Privacy Policy

We operate our websites in accordance with the principles set forth below:
We are committed to complying with the legal provisions on data protection and strive to always adhere to the principles of data avoidance and data minimization.

1. Name and address of the controller and the data protection officer

a) The controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States of the European Union, as well as other data protection regulations, is:

Tischer GmbH Freizeitfahrzeuge
Frankenstraße 3
97892 Kreuzwertheim

Tel. (00)49 (0)9342 / 81 59
Fax (00)49 (0)9342 / 50 89
Email: info@tischer-pickup.com
Website: https://www.tischer-pickup.com/

b) The Data Protection Officer

You can contact the data protection officer of the controller as follows:

Ms. Justine Nehr, Frankenstraße 3, 97892 Kreuzwertheim, Germany

Tel.: +49 (0) 9342 9186-0
Email: j.nehr@tischer-freizeitfahrzeuge.de

2. Definitions

We have designed our privacy policy in accordance with the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the corresponding definitions can be viewed here.

3. Legal Basis for Data Processing

a) Processing of Personal Data under the GDPR

We process your personal data, such as your first and last name, your email address, and IP address, etc., only if there is a legal basis for doing so. In particular, the following provisions of the General Data Protection Regulation apply:

• Art. 6(1)(a) GDPR: The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes.
• Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
• Art. 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Art. 6(1)(d) GDPR: Processing is necessary to protect the vital interests of the data subject or of another natural person.
• Art. 6(1)(e) GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• Art. 6(1)(f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

However, we will always indicate the legal basis for the processing of your personal data at the relevant points in this privacy policy.

b) Consent of the legal guardian pursuant to Art. 8(1) Sent. 2 Alt. 2 GDPR

A legal guardian must consent to all data processing within the scope of this website for which the consent of a minor under the age of 16 is required.
Information regarding the individual data processing operations, their purposes, and the categories of data involved for which the data subject’s consent is required can be found in the privacy policy.

You may revoke your consent at any time by sending a written notice of revocation to the contact details of the controller. Processing prior to revocation remains lawful.

c) Processing of information pursuant to Section 25(1) of the TDDDG

We also process information pursuant to Section 25(1) TDDDG by storing information on your terminal device or accessing information already stored on your terminal device. This may include both personal information and non-personal data, e.g., cookies, browser fingerprints, advertising IDs, MAC addresses, and IMEI numbers. A terminal device is any device connected directly or indirectly to the interface of a public telecommunications network

for the purpose of transmitting, processing, or receiving messages, § 2(2)(6) TDDDG.

We generally process this information based on your consent, § 25(1) TDDDG.

If an exception under § 25(2) No. 1 and No. 2 TDDDG applies, we do not require consent. Such an exception applies if we access or store the information solely to transmit a message via a public telecommunications network or if this is absolutely necessary for us to provide a telemedia service you have expressly requested. You may revoke your consent at any time.

We hereby inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to the revocation.

4. Disclosure of Personal Data

The disclosure of personal data also constitutes processing within the meaning of Section 3 above. However, we would like to take this opportunity to provide you with separate information regarding the disclosure of data to third parties. The protection of your personal data is very important to us. For this reason, we exercise particular caution when it comes to disclosing your data to third parties.

Therefore, data is only disclosed to third parties if there is a legal basis for the processing. For example, we disclose personal data to individuals or companies acting as processors on our behalf in accordance with Article 28 of the GDPR. A processor is anyone who processes personal data on our behalf—that is, in particular, under our direction and control.

In accordance with the provisions of the GDPR, we enter into a contract with each of our data processors to oblige them to comply with data protection regulations and thus ensure comprehensive protection of your data.

5. Retention Period and Deletion

We will delete your personal data to the extent that it is no longer necessary for the purposes for which it was collected or otherwise processed, and the processing is not required for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.

6. SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Cookies

We use cookies on our website. Cookies are small data packets that your browser automatically creates and that are stored on your device when you visit our website. These cookies are used to store information related to the device in use.

When using cookies, a distinction is made between technically necessary cookies and “other” cookies. Technically necessary cookies are those that are absolutely essential to provide an information society service you have explicitly requested.

a) Technically necessary cookies

To make your experience on our website more enjoyable, we use technically necessary cookies. These may include so-called session cookies (e.g., language and font selection, shopping cart, etc.), consent cookies, cookies to ensure server stability and security, and similar cookies. The legal basis for these cookies is Article 6(1)(f) of the GDPR, our legitimate interest in the error-free operation of the website, and our interest in providing you with optimized services.

b) Other cookies

Other cookies include those used for statistical, analytical, marketing, and retargeting purposes.
We use these cookies on your behalf based on your consent pursuant to Article 6(1)(a) of the GDPR.

You may revoke your consent to the use of cookies at any time.
We hereby inform you that revoking your consent does not affect the lawfulness of processing carried out on the basis of your consent prior to revocation.

To do so, you can either edit your cookie settings on our website, disable the use of cookies in your browser settings (although this may also limit the functionality of the online service), or opt out of the relevant service on a case-by-case basis.

We indicate the legal basis on which this data is processed for the respective services within the privacy policy.

8. Cookie Banner / Consent Management

To obtain consent for the cookies we use, we utilize the cookie banner provided by the service provider Borlabs, a division of Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. This service provider sets a so-called consent cookie to query and process the respective consent status. This consent cookie is technically necessary and is therefore used on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, § 25(1) TDDDG.

For the use of certain services of the Google/Alphabet Group, we use the so-called Google Consent Mode V2 in Advanced Mode. Details about this consent mode can be found on Google’s website at https://developers.google.com/tag-platform/security/guides/consent?consentmode=advanced and on the relevant Google services.

The use of Consent Mode is technically necessary and is therefore implemented based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

9. Collection and Storage of Personal Data, as well as the Nature and Purpose of Use

a) External Hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. For this reason, all personal data collected on our website is stored on our host’s servers, unless an external third-party service is integrated. This may include your IP address, email address, communication data, or similar information. You can find out exactly which personal data is involved below in the descriptions of the individual functions and services we provide. If we use a third-party service, this will be clearly indicated in the description of the respective service or tool.

The hosting provider processes your data only on our instructions and to the extent necessary to fulfill the services on the website. The hosting provider does not process the data for its own purposes. We have entered into a data processing agreement with them.

b) When visiting the website

When you visit our website, the browser on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which the access originated (referrer URL)
• Browser used and, if applicable, your computer’s operating system as well as the name of your Internet service provider

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring a comfortable user experience on our website
• Evaluating system security and stability
• Error analysis
• For other administrative purposes

Data that allows identification of your person, such as the IP address, is deleted after 7 days at the latest. If we store the data beyond this period, it is pseudonymized so that it can no longer be linked to you.
The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your identity.

c) User Account

As part of providing our forum, we offer you the option to create a personal user account. This is necessary to enable interaction with other users by posting and viewing messages within the forum.

For the registration and use of the user account in the forum, we collect and process the following personal data:

• First and last name
• Email address (for identification and for registration/communication)
• A username of your choice
• A password of your choice (stored in encrypted form)

Posts you publish in the forum, as well as your username, are visible to other users.

The processing of your personal data serves exclusively to provide and manage your user account, as well as to facilitate communication with other registered users through the posting and viewing of forum messages.
Processing is based on Article 6(1)(b) of the GDPR to fulfill the user relationship established through registration. If you voluntarily provide additional information in your user profile, this is based on your consent pursuant to Art. 6(1)(a) GDPR.

You have the option at any time to change or delete your data in your user account and to delete the account entirely. If you make use of this function, your user account and all data contained therein will be deleted immediately.

Posts that are publicly visible in the forum will remain even after your account is deleted, though the user reference will be anonymized.

d) Use of the Configurator

On our website, we offer you the opportunity to plan a vehicle conversion using our configurator and then submit an inquiry.
In connection with the use of the configurator and the inquiry function, we collect and process the personal data you enter. This includes:

• First and last names
• Address information
• Email address*
• As well as any additional voluntary information you provide, such as your phone number

When you submit inquiries to us via the contact form, your information from the inquiry form—including the contact details you provided there and your IP address—will be processed in accordance with Art. 6(1)(b) and (f) of the GDPR for the purpose of carrying out pre-contractual measures in response to your inquiry or to pursue our legitimate interest, namely the conduct of our business activities.

The inquiries and the associated data will be deleted no later than 3 months after receipt, unless they are required for a subsequent contractual relationship.

e) Newsletter

Newsletter content and registration information

We will only send you our newsletter, conduct statistical surveys and analyses, and log the registration process if you have subscribed to it and provided your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG.

The contents of the newsletter are specifically described during the newsletter registration process. Providing your email address is sufficient to subscribe to the newsletter. If you provide additional voluntary information, such as your name and/or gender, this will be used exclusively to personalize the newsletter sent to you.

Double Opt-In and Logging

For security reasons, to prevent anyone from subscribing using someone else’s email address, we use the so-called double opt-in procedure for newsletter subscriptions. After you subscribe to our newsletter, you will therefore first receive an email asking you to confirm your subscription. Your subscription only becomes effective once you have confirmed it.

Furthermore, your newsletter subscription is logged. This logging includes the storage of the time of registration and confirmation, the data you provided, and your IP address. If you make changes to your data, these changes are also logged.

Withdrawal

If you no longer wish to receive our newsletter, you can withdraw your consent at any time with future effect. To do so, you can click the link to unsubscribe from the newsletter at the end of each newsletter or send us an email to the following email address: newsletter@tischer-pickup.com

Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Use of CleverReach

We use the email tool CleverReach (CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany) to send our newsletter.
To this end, the data you provide is transferred to CleverReach and processed by them. This tool allows us to analyze how the newsletters are opened and used.
We have entered into a data processing agreement with CleverReach. CleverReach has no right to disclose your data.
Further information on CleverReach’s privacy policy can be found here. [https://www.cleverreach.com/en/privacy-policy/]

f) Contact Form

We provide a form on our website so that you can contact us at any time. To use the contact form, you must provide a name for a personalized greeting and a valid email address so that we know who the inquiry is from and can process it.

When you send us inquiries via the contact form, your information from the inquiry form—including the contact details you provided there and your IP address—will be processed in accordance with Art. 6(1)(b) and (f) of the GDPR for the purpose of carrying out pre-contractual measures in response to your inquiry or to pursue our legitimate interest, namely the conduct of our business activities.

The inquiries and the associated data will be deleted no later than 3 months after receipt, unless they are required for a subsequent contractual relationship.

g) Application Form

We provide a form on our website that you can use to apply for a position with us. Your personal data from the application will be processed in accordance with our Privacy Policy for Applicants.

The use of this form is based on our legitimate interest in the simple and secure transmission of your application documents, Art. 6(1)(f) GDPR.

h) Rental Form

We provide a form on our website that you can use to request the rental of our vehicles. In doing so, we process your name, your email address, the desired rental period (from/to), and, if applicable, your message.

When you send us an inquiry via the rental form, your information from the form—including your contact details and your IP address—is processed in accordance with Article 6(1)(b) of the GDPR to carry out pre-contractual measures and, if applicable, in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interest in processing inquiries.

The data from the rental form will be deleted no later than 3 months after your inquiry has been processed, unless it is required for a further (pre-)contractual relationship or is subject to statutory retention obligations.

i) Guestbook

We provide a guestbook on our website. In this context, we process your name, your email address, your message, and, if applicable, additional voluntary information such as city or website.
Providing your city and website is voluntary and not mandatory. Your email address will be used exclusively for contacting you in connection with your entry and will not be published. Your name and message will only be published if you voluntarily leave them in our guestbook.

The processing of your data for the purpose of publishing the entry is based on your consent pursuant to Art. 6(1)(a) GDPR and additionally on our legitimate interest in ensuring the operation of the site and preventing misuse, pursuant to Art. 6(1)(f) GDPR. You may revoke your consent at any time with future effect. We will then delete your entry.

Entries are stored for as long as they are to be publicly displayed or until you request their deletion. Please note that guestbook entries are publicly accessible on the internet. Therefore, please do not provide any sensitive data.

j) Use of Google Maps

Our website uses the Google Maps API. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to a Google server (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in the United States and stored there.

Google may transfer the information obtained through Maps to third parties if required by law or if such third parties process this data on Google’s behalf. However, your IP address will under no circumstances be linked to other data held by Google. Nevertheless, we must point out that it is technically possible for Google to identify individual users based on the data received.

We have no influence over whether your personal data and personal profiles are processed by Google for other purposes. If you wish to avoid this at all costs, you can disable the Google Maps service and thus prevent data transfer to Google. To do this, you simply need to disable JavaScript in your browser. In this case, no data will be transferred, but you will also no longer be able to use the map display on our website.

You can find Google’s privacy policy here. [https://policies.google.com/privacy]

When Google Maps is integrated, Google Fonts are also dynamically loaded without the website operator or visitor actively specifying this. These web fonts are integrated via a server request, typically to a Google server in the United States. As a result, the following information may be transmitted to the server and stored by Google:

• Name and version of the browser used
• Website from which the request originated (referrer URL)
• Operating system of your computer
• Screen resolution of your computer
• IP address of the requesting computer
• Language settings of the browser or operating system used by the user

For more information, please refer to Google’s privacy policy, which you can access here:

www.google.com/policies/privacy/

The use of Google Maps is a service provided to you so that you can accurately identify our location and, if necessary, better plan your visit to us. The use of Google Maps is based on your consent pursuant to Art. 6(1)(a) of the GDPR.

k) Google Tag Manager

We use Google Tag Manager from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Google Tag Manager is an administration and management tool that allows other tracking and/or analytics tools to be centrally managed and deployed.

When you visit our website, Google Tag Manager collects and processes your IP address, which may also be transferred to the United States. However, Google Tag Manager itself does not create user profiles or perform analyses.

The use of Google Tag Manager is based on your consent pursuant to Art. 6(1)(a) of the GDPR.

We have entered into a data processing agreement with Google.
You can find Google’s privacy policy here. [https://policies.google.com/privacy]

l) jQuery

We use the jQuery JavaScript library from the OpenJS Foundation (The OpenJS Foundation, 548 Market St. PMB 57274, San Francisco, CA 94104, USA) on our website. This library is a collection of JavaScript programs and routines that offer versatile solutions to various problems.

The JavaScript routines are provided via a connection to servers in the United States and downloaded from there.
Accordingly, it cannot be ruled out that the IP addresses of our website visitors may be processed by jQuery.

The use of jQuery is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, namely to ensure the functionality of the website and to be able to restore it as quickly and easily as possible in the event of a problem.

We have entered into a data processing agreement with jQuery, specifically the Standard Contractual Clauses (SCCs).

For more information on jQuery’s data protection practices, please visit:
https://images.prismic.io/openjsf/ba00b254-685f-4e54-b1ca-17984b0f3e55_OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf

10. Analytics and Tracking Tools

We use the analytics and tracking tools listed below on our website. These serve to ensure the ongoing optimization of our website and to tailor it to your needs.

We use these tools based on the consent you have provided pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time by changing your cookie settings. Processing prior to revocation remains lawful.

The respective data processing purposes and data categories can be found in the corresponding tools. Please note that we have no influence over whether and to what extent the service providers carry out further data processing.

a) Google Consent Mode v2 – Advanced

For the use of certain services of the Google/Alphabet Group, we use the so-called Google Consent Mode V2 in Advanced Mode.

This means that even if you do not consent via our cookie banner, your browser will still send ping information—including your IP address, timestamp, user agent, and referrer URL—to Google. The IP address is anonymized on Google’s servers. This data is used for conversion modeling to optimize ads despite a lack of consent or technical limitations and to improve automatic bid settings.

Details about this consent mode can be found on Google’s website at https://developers.google.com/tag-platform/security/guides/consent?consentmode=advanced.

The processing of your personal data is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

b) Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”).

In this context, Google Analytics uses cookies (see Section 7). The information generated by the cookie regarding your use of this website, such as

• Name and version of the browser used
• Operating system of your computer
• Website from which access is made (referrer URL)
• IP address of the requesting computer
• Time of the server request

are generally transmitted to a Google server in the United States and stored there.

Your IP address is automatically anonymized by Google before it is recorded via EU domains and servers. Therefore, your IP address is neither logged nor stored.

On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

We have entered into a data processing agreement with Google.
Please click here for an overview of Google’s privacy policy. [https://support.google.com/analytics/answer/6004245]

c) Google Remarketing

We use the remarketing feature of Google Analytics to target advertising campaigns—including Google AdWords campaigns—at visitors to our website.

Based on your previous visits to our website, relevant ads are displayed to you when you visit other websites in the Google Display Network.

The DoubleClick cookie enables Google to display targeted ads to us and other third-party providers that correspond to the interests determined based on your previous visits to our website and/or other websites. These ads may be displayed on websites operated by Google and/or other operators within the Google advertising network. We also use the Google Analytics advertising features to analyze the effectiveness of our own advertising campaigns.

If you have agreed in your Google Account to have your web and app browsing history linked to your Google Account and to allow information from your Google Account to be used to personalize ads, Google uses your data in conjunction with Google Analytics data to create audience lists for cross-device remarketing. To do this, Google Analytics first collects Google-authenticated IDs for you as a user on our website that are linked to your Google account. Google Analytics then temporarily links these IDs with Google Analytics data to optimize our audiences.

We have entered into a data processing agreement with Google.

Please click here for an overview of Google’s privacy policy. [https://support.google.com/analytics/answer/6004245]

d) Google Ads Conversion Tracking

We use Google Ads, an online advertising program from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), on our website. This includes the use of conversion tracking. With this tool, Google Ads places a cookie on your device when you visit our website via a Google ad.

The cookie does not serve any purpose of personal tracking. If you, as a user, visit our website and the cookie is still active, we and Google can recognize that you clicked on the corresponding ad and were redirected to our site. Each Google Ads customer is assigned a different cookie. Cookies cannot be tracked across the websites of Ads customers in this way.

Conversion statistics for Ads customers are generated using the data collected by conversion cookies. As Google Ads customers, we thus learn the total number of users who responded to our ad and were then redirected to a website equipped with a conversion tracking tag. This allows us to assess the success of individual advertising campaigns. We do not receive any information during this process that would allow us to personally identify you as a user.

When using Google Ads, your browser automatically establishes a direct connection to Google’s server and, if you have a Google account and are logged in, can associate the visit with your account. If you do not have a Google account, Google assigns you a unique identifier. We have no influence over what additional data Google collects and stores.

We have implemented Google’s “enhanced conversions” feature on our website. This allows data we collect ourselves, such as email address, name, address, or phone number, to be captured in conversion tracking tags. These are then sent to Google in hashed form, where they are used to match our existing customers with Google accounts. For more information about this feature, please visit https://ads.google.com/intl/de_de/home/privacy/solutions/enhanced-conversions-for-web/

We have entered into a data processing agreement with Google.

For more information about Google’s privacy policy, please visit http://www.google.de/policies/privacy/.

e) Meta Conversion Pixel (Meta Pixel)

We use the Meta Conversion Pixel (“Meta Pixel”), an analytics and marketing tool provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”), on our website. With the help of the Meta Pixel, Meta can track the behavior of users after they have been redirected to our website via an ad placed on Meta. This allows us to measure the effectiveness of our Meta ads for statistical and market research purposes (“conversion measurement”), create or refine target audiences for ads (“Custom Audiences”), and serve interest-based ads. If you are logged into Meta services (e.g., Facebook, Instagram), Meta can associate your page visits with your profile there and analyze them across devices.

The Meta Pixel enables the collection of so-called event data (e.g., “PageView,” “ViewContent,” “AddToCart,” “Purchase” including order value and currency), technical information from HTTP headers (including IP address, user agent, referrer URL), device and browser data, pixel ID, and timestamps.

For certain processing of so-called event data within the scope of Meta Business Tools, we and Meta are joint controllers. The distribution of roles and responsibilities is set forth in Meta’s “Controller Addendum” (Art. 26 GDPR; available at de-de.facebook.com/legal/controller_addendum) in conjunction with the “Business Tools Terms” (facebook.com/legal/technology_terms). Accordingly, we are specifically responsible for obtaining a valid legal basis (consent), the correct implementation of the pixel, and providing transparency information. Meta assumes, among other things, primary responsibility for the exercise of data subjects’ rights regarding the event data processed by Meta after transmission and for the security of Meta’s systems. You may exercise your rights (e.g., access, erasure) both against us and against Meta. A data processing agreement pursuant to Art. 28 GDPR is generally not concluded for the Meta Pixel; instead, the aforementioned joint controller agreement applies.

For further information, please refer to Meta’s privacy policy andhttps://www.facebook.com/about/privacy

f) Meta Conversion API

We use the Meta Conversions API (“CAPI”) provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Event data is transmitted directly from our server to Meta to measure the effectiveness of our advertising efforts, optimize campaigns, and create target audiences. The CAPI often works in conjunction with the Meta Pixel and reduces reliance on third-party cookies.

In the course of its use, the following data may be processed and transmitted to Meta:

• technical connection and device information (e.g., IP address, operating system, browser),
• online identifiers (cookie and click IDs, event ID),
• page and event data (e.g., visited URLs, campaign parameters).

Processing is carried out to measure the success of our ads, optimize campaigns and ad placements, and create or update target groups.

Data may be transferred to the United States. For more information on data processing by Meta, please refer to Meta’s Privacy Policy at https://www.facebook.com/about/privacy

11. Social Media

Integration of social media content via Curator.io

We embed social media content on our website via the “Curator.io” service provided by curator.io
69 Ruthven Street,
Bondi Junction,
NSW 2022,
Australia
.

In doing so, Curator.io retrieves social media posts from sources selected by us and displays them on our website in the form of a feed.

When this feed is displayed, personal data of website visitors is transmitted to Curator.io for technical reasons. This includes:

• IP address,
• date and time of the request,
• information about the browser and device,
• the subpage accessed where the feed is embedded.

The Curator.io feed is only integrated after you have given your consent via our Consent/Cookie banner. The legal basis for data processing is your consent pursuant to Art. 6(1)(a) GDPR.

Data may be transferred to the United States. You may revoke your consent at any time with future effect via the settings in our Consent Management Tool. In this case, the social media feed will no longer be displayed.
We have entered into a data processing agreement with the provider.

Further information on data processing by Curator.io can be found in the provider’s privacy policy at:
https://curator.io/privacy

12. Integration of Images, Audio, and Video

YouTube

We embed videos from YouTube, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), into our website using iFrames and/or a plugin. When embedding the videos, we have enabled YouTube’s enhanced privacy mode.

When you play a YouTube video during your visit, a connection is established with YouTube’s servers, and the YouTube server is informed which of our pages you have visited. This allows YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your account before visiting our website. In addition, YouTube sets various cookies when the service is launched in order to, according to its own statements, improve the services it offers and prevent misuse.

For more information on the handling of user data and the cookies set, please refer to YouTube’s Privacy Policy at: https://www.google.de/intl/de/policies/privacy

When YouTube is embedded, Google Fonts are also dynamically loaded without the website operator or visitor actively initiating this process. These web fonts are loaded via a server request, typically to a Google server in the United States. As a result, the following information may be transmitted to the server and stored by Google:

• Name and version of the browser used
• Website from which the request originated (referrer URL)
• Operating system of your computer
• Screen resolution of your computer
• IP address of the requesting computer
• Language settings of the browser or operating system used by the user

For more information, please refer to Google’s privacy policy, which you can access here:

www.google.com/policies/privacy/

The legal basis is derived from the consent you have provided pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time by changing the cookie settings on our website.

13. Rights of the Data Subject

You have the following rights:

a) Right of Access

Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right of access includes information regarding

• the purposes of processing
• the categories of personal data
• the recipients or categories of recipients to whom your data has been or will be disclosed
• the planned storage period or, at least, the criteria for determining the storage period
• the existence of a right to rectification, erasure, restriction of processing, or objection
• the existence of a right to lodge a complaint with a supervisory authority
• the source of your personal data, if it was not collected by us
• the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details

b) Rectification

Pursuant to Art. 16 GDPR, you have the right to have inaccurate or incomplete personal data stored by us rectified without delay.

c) Erasure

Pursuant to Article 17 of the GDPR, you have the right to request the immediate erasure of your personal data from us, provided that further processing is not necessary for one of the following reasons:

• the personal data is still necessary for the purposes for which it was collected or otherwise processed
• for the exercise of the right to freedom of expression and information
• for compliance with a legal obligation which requires processing under the law of the European Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR
• for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of such processing
• to assert, exercise, or defend legal claims

d) Restriction of processing

Pursuant to Article 18 of the GDPR, you may request the restriction of the processing of your personal data for one of the following reasons:

• You contest the accuracy of your personal data.
• The processing is unlawful, and you oppose the erasure of the personal data.
• We no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims.
• You object to the processing pursuant to Art. 21(1) GDPR.

e) Notification

If you have requested the rectification or erasure of your personal data or a restriction of processing pursuant to Art. 16, Art. 17, or Art. 18 of the GDPR, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You may request that we inform you of these recipients.

f) Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.

You also have the right to request that this data be transmitted to a third party, provided that the processing was carried out using automated means and is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) or on a contract pursuant to Art. 6(1)(b) of the GDPR.

g) Withdrawal

Pursuant to Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal. In the future, we may no longer continue data processing that was based on your withdrawn consent.

h) Complaint

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

i) Objection

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring you to specify your particular situation. If you wish to exercise your right of withdrawal or objection, simply send an email to j.nehr@tischer-freizeitfahrzeuge.de

j) Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

i. is necessary for the conclusion or performance of a contract between you and us
ii. is permitted by European Union or Member State legislation to which we are subject, and such legislation includes appropriate measures to safeguard your rights and freedoms as well as your legitimate interests
iii. is made with your explicit consent

However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in i) and iii), we take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to request human intervention on our part, to present your own point of view, and to challenge the decision.

14. Changes to the Privacy Policy

Should we amend the Privacy Policy, this will be indicated on the website and registered customers will be informed accordingly.

Effective as of: April 21, 2026