AI Trust AuditBETA

    Privacy Policy

    Data Controller

    Trusted Shops SE Subbelrather Straße 15c, 50823 Köln Telephone: 0221 – 77 53 66 E-Mail: info@trustedshops.de

    Table of Contents

    We are pleased about your interest in our AI Trust Audit. Below we inform you about the handling of your data for the provision of this service. Should you require further information on data processing at Trusted Shops, please also consider the privacy information on our website. This is an automatic translation. In the event of inaccuracies, the English version of the privacy policy shall prevail.

    1. Access Data, Hosting and Audit Execution

    You can visit our websites without providing personal information. With each access to a website, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred and the requesting provider (access data) and documents the access. For the purpose of shorter loading times, we also use a so-called Content Delivery Network ("CDN") for some offers, in which web assets are delivered via web servers of a CDN provider acting as a data processor on our behalf. Access data is also collected on the provider's web servers accordingly. We use a CDN provider based in the USA, whereby processing usually takes place in a region close to the access location. For access from Europe, processing therefore usually takes place in Europe. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in a correct presentation of our offer pursuant to art. 6 (1) lit. f GDPR. All access data is deleted at the latest seven days after the end of your visit to the site. This website and the associated database are hosted on Lovable Cloud. The database servers are located by default in the USA. The transfer takes place on the basis of EU standard contractual clauses pursuant to art. 46 GDPR. The connection is encrypted (SSL/TLS). Session cookies are used to display the audit, which are automatically deleted when leaving the website. All data collected within the framework of the use of this website and the audit service or in forms provided for this purpose as described below are processed on the servers of the respective service provider. Processing on other servers only takes place within the scope explained here.

    2. E-Mail Newsletter and Phone Advertising

    If you register for one of our newsletters as consideration for conducting the AI Trust Audit or provide your data to carry out the free AI website check on our website, we use the data required for this purpose or separately communicated by you to regularly send you our e-mail newsletter based on your consent pursuant to art. 6 (1) lit. a GDPR and, if applicable, to contact you by telephone. By registering to receive the newsletter, you also agree that we track and evaluate your click behavior (which links you click and open) within the newsletter. This is done by linking the information about your click behavior with your personal user profile in our internal customer management system. This linking enables the evaluation of the above-mentioned information precisely related to your person and your presumed interests for the purpose of improved personalization of the newsletter and our services. We carry out the evaluation of the information based on your consent pursuant to art. 6 (1) lit. a GDPR. The newsletter is sent as part of data processing on our behalf by service providers to whom we pass on your e-mail address and contact data for this purpose. The revocation of the advertising consent is possible at any time and can be done either by a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

    3. Cookies and Web Analytics

    In order to make the visit to our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies and other technologies on various pages, in which information is stored on your end device or retrieved from your end device (hereinafter uniformly referred to as "cookies"). Cookies are small text files that are automatically stored on your end device. Some cookies are always used by us to ensure the basic functionality of our pages and the optimized presentation of our offer (essential/necessary cookies). Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). We use both our own cookies and those from third-party providers (so-called third-party cookies). Alternatively, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains to you how you can change your cookie settings. You can find these for the respective browsers at the following links: - Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies - Safari™: https://www.apple.com/de/contact/ - Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 - Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen - Opera™: http://help.opera.com/Windows/10.20/de/cookies.html Tools and recipients in concrete use: - Necessary: local storage of the tool (session handling, language preference, consent decision). No third party, no data transfer. - Statistics (only with your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG): Google Analytics 4. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for transfers to the USA Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Purpose: pseudonymous reach measurement. Third-country transfer on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Privacy policy: https://policies.google.com/privacy. - Marketing (only with your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG): - Google Ads conversion tracking. Provider: Google Ireland Limited / Google LLC (see above). Purpose: measurement of clicks and conversions from Google ads. Third-country transfer as above. Privacy policy: https://policies.google.com/privacy. - LinkedIn Insight Tag. Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; for transfers to the USA LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Purpose: conversion measurement and audience building for interest-based advertising. Third-country transfer on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Privacy policy: https://www.linkedin.com/legal/privacy-policy. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer.

    4. Data Recipients and Third Country Transfer

    4.1 Use of Data Processors

    For the presentation of our websites and the provision of our services, we use various service providers in the context of data processing on our behalf. These process personal data on instructions in our behalf. We have concluded a contract pursuant to art. 28 GDPR with all service providers. We use data processors in particular in the areas of hosting, e-mail and newsletter dispatch as well as customer relationship management.

    4.2 Disclosure of Data to Third Parties

    It may happen that we disclose your personal data to third parties if we can demonstrate a legitimate interest in doing so, for example to defend legal claims or because we are legally obliged to do so, for example in the context of an audit or official inquiry. Data disclosure may take place in particular to the following bodies: - Tax advisors - Auditors - Lawyers - Authorities

    4.3 Third Country Transfer

    At this point, we inform you about the processing of personal data concerning you in third countries without an adequacy decision. Trusted Shops uses a variety of service providers. Many of them use servers in third countries, i.e. outside the EU or the EEA. This includes the USA. The associated transfer of personal data must be permissible pursuant to art. 44 GDPR. For the USA, an adequacy decision applies to all companies registered for the EU-U.S. Data Privacy Framework (DPF). In this case, the transfer of data is possible without further guarantees. If processing takes place in a third country without an adequacy decision or with a US company that is not registered for the DPF, we conclude standard contractual clauses with the data recipient to ensure an appropriate level of data protection. Where possible and necessary, we also agree on additional measures. If the level of data protection is still not sufficient despite agreed standard contractual clauses and any additional measures taken, we ask for your consent.

    5. Contact possibilities and your rights

    As a data subject, you have the following rights:

    • • in accordance with art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent described therein;
    • • in accordance with art. 16 GDPR, you have the right to demand the immediate correction of incorrect or complete personal data stored by us;
    • • in accordance with art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing • to exercise freedom of expression and information; • for the fulfilment of a legal obligation; • for reasons of public interest; or • for asserting, exercising or defending legal claims is required;
    • • in accordance with art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as • the correctness of the data is denied by you; • the processing is unlawful, but you refuse to delete it; • we no longer need the data, but you do need it to assert, exercise or defend legal claims, or • you have lodged an objection to the processing pursuant to art. 21 GDPR;
    • • In accordance with art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;
    • • the right to complain to a supervisory authority pursuant to art. 77 GDPR. You can also contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

    If you have any questions regarding the collection, processing or use of your personal data, information, correction, restriction of processing or deletion of data as well as revocation of any consent given or objection to a specific use of data, please contact our data protection team at privacy@trustedshops.com. You can contact our company data protection officer as follows: Data Protection Officer Subbelrather Str. 15c 50823 Cologne dpo@trustedshops.com

    Right of objection

    Insofar as we process personal data as described above in order to protect our legitimate interests that are overriding in the process of balancing of interests, you can object to this processing with effect for the future. If the data is processed for direct marketing purposes, you can exercise this right at any time as described above. If the processing takes place for other purposes, you are only entitled to a right of objection if there are reasons arising from your particular situation. After exercising your right of objection, we will not process your personal data further for these purposes, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. This does not apply if the processing is for direct marketing purposes. Then we will not process your personal data for this purpose.