Privacy Policy

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the applicable data protection regulations as well as this privacy policy.

1. Information on the collection of personal data

(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior

(2) The controller pursuant to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is
DR. KURT WOLFF GMBH & CO. KG
Johanneswerkstraße 34-36
33611 Bielefeld
You can reach our data protection officer at dpo@drwolffgroup.com or at our postal address with the addition "the data protection officer."

(3) When you contact us by email or via a contact form, the data you provide (your email address, if applicable your name and phone number, as well as any other personal data you include in your message) will be stored by us in order to answer your questions. The data arising in this context will be deleted once storage is no longer necessary, or processing will be restricted if statutory retention obligations exist. When using a contact form, data processing is carried out with your consent pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR and may be necessary pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of your request or pursuant to Art. 6 Para. 1 S. 1 lit. c GDPR to fulfill a legal obligation. When you send us an email, data processing is necessary pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of your request and/or pursuant to Art. 6 Para. 1 S. 1 lit. c GDPR to fulfill a legal obligation.

(4) If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also specify the defined criteria for the storage period.

2. Your rights

You have the following rights – in each case to the extent that the legal requirements are met. To exercise them, you may contact the contact addresses known to you. We would prefer, however, that you use the following address: kw-verkauf@drwolffgroup.com.

Art. 15 GDPR – Right of access by the data subject:
You have the right to request confirmation from us as to whether personal data concerning you is being processed, and if so, what data this is and the specific circumstances of the data processing.
Art. 16 GDPR – Right to rectification:
You have the right to request that we immediately correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.
Art. 17 GDPR – Right to erasure:
You have the right to request that personal data concerning you be deleted without undue delay.
Art. 18 GDPR – Right to restriction of processing:
You have the right to request that we restrict the processing of your data.
Art. 20 GDPR – Right to data portability:
You have the right, in the case of processing based on consent or for the performance of a contract, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance from us, or to have the data transmitted directly to another controller, to the extent that this is technically feasible.
Art. 21 GDPR – Right to object:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of a legitimate interest on our part or for the performance of a task in the public interest, or in the exercise of official authority.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
To the extent that we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing for such purposes. If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes.
You may raise the objection at any time with effect for the future via any of the contact addresses known to you.
Art. 77 GDPR in conjunction with § 19 BDSG – Right to lodge a complaint with a supervisory authority:
You have the right to lodge a complaint at any time with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates applicable law.
Withdrawal of consent:
You may withdraw any consent you have given at any time with effect for the future via any of the contact addresses known to you.

3. Collection of personal data when visiting our website

(1) When using the website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure stability and security (the legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):

IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transmitted in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.
(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, through which certain information flows to the party that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies (see b)
Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to a shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
d) You can configure your browser settings according to your preferences and, for example, decline the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all features of this website.
e) We use cookies to be able to identify you on subsequent visits.
(4) Consent management:
With the help of a data privacy management software, we offer you the option to consent to the storage of cookies in a legally compliant manner and to ensure the withdrawal of consent. The consent is documented to fulfill our obligation to provide proof and to technically control the setting of cookies. For this purpose, cookies are used that store your cookie settings on our websites. Your cookie settings can be retained on a subsequent visit to our platforms as long as you have not deleted the cookies beforehand. You can adjust your settings at any time. Mandatory statutory retention periods remain unaffected.
Categories of data: In order to obtain, manage and record your consent, your IP address, the date of your consent, a pseudonymous ID and your selected settings are stored.
Recipient: OneTrust, 82 St John Street, Farringdon, London EC1M 4JN, United Kingdom ("OneTrust"). OneTrust is based in the United Kingdom. The European Commission has issued an adequacy decision for data transfers to the United Kingdom, which establishes that an adequate level of protection exists for the processing of personal data.
Third-country transfer: Data may be transferred by OneTrust to sub-processors in third countries. For these purposes, OneTrust has concluded standard contractual clauses with the respective recipients, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Legal bases: The legitimate interest in pursuing the stated purposes (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Storage period: The data is stored for 365 days and then deleted.
Privacy policy: https://www.onetrust.com/privacy-notice/

4. Further functions and offerings of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this, you generally need to provide additional personal data, which we use to provide the respective service and to which the aforementioned principles of data processing apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if promotions, sweepstakes, contract conclusions, or similar services are offered jointly with partners. You will receive more detailed information about this when you provide your personal data or below in the description of the offering (e.g. in the respective terms of participation).
(4) To the extent that our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offering.

5. Use of the official KAREX Shop

(1) If you wish to place an order in our web shop available at www.karex.com/en-de, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory information necessary for the processing of contracts is marked separately; additional information is voluntary. We process the data you provide in order to handle your order.

(2) Use of service providers for order processing

Purposes: To process your order, we use the service provider Plentymarkets. Your data is passed on exclusively for the purpose of order processing and only to the extent necessary for this purpose. Only the information provided during the ordering process is passed on. The service provider collects and stores the data and only passes it on to the companies involved in order processing, in particular logistics.

Categories of data: First name, last name, address and email address are processed.

Recipient: plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel, Germany, (Plentymarkets)

Third-country transfer: Data may be transferred by Plentymarkets to sub-processors in third countries. For these purposes, Plentymarkets has concluded standard contractual clauses with the respective recipients, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here, here and here.

Legal bases: Art. 6 Para. 1 b GDPR, as the processing of the data is necessary for the processing of the order and thus for the performance of the contract.

Storage period: The data is generally processed until the respective order has been completed and is automatically deleted three months after the order has been processed.

(3) Use of payment service providers

Purposes: Payment processing is handled by payment service providers. Your data is passed on exclusively for the purpose of payment processing and only to the extent necessary for this purpose. Only the information provided during the ordering process is passed on. The payment service provider collects and stores the data and only passes it on to the companies involved in the payment process.

We only collect or store payment data in the event of a refund by bank transfer.

Categories of data: First name, last name, invoice amount and payment method are processed.

Recipients:

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

Third-country transfer: Data may be transferred by PayPal to sub-processors in third countries. PayPal has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here, here and here.

Legal bases: Art. 6 Para. 1 b GDPR, as the processing of the data is necessary for the processing of the order and thus for the performance of the contract.

Storage period: The data is generally processed until the respective order has been completed.

Shopify Payments, Shopify International Limited, incorporated under Irish law, with offices at 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Third-country transfer: Shopify Payments is based in Canada. The European Commission has issued an adequacy decision for data transfers to Canada, which establishes that an adequate level of protection exists for the processing of personal data. Data may be transferred by Shopify Payments to sub-processors in third countries (outside Canada, the EU and the EEA). Shopify Payments has concluded contractual arrangements with the respective recipients for these purposes that are comparable to the European standard contractual clauses. You can access the standard contractual clauses here, here and here.

Legal bases: Art. 6 Para. 1 b GDPR, as the processing of the data is necessary for the processing of the order and thus for the performance of the contract.

Storage period: The data is generally processed until the respective order has been completed.

Klarna Bank AB (publ.), a Swedish public limited company, Sveavagen 46, 111 34 Stockholm, Sweden (Klarna)

Third-country transfer: Data may be transferred by Klarna to sub-processors in third countries. Microsoft has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here, here and here.

Legal bases: Art. 6 Para. 1 b GDPR, as the processing of the data is necessary for the processing of the order and thus for the performance of the contract.

Storage period: The data is generally processed until the respective order has been completed.

(2) We are obligated by commercial and tax law requirements to store your address, payment and order data for a period of ten years.

(3) To prevent unauthorized third-party access to your personal data, in particular financial data, the ordering process is encrypted using TLS/SSL technology.

6. Advertising and newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent declaration.
(2) For registration to our end-customer newsletter, we use the so-called double opt-in procedure. This means that after your registration, we send you an email to the provided email address in which we ask you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses used and the times of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only mandatory information required for sending the newsletter is your email address. The provision of additional, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR.
(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the withdrawal by clicking on the link provided in every newsletter email or by sending a message to the contact details provided in the legal notice.
(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. Links contained in the newsletter also contain this ID. Such tracking is also not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you manually display the images, the above-mentioned tracking will take place.
Categories of data:

Consent data (name, date of birth, email address, time, IP address)
Usage data (opened email, clicked links)
Personalization data (...)
Recipient: JUNE Online Marketing GmbH, Große Johannisstraße 3, 20457 Hamburg, Germany
For sending our newsletter, we use the data processor JUNE Online Marketing GmbH. Your data is transmitted to JUNE and processed there on our behalf. For these purposes, we have concluded a DPA with JUNE Online Marketing GmbH.
Privacy policy: https://juneapp.com/imprint/
Legal bases: Art. 6 Para. 1 b GDPR, as the processing of the data is necessary for the processing of the order and thus for the performance of the contract.
(6) Even if you have not subscribed to our newsletter, we may send you advertising for our own similar goods or services by electronic mail (email) after you have purchased one or more products from us, to the extent that you have not objected to this use of your data.
You will be clearly and explicitly informed at the time your contact data is collected and with each use that you can object to this use at any time, without incurring any costs other than the transmission costs at the basic rates.
You can object to this advertising at any time with effect for the future by:
clicking the unsubscribe link in the email; or
sending a message to kw-verkauf@drwolffgroup.com

7. Web analytics, monitoring and optimization

We use additional services on this website in the area of web analytics, monitoring and optimization.
Purposes: Web analytics is used to evaluate visitors to our online offering and can include behavior, interests or demographic information about visitors, such as gender, in pseudonymous form. This allows us, for example, to identify at what times our online offering or its functions or content are used most frequently. Furthermore, we can identify which areas require optimization. In addition to web analytics, we can also use testing procedures to, for example, test and optimize different versions of our online offering or its components.
Categories of data:

Interests
Pseudonymous usage data (e.g. websites visited and elements used there), usage interactions (e.g. recordings of mouse movements, clicks, scrolling behavior and depth, and interactions with website elements)
Technical data (e.g. device information, operating system, browser (type, version), screen resolution and language settings)
Meta/communication data (e.g. IP address, referrer URL (the previously visited page) as well as date and time of access)
Where possible, we use an IP masking procedure (i.e. pseudonymization by shortening the IP address)
Demographic & geographic data (e.g. geographic localization from the IP address)
If users have consented to the collection of their location data, this may also be processed depending on the provider.
Service providers used:
(1) Google services
We use the following services from the provider Google in the area of web analytics, monitoring and optimization:
Google Analytics
Google Adwords
DoubleClick
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Third-country transfers: Data may be transferred by Google to recipients in third countries. Google has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://policies.google.com/privacy?hl=de
(2) Sentry
Provider: Functional Software Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA
Third-country transfers: Data may be transferred by Sentry to recipients in third countries. Sentry / Functional Software is an active participant in the EU-US Data Privacy Framework, which governs the correct and secure transfer of personal data of EU citizens to the USA. Sentry has also concluded standard contractual clauses with the respective recipients, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://sentry.io/privacy/
(3) Microsoft Clarity
Purpose: Microsoft Clarity is an analytics tool that provides us with insights into user behavior through the creation of so-called "heatmaps" and the recording of individual usage sessions (session replays).
These analyses help us to identify usage patterns, detect technical errors and specifically optimize the design and content of our website.
Heatmaps visually show us which areas of our website are clicked or viewed most frequently.
Session replays allow us to view anonymized recordings of individual visits in order to understand how visitors interact with our site (e.g. through mouse movements, clicks and scrolling behavior).
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Third-country transfer: Data may be transferred to recipients in third countries. Microsoft Clarity itself states that it masks sensitive data before forwarding it to Microsoft.
Microsoft is an active participant in the EU-US Data Privacy Framework, which governs the correct and secure transfer of personal data of EU citizens to the USA.
More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en. Microsoft has also concluded standard contractual clauses with the respective recipients, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Legal bases: The legitimate interest in pursuing the stated purposes (Art. 6 Para. 1 S. 1 lit. a. GDPR).
Storage period: The data is retained for a maximum period of 13 months and then automatically deleted.
Privacy policy: https://www.microsoft.com/de-de/privacy/privacystatement

8. Remarketing and conversion tracking

We use additional services on this website in the area of remarketing and conversion tracking.

Purposes: We use various remarketing and conversion tracking technologies on our website. This allows us to present users with advertisements based on their interests. We analyze the interactions of users on our website and can thus display targeted advertising to users on other websites or platforms even after their visit to our website. We also receive information from the respective platforms about the success of our advertising campaigns, which we in turn use to optimize our advertising measures.

Categories of data:

Pseudonymous usage data (e.g. websites visited and elements used there as well as technical information, access times), meta/communication data (e.g. device information).
Interests
Demographic information
If users have consented to the collection of their location data, this may also be processed depending on the provider.

Service providers used:

(1) Google services
We use the following services from the provider Google in the area of web analytics, monitoring and optimization:

Google Analytics
Google Adwords
Google Remarketing
DoubleClick

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Third-country transfer: Data may be transferred by Google to recipients in third countries. Google has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://policies.google.com/privacy?hl=de

(2) TikTok Analytics
Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
Third-country transfer: Data may be transferred by TikTok to recipients in third countries. TikTok has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE

(3) Adform
Provider: Adform A S, Silkegade 3 B, 1113, København K.
Third-country transfer: Data may be transferred by Adform to recipients in third countries. Adform has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://site.adform.com/privacy-center/platform-privacy/

(4) Outbrain Amplify
Provider: First Floor Craven House, 121 Kingsway London, WC2B 6PA United Kingdom
Third-country transfer: Data may be transferred by Outbrain to recipients in third countries. Outbrain has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://www.outbrain.com/privacy/

(5) Taboola
Provider: Taboola Germany GmbH, Alt-Moabit 2, 10557 Berlin.
Third-country transfer: Data may be transferred by Taboola to recipients in third countries. Taboola has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://www.taboola.com/policies/privacy-policy

(5) Facebook Custom Audiences
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Third-country transfer: Data may be transferred by Facebook to recipients in third countries. Meta Platforms, Inc. has certified its participation in the EU-US Data Privacy Framework. Meta Ireland relies on the EU-US Data Privacy Framework as well as the adequacy decision of the European Commission for third-country transfers concerning the transfer of European data to Meta Platforms, Inc. in the USA, as set out in Meta's Data Privacy Framework disclosure. Meta Ireland may also use alternative transfer mechanisms to the extent recognized by the GDPR and other applicable data protection laws in the EEA and Switzerland.
Privacy policy: https://www.facebook.com/about/privacy
Opt-out: Available for logged-in users at https://www.facebook.com/settings/?tab=ads#

(7) Pinterest Conversion Insights
Provider: Pinterest Europe Ltd., 2nd Floor, Palmerston House, Fenian Street, Dublin 2.
Third-country transfer: Data may be transferred by Pinterest to recipients in third countries. Pinterest has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here, here and here.
Privacy policy: https://policy.pinterest.com/de/privacy-policy

§ 9 Other services

(1) Embedding reviews via Judge.me
Purposes: We use the provider judge.me to enable our users to write and publish a customer review on the product detail page.
Provider: http://Judge.me Ltd, c/o Buckworths, 1-3 Worship Street, London EC2A 2AB
Third-country transfer: Data may be transferred by http://judge.me reviews to recipients in third countries. http://judge.me reviews has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087) and here (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915).
Privacy policy: https://judge.me/privacy

Last updated: 01.12.2025