Source: https://www.titus-shop.com/nl/bescherming-van-gegevens
Timestamp: 2019-04-19 00:35:35+00:00

Document:
Titus GmbH only processes personal data of users and/or customers if it is necessary to provide a functional website, to provide our content and services, to fulfill purchase contracts with our customers, or to comply with legal regulations. The processing of personal data of our users and/or customers takes place only with the consent of the user and/or customer. An exception applies in cases which prior consent cannot be obtained for valid reasons and/or the processing of the data is permitted by legal regulations.
The legal basis for consensually obtained personal data is Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO).
In processing personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.When processing of personal data is required to fulfill a legal obligation to which our company is obliged, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.
In the event that the vital interests of a data subject or another natural person requires processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis.
If data processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests and fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis.
The personal data of the user concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if it has been provided for the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will be blocked or deleted if a storage period set forth by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services that we use for the purpose of operating this online offering.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors of our online offerings on the basis of our legitimate interests in an efficient and secure provision according to Art. 6 Para. 1 lit. f DSGVO in conjunction with. Art. 28 DSGVO (conclusion of order processing contract).
Each time a user visits our website, our system automatically collects data and information from the (computer) system operated by the user.
The log files contain data that enable assignment to a user. This could be the case, for example, if the link to the website from which the user accesses our website or the link to our website to which the user switches to contains personal data.
The data is stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for data processing and log files is Art. 6 Abs. 1 lit. f DSGVO.
The temporary storage of the IP address by our system is necessary to enable the website to be delivered to the user's computer. For this, the IP address of the user must remain stored for the duration of the user’s session.
The data is stored in log files to ensure functionality of our website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing is pursuant to Art. 6 para. 1 lit. f DSGVO.
If the data is stored in log files, this is the case after seven days. However, further storage is possible. In the case of further storage, the IP address of the users are deleted or alienated, so that it is no longer possible to associate the data with a specific user.
We use the following cookies to make our website more user-friendly. Some elements of our website require that the browser can be identified even after a page change.
Session-Cookie: Using the session cookie, our website decides whether the respective user has an active shopping basket and whether the user is logged in. It serves as identification between browser and server. No further information except the session ID is stored in the browser.
x-cache-context-hash-Cookie: A cookie used to tell what content should be cached.
The legal basis for data processing and logfiles is Art. 6 Abs. 1 lit. f DSGVO.
The user data collected by necessary cookies are not used to create user profiles.
The analysis cookies are used to improve the quality of our website and its content. Through use of analysis cookies, we learn how the website is used and can thus continuously optimize the website.
Our website offers the option to subscribe to a free newsletter.
If you purchase goods or services on our website and provide us with your email address, we may subsequently use it to send you a newsletter. In such a case, the newsletter will only send direct advertising for similar goods or services of our own.
In connection with the data processing for the dispatch of newsletters, data is passed on to our service provider Emarsys Interactive Services GmbH, Stralauer Platz 34, 10243 Berlin.
The data will be used exclusively for sending the newsletter. To protect your data, a contract has been concluded with Emarsys Interactive Services GmbH for the processing of order data.
The newsletters contain a so-called "web-beacon", i.e. a small file that is retrieved from our service provider's server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected.
This information is used to improve the services based on technical data of the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determination of whether the newsletters are opened, when they are opened, and which links are clicked. For technical purposes, this information can be assigned to individual newsletter recipients. However, it is not our intention, nor that of the service provider, to observe individual users. The evaluations serve us to recognize the reading habits of our users and to adapt our content to them according to their interests.
The legal basis for the processing of the data after registration for the newsletter is Art. 6 para. 1 lit. a DSGVO.
If the information serves the fulfilment of a contract to which the user is a party, e.g. the provision of a free service or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.
The legal basis for the processing of data transmitted in the course of registration for the newsletter is Art. 6 para. 1 lit. f DSGVO.
The collection of the user's email address serves to send the newsletter. By voluntarily providing further data by the user, the newsletter can be personalized for the user.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address provided.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored for as long as the subscription to the newsletter is active.
The subscription to the newsletter can be cancelled by the user at any time. For this purpose, there is a corresponding link in every newsletter.
If the user deletes our telephone number from the phone book of their mobile phone, the sending of the newsletter is automatically stopped and resumed as soon as our number is saved again. To permanently end the sending of the WhatsApp newsletter, a message stating "STOP" must be sent to us. However, the user can also unsubscribe from receiving the newsletter by sending any other message which makes it clear that the user no longer wishes to receive the newsletter.
This also makes it possible to revoke consent to the storage of personal data collected during the newsletter registration process.
As soon as the notifications requested by the user have been sent, the status "sent" is saved by us.
The data will only be used for sending the desired notifications.
The legal basis for the processing of the data transmitted by the user when setting up the notification function is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.
The legal basis for the processing of data transmitted in the course of setting up the notification function is Art. 6 para. 1 lit. f DSGVO.
The collection of the user's e-mail address and the article for which information is requested serves to transmit the Coming Soon information to the user.
The collection of other personal data as part of the activation of Coming Soon mailings serves to prevent misuse of the services or the e-mail address used.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored for as long as the notification function is active.
The notification function can be cancelled by the user at any time. For this purpose, there is a corresponding cancellation link in each notification.
It is possible to revoke consent to the storage of personal data collected during registration for notifications.
For the processing of the data within the registration process, reference is made to this data protection declaration and user consent is obtained for the processing of voluntary data.
The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO if the user has given their consent.
If registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.
The legal basis for the processing of data transmitted in the course of creating the customer account is Art. 6 para. 1 lit. f DSGVO.
User registration is necessary for the fulfillment of a contract with the user or for the implementation of pre-contractual measures.
The creation of a customer account facilitates the ordering process for the user. The customer account eliminates the need to re-enter the data for each new order. The user only has to log into his customer account with his user name and password and can place an order.
For the creation of a customer account, it is necessary to secure it with a user name/email and password to prevent third parties from misusing the account to place orders.
The indication of a birth date is necessary to check the user's legal capacity and, in the event of loss of receivables by the user, to be able to request the user's address from the registration office to assert claims.
Further information serves to optimize communication with the user. The salutation serves to address the user correctly gender-specifically, for example with "Hello Mr...." or "Hello Mrs..." and the correct title. The email address is intended to facilitate communication in order to transmit order confirmations, invoices and the order status to the user. If the user enters a telephone number, this should also be used to optimize communication for the processing of purchase contracts, in particular to clarify any queries that may arise regarding orders or complaints quickly with the customer.
The user has the possibility to indicate a different delivery address, if he wishes that the order is not delivered to his home address. This can also be a packing station, for example. In this case we need the number of the packing station to deliver the order.
In addition, maintaining contact with our customers is very important to us. For this reason, we send you birthday greetings and ask you to rate items and your shopping experience with us. In addition, users have the option of being informed by email about new shipments from your favorite brands at your express request.
The other personal data processed during the registration process serves to prevent misuse of the registration function and to ensure the security of our information technology systems.
Furthermore, the storage of device type and user data is necessary to ensure the functionality of the website. In addition, the data serves us for optimization, especially user-friendly display of the website, e.g. display of the website in the correct language, currency and optimized for the device used. An evaluation of the data for marketing purposes does not take place in this context.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
This is the case for those during the registration process to fulfill a contract or to carry out pre-contractual measures when the data is no longer required for the execution of a contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfill contractual or legal obligations.
Every user has the possibility to cancel their customer registration at any time. Users can also change the data stored about them at any time.
If the data is required to fulfill a contract or to carry out pre-contractual measures, deletion of user data is only possible insofar as there are no contractual or statutory obligations to the contrary.
In addition, users can object to the transmission of birthday greetings and requests for product evaluations at any time. Users can also object to their consent of brand notifications at any time. For this purpose, there is a corresponding link in each message.
On our website, we offer users the opportunity to place orders, therefore concluding purchase contracts. For this, it is necessary to collect personal data. The data is entered into an input mask, transmitted to us, and saved.
During the processing of an order, the status of the order changes continuously from e.g. "order received", "order confirmation sent", "order delivered to customer" or "return completed". Every change of the status of the order is saved with date and time as well as the corresponding status.
In addition, it is necessary to assign identification numbers at various points in order to process the order. These are required by our service providers to provide individual partial services. For example, the respective payment service providers assign PaymentIDs, the shipping service provider assigns a ShippingID (tracking code) which are stored by us.
The data will be used exclusively for sending advertising mail. For the protection of your data, a contract exists between us and mediaport production GmbH & Co. KG for order data processing.
Wirecard Bank AG processes the payment method of iDeal online bank transfer. If the user chooses this payment method, the data necessary for payment processing will be sent to Wirecard Bank AG, Einsteinring 35, 85609 Aschheim.
Your data will be used by Wirecard Bank AG exclusively for processing your iDeal online transfer.
ii. SIX Payment Services (Europe) S.A.
SIX Payment Services (Europe) S.A. processes user credit card payments. They are a Luxembourg-based Société Anonyme with a registered office at 10, rue Gabriel Lippmann, 5365 Munsbach, Luxembourg. If the user chooses this payment method, the necessary data for payment processing will be transmitted to SIX Payment Services (Europe) S.A.
Your data will be used by SIX Payment Services (Europe) S.A. exclusively for processing your credit card payment.
PostFinance AG, Obernauerstrasse 18, 6010 Kriens, Switzerland, processes Sofortüberweisungen (Online Bank Transfers). If the user chooses this payment method, the data required for payment processing will be passed on to PostFinance AG.
Your data will be used by PostFinance AG exclusively for processing user bank transfers.
BS Payone GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany, processes credit card payments and bank transfer payments. If the user chooses one of these payment methods, the necessary data for payment processing will be transmitted to BS Payone GmbH.
Your data will be used by BS Payone GmbH exclusively for processing user credit card or bank transfer payments.
Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden processes Sofortüberweisungen (Online Bank Transfers). If the user chooses this payment method, the data required for payment processing will be passed on to Klarna Bank AB (publ).
Your data will be used by Klarna Bank AB (publ) exclusively for processing user bank transfers.
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg processes the payment method of PayPal. If the user chooses this payment method, the data necessary for payment processing will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A..
Your data will be used by PayPal (Europe) S.à r.l. et Cie, S.C.A. exclusively for processing user PayPal payments.
The DHL Vertriebs GmbH & Co. KG processes the payment method of Cash on Delivery. If the user chooses this payment method, the data necessary for payment processing will be sent to DHL Vertriebs GmbH & Co. KG.
User data will be used by DHL Vertriebs GmbH & Co. KG exclusively for the processing of Cash on Delivery payments.
American Express Services Europe Limited, Branch office Frankfurt am Main, Theodor-Heuss-Allee 112, 60486 Frankfurt am Main processes credit card payments. If the user chooses this payment method, the data necessary for payment processing will be transmitted to American Express Services Europe Limited.
American Express Services Europe Limited uses customer data exclusively for processing credit card payments.
For the purposes stated above, all data necessary for the provision of the stated services are transmitted to Dittmann GmbH, our logistics service provider.
The data will be used exclusively for the provision of the logistics services listed above.
DHL Vertriebs GmbH & Co. KG is commissioned by Titus GmbH to send orders to customers. For this purpose, we transmit the recipient's first and last name and address information to DHL Vertriebs GmbH & Co. KG. The data is only used to send parcels to customers.
The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO if the user has given consent.
If the information serves to fulfill a contract or the implementation of pre-contractual measures to which the user is a party, the additional legal basis for data processing is Art. 6 para. 1 letter b DSGVO.
The legal basis for transmission of data to service providers is Art. 6 para. 1 lit. b DSGVO and Art. 6 para. 1 lit. f DSGVO.
The legal basis for the processing of data transmitted in the course of the order is Art. 6 para. 1 lit. f DSGVO.
The data collected during the order process will be used exclusively to process the order and payment, in particular to create order confirmations, invoices, dispatch of the order, processing of returns and complaints, creation of credit notes and reversal of the purchase contract. In addition, we refer to the further explanations under item IX, article 3 (Registration of customer account/purpose of data processing).
The transfer of your personal data to our service providers is necessary in order to fulfill our obligations under the purchase contract concluded with you efficiently.
The other personal data processed during the order process serve to prevent misuse of the order function and to ensure the security of our information technology systems. Furthermore, the storage of data on device type and language is necessary to ensure the functionality of the website. In addition, the data serves us for optimization, especially user-friendly display of the order page, e.g. display of the order page in the correct language and optimized for the device used as well as continuation of further communication, e.g. transmission of the invoice and status messages in the correct language. An evaluation of the data for marketing purposes does not take place in this context.
This is the case for the performance of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of a contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfill contractual or legal obligations.
A form on our website can be used for the submission of product reviews or comments. If a user utilizes this feature, the data will be entered into the input mask and transmitted to us, stored, and published on our online shop on the product page of the evaluated product.
In this context, the data will not be passed on to third parties. The data will be used exclusively for publication on our websites and on the product page of the evaluated product.
The processing of personal data from the input mask serves for the publication of a user product evaluation the evaluated product on our web pages, in order to help other prospective buyers with purchase decisions.
Language type is used to publish the product evaluation in the corresponding language version of our website. For example, product reviews are published in Spanish on our Spanish website.
The date and time of the product evaluation should be published together with the product evaluation so that other interested parties can also classify the product evaluation over time and, for example, get an overall picture of product quality changes over time.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the product evaluation form, this is the case if the evaluated product is no longer available for purchase.
Following contact with us, all personal data used for product review/comment purposes will be deleted upon request.
A specific number of cash points are assigned to each product - except gift vouchers - which is offered in our webshop and in physical Titus shops (including Titus franchise partners). The amount of cash points is displayed in our webshop under the item price on each product page. In our physical Titus shops, we cannot guarantee that the cashpoint value is also stated for each item. For this reason, the number of cash points can be requested at the checkout when shopping in a Titus store. With each purchase, the cashpoints assigned to the purchased items are transferred to us, stored, and credited to the user's points account. If the purchase takes place in a physical Titus shop, it is necessary that you log into your customer account. Cashpoints balances are found under "My account" on the "Cashpoints" page. If you are in the Cashpoints program, a QR code will be displayed. The QR code can be scanned at the checkout, and the cashpoints collected with the purchase will be credited to your customer account. As soon as the user has collected enough cashpoints, they can be exchanged for a discount voucher. The cashpoints expire 2 years after they have been credited to the user's Cashpoints account.
If the cash points were collected during a purchase in a stationary Titus store, we will save the Titus store location in which the cash points were collected.
If the cash points were collected by participating in a competition, the respective competition will be saved.
User data will not be passed on to third parties.
The user's email address is used within the scope of the Cashpoint program in order to inform the user about the imminent expiry in good time before cashpoints expire.
Other data is necessary to document the number of cashpoints, in the correct currency, their validity period, and expiration. The customer number must be saved in order to be able to assign the cashpoints to the user's customer account. It is necessary to save the store, since the conditions for the creation and expiration of cash points in over-the-counter stores differ. It is also necessary to be able to delete the corresponding cashpoints when returning items.
This is the case if the cash points have been redeemed by the user or expire over time.
Following contact with us, all personal data used for Cashpoints purposes will be deleted upon request.
We offer sweepstakes on our website at random intervals. When registering for a sweepstakes, data will be transmitted to us, which the user specifies himself. Since different types of sweepstakes are offered, the data collected from the user in connection with participation in the lottery varies. If you participate in a sweepstakes, the data from the input mask will be transmitted to us when you register for the competition.
Depending on the sweepstakes, it may be necessary to collect additional data. These can be, for example, clothing size, shoe size, or other questions related to the specific sweepstakes criteria.
User data will not be passed on to third parties. The data will be used exclusively for the sweepstakes.
Legal basis for the transfer of data to service providers is Art. 6 Abs. 1 lit. b DSGVO.
The date of birth is necessary to verify the user's legal capacity.
The voluntary information serves to optimize communication with the user. The salutation serves to address the user correctly gender-specifically, for example with "Hello Mr...." or "Hello Mrs..." The email address is intended to facilitate communication in order to send prize notifications to the lottery participant. If the lottery participant enters a telephone number, this number should also be used to optimize communication for handling the lottery, in particular to inform the lottery participant about a prize.
Depending on the prizes awarded, it may be necessary to request a clothing size in the course of the competition, for example, in order to send the desired size if you win clothing. In some cases, we also use competition questions that may have a personal connection to the participants involved.
The other personal data processed during the participation in the competition serves to prevent misuse of the competition and to ensure the security of our information technology systems.
Data of participants who have not won any of the prizes will be deleted after the winners have been drawn. Data of participants who have been drawn as winners will be deleted as soon as they are no longer required for the processing of the prize.
The user has the possibility to revoke his consent to the processing of personal data at any time. In this case, further participation of the user in the competition cannot be granted.
Following contact with us, all personal data used for sweepstakes purposes will be deleted upon request.
Alternatively, you can contact us via the email address provided, Skype and the WhatsApp messaging service. In this case, the user's personal data transmitted with the email, Skype or WhatsApp message will be stored.
User data will not be passed on to third parties. The data is used exclusively for processing the conversation involved.
We point out that information sent to us unencrypted by electronic mail, by WhatsApp or by using our contact form, may be read by third parties via transmission. We cannot verify your identity and do not know who is behind an email address. A legally secure communication by Email, WhatsApp or the contact form is therefore not guaranteed. For the transmission of messages worthy of protection, we recommend that you send your request by conventional mail.
Persons under 16 years of age should not transmit any personal data to us unless the consent of their legal guardians has been granted. The consent must then be expressly noted in the message. We do not request or knowingly collect personal data from children under 16 years old.
The legal basis for the processing of data transmitted in the course of sending an e-mail, Skype, or WhatsApp message is Art. 6 para. 1 lit. f DSGVO. If the e-mail/skype or WhatsApp message is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.
The processing of personal data from the input mask serves us only for the contact itself. If you contact us by e-mail, Skype or WhatsApp, you have a legitimate interest in the processing of your data.
User data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input mask and those sent by e-mail, Skype or WhatsApp, this is the case when the conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been clarified.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, Skype or WhatsApp, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
Following contact with us, all personal data used during the contact form process will be deleted upon request.
Users can contact us via our website via Titus live chat. If a user takes advantage of this feature, the content of the call is transmitted to us.
The Titus live chat is offered by a service provider commissioned by us. This is the company Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne.
The data is used exclusively for the conversation. However, we expressly point out the direct storage of data by Userlike UG during the Titus live chat.
Additional legal basis for the processing of personal data is Art. 6 para. 1 lit. f DSGVO.
Other personal data processed by us during use of the Titus Live Chat serves to prevent misuse of the contact form and ensure the security of our information technology systems.
The additional personal data collected by us during the use of the Titus Live Chat will be deleted after a period of seven days at the latest.
The data collected by Userlike UG will be deleted after a period of one month.
The user has the possibility to revoke their consent to the processing of personal data at any time by contacting us via email. In such a case, a Userlike chat conversation cannot be continued.
Following contact with us, all personal data retrieved by Titus GmbH during use of the Userlike system will be deleted upon request.
On the basis of our legitimate interests, (i.e. analysis, optimization and economic operation of our websites within Art. 6 para. 1 lit. f. DSGVO) we use the services of Eprofessional GmbH, Heidenkampsweg 74-76, 20097 Hamburg (hereafter referred to as "EProfessional").
We use EProfessional's online marketing system to place ads on the Google advertising network (e.g., in search results, videos, on websites, etc.) targeted towards users who have a suspected interest in the ads. Their services allow us to display ads for and within our online offering to present users with ads that potentially correspond to their interests. For example, a user is shown ads for products in which he is interested in while visiting other online offers, referred to as "remarketing". For these purposes, when our and other websites on which the Google advertising network is active, Google directly executes a code that accesses remarketing tags (graphics or code, also known as "web beacons") that are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's browser (comparable technologies can also be used instead of cookies). In this file, it is noted which websites the user visits, which contents he is interested in, which offers the user has clicked on, technical information such as the browser and operating system, referring websites, visiting time, and further information on the use of the online offer.
We also receive an individual "conversion cookie". The information collected with the help of the conversion cookie is used by Eprofessional to generate conversion statistics for us. However, Titus GmbH only sees the total number of anonymous users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users.
The purpose of data processing is the targeted placement of advertisements on the Google advertising network and the subsequent billing of the service with our service provider, EProfessional.
We use Google Analytics to display the ads placed by Google and its partners within advertising services only to users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products that are determined by web pages visited) that we transmit to Google (so-called "remarketing" or "Google Analytics Audiences"). With the help of remarketing audiences we would also like to ensure that our ads correspond to the potential interests of users.
Google Tag Manager is used to manage “website tags” via an interface (and thus integrate Google Analytics and other Google marketing services into our online offering, for example). The Tag Manager (which implements the tags) does not process any personal data of users. With regard to the processing of users' personal data, reference is made to the following information on the Google services usage guidelines: https://www.google.com/analytics/tag-manager/use-policy/.
On the basis of our legitimate interests (i.e. analysis, optimization and economic operation of our websites within Art. 6 para. 1 lit. f. DSGVO) we use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use the online marketing system of Google "AdWords" to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.) targeted towards users who have a suspected interest in the ads. Their services allow us to display ads for and within our online offering to present users with ads that potentially correspond to their interests. For example, a user is shown ads for products in which he is interested in while visiting other online offers, referred to as "remarketing". For these purposes, when our and other websites on which the Google advertising network is active, Google directly executes a code that accesses remarketing tags (graphics or code, also known as "web beacons") that are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's browser (comparable technologies can also be used instead of cookies). In this file, it is noted which websites the user visits, which contents he is interested in, which offers the user has clicked on, technical information such as the browser and operating system, referring websites, visiting time, and further information on the use of the online offer..
We also receive an individual "conversion cookie". The information collected with the help of the conversion cookie is used by Google to generate conversion statistics for us. However, Titus GmbH only sees the total number of anonymous users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users.
User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process, for example, the names or email addresses of users, but processes the relevant cookie-related data within pseudonymous user profiles. This means that from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected about the users is transmitted to Google and stored on Google's servers in the USA.
On the basis of our legitimate interests (i.e. analysis, optimization and economic operation of our websites within Art. 6 para. 1 lit. f. DSGVO) we use the conversion and tracking tool "Bing Ads" of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft stores cookies on user devices in order to enable analysis of the use of our online offerings by the user, if user has accessed our online offering via a Microsoft Bing Service (so-called "conversion measurement"). Microsoft and we can recognize in this way that someone has clicked on an ad, has been redirected to our online offering, and has reached a previously defined target page (so-called "conversion page"). We only see the total number of users who clicked on a Bing ad who were then redirected to the conversion page. No IP addresses are stored. No personal information about the identity of the users is stored or communicated.
If users do not wish to participate in the Bing Ads tracking process, they can deactivate the necessary setting of a cookie via browser settings or use Microsoft's opt-out page: http://choice.microsoft.com/de-DE/opt-out.
We maintain online presences within social media networks and platforms in order to communicate with active customers, interested parties, and users to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.
On the basis of our legitimate interests (i.e. analysis, optimization and economic operation of our websites within Art. 6 para. 1 lit. f. DSGVO) we integrate third party content and services, such as videos, (hereafter referred to as "content"). This always presupposes that the third party content providers receive the IP address of the users, because the IP Address is necessary for them to send the content to the user. The IP address is therefore required for the display of this content. We will only use content whose respective providers use the IP address only for the delivery of the contents, whenever possible for us to do so. Third-party providers may also use pixel tags ("web beacons") for statistical or marketing purposes. Pixel tags can be used to evaluate information such as visitor traffic on the pages of a website. The pseudonymous information may also be stored in cookies on the user's device and may include technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offering, as well as being linked to such information from other sources.
On the basis of our legitimate interests (i.e. analysis, optimization and economic operation of our websites within Art. 6 para. 1 lit. f. DSGVO) we use social plugins ("Plugins") of the social media network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are identified by one of the Facebook logos (white "f" on blue tile, the terms "like", "like" or a "thumbs up" sign) or are marked with "Facebook Social Plugin". The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). When a user activates a function of our online offering that contains such a plugin, his device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online offering. The processed data can be used to create user profiles. We therefore have no influence on the amount of data Facebook collects with the help of this plugin or ability to inform users according to respective level of knowledge. By integrating the plugins, Facebook receives information that a user has requested the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, such as pressing the Like button or posting a comment, the information is sent directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to obtain and store their IP address. According to Facebook, only an anonymized IP address is stored for users in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for the protection of users' privacy, can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/. If a user is a Facebook member and does not want Facebook to collect data via this online offer and link it to his membership data stored on Facebook, they must log out of Facebook before using our online offering and delete their cookies. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices of the user.
We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties, and users to inform them about our services.
We point out that user data can be processed outside the European Union. This can pose risks for users as the enforcement of users' rights could be made more difficult. With regard to US providers certified under the Privacy Shield, we would like to point out that they commit themselves to comply with EU data protection standards.
Furthermore, user data can be processed for market research and advertising purposes. For example, user profiles can be created from user behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to these).
The processing of users' personal data is carried out on the basis of our legitimate interests in effective user information and communication with users pursuant to Art. 6 para. 1 lit. f. DSGVO. If the users are asked by the respective providers for consent to data processing (i.e. to give their consent e.g. by ticking a checkbox or confirming a button), the legal basis of processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.
For a detailed description of the respective data processing and possibility of objection (opt-out), please refer to the information given by the providers below.
In the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers directly. Only the providers have access to user data and can take appropriate measures to provide information. If further assistance is required, please contact us.
The user may ask the person in charge to confirm whether personal data concerning them will be processed by us.
(8) the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third party or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO related to the transmission.
This right to information may be limited to the extent that it is likely to make it impossible or to impair the realization of research or statistical purposes and the limitation is necessary for the fulfillment of research or statistical purposes.
Users have a right of rectification and/or correction by the data controller if the personal data processed concerning a user is incorrect or incomplete. The person responsible shall make the correction without delay.
Your right to rectification may be limited to the extent that it is likely to render impossible or to impair research or statistical purposes and the limitation is necessary for the fulfillment of the research or statistical purposes.
(4) if the user has filed an objection to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been determined whether the legitimate reasons of the person responsible outweigh the user’s reasons.
If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising, or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction has been set in place according to the above conditions, you will be informed by the person responsible before the restriction is lifted.
Your right to limitation of processing may be limited to the extent that it is likely to render impossible or seriously impair research or statistical purposes and the restriction is necessary for the fulfillment of research or statistical purposes.
(1) The personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed.
(3) You file an objection against the processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing.
(4) The personal data concerning the user has been processed unlawfully.
(5) The deletion of personal data concerning the user is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the data officer is subject.
(6) The personal data concerning the user has been collected in relation to information society services pursuant to Art. 8 para. 1 DSGVO.
If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 DSGVO, he shall take appropriate measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested deletion of all links to this personal data or of copies or replications of this personal data.
If you have exercised your right to have the data officer correct, delete or limit the data processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
The data controller no longer processes the personal data concerning you, unless he can prove logical reasons to why the data processing is required, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning a user is processed for direct marketing purposes, the user has the right to object at any time to the processing of the personal data concerning them for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
If a user is subject to the processing for direct marketing purposes, the personal data concerning said user will no longer be processed for these purposes.
You also have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO.
Your right of objection may be limited to the extent that it is likely to make it impossible or to impair the realization of the research or statistical purposes and the limitation is necessary for the fulfillment of the research or statistical purposes.
(3) is processed with the users express consent.
These decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
In the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard their rights, freedoms and legitimate interests, including the right to obtain an intervention by the person responsible, to state their own position and to challenge the decision.
Without prejudice to any other administrative or judicial body, users have the right of appeal to a supervisory authority, in particular in the Member State where they reside, work, or suspect infringement, if they believe that the processing of personal data concerning them is contrary to the DSGVO.
The supervisory authority to which the complaint has been filed shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 46
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 89
 Art. 9
 Art. 9