Privacy Policy

2. Your rights

Under current data protection law, in particular the EU General Data Protection Regulation (GDPR), you have extensive data subject rights vis-à-vis the controller with regard to the processing of your personal data, which we would like to inform you about below. You have the right:

• According to Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, insofar as this has not been collected by us, as well as about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
.
• in accordance with Art. 16 DSGVO, to demand the correction of incorrect or incomplete personal data stored by us without undue delay;
• in accordance with Art. 17 DSGVO, to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
.
• in accordance with Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
• in accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
• According to Art. 7 (3) DSGVO, you may revoke your consent at any time. This means that we may no longer process the data based on this consent in the future and
.
• complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our place of practice. A list of the supervisory authorities and their contact details can be found in the following link:
  https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
.
• According to Art. 21 DSGVO, you have the right to object to the collection of data in special cases and to direct marketing:

Explanation of Art. 21 DSGVO:

If the data processing is based on Art. 6(1)(e) or (f) DSGVO, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection under Article 21(1) of the GDPR).

If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data concerned for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purposes of direct advertising or profiling (objection pursuant to Art. 21 (2) DSGVO).

3. Data collection when visiting our website

.

a) Cookies

.

This website uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Some of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser the next time you visit our website.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these will be dealt with separately in this data protection declaration.

ga	Analysis cookie used by Google to distinguish between different website visitors.	24 months
gid	Analysis cookie generated by Google to adjust the request rate and to distinguish users of the website from each other.	24 months
ga_1Z7S4	Analysis cookie from Google, which restricts data collection when too many requests are received on a page. In this way, the speed of the website is kept high even under heavy load.	10 minutes
gcl_au	Analysis cookie from Google, which restricts data collection when too many requests are received on a page. In this way, the speed of the website is kept high even under heavy load.	10 minutes
Fr, fbp	Facebook Marketing Pixel, which measures the actions of visitors on the website and provides the basis for meaningful optimisations of advertising campaigns.	12 months
hjid	The cookie is used to maintain a Hotjar user ID that is unique to the website in the browser. This allows user behaviour to be associated with the same user ID on subsequent visits.	12 months
intercom-id	Cookie for anonymous visitor recognition. When people visit your website, they receive this cookie.	12 months

b) Server log files

When you use our website for information purposes only, i.e. if you do not send us any other information, we only collect the personal data that your browser sends to our server (so-called server log files). When you visit our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:

We collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security.

• IP address
• The date and time of the request
.
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Quantity of data transferred
• Website from which the request came
• Browser
• Operating system and its interface
• Language and version of the browser software
.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the above-mentioned purposes of data collection. This data will not be merged with other data sources.

c) Registration/user account

The user has the option of registering on mukken and creating a user account. The data collected in the process (mobile phone number, user name, password, if applicable further user data which the user transmits when using mukken) are processed on the basis of the contract concluded and for its execution (Art. 6 para. 1 p. 1 lit. b DSGVO).

d) Contacting us by e-mail, telephone, fax or contact form

If you contact us by e-mail, telephone, fax or contact form, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. Our e-mail servers are located exclusively in Germany and the retrieval of e-mails is exclusively encrypted. When using contact forms on this site, the data entered will not be stored separately, but will only be forwarded by e-mail. All enquiries to this website are SSL-encrypted.

The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, if your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and / or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of requests addressed to us.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular legal retention periods - remain unaffected.

e) Newsletter / Blog

We offer the possibility to subscribe to our blog on our website. This is done by entering your email address and confirming it afterwards (double-opt-in). In the double-opt-in process, we process the following data:

• The page from which the page was requested (so-called referrer URL)
.
• the date and time of the request
.
• the description of the type of web browser used
.
• the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established
.
• the e-mail address
• the date and time of registration and confirmation
.

The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO. Your e-mail address will not be stored or processed in our systems. Further data is not required for this service. You can revoke your consent to receive the newsletter at any time and unsubscribe. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by sending an e-mail to info@simplefox.com or by sending a message to the contact details given in the imprint.

.

f) Community/Forum

You have the possibility to write posts in our community under your user name, to communicate with other users, to read posts of other users and to comment on them. Posts in our community can be read without the need to register. There is no requirement to use a real name; pseudonymous use is possible.

In connection with the use of the community, mukken stores all the information you provide in the community, i.e. public posts, pinboard entries, friendships, private messages etc., in order to operate the forum, in addition to the registration data until you log out. The legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO.

If you delete your account, your public statements, especially contributions to the community, will remain visible to all readers, but your account will no longer be accessible and will be marked in the forum with "[Guest]". All other data will be deleted.

4. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called „cookies“. These are text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

a) We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

b) You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=en.

c) You can prevent Google Analytics from collecting your data by clicking on the following link and deselecting the cookies for performance purposes: [manage cookie]

You can find more information on the handling of user data on Google Analytics in Google’s data protection declaration: https://support.google.com/analytics/answer/6004245?hl=en

d) We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

e) This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain information on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the point „Objection to data collection“.

f) Data stored by Google at user and result level that are linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymized or deleted after 14 months.

You can find details on this under the following link: https://support.google.com/analytics/answer/7667196?hl=en

5. Google DoubleClick

This website uses functions from Google DoubleClick. The provider is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (hereinafter „DoubleClick“).

a) DoubleClick is used to show you interest-based advertisements across the entire Google advertising network. With the help of DoubleClick, the advertisements can be tailored to the interests of the respective viewer. For example, our advertising can be displayed in Google search results or in advertising banners linked to DoubleClick.

b) In order to be able to show the users interest-based advertising, DoubleClick must be able to recognize the respective viewer. For this purpose, a cookie is stored in the user’s browser, behind which the websites visited by the user, clicks and various other information are stored. This information is summarized in a pseudonymous user profile in order to display interest-based advertising to the user concerned. Google DoubleClick is used in the interest of targeted advertising. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.

c) You can set your browser so that it no longer stores cookies. However, this may restrict the website functions that can be accessed. It should also be noted that DoubleClick may also use other technologies to create user profiles. Switching off cookies therefore does not guarantee that user profiles will no longer be created.

d) You can prevent Google DoubleClick from collecting your data by clicking on the following link and deselecting the cookies for marketing purposes there: [Manage cookies] e) We have concluded an order processing contract with Google and set the strict requirements of the German Data protection authorities completely revised when using Google DoubleClick.f) For more information on how to object to the advertisements displayed by Google, please refer to the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated

6. GA Audience

a) Our website uses GA Audience, a service from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. GA Audience uses cookies, among other things, which are stored on your computer and other mobile devices (e.g. smartphones, tablets, etc.) and which enable an analysis of the use of the corresponding devices. The data is partially evaluated across devices. Google Audience is given access to the cookies created when using Google AdWords and Google Analytics. In the context of use, data, in particular the IP address and activities of the user, can be transmitted to the Google server and stored there. Google may transfer this information to third parties.

b) You can prevent the collection and forwarding of personal data (in particular your IP address) and the processing of this data by deactivating the execution of Javascript in your browser or by installing a tool such as ‘NoScript’. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link https://tools.google.com/dlpage/gaoptout?hl=en download and install the available browser plug-in.

c) You can object to the use of the GA Audience at any time by clicking on the following link and deselecting cookies for marketing purposes there: [manage cookie]

d) This analysis tool is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

e) We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Audience.

Further information on data protection when using GA Audience can be found at the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283

7. Facebook Pixel

.

a) We also use the so-called “Facebook pixel” from Facebook Inc. (“Facebook”) on our website. This allows the users of our website to be shown interest-related advertisements („Facebook Ads“) when they visit the social network Facebook or other websites that also use the process. Your browser automatically establishes a direct connection to the Facebook server through the Facebook pixel. We have no influence on the scope and further use of the data that is collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating the Facebook pixel, Facebook receives the information that you are viewing an ad from us have clicked on or called up the corresponding website on our website. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or are not logged in, there is a possibility that the provider will find out and save your IP address and other identification features.

b) With the use of the Facebook pixel, we pursue the purpose of only showing Facebook ads that we have placed to Facebook users who have also shown an interest in our website. With the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of the users and are not annoying. Furthermore, with the help of the Facebook pixel, we can understand the effectiveness of Facebook ads for statistical purposes by seeing whether users were redirected to our website after clicking on a Facebook ad. The legal basis for the use of the Facebook pixel is Article 6 Paragraph 1 Letter f GDPR.

c) You can object to the use of the Facebook pixel at any time by clicking on the following link and deselecting the cookies for marketing purposes there:

Manage cookies

d) Information from the third party provider: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php ; Further information on data collection: https://www.facebook.com/help/186325668085084 , https://www.facebook.com/about/privacy/your-info-on-other#applicationshung and https://www.facebook.com/about/privacy/your-info#everyoneinfo.

e) We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Facebook Pixel.

8. Hotjar

a) This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool for analyzing your user behavior on our website. With Hotjar we can, among other things, Record your mouse and scroll movements and clicks. Hotjar can also determine how long you stayed with the mouse pointer on a certain point. From this information, Hotjar creates so-called heat maps, which can be used to determine which website areas are preferred by website visitors.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you canceled your entries in a contact form (so-called conversion funnels).

In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator’s web offers.

b) Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offer more user-friendly, more effective and safer. These cookies can be used in particular to determine whether our website has been visited with a specific device or whether the Hotjar functions have been deactivated for the browser in question. Hotjar cookies remain on your device until you delete them.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

The use of Hotjar and the storage of Hotjar cookies are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

c) You can object to the use of Hotjar at any time by clicking on the following link and deselecting the cookies for performance purposes:

Manage cookies

For more information about Hotjar and the data collected, see the Hotjar privacy policy at the following link: https://www.hotjar.com/privacy

d) We have concluded an order processing contract with Hotjar in order to implement the strict European data protection regulations.

9. Intercom

a) We provide Intercom’s live chat on our website, which allows us to contact website visitors and answer questions. The legal basis for processing your data is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. During the chat connection, the location, IP address, browser and website visited are displayed and stored by us. Further information on Intercom Live Chat can be found in Intercom’s privacy policy (https://www.intercom.com/de/legal/privacy). An order processing contract has been concluded for the processing and storage of the data.

b). Intercom automatically deletes the IPs and geographic data of visitors who have not visited our website for 9 months.

c) You can object to the use of Intercom at any time by clicking on the following link and deselecting the cookies for performance purposes:

Manage cookies

4. External hosting

This website is hosted by an external service provider on servers in Europe (hoster). The hoster is Heroku, based in San Francisco, California, United States. The blog website is hosted by the hoster Raidboxes, based in Germany (Raidboxes GmbH, Hafenstraße 32, DE - 48153 Münster). Personal data collected on our website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website. The use of the hoster takes place on the basis of a contract processing agreement and serves the purpose of contract initiation or

fulfilment.

Fulfilment of the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and is in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). Our hoster will only process your data insofar as this is necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.

11. Our social media appearances

a) Social media data processing

.

We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below. Social networks such as Facebook, Google+ etc. can generally comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the relevant social network, the interest-based advertising may be displayed on all devices on which you are or have been logged in. Please also note that we are not able to track all processing on the social media portals. Depending on the provider, further processing procedures may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

b) Legal basis

Our social media sites are intended to ensure the broadest possible presence on the internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on different legal grounds, which are to be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

c) Responsible party and assertion of rights

.

When you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook). Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

d) Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

e) Shariff button

On this website, we only use privacy-friendly social media features! For the share buttons for social media, which you will find in some places, we exclusively use the privacy-friendly implementation "Shariff", developed by ct magazine. With this "two-click solution" - unlike with the normal share buttons - data is only transmitted to the social networks when they are actively clicked.

f) Social networks in detail

aa) Facebook

We have a profile on Facebook. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. We have concluded a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies the data processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads. Details can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/. Data transfer to the US is based on EU standard contractual clauses: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381

.

bb) LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/legal/privacy-policy. Details on how they handle your personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy. Data transfer to the USA is based on EU standard contractual clauses: https://www.linkedin.com/legal/l/dpa and https://policies.google.com/privacy/frameworks?hl=de

.

dd) Twitter

.

We have a profile on Twitter. You can view the privacy policy for the social network Twitter, which is operated by Twitter, Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103, at https://twitter.com/de/privacy. Data transfer to the US is based on EU standard contractual clauses: https://gdpr.twitter.com/en/controller-to-controller-transfers.html

.

ee) Pinterest

We have a profile on Pinterest. You can view the privacy policy for the social network Pinterest, which is operated by Pinterest Europe Ltd, Palmerston Hous, 2nd Floor, Fenian Street, Dublin 2, Ireland, at https://policy.pinterest.com/de/privacy-policy. The data transfer is based on EU standard contractual clauses.

ff) Instagram

We have a profile on Instagram. You can view the privacy policy for the social network Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, at https://help.instagram.com/155833707900388 Data transfer is based on EU standard contractual clauses: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381

12. Payment service provider

.

a) Stripe

Payments may be processed on mukken via the payment service provider Stripe, Legal Process, 510,Townsend St., San Francisco, CA 94103 (Stripe). The legal basis is our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f DSGVO). As far as necessary for the performance of the contract (Art. 6 para. 1 lit b. DSGVO), we share the following data with Stripe: 

.

Name of the cardholder, email address, customer number, order number, bank details, credit card details, credit card validity period, credit card verification number (CVC), date and time of the transaction, transaction number, name of the provider, location.

Payments cannot be made through Stripe without the submission of these.

Stripe has a dual role as controller and processor in data processing activities. As a controller, Stripe uses your submitted data to comply with regulatory obligations. This corresponds to Stripe's legitimate interest (pursuant to Art. 6 para. 1 lit. f DSGVO) and serves the performance of the contract (pursuant to Art. 6 para. 1 lit. b DSGVO). We have no influence on this process.

Stripe acts as a processor in order to be able to complete transactions within the payment networks. Within the scope of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obligated to comply with the provisions of data protection law within the meaning of Art. 28 DSGVO.

The data transfer to the USA takes place on the basis of the EU standard contractual clauses: https://stripe.com/de/privacy

.

b) Paypal

.

Payments can be processed on mukken via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). The legal basis is our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f DSGVO). As far as necessary for the fulfilment of the contract (Art. 6 para. 1 lit b DSGVO), we pass on the following data to PayPal:

First name, last name, address, email address, telephone number

.

Without the transmission of these, payments via PayPal cannot be made.

PayPal carries out a credit check for various services such as payment by direct debit in order to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest (pursuant to Art. 6 para. 1 lit. f DSGVO) and serves the execution of the contract (pursuant to Art. 6 para. 1 lit. b DSGVO). For this purpose, your data (name, address and date of birth, bank account details) are passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made or rejected or a check is pending.

.

You can find more information about objection and removal options vis-à-vis PayPal at: https://www.paypal.com/de/webapps/mpp/ua/privacy-fullData transfer to the USA is based on the EU standard contractual clauses: https://www.paypal.com/de/webapps/mpp/gdpr-readiness-requirements

13. Google Maps and Google API

On mukken, the user has the possibility to use functions of Google Maps. The Google API is also used for this purpose. Google Maps and API are operated by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you use the Google Maps function, personal data will also be collected. By using the functions, you agree to the collection, processing and use of the automatically collected data and any additional data entered by you by Google or one of its representatives. You have the option to object to the use of this data by deactivating the JavaScript function of your browser. Please note, however, that in this case you will no longer be able to use the map display. We have concluded a joint responsibility agreement with Google in accordance with Art. 26 DSVGO.

The terms of use for Google Maps can be found at .

Data transfer to the US is based on the EU standard contractual clauses: https://policies.google.com/privacy/frameworks?hl=de

14. right of modification

Please note that we reserve the right to amend or modify this Privacy Policy from time to time in accordance with applicable laws. Last modified: 19/08/2021