Privacy policy

Privacy Policy

We are pleased that you have visited our website, https://peak.ag, and are interested in our company.

The protection of your personal data—such as your date of birth, name, phone number, address, etc.—is very important to us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR). The following Privacy Policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.

1. Data
Controller A “data controller” within the meaning of Article 4(7) of the GDPR is the entity that, alone or jointly with others, determines the purposes and means of the processing of personal data.

With regard to our website, the data controller is:

Peak Performance Products S.A.
, 13c Fausermillen, 6689 Mertert, Luxembourg
Email: office@peak.ag
Phone: +352 425215
Fax: +352 421315

2. Provision of the Website and Creation of Log Files
Each time our website is accessed, our system automatically collects data and information from the device used to access it (e.g., computer, cell phone, tablet, etc.).

2.1. What personal data is collected, and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the device used to access the site;
(3) Hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Indication of whether the access was successful;
(9) Amount of data transferred

This data is stored in our system’s log files. This data is not stored together with the personal data of a specific user, so individual website visitors cannot be identified.

2.2. Legal basis for the processing of personal data
: Article 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest consists in ensuring that the purpose described below is achieved.

2.3. Purpose of Data Processing
Furthermore, immediately after collection, the data is anonymized with regard to the IP address in such a way that it is no longer possible to trace the data back to an individual based on the IP address. By analyzing the anonymized data, we can monitor and improve the stability and availability of our website over an extended period of time.
The temporary (automated) storage of the data is necessary for the course of a website visit to enable the website to be delivered. The storage and processing of personal data also serves to maintain the compatibility of our website for as many visitors as possible, as well as to combat misuse and resolve malfunctions. To this end, it is necessary to log the technical data of the accessing computer so that we can respond as quickly as possible to display errors, attacks on our IT systems, and/or malfunctions in our website’s functionality. In addition, the data helps us optimize the website and generally ensure the security of our IT systems.

2.4. Duration of Storage
The aforementioned technical data is deleted as soon as it is no longer needed to ensure the website’s compatibility for all visitors, but no later than 3 months after the website is accessed.

2.5. Right to Object and Right
to Erasure You may object to the processing at any time in accordance with Art. 21 of the GDPR and request the erasure of data in accordance with Art. 17 of the GDPR. You can find information on your rights and how to exercise them at the bottom of this Privacy Policy.

3. Specific Features of the Website
Our website offers various features; when you use these features, we collect, process, and store personal data.

Below, we explain what happens to this data:

3.1. Order Form
(s) (a) What personal data is collected, and to what extent is it processed?
The data you enter into the form fields—such as your address, last name, first name, etc.—is processed by us to fulfill the purpose described below.

(b) Legal basis for the processing of personal data
: Article 6(1)(b) of the GDPR (implementation of (pre)contractual measures)

(c) Purpose of data processing
The purpose of data processing is to process your order so that we can fulfill potential contractual relationships with you or carry out pre-contractual measures. If you also wish to create a customer account when placing your order (checkbox is preselected), you must additionally provide a password. We will then set up an account for you on our platform that is linked to your email address.

(d) Duration of Storage
The data will be deleted as soon as it is no longer needed to process the order and there are no longer any legal retention requirements. This will generally be after 10 years.

(e) Right to Object and Right
to Erasure You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.

(f) Necessity of Providing Personal Data
The information requested on the order form is not required by contract or by law; however, it is necessary to conclude a contract. If you do not fill out the required fields—or do not fill them out completely—the order you have requested cannot be completed. It is also possible to place an order without creating a customer account.

3.2. Review Feature
(a) Scope of Personal Data
Processing We will process the data you enter into the fields of our review form to fulfill the purpose described below. In this regard, we collaborate with Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne, Germany. For more information on how the transferred data is handled, please refer to the provider’s privacy policy at https://www.trustedshops.de/impressumdatenschutz//. The reviews are loaded by Trusted Shops.

(b) Legal basis for the processing of personal data
: Art. 6(1)(a) GDPR (consent through a clear affirmative action or conduct)

(c) Purpose of data processing
: Acceptance and publication of your review on our website—and, to the extent you explicitly consent, also on the online platforms of our review service providers.

(d) Duration of Storage
: Your review will be stored and published indefinitely. We reserve the right to delete it without providing reasons and without prior or subsequent notice.

(e) Right
to Withdraw Consent and Request Deletion: You may have your review deleted at any time. The options for withdrawing consent and requesting deletion are governed by the general provisions regarding the right to withdraw consent and the right to erasure under data protection law, as described later in this Privacy Policy.

(f) Necessity of Providing Personal Data
: The information provided via the review feature is voluntary and is not required by contract or by law. Furthermore, this information is not necessary for entering into a contract. If you do not fill out the required fields or do not fill them out completely, the review you wish to submit cannot be published on our platform.

3.3. Review Requests via Email
We collaborate with Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne, Germany, in this regard. For more information on how the transferred data is handled, please see the provider’s privacy policy at https://www.trustedshops.de/impressum-datenschutz//. The reviews are uploaded by Trusted Shops.

(a) What personal data is collected, and to what extent is it processed?
Your last name, first name, email address, the products ordered, and the date and time of the order are processed to fulfill the purpose stated below.

(b) Legal basis for the processing of personal data
: Article 6(1)(a) of the GDPR (consent through an unambiguous affirmative action or behavior) by giving consent at the end of the ordering process.

(c) Purpose of data processing
: The purpose of data processing is to process your order so that we can fulfill or initiate the contract concluded with you.

(d) Duration of Storage
We use your data for the purpose of sending a review request for a maximum of one week following the relevant order. Please note, however, that we must store the data from your order for a longer period for contractual purposes; you can find information on this above under the section “Order Form” in this Privacy Policy. However, for the purpose of the review request, we no longer process your data after the review request for the respective order has been sent. The information regarding whether you have objected to data processing for the purpose of the review request is stored along with your email address for a period of 12 months following your last order and is subsequently deleted, provided that no statutory retention obligations remain.

(e) Right to Object and Right
to Erasure You may object to receiving review requests at any time without incurring any costs other than the transmission costs according to standard rates. Each review request includes instructions on how to opt out of receiving further review requests. You may also submit your objection using the contact information provided in this Privacy Policy or in the legal notice. Once you have opted out, we will no longer process your data for the purpose of sending review requests. You can find information about your other rights and how to exercise them at the bottom of this Privacy Policy.

(f) Necessity of Providing Personal Data
Regardless of whether a review request is sent, you must fill out the fields marked as required on the order form so that we can process your order (see the “Order Form” section above in this Privacy Policy). However, providing data for the purpose of sending the review request itself is not required by law or contract. If you object to this use, it will not affect your order. We will then not send you a request to review your order.

3.4. Contact Form(s)
(a) What personal data is collected, and to what extent is it processed?
The data you enter into our contact forms, which you have entered into the contact form’s input fields.

(b) Legal basis for the processing of personal data
: Article 6(1)(a) of the GDPR (consent through a clear affirmative action or conduct)

(c) Purpose of data processing
: We will use the data collected via our contact form(s) solely to process the specific contact request submitted through the contact form. Please note that, in order to fulfill your contact request, we may also send you emails to the address you provided. The purpose of this is to ensure that you receive confirmation from us that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory for us and is provided solely for your information.

(d) Duration of Storage
Once your request has been processed, the collected data will be deleted immediately, provided there are no statutory retention periods.

(e) Right to Withdraw Consent and Right
to Erasure The options for withdrawing consent and requesting erasure are governed by the general provisions regarding the right to withdraw consent and the right to erasure under data protection law, as described below in this Privacy Policy.

(f) Necessity of Providing Personal Data
The use of the contact forms is voluntary and is not required by contract or by law. You are not obligated to contact us via the contact form; instead, you may also use the other contact options listed on our website. If you wish to use our contact form, you must fill out the fields marked as required. If you do not fill out the required fields on the contact form, you will either be unable to submit your inquiry, or we will unfortunately be unable to process it.

3.5. Login Area / Registration
(a) Scope of Personal Data Processing and Personal Data
Collected The registration and login data you enter on our site or that is provided to you.

(b) Legal basis for the processing of personal data
: Article 6(1)(b) of the GDPR (implementation of (pre)contractual measures)

(c) Purpose of data processing
: You have the option to use a separate login area on our website. To allow us to verify your authorization to access the restricted area or the protected documents, you must enter your login credentials (email address or username and password) into the corresponding form. If necessary, we can send you your login credentials or instructions on how to reset your password via email upon request.

(d) Duration of Storage
The data collected will be stored for as long as you maintain a user account with us.

(e) Right to Object and Right
to Erasure You may object to the processing of your data at any time pursuant to Art. 21 of the GDPR and request the erasure of data pursuant to Art. 17 of the GDPR. You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.

(f) Necessity of Providing Personal Data
: Use of the login area on our site is contractually required to access the protected area. Access to the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill out the fields marked as required (username and password). Entering this data requires the existence of a user account. You cannot log in if the data you enter is incorrect. If you enter incorrect data or fail to enter it, you will not be able to access the protected area. However, the rest of the site remains accessible without logging in.

3.6. Newsletter Sign-Up Form
(a) What personal data is collected, and to what extent is it processed?
When you sign up for the newsletter on our website, we receive the email address you enter in the sign-up field and, if applicable, additional contact information if you provide it to us via the newsletter sign-up form.

(b) Legal basis for the processing of personal data
: Article 6(1)(a) of the GDPR (consent through a clear affirmative action or conduct)

(c) Purpose of data processing
The data collected in our newsletter sign-up form is used by us exclusively for sending our newsletter, in which we provide information about all our services and news. After you sign up, we will send you a confirmation email containing a link that you must click to complete your subscription to our newsletter (double opt-in).

(d) Duration of Storage
You can unsubscribe from our newsletter at any time by clicking the unsubscribe link, which is also included in every newsletter. We will delete your data immediately after you unsubscribe, provided there are no legal retention requirements. Likewise, we will delete your data immediately if the subscription process is not completed. We reserve the right to delete your data without providing reasons and without prior or subsequent notice.

(e) Right to Withdraw Consent and Right
to Erasure The options for withdrawing consent and erasure are governed by the general provisions regarding the right to withdraw consent and the right to erasure under data protection law, as described later in this Privacy Policy.

(f) Necessity of Providing Personal Data
If you wish to subscribe to our newsletter, you must fill out the fields marked as required and confirm your email address by clicking the double-opt-in link. The information provided when subscribing to the newsletter is neither necessary to enter into a contract with us nor required by law. It is used exclusively for the purpose of sending our newsletter. If you do not fill out the required fields, we unfortunately cannot provide you with our newsletter service.

3.7. Use of the AI chatbot Zipchat (Zipchat AI)

(a) What personal data is collected, and to what extent is it processed?

When you use our chatbot, we collect and process the data you enter in the chat window (e.g., text messages, name, email address, order number, or other voluntary information) as well as technical data (IP address, browser information, date and time of the request). We use the Zipchat AI service (Zipchat Inc., USA). To provide responses, the chat inputs are transmitted to Zipchat’s servers (or to AI service providers used by Zipchat).

(b) Transparency Notice pursuant to the EU AI Act (Art. 50 of the AI Regulation)

Our chatbot is a system based on artificial intelligence (AI). When using it, you are interacting with an AI and not with a human employee. This notice appears immediately upon opening or using the chatbot.

(c) Legal basis for the processing of personal data

• If the use of the chatbot serves to prepare for or fulfill a contract (e.g., product questions, order status): Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

• For general inquiries and to optimize our service offerings: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the fast, efficient, and automated processing of customer inquiries.

(d) Purpose of Data Processing

The purpose is to provide automated, real-time responses to user inquiries, assist with the purchasing process, and reduce the workload on our customer service team. The data entered is not used to train or improve public open-source AI models.

(e) Duration of Storage

Chat histories are stored for as long as necessary to process your request or as required by statutory retention periods (e.g., under commercial or tax law for business correspondence).

(f) Transfer to Third Countries

Processing may also take place on servers operated by Zipchat Inc. in the United States. Zipchat is integrated based on the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework to ensure an adequate level of data protection.

(g) Right to Object and Right to Erasure

You may object at any time to the processing of your data in connection with the chatbot with future effect. You can find out what rights you have in the lower section of this Privacy Policy.

4. Automated Credit Check / Scoring
If you wish to enter into a contract with us, we reserve the right to process your personal data exclusively by automated means to assess your creditworthiness. We are also authorized to make such an automated decision pursuant to Article 22(2)(a) of the GDPR. Whether or not the contract can be concluded depends on the result of the automated credit check. During a credit check, statistical probabilities of default are calculated. The credit report may include probability values (score values) calculated using scientifically recognized mathematical and statistical methods. In this process, a variety of factors—such as income, address information, occupation, marital status, and past payment history—are used to assess the customer’s future risk of default. The result is expressed as a payment value (known as a “score”). The information obtained in this way forms the basis for our decision regarding the establishment, execution, or termination of a contractual relationship. If you believe that you have been wrongfully excluded from entering into a contract as a result of the credit check, you are welcome to explain your position to us via email. We will then review the automated decision in accordance with Article 22(3) of the GDPR on a case-by-case basis. In order to conduct the credit check, we are permitted to store and process your personal data in accordance with Article 6(1)(b) of the GDPR.
Based on the pending contract, we will transfer your data to the following provider(s) in the cases listed below:

4.1. Automatic Identity and Credit Check When Selecting the “PayPal” Payment Method
(a) What personal data is collected, and to what extent is it processed?
If you have selected “PayPal” as your payment method, we will forward your personal customer data collected as part of the order to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) for the purpose of payment processing. If you give your consent, the following data will be transferred: first and last name, street, house number, ZIP code, city, date of birth, phone number, and data related to your order.

(b) Legal basis for the processing of personal data
: Article 6(1)(b) of the GDPR (implementation of (pre)contractual measures)

(c) Purpose of data processing
When the “PayPal” payment method is selected, PayPal conducts a credit check. In doing so, mathematical and statistical methods are used to calculate a rating regarding the probability of payment default (known as the calculation of a scoring value). PayPal bases its decision on whether to provide the respective payment methods on the calculated scoring value. The calculation of a scoring value is performed according to recognized scientific methods. Please also refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

(d) Duration of Storage
We will store the data relevant to processing the payment for as long as necessary to complete the transaction. To the extent that the data is subject to statutory retention requirements, it will be deleted upon expiration of the retention period. The duration of data storage by PayPal is set forth in PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

(e) Right to Object and Right
to Erasure You may object to the processing at any time pursuant to Art. 21 of the GDPR and request the erasure of the data pursuant to Art. 17 of the GDPR. You can find information on your rights and how to exercise them at the bottom of this Privacy Policy.

4.2. Automatic Identity and Credit Check When Selecting Klarna Payment Methods
(a) What personal data is collected, and to what extent is it processed?
If you choose the “Purchase on Account” payment method via Klarna Invoice Purchase or the “Installment Purchase” payment method via Klarna Installment Purchase or Klarna Sofort, you will be asked during the ordering process to consent to the transfer of the data required for processing the payment and for an identity and credit check to Klarna AB, Sveavägen 46, 11134 Stockholm, Sweden (hereinafter: Klarna). If you give your consent, Klarna will receive the following data from us: first and last name, street, house number, ZIP code, city, date of birth, phone number, and the data related to your order.

(b) Legal basis for the processing of personal data
: Art. 6(1)(b) GDPR (implementation of (pre)contractual measures)

(c) Purpose of data processing
For the purpose of identity and creditworthiness checks, Klarna transmits data to credit reporting agencies and receives information from them, as well as, where applicable, creditworthiness information based on mathematical-statistical methods, the calculation of which incorporates, among other things, address data (so-called “score values”). This provides Klarna with information regarding the statistical probability of default, which serves as the basis for decisions regarding the establishment, performance, or termination of the contractual relationship. However, the ability to select one of the offered payment methods prior to the conclusion of the contract is not dependent on such information.

The credit reporting agencies are the following companies:

• Bürgel Wirtschaftsinformationen GmbH & Co. KG, P.O. Box 5001 66, 22701 Hamburg
• Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss
• Deltavista GmbH, Freisinger Landstr. 74, 80939 Munich
• Arvato Infoscore Consumer Data GmbH / Infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden
• SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden

For detailed information, please refer to Klarna’s Privacy Policy (https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf) and Terms of Use (https://klarna.com/de/AGB).

(d) Duration of Storage
We will store the data relevant to processing the payment for as long as necessary to complete the transaction. To the extent that the data is subject to statutory retention requirements, it will be deleted upon expiration of the retention period. The duration of data storage by Klarna is set forth in Klarna’s Privacy Policy: https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

(e) Right to Object and Right
to Erasure You may object to the processing at any time pursuant to Art. 21 of the GDPR and request the erasure of the data pursuant to Art. 17 of the GDPR. You can find information on your rights and how to exercise them at the bottom of this Privacy Policy.

5. Statistical Analysis of Visits to This Website—Web Trackers
When you access this website or individual files on the website, we collect, process, and store the following data: IP address, the website from which the file was accessed, the file name, the date and time of access, the amount of data transferred, and a notification regarding the success of the access (so-called “web log”). We use this access data exclusively in a non-personalized form to continuously improve our website and for statistical purposes. We also use the following web trackers to analyze visits to this website:

5.1. Facebook Connect
We use the Facebook Connect service on our site, provided by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: http://www.facebook.com/. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection required by the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
Through Facebook Connect, users can use their Facebook profile to log in more easily to other web services.
You may withdraw your consent at any time. You can find more detailed information on revoking your consent either in the consent form itself or at the end of this Privacy Policy.
Further information on how the transferred data is handled can be found in the provider’s Privacy Policy at https://www.facebook.com/about/privacy.
The provider also offers an opt-out option at https://www.facebook.com/about/privacy.

5.2. Facebook Custom Audience
We use the Facebook Custom Audience service on our site, provided by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: http://facebook.com/. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
Facebook Custom Audience is an advertising tool provided by Facebook that allows for targeted advertising campaigns to be directed at website visitors.
You may withdraw your consent at any time. You can find more detailed information on withdrawing your consent either in the consent form itself or at the end of this Privacy Policy.
Further information on how the transferred data is handled can be found in the provider’s privacy policy at https://www.facebook.com/about/privacy.
The provider also offers an opt-out option at https://www.facebook.com/about/privacy.

5.3. Google Tag Manager
(a) What personal data is collected, and to what extent is it processed?
On our website, we use the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager provides a technical platform for executing and centrally managing other web services and web tracking programs using so-called “tags.” In this context, Google Tag Manager stores cookies on your computer and, to the extent that web tracking tools are executed via Google Tag Manager, analyzes your browsing behavior (so-called “tracking”). The data sent by individual tags integrated into Google Tag Manager is consolidated, stored, and processed by Google Tag Manager under a unified user interface. All integrated “tags” are listed separately in this Privacy Policy. For more information on the data protection practices of the tools integrated into Google Tag Manager, please refer to the respective section of this Privacy Policy. When you use our website with Google Tag Manager tags enabled, data—including, in particular, your IP address and your user activities—is transmitted to servers operated by Google Ireland Limited. With regard to the web services integrated via Google Tag Manager, the provisions in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure, through IP anonymization of the source code, that the IP address is anonymized by Google Tag Manager prior to transmission. In this process, Google Tag Manager is only permitted to collect IP addresses in an anonymized form (so-called IP masking). Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.

(b) Legal Basis for the Processing of Personal Data
The legal basis for data processing, in accordance with Article 6(1)(a) of the GDPR, is your consent as expressed in our banner notice regarding the use of cookies and web tracking (consent given through a clear affirmative action or behavior).

(c) Purpose of data processing
On our behalf, Google will use the information collected via Google Tag Manager to analyze your visit to this website, compile reports on website activity, and provide us with other services related to website and internet usage.

(d) Duration of Storage
Google will store the data relevant to the functioning of Google Tag Manager for as long as necessary to fulfill the contracted web service. Data collection and storage are anonymized. If personal references do exist, the data will be deleted immediately, provided they are not subject to any statutory retention requirements. In any case, the data will be deleted upon expiration of the retention period.

(e) Right to Object and Right
to Erasure You can prevent the collection and transmission of personal data to Google (in particular your IP address) as well as the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser, or enabling the “Do Not Track” setting in your browser. You can also prevent the collection by Google of data generated by the Google cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Google’s security and privacy policies can be found at https://policies.google.com/privacy.

5.4. Google Analytics
(a) Scope of Personal Data
Processing On our website, we use the web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and enable an analysis of your use of our website and your browsing behavior (so-called “tracking”). We conduct this analysis based on the Google Analytics tracking service in order to continuously optimize our website and improve its availability. When you use our website, data—including, in particular, your IP address and your user activities—is transmitted to servers operated by Google Ireland Limited. We conduct this analysis using Google’s tracking service to continuously optimize our website and improve its availability. We also require web tracking for security reasons. Web tracking allows us to detect whether third parties are attacking our website. Using the information from the web tracker, we can take effective countermeasures and protect the personal data we process from these cyberattacks. By enabling IP anonymization within the Google Analytics tracking code on this website, your IP address is anonymized by Google Analytics prior to transmission. This website uses a Google Analytics tracking code that has been extended with the operator `gat._anonymizeIp();` to ensure that IP addresses are collected only in anonymized form (so-called IP masking). Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.

(b) Legal basis for the processing of personal data
The legal basis for data processing, in accordance with Article 6(1)(a) of the GDPR, is your consent as indicated in our banner notice regarding the use of cookies and web tracking (consent given through a clear affirmative action or behavior).

(c) Purpose of data processing
On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activity, and provide us with other services related to website and internet usage. We also require web tracking for security reasons. Web tracking allows us to detect whether third parties are attacking our website. The information provided by the web tracker enables us to take effective countermeasures and protect the personal data we process from these cyberattacks.

(d) Duration of Storage
Google will store the data relevant to the provision of web tracking for as long as necessary to fulfill the web service that has been booked. Data collection and storage are anonymized. If the data can be linked to an individual, it will be deleted immediately, provided it is not subject to any statutory retention requirements. In any case, the data will be deleted once the retention period has expired.

(e) Options
to Object and Request Deletion You can prevent the collection and transmission of personal data to Google (in particular your IP address) as well as the processing of this data by Google by disabling the execution of script code in your browser or by enabling the “Do Not Track” setting in your browser. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Google’s security and privacy policies can be found at https://policies.google.com/privacy?hl=de.

5.5. Microsoft Advertising
We use the Microsoft Advertising service on our site, provided by Microsoft Corporation, One Microsoft Way, 98052 Redmond, United States, email: brendon.lynch@microsoft.com, website: https://www.microsoft.com/. Processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
The Microsoft Advertising service, as part of Microsoft Advertising, is a service that enables pay-per-click advertising on both Bing and Yahoo! search engines and collects data on our site.
You may revoke your consent at any time. You can find more detailed information on revoking your consent either in the consent form itself or at the end of this Privacy Policy.
For further information on how the transferred data is handled, please refer to the provider’s Privacy Policy at https://privacy.microsoft.com/de-de/privacystatement.

5.6. Microsoft Clarity
We use the Microsoft Clarity service on our site, provided by Microsoft Corporation, One Microsoft Way, WA 98052-6399 Redmond, United States. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
The service enables us to analyze user behavior. This allows us to make our website more appealing and improve the user experience.
You may withdraw your consent at any time. You can find more detailed information on revoking your consent either in the consent form itself or at the end of this Privacy Policy.
Further information on how the transmitted data is handled can be found in the provider’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

6. Integration of External Web Services and Data Processing Outside the EU
On our website, we use active content from external providers, known as web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve data processing outside the EU. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This may result in limited functionality on the websites you visit.
We use the following external web services:

6.1. Bing
We use the Bing service on our website, provided by Microsoft Corporation, One Microsoft Way, 98052 Redmond, United States, email: brendon.lynch@microsoft.com, website: https://www.microsoft.com/. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
The Bing service enables faster searching on our site and the Internet and links search engine content to our website.
You may withdraw your consent at any time. You can find more detailed information on revoking your consent either in the consent form itself or at the end of this Privacy Policy.
Further information on how the transferred data is handled can be found in the provider’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

6.2. CloudFlare
We use the CloudFlare service on our website, provided by Cloudflare, Inc., 101 Townsend St, 94107 San Francisco, United States, email: support@cloudflare.com, website: https://www.cloudflare.com/de-de/. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.
The legal basis for the transfer of personal data is our legitimate interest in the processing, pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.
Cloudflare is a so-called content delivery network that, in addition to distributing the website across multiple servers, also provides security functions. In addition, Cloudflare acts as a reverse proxy for our website.
With regard to the processing, you have the right to object as set forth in Article 21. Further information can be found at the end of this privacy policy.
Additional information on how the transferred data is handled can be found in the provider’s privacy policy at https://www.cloudflare.com/privacypolicy/.

6.3. DoubleClick
We use the DoubleClick service on our website, provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States, email: support-de@google.com, website: http://www.google.com/. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
DoubleClick is a Google service through which digital advertising is offered and delivered on the Internet. It enables us to display personalized advertisements to our website visitors.
You may revoke your consent at any time. You can find more detailed information on revoking your consent either in the consent statement itself or at the end of this Privacy Policy.
Further information on the handling of the transferred data can be found in the provider’s Privacy Policy at https://policies.google.com/privacy.

6.4. Findologic
We use the Findologic service on our website, provided by Findologic GmbH, Jakob-Haringer Straße 5a, A-5020 Salzburg, Austria. The transmission and processing of personal data take place exclusively on servers located in the European Union.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
The service is a plugin that we need to display all content on our website to you. The plugin makes our website more attractive and enhances the user experience for our visitors.
You may revoke your consent at any time. You can find more detailed information on revoking your consent either in the consent form itself or at the end of this Privacy Policy.
For further information on how the transferred data is handled, please refer to the provider’s Privacy Policy at https://www.findologic.com/datenschutz/.

6.5. Google
We use the Google service on our website, provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States, email: support-de@google.com, website: http://www.google.com/. Data processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.
We use Google to load additional Google services on our website.
You may withdraw your consent at any time. You can find more detailed information on how to withdraw your consent either in the consent form itself or at the end of this Privacy Policy.
Further information on how the transferred data is handled can be found in the provider’s Privacy Policy at https://policies.google.com/privacy.

6.6. Google Fonts
We use the Google Fonts service on our website, provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States, email: support-de@google.com, website: http://www.google.com/. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
Fonts are loaded onto our site via the Google Fonts service so that we can display the site to you in a more visually appealing format.
You may revoke your consent at any time. You can find more detailed information on revoking your consent either in the consent statement itself or at the end of this Privacy Policy.
Further information on how the transferred data is handled can be found in the provider’s Privacy Policy at https://policies.google.com/privacy.

6.7. Google reCAPTCHA
We use the Google reCAPTCHA service on our website, provided by Google LLC, 1600 Amphitheatre Parkway, 9403 Mountain View, United States, email: support-de@google.com, website: http://www.google.com/. Processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
Based on specific characteristics and an analysis of user behavior on the site, the service determines whether the entries made are the result of automated input by a program (a so-called “bot”) or by a human. The service has three different levels. Either the service automatically recognizes that the input is not automated by a bot, or it prompts the user to check a CAPTCHA checkbox. A third option involves displaying small image, audio, or text tasks that the website visitor must complete. Google reCAPTCHA is a CAPTCHA service used on our website for security reasons to prevent bots (robot programs) from interacting with our website. Google reCAPTCHA verifies on our behalf that only humans—and not bots—can use our website. This allows us, in particular, to protect the specific features of our website (e.g., contact forms or other input fields such as the login area) from unauthorized access.
For the processing itself, the service—or we—collect the following data: user behavior (e.g., mouse gestures or input behavior), IP address, browser data, and computer information.
If you wish to use the input fields on our website that are protected by Google reCaptcha, you must allow the use of Google reCaptcha and, if necessary, solve the corresponding CAPTCHAs. If you do not complete the CAPTCHA or do not allow the use of Google reCAPTCHA, you will not be able to use the form protected by the CAPTCHA. Alternatively, you can use our other contact options (e.g., mail or email) at any time.
You may revoke your consent at any time. You can find more detailed information on revoking your consent either in the consent form itself or at the end of this Privacy Policy.
For more information on how the transferred data is handled, please see the provider’s privacy policy at https://policies.google.com/privacy.

6.8. Gstatic
We use the Gstatic service on our website, provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States, email: support-de@google.com, website: http://www.google.com/. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.
Gstatic is a service used by Google to retrieve static content in order to reduce bandwidth usage and preload necessary catalog files.
You may revoke your consent at any time. You can find more detailed information on revoking your consent either in the consent form itself or at the end of this Privacy Policy.
For further information on how the transferred data is handled, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

6.9. Trusted Shops
We use the Trusted Shops service on our website, provided by Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne, Germany. The transmission and processing of personal data take place exclusively on servers located in the European Union.
The legal basis for the transfer of personal data is our legitimate interest in the processing, pursuant to Art. 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.
Through Trusted Shops, reviews from other buyers and the Trusted Shops seal are displayed on our website.
With regard to this processing, you have the right to object as set forth in Article 21.
Further information can be found at the end of this Privacy Policy. Additional information on the handling of the transferred data can be found in the provider’s Privacy Policy at https://www.trustedshops.de/impressum/.

6.10. Social Plug-In – “Facebook”
(a) What personal data is collected, and to what extent is it processed?
We have integrated a social plug-in from the social network “Facebook” into our website, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: http://www.facebook.com/ (“Facebook”). When you visit a page that contains such a plug-in, your browser automatically establishes a background connection to Facebook’s servers. The content of the plug-in is transmitted directly from Facebook to your browser and merely integrated into our page. Through this integration, Facebook receives the information that your browser has loaded a specific page of our website. This applies even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in Ireland and stored there. If you are logged in to Facebook, Facebook can immediately associate your visit to our website with your Facebook profile. If you interact with the plug-ins—for example, by clicking the “Like” button or posting a comment—this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook contacts whom you have authorized to view it. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.

(b) Legal basis for the processing of personal data
: Article 6(1)(a) of the GDPR (if you have registered with “Facebook”) and Article 6(1)(f) of the GDPR (if you have not registered with Facebook). To the extent that processing is based on Article 6(1), sentence 1, subparagraph (f) of the GDPR, the website operator’s legitimate interest lies in enabling users to interact with the website operator’s content on Facebook.

(c) Purpose of Data Processing
The primary purpose of data collection is to offer you a Facebook-integrated means of social interaction and thereby make our website more interactive. You can find information on the scope of data collection and the further processing and use of the data you provide by Facebook, as well as your rights in this regard and the settings available to protect your privacy, in Facebook’s Privacy Policy: https://www.facebook.com/about/privacy

(d) Duration of Storage
Facebook will store the data relevant to the provision of the web service for as long as necessary. To the extent that the data is subject to statutory retention requirements, it will be deleted upon expiration of the retention period.

(e) Right to Object and Right
to Erasure If you do not want the Facebook social plugin to run, you can prevent it from doing so by installing an appropriate add-on or script blocker. If you do not want Facebook to associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website. The options for objection and deletion are otherwise governed by the general provisions regarding the right to object and the right to erasure under data protection law, as described later in this Privacy Policy.

6.11. Social Plug-In – “Instagram”
(a) What personal data is collected, and to what extent is it processed?
We have integrated a social plug-in from the social network “Instagram” into our website, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: http://facebook.com/ (“Instagram”). When you visit a page that contains such a plug-in, your browser automatically establishes a background connection to Instagram’s servers. The content of the plug-in is transmitted directly from Instagram to your browser and merely integrated into our page. Through this integration, Instagram receives the information that your browser has loaded a specific page of our website. This applies even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in Ireland and stored there. If you are logged in to Instagram, Instagram can immediately associate your visit to our website with your Instagram profile. If you interact with the plug-ins—for example, by clicking the “Like” button or posting a comment—this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram profile and displayed to your Instagram contacts whom you have authorized to view it. Processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection required by the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, government authorities in the third country may gain access to the collected data.

(b) Legal basis for the processing of personal data
: Article 6(1)(a) of the GDPR (if you have registered with “Instagram”) and Article 6(1)(f) of the GDPR (if you have not registered with Instagram). To the extent that processing is based on Article 6(1), sentence 1, subparagraph (f) of the GDPR, the website operator’s legitimate interest lies in enabling users to interact with the website operator’s content on Instagram.

(c) Purpose of Data Processing
The primary purpose of data collection is to offer you a means of social interaction linked to Instagram and thereby make our website interactive. You can find information on the scope of data collection and the further processing and use of the data you provide by Instagram, as well as your rights in this regard and the settings available to protect your privacy, in Instagram’s Privacy Policy: https://www.facebook.com/about/privacy

(d) Duration of Storage
Instagram will store the data relevant to the provision of the web service for as long as necessary. To the extent that the data is subject to statutory retention requirements, it will be deleted upon expiration of the retention period.

(e) Right to Object and Right
to Erasure If you do not want the Instagram social plug-in to run, you can also prevent it from running by installing an appropriate add-on or script blocker. If you do not want Instagram to associate the data collected via our website with your Instagram profile, you must log out of Instagram before visiting our website. The options for objection and deletion are otherwise governed by the general provisions regarding the right to object and the right to erasure under data protection law, as described below in this Privacy Policy.

7. Information on the Use of Cookies
(a) Scope of Personal Data
Processing We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called “cookies” are small text files that your browser can store on your device. These text files contain a unique string of characters that uniquely identifies the browser when you return to our website.The process of storing a cookie file is also referred to as “setting a cookie.” Cookies can be set both by the website itself and by external web services.
Cookies are set by our website or by external web services to maintain the full functionality of our website, improve user-friendliness, or to pursue the purpose specified with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, such as individual or random IDs, so that we can offer more personalized services.
Details are listed in the table below.

Website Operator This cookie is used to ensure the security of the website and protects users against CSRF (Cross-Site Request Forgery) attacks. Art. 6(1)(f) GDPR (legitimate interests) Session Security

csrf[frontend.tonur.packstation.search]

www.peak.ag Website Operator This cookie is used to protect our website. It serves to implement and prevent protective measures against spam and bot attacks. Art. 6(1)(f) GDPR (legitimate interests) Session Security dtgsAllowGtmTracking www.peak.ag Website operator This cookie allows us to save individual convenience settings you have selected and retain them for your current and future visits to the site. Art. 6(1)(a) GDPR
or Art. 9(2)(a) GDPR
(Consent) Approx. 30 days Configuration fr .facebook.com Facebook This cookie is used by Facebook to display personalized ads, such as real-time ads, which can be booked on Facebook for display on third-party websites. Art. 6(1)(a) GDPR
or Art. 9(2)(a) GDPR
(consent) Approx. 3 months Marketing session- www.peak.ag Website operator This cookie is necessary for the operation of our website. Without this cookie, our website cannot function. Art. 6(1)(f) GDPR (legitimate interests) Session Basic functionality sw-cache-hash www.peak.ag Website operator This cookie allows us to save individual convenience settings you have selected and retain them for your current and future visits to the site. Art. 6(1)(f) GDPR (legitimate interests) Session Configuration sw-states www.peak.ag Website operator This cookie allows us to save individual convenience settings you have selected and retain them for your current and future visits to the site. Art. 6(1)(a) GDPR
or Art. 9(2)(a) GDPR
(Consent) Session Configuration swag-amazon-pay www.peak.ag Website operator This cookie is used to ensure that visitors to our website can process payments via Amazon Pay. Art. 6(1)(a) GDPR
or Art. 9(2)(a) GDPR
(Consent) Session Convenience timezone www.peak.ag Website operator This cookie is used to store the user’s current time zone. Art. 6(1)(f) GDPR (legitimate interests) Approx. 30 days Configuration wbm-tagmanager-enabled www.peak.ag Website operator This cookie is set by the cookie management system integrated into Shopware when the website visitor consents to the use of Google Tag Manager. Art. 6(1)(c) GDPR (Compliance with a legal obligation) Approx. 3 months Cookie banner

(b) Legal basis for the processing of personal data
: Article 6(1)(f) of the GDPR (legitimate interest) or Article 6(1)(a) or Article 9(2)(a) of the GDPR (consent). To the extent that cookies are processed based on consent pursuant to Article 6(1)(a) of the GDPR, this consent also constitutes consent within the meaning of Section 25(1) of the German Telemedia Act (TTDSG) for the placement of the cookie on the user’s device.
To the extent that another legal basis under the GDPR is cited (e.g., for the performance of a contract or to comply with legal obligations), the storage or placement of cookies for German users is based on an exception pursuant to § 25(2) of the TTDSG.
This exception applies “if the sole purpose of storing information on the end user’s terminal device or the sole purpose of accessing information already stored on the end user’s terminal device is to transmit a message via a public telecommunications network” or “if the storage of information in the end user’s terminal equipment or access to information already stored in the end user’s terminal equipment is absolutely necessary so that the provider of a telemedia service can make available a telemedia service expressly requested by the user.” The applicable legal basis is specified in the cookie table provided later in this section.

(c) Purpose of Data Processing
The cookies are set by our website or external web services to maintain the full functionality of our website, improve user-friendliness, or to serve the purpose specified with your consent.
Cookie technology also enables us to recognize individual visitors using pseudonyms, such as individual or random IDs, so that we can offer more personalized services.

(d) Storage
Duration The cookies listed below are stored in your browser until they are deleted or, in the case of session cookies, until the session expires. Details are provided in the following table:

(e) Right to Object, Withdrawal of Consent, and Deletion
You can configure your browser according to your preferences to generally prevent the setting of cookies. You can then decide on a case-by-case basis whether to accept cookies or accept them by default. Cookies can be used for various purposes, such as to recognize that your device is already connected to our website (persistent cookies) or to save recently viewed content (session cookies). If you have expressly granted us permission to process your personal data, you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its revocation.

(f) Data Security and Privacy, Communication via Email
Your personal data is protected by technical and organizational measures during collection, storage, and processing so that it is not accessible to third parties. In the case of unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems; therefore, we recommend encrypted communication or sending information by mail for highly confidential information.

7.1 Online Marketing and Advertising
Our website uses online advertising. Online advertising allows us to reach our target audience most effectively and make our website more appealing. Cookies are also used to display advertisements on the website. We work with the following advertising partners:

Affiliate marketing via the Belboon
service We promote our website through affiliate marketing. Affiliate marketing is an internet-based sales method in which a commercial provider (merchant or advertiser) offers compensation to sales partners (affiliates or publishers) for displaying advertisements on their websites. You can find the cookies used by Belboon for this purpose, along with their duration and purpose, in Belboon’s cookie table:

What personal data is collected, and to what extent is it processed?
We publish advertising banners and promotional content on various external sites via Belboon. The distribution and management of these advertising activities are handled by the Belboon web service provided by belboon GmbH, Weinmeisterstr. 12–14, 10178 Berlin, Germany (hereinafter “Belboon”) via the affiliate network operated by Belboon. By clicking on the advertising content on external websites, users are redirected to our website. When using our website, data—including, in particular, your IP address and your user activities—is transmitted to Belboon’s servers. Belboon is responsible for delivering the advertisements and integrating them into the website. When website users are redirected from external websites to our website, data is transmitted that determines the effectiveness and efficiency of the advertising campaign. Cookies are also used on our website to assess the effectiveness of our advertising measures on website visitors. The use of cookies in affiliate marketing is subject to constant change.

Legal basis for the processing of personal data
: The legal basis for data processing, in accordance with Article 6(1)(a) of the GDPR, is your consent as expressed in our information banner regarding the use of cookies and web tracking (consent through a clear affirmative action or behavior).

Purpose of data processing
On our behalf, Belboon will process the data to place advertisements and to calculate the effectiveness of the advertising campaign for the purpose of settling payments in accordance with the contractual agreement with our affiliates.

Retention
period Belboon will store the data relevant to the provision of web tracking for as long as necessary to fulfill the booked web service. To the extent that the data is personally identifiable, it will be deleted immediately, unless there are legal retention obligations. In any case, deletion will occur upon expiration of the legal retention period. Cookies are stored in your browser until they are deleted or, in the case of a session cookie, until the session expires.
 
Right to Object, Withdrawal of Consent, and Deletion
You can prevent the collection and transmission of personal data to Belboon (specifically your IP address) as well as the processing of this data by Belboon by disabling the execution of script code in your browser, installing a script blocker in your browser, or enabling the “Do Not Track” setting in your browser. Belboon’s security and privacy principles can be found at https://belboon.com/dsgvo/. You can configure your browser according to your preferences to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or accept them by default. If you have expressly granted us permission to process your personal data, you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its revocation.

8. Right of Access and Requests for Rectification – Erasure & Restriction of Data – Withdrawal of Consent – Right
to Object 8.1. Right
of Access You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have the right to access the information specified in Article 15(1) of the GDPR, provided that this does not infringe upon the rights and freedoms of others (see Article 15(4) of the GDPR). We will also be happy to provide you with a copy of the data.

8.2. Right
to Rectification Pursuant to Article 16 of the GDPR, you have the right to have us correct any personal data we may have stored incorrectly (such as your address, name, etc.) at any time. You may also request at any time that we complete the data we have stored about you. Any such correction will be made without delay.

8.3. Right to Erasure
Pursuant to Article 17(1) of the GDPR, you have the right to have us erase the personal data collected about you if

• the data is no longer needed;
• the legal basis for processing has ceased to exist without replacement due to the withdrawal of your consent;
• you have objected to the processing and there are no legitimate grounds for the processing;
• your data is being processed unlawfully;
• a legal obligation requires it or the data was collected in accordance with Article 8(1) of the GDPR.

This right does not apply pursuant to Article 17(3) of the GDPR if

• the processing is necessary for the exercise of the right to freedom of expression and information;
• your data has been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data is necessary for the establishment, exercise, or defense of legal claims.

8.4. Right to Restriction of Processing
Pursuant to Article 18(1) of the GDPR, you have the right, in certain cases, to request the restriction of the processing of your personal data.
This applies if

• you contest the accuracy of the personal data;
• the processing is unlawful and you do not consent to erasure;
• the data is no longer needed for the purpose of processing, but the collected data is necessary for the assertion, exercise, or defense of legal claims;
• an objection to the processing has been lodged pursuant to Article 21(1) of the GDPR and it is still unclear which interests prevail.

8.5. Right to Withdraw
Consent If you have given us your explicit consent to the processing of your personal data (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you may withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

8.6. Right to Object
Pursuant to Art. 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6(1)(f) (in the context of a legitimate interest). You are entitled to this right only if there are specific circumstances that preclude the storage and processing of such data.

8.7. How can you exercise your rights?

Peak Performance Products S.A.
13c, Fausermillen, 6689 Mertert, Luxembourg
Email: office@peak.ag
Phone: +352 425215
Fax: +352 421315

9. Right to Data Portability
Pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used, and machine-readable format. The data may be sent either to you directly or to a controller designated by you.
Upon request, we will provide you with the following data in accordance with Article 20(1) of the GDPR:

• Data collected on the basis of explicit consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR;
• Data that we have received from you pursuant to Article 6(1)(b) of the GDPR in connection with existing contracts;

to the extent that the data has been processed through an automated procedure.
We will transfer the personal data directly to a controller of your choice, provided this is technically feasible. Please note that we are not permitted to transfer data that infringes upon the freedoms and rights of other individuals pursuant to Article 20(4) of the GDPR.

10. Right to File a Complaint with the Supervisory Authority pursuant to Article 77(1) of the GDPR
If you suspect that your data is being processed unlawfully on our part, you may, of course, seek a judicial resolution of the matter at any time. In addition, you may pursue any other legal remedies available to you. Irrespective of this, pursuant to Article 77(1) of the GDPR, you have the option to contact a supervisory authority. You have the right to lodge a complaint under Article 77 of the GDPR in the EU Member State where you reside, where you work, and/or where the alleged infringement occurred; that is, you may choose the supervisory authority to which you wish to turn from among the locations listed above. The supervisory authority to which the complaint was submitted will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.