may take place. An adequate level of data protection is ensured in each case by an EU Commission adequacy decision, which for the USA can be accessed here, for the United Kingdom here and for Israel here. Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate safeguard.

9. Social media

9.1 Social buttons from Instagram (by Meta)

Social buttons from social networks are used on our website. These are integrated into the page only as HTML links, so that no connection to the servers of the respective provider is established when our website is accessed. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can, for example, click the Like or Share button.

9.2 Our online presence on Instagram (by Meta)

If you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR to the respective social media operator, when you visit our online presences on the social media mentioned above, your data is automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information about the processing and use of data by the respective social media operator as well as a contact option and your rights and setting options to protect your privacy, please refer to the providers’ privacy notices linked below. If you still need help in this regard, you can contact us.

Instagram (by Meta) is an offering of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Menlo Park, California 94025, USA, and stored there. Data processing in the context of visiting an Instagram (by Meta) fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on these safeguards: European Commission standard contractual clauses.

10. Contact options and your rights

10.1 Your rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent described therein;
• pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data stored about you or completion of your personal data;
• pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest; or
  • for the establishment, exercise, or defense of legal claims;
• pursuant to Art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as
  • the accuracy of the data is contested by you;
  • the processing is unlawful, but you oppose the deletion;
  • we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims; or
  • you have objected to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;
• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

10.2 Contact options

If you have questions about the collection, processing, or use of your personal data, about information, rectification, restriction, or deletion of data, as well as withdrawal of any consents given or objection to a specific use of data, please contact our company data protection officer.

Data protection officer:

Otto-Hahn-Allee 31
50374 Erftstadt
Germany

datenschutz@emk.com