Legal Notice

Data Controller:

where-made-in – Christian Frenzel
Sole Proprietorship
c/o Online-Impressum.de #6502
Europaring 90
53757 Sankt Augustin
Germany

E-mail: where-made-in@mail.online-impressum.de
Alternative contact method: https://mein.online-impressum.de/where-made-in/#Zweiter_Kontaktweg

Competent Data Protection Supervisory Authority (Art. 77 GDPR):
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
https://www.ldi.nrw.de

1) Introduction and Contact Details of the Controller

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data by which you could be personally identified.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is where-made-in – Christian Frenzel, c/o Online-Impressum.de #6502, Europaring 90, 53757 Sankt Augustin, Germany, e-mail: where-made-in@mail.online-impressum.de.

2) Data Collection When You Visit Our Website

If you use our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable, in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Data is not passed on or otherwise used. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock icon in your browser bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying its content, we use a provider whose services—whether provided directly or through selected subcontractors—are delivered exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR, which ensures the protection of our visitors’ data and prohibits unauthorised disclosure to third parties.

3.1 Server Log Files

When you access the website, the hosting provider automatically collects and stores information in server log files, including:

  • IP address of the requesting device
  • Date and time of access
  • Page/file accessed
  • Volume of data transferred
  • Referrer URL
  • Browser type and version
  • Operating system

This data is technically necessary to deliver the website, ensure system security, prevent misuse, and maintain operational stability.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of our website).

This data is not cross-referenced with other data sources, in particular analytics or tracking tools.

3.2 Storage Period

Server log files are only retained for as long as necessary to ensure technical operation and IT security. Retention beyond this period only takes place if there are concrete indications of unlawful use.

3.3 Transfer to Third Countries

Should a transfer to third countries take place, this is carried out exclusively in compliance with Art. 44 et seq. GDPR.

4) Consent Management (Borlabs Cookie)

This website uses the consent management tool Borlabs Cookie to obtain the necessary consents for the storage of certain cookies or the use of certain technologies, and to document them in a data protection–compliant manner.

When you access our website, Borlabs Cookie stores a consent or a withdrawal of consent in a cookie on your device. This allows us to determine whether you have accepted or declined certain technologies.

The data collected is not passed on to the provider of Borlabs Cookie.

The stored data is retained until you ask us to delete it, until you delete the Borlabs cookie yourself, or until the purpose for storing the data no longer applies. Statutory retention obligations remain unaffected.

The legal basis is Art. 6(1)(c) GDPR (compliance with a legal obligation). For further information, please visit: https://de.borlabs.io/borlabs-cookie/

5) Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool for managing website tags via a single interface. Google Tag Manager itself does not set cookies and does not collect any personal data. It only manages and triggers other tags, which may themselves collect data. Google Tag Manager has no access to this data.

The use of Google Tag Manager is based on Art. 6(1)(f) GDPR (legitimate interest in the efficient management of website tags). Marketing and analytics tags are only loaded via Google Tag Manager with your explicit consent.

For further information: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

6) Web Analytics with TWIPLA

This website uses the web analytics tool TWIPLA (Visitor Analytics LLC) for the statistical evaluation of visits.

Privacy-Friendly Operation
TWIPLA is used on this website exclusively in “Maximum Privacy Mode”. In this mode, no cookies are set and no personal data is collected. Only aggregated statistics that cannot be traced back to individuals are stored. No consent is therefore required.

Purpose of Processing
The analysis serves the statistical evaluation of website usage in order to continuously improve content and navigation.

Data Processed
Only aggregated data without any personal reference is collected, in particular pages viewed, access timestamps, and technical device information in anonymised form. IP addresses are not stored.

Legal Basis
Since no personal data is processed, no consent under Art. 6 GDPR is required. Processing takes place on the basis of legitimate interest pursuant to Art. 6(1)(f) GDPR.

Data Processing Agreement
A data processing agreement in accordance with Art. 28 GDPR has been concluded with TWIPLA.

For further information, please see TWIPLA’s privacy policy: https://www.visitor-analytics.io/en/support/data-privacy-and-security/privacy-policy/

7) Microsoft Advertising (Bing Ads)

This website uses Microsoft Advertising (Bing Ads), a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, United States.

Microsoft Advertising uses cookies and the Universal Event Tracking (UET) tag to measure the behaviour of website visitors after clicking on a Bing advertisement. Data such as pages visited and actions taken is collected and transmitted to Microsoft. This allows us to evaluate and optimise our advertising campaigns.

Cookies Used

CookiePurposeDuration
_uetsidStores anonymous session data for conversion measurement1 day
_uetvidIdentifies returning visitors for remarketing13 months

Legal Basis
Processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Microsoft Advertising is only loaded with your explicit consent via the consent management tool used.

Withdrawal of Consent
You can withdraw your consent at any time with effect for the future via the cookie settings.

Transfer to Third Countries
Microsoft also processes data in the United States. The transfer is based on the European Commission’s Standard Contractual Clauses in accordance with Art. 46(2)(c) GDPR.

Data protection information from Microsoft: https://privacy.microsoft.com/en-us/privacystatement
Opt-out: https://account.microsoft.com/privacy/ad-settings

8) Affiliate Programmes and Partner Links

We use affiliate links to partner companies, in particular Amazon EU S.à r.l., eBay GmbH, and the affiliate network AWIN (Awin AG, Eichhornstraße 3, 10785 Berlin, Germany).

When you click on an affiliate link, the relevant provider or affiliate network receives information indicating that you came from our website (referral information). Personal data, in particular your IP address and technical information about your browser and device, may be processed as a result.

In the case of the AWIN affiliate network, a redirect takes place via AWIN’s servers in order to enable the attribution of affiliate links and the subsequent recording of commissions.

If you make a purchase from the relevant provider, we receive a commission. This does not result in any additional costs for you.

Legal Basis
Processing takes place on the basis of Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the economic financing and operation of our website.

Processing by Partners
For any further processing of your data on the respective providers’ websites, only the relevant provider is responsible. The privacy notices of each respective company apply.

Transfer to Third Countries
Some of the providers mentioned (e.g. Amazon or AWIN partners) may process data in third countries, in particular the United States. Where there is no adequate level of data protection within the meaning of the GDPR, the transfer is based on appropriate safeguards in accordance with Art. 46 GDPR.

9) Contacting Us

When you contact us (for example via a contact form or e-mail), personal data is collected. In particular, your name, e-mail address, and the content of your message are processed. If you voluntarily provide additional information (e.g. a phone number), this will also be processed. This data is stored and used exclusively for the purpose of responding to your enquiry.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully processed, provided no statutory retention obligations apply.

10) Rights of the Data Subject

10.1 Rights of the Data Subject

Applicable data protection law grants you the following rights against the controller:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to notification pursuant to Art. 19 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to withdraw consent given pursuant to Art. 7(3) GDPR
  • Right to lodge a complaint pursuant to Art. 77 GDPR

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

10.2 Right to Object

If we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right, pursuant to Art. 21 GDPR, to object at any time, for reasons arising from your particular situation, to this processing with effect for the future.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes.

11) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing, and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial or tax law).

When personal data is processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or pre-contractual obligations under Art. 6(1)(b) GDPR, such data is routinely deleted once the retention periods have expired, provided it is no longer required for the performance or initiation of a contract.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.

When personal data is processed for the purposes of direct marketing on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated elsewhere in this policy in relation to specific processing situations, stored personal data is deleted once it is no longer required for the purposes for which it was collected or otherwise processed.