Privacy policy

1. General information

1.1 What are personal data

Personal data are information that disclose or may disclose the identity of the user. We comply with the principle of data avoidance. The collection of personal data is avoided as far as possible.

1.2 Handling of personal data

Personal data is used exclusively for the establishment of the contract, the content, execution or processing of the contractual relationship (Art. 6 I S. 1 b DSGVO).

In addition, personal data will only be processed if we have obtained your consent to do so (Art. 6 I p. 1 a DSGVO) or if the processing of the data is necessary for our legitimate interests and if the balancing of interests shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 I p. 1 f DSGVO).

We may use processors to process your personal data, with whom we have concluded a contract for order processing if necessary, but we will not pass on personal data to third parties beyond this.

Only for the processing of payments will the payment data required for this purpose be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data will be processed in the EU and in countries categorised by the EU as safe or appropriate. If personal data is processed in the USA, care is taken to ensure that the services we use are certified under the "Data Privacy Framework".

1.3 User data

General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this user data is registered in a log file and can be used and stored for the purpose of analysing the statistics of this website. This user data is not linked to your other personal data.

1.4 Registration data

Registration is required to make full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 I S. 1 a DSGVO).

1.5 Duration of storage

We only store your personal data after the end of the purpose for which the data was collected for how long this is required by law (in particular tax law).

2. Your rights

2.1 Information

You can request information from us as to whether we process your personal data and, if this is the case, you have a right to information over this personal data and to the further information specified in Art. 15 DSGVO.

2.2 Right to rectification

You have the right to rectification of inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 DSGVO.

2.3 Right to delete

You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to erase it immediately, in particular if one of the following reasons applies

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.
• Your data has been processed unlawfully.

The right to delete doesn't exist if your personal data is required for the assertion, exercise or defence of our legal claims.

2.4 Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data if

• you contest the accuracy of the data and we therefore verify its accuracy,
• the processing is unlawful and you decline to have it deleted and instead request the restriction of its use,
• we no longer need the data, but you need it for the establishment, exercise or defence of legal claims,
• you have objected to the processing of your data and it is not yet certain whether our legitimate reasons outweigh your reasons.

2.5 Right to data transferability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means.

2.6 Right of cancellation

If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time.

2.7 General and right to lodge a complaint

The exercise of your above rights is generally free of charge for you. You have the right to lodge a complaint directly with the supervisory authority responsible for us, the state data protection officer.

3. Data security

3.1 Data security

All data on our website is protected against loss, destruction, access, modification and dissemination by technical and organisational measures.

3.2 Sessions and cookies

To operate the website, we use cookies or server-side sessions in which data can be stored. We make sure that no personal data is transferred from sessions or through cookies without your express consent and that cookies are only used if this is technically necessary for the website (e.g. spam protection for the contact form, shopping basket function) and thus the consideration shows that there are no overriding interests on your part (Art. 6 I p. 1 f DSGVO) or that you have given your express consent.

With your express consent, we use cookies to personalise content and advertisements, to offer functions for social media and to analyse access to our website. With your consent, we can pass on information about your use of our website to our partners for social media, advertising and analyses. Our partners may be able to combine this information with other data that the partners already have about you.

Below you will find the domain, name and duration of the cookies used only on the basis of your consent:

4. Newsletter

If you sign in to our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 I p. 1 a DSGVO.

You can unsubscribe from the newsletter at any time, either by sending us a message via the contact options provided in the imprint or over the link provided in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

5. Comments

If you use the comment function on our website, the time of creation, your chosen pseudonym and temporarily also your IP address will be stored in addition to these comments. This is done so that we can protect our rights in the event of unlawful content.

6. Presence on social media platforms

We use the following social media platforms for company presentation and communication (explicit reference is made to the data protection declarations and opt-out options linked below)

Facebook (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland)

Privacy policy: https://www.facebook.com/about/privacy/

Opt-out: https://www.youronlinechoices.com

X (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland)

Privacy policy: https://twitter.com/de/privacy

Opt-Out: https://twitter.com/personalization

Instagram (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland)

Privacy policy and opt-out: https://instagram.com/about/legal/privacy/

Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA)

Privacy policy and opt-out: https://about.pinterest.com/de/privacy-policy

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)

Privacy policy https://www.linkedin.com/legal/privacy-policy

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany)

Privacy policy and opt-out: https://privacy.xing.com/de/datenschutzerklaerung

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

Privacy policy: https://www.youtube.com/t/privacy/

TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Irland)

Privacy policy: https://www.tiktok.com/legal/privacy-policy

These social media platforms may process personal data outside the EU; in this respect, we refer to the above data protection declarations of the social media platforms.

The respective social media platforms may be able to create user profiles from your usage behaviour and the resulting interests and actions on your part and store cookies on your computer in which your usage behaviour is stored. If you have an account on the respective social media platform and are logged in, your usage behaviour can even be stored independently of your device. Your user profile can be used, for example, to place adverts that presumably correspond to your interests.

We process the personal data exclusively for communication with you via the social media platform you have selected and to optimise our online presence and ensure that no interests on your part are affected here that override this legitimate interest on our part (Art. 6 I p. 1 f DSGVO). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, your personal data will also be processed on the basis of this consent (Art. 6 I p. 1 a DSGVO).

7. Third-party services

7.1 Social media links

We have our own social media pages for the third-party providers that can be reached over links from this website. Using the links will take you to the respective websites of the third-party providers (e.g. Facebook, X, Instagram). To avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a corresponding link so that usage profiles cannot be created by the third-party provider simply by using the link.

7.2 Use of Google Maps

This website uses Google Maps, a map service from Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When Google Maps is used, data is also collected, processed and used over the use of the Maps functions by visitors to the website. Google Maps is only used with your consent (Art. 6 I p. 1 a DSGVO). You can view Google's privacy policy at https://www.google.de/intl/de/policies/privacy/. You can view the additional terms of use for Google Maps at https://www.google.com/intl/de_de/help/terms_maps.html

7.3 Google Places API (address completion)

We use the Google Places API on this website, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). If you enter address data in the relevant input fields, e.g. within the dashboard, address suggestions are displayed in the form of a drop-down selection list using the Google Places API.

As part of the selection of address suggestions, information about this location, including your IP address and your location, is returned to the API and transmitted to Google.

We use the Google Places API to enable our users to enter addresses quickly and effectively in order to improve the user experience on our website. This purpose is achieved because the automatic address completion means that the user does not usually need to enter the full address.

This also constitutes our legitimate interest in the processing of personal data in accordance with Art. 6 I p. 1 f DSGVO

You can view Google's data protection information at https://www.google.de/intl/de/policies/privacy/.

7.4 Use of Google reCAPTCHA

This website uses the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The function is used to distinguish whether the input is made by a human or abusively by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The processing therefore serves to prevent misuse of this website and is ultimately anonymised. The use of reCAPTCHA only takes place with your consent (Art. 6 I S. 1 a DSGVO). Google's privacy policy applies, which you can find at: https://policies.google.com/privacy?hl=de.

7.5 Google Firebase

We also use the Google Firebase tool (operated by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland) to analyse and monitor our app and website. Google also processes your data (e.g. your IP address) in the USA.

The service is used on the basis of your consent (Art. 6 I p. 1 a DSGVO) or, if this is not available, on the basis of our legitimate interest in being able to analyse our service (Art. 6 I p. 1 f DSGVO).

You can find out more about the data processed through the use of Google Firebase at: https://firebase.google.com/terms/data-processing-terms

You can view Google's privacy policy here: https://policies.google.com/privacy?hl=de.

7.6 Google Tag Manager

This website also uses Google Tag Manager (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This service allows website tags to be managed over an interface. This Google tool only implements tags. No cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, provided that these are implemented with the Google Tag Manager.

7.7 Stripe

We have commissioned the payment service provider Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) to handle our payment process. For this purpose, Stripe will pass on the information provided to us during the booking process together with the information over your booking (name, address, account number, sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 I S.1 b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information on Stripe's data protection at the URL https://stripe.com/de/privacy

7.8 Registration with third-party providers

7.8.1 Facebook account

You can register over your existing Facebook account. To do this, click on the "Connect over Facebook" button. This will redirect you to www.facebook.com (operated by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94304, USA). The entity responsible for processing the information collected by Facebook is Facebook Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland

There you enter your Facebook account data and click on "Sign in". In the course of this sign in, we may receive the following data from Facebook, among others:

• Your Facebook name,
• Your profile picture,
• Your e-mail address stored on Facebook,
• friends list,
• date of birth,
• language,
• place of residence.

If you have logged in to our platform via your Facebook account, we transmit information about your activities on our platform to Facebook, including information about the device you are using and which services you have booked via our platform.

The use of Facebook services is subject to Facebook's privacy policy and terms of use, which you can view here:

https://www.facebook.com/privacy/policy/?tid=331700642272 (Privacy Policy)

https://de-de.facebook.com/terms (Terms of use)

7.8.2 Login with Google

Alternatively, you can also register over your existing Google account. To do this, click on the "Connect over Google" button. This will redirect you to www.google.com (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

There you enter your Google account data and click on "Sign in". In the course of this sign in, we may receive the following data from Google:

• Your Google name,
• Your profile picture,
• Your e-mail address stored with Google,
• your date of birth,
• language,
• place of residence.

If you have logged in to our platform via your Google account, we transmit information about your activities on our platform to Google, including information about the device you are using and which services you have booked via our platform.

The use of Google services is subject to Google's privacy policy and terms of use, which you can view here:

https://policies.google.com/privacy?hl=de (Privacy Policy)

https://policies.google.com/terms?gl=DE&hl=de (Terms of use)

7.9 AWS

Our website is hosted by the external service provider Amazon Web Services, AWS for short (operated by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA). The personal data collected on our website is stored on the AWS servers. This may include IP addresses, contact data, contract data, website access and other data generated over a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 I p. 1 b DSGVO) and in the interest of getting a professional provider to provide our online offer quickly, efficiently and securely (Art. 6 I p. 1 f DSGVO). AWS will only process your data to the extent necessary to realise its performance obligations and follow our instructions with regard to this data. AWS also uses a CDN (Content Delivery Network). A CDN is a network of powerful servers that cache content at various locations around the world. In this context, a CDN essentially has two tasks: to provide content in the shortest possible time and to relieve the web host by distributing the data traffic. The legal basis is Art. 6 I p. 1 f DSGVO.

You can view AWS's privacy policy here: https://aws.amazon.com/de/privacy/

The Amazon data processing conditions, which correspond to the standard contractual clauses, can be found at https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf

7.10 Cloudflare

We use the Cloudflare service (operated by Cloudflare Inc., 101 Townsend St, 94107 San Francisco, USA) to reload our content and to ensure the full functionality of our website. In this context, your browser may transmit personal data (e.g. your IP address) to Cloudflare in order to provide the service. Data processing may also take place in the USA.

We have completed an order processing contract with Cloudflare. In this context, this is a contract in which Cloudflare undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties.

Cloudflare itself may also use a CDN. A CDN is a network of powerful servers that cache content in different locations around the world. In this context, a CDN has two tasks: to provide content in the shortest possible time and to relieve the web host by distributing the data traffic.

The service is used on the basis of your consent (Art. 6 I p. 1 a DSGVO) or, if this is not available, on the basis of our legitimate interest in enabling simple and appealing use of our online offer (Art. 6 I p. 1 f DSGVO).

Further information on the handling of the transferred data can be found in Cloudflare's privacy policy: https://www.cloudflare.com/de-de/privacypolicy/.

You can prevent the collection and processing of your data by Cloudflare by deactivating the execution of script code in your browser or installing a script blocker in your browser (you can find this at www.noscript.net or www.ghostery.com, for example).

7.11 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and collects and stores some of your data over this web analytics service. This data includes

• Your approximate location (region)
• Your IP address (in truncated form)
• technical browser information
• Technical information about the end device used (e.g. screen resolution)
• Your internet provider
• Page views
• First visit to the website
• Start of the session
• Click sequence
• Interaction with and on our website (e.g. clicking on links or videos, adverts clicked on)
• Scrolls on the website
• Search queries
• File downloads
• Language setting
• Referrer URL

We use the service to evaluate visitor behaviour on our website and to design and improve the offer visualised on our website in line with requirements.

In this context, Google Analytics 4 also uses so-called "cookies", small text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

In addition to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA also receive the data.

IP anonymisation is preset in Google Analytics 4. This means that your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Google will use the collected data on our project to analyse the use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics 4 will not be merged with other Google data. Google Analytics 4 is only used with your express consent (Art. 6 I p. 1 a DSGVO). The data collected by Google Analytics 4 is automatically deleted after 2 months.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de). You can also prevent the collection of your data by Google Analytics 4 by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics 4. This does not affect the lawfulness of processing based on consent before its withdrawal. You can view Google's privacy policy at https://www.google.de/intl/de/policies/privacy/. You can find more information on the terms of use at https://www.google.com/analytics/terms/de.html.

7.12 Google Web Fonts

We use so-called web fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to display a standardised font on our website. These are automatically stored in your browser cache when you access one of our pages in order to enable the desired display. If your browser does not support the web fonts used, a standard font from your computer may be used. This does not affect any interests of the user that outweigh this technical necessity (Art. 6 I p. 1 f DSGVO). You can view Google's privacy policy here: https://www.google.com/policies/privacy/ Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq

8. Contacting us

To contact us regarding data protection, you are welcome to use the following contact options. Controller within the meaning of the DSGVO:

SooMore GmbH
Echinger Str. 21
85375 Neufahrn
E-mail: kontakt@soomore.de
Phone: +49 8165 999599 0