Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simplified overview of how your personal data is handled when you visit this website. Personal data includes all information that can personally identify you. Detailed information on data protection can be found in our privacy policy below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the website's imprint.

How do we collect your data?

On one hand, your data is collected when you provide it to us, such as data you enter into a contact form.

On the other hand, our IT systems automatically collect other data, either automatically or with your consent, when you visit the website. These data are primarily technical in nature, such as the browser used, the operating system, or the time the page was accessed. This data is collected automatically as soon as you access this website.

What do we use your data for?

Some of the data is collected to ensure the website operates without errors. Additionally, other data may be used to analyze your user behavior.

What are your rights regarding your data?

You have the right to obtain free information about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. Additionally, under certain circumstances, you have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to file a complaint with the competent supervisory authority.

We are available to assist you at any time. If you have further questions on the topic of data protection, please feel free to contact us at the address provided in the imprint.

Analytics Tools and Third-Party Tools

When you browse this website, your browsing behavior may be statistically analyzed. This analysis is primarily carried out using cookies and analytics programs.

For detailed information on these analytics programs, please refer to the data protection declaration below.

2. Collection and Storage of Personal Data and the Manner and Purpose of Their Collection

a) When visiting the website:

Each time a customer or any other visitor accesses our website, information is automatically sent to our website's server via the Internet browser used on your device (computer, laptop, tablet, smartphone, etc.). This information is temporarily stored in a log file.

The following data is automatically recorded and stored until it is automatically deleted:

• (Pseudonym) IP address of the requesting computer, as well as the device ID or unique device ID and device type,
• Name of the retrieved file and the volume of data transferred, as well as the date and time of the retrieval,
• Notification of successful retrieval,
• Domain request,
• Description of the type of Internet browser used and the operating system of your computer, as well as the name of your access provider,
• Browser history and standard weblog information,
• Location data, including location data from your mobile device. Please note that on most mobile devices, you can control or disable the use of location services in the settings menu of your mobile device.

Our legitimate interest in data collection, in accordance with Article 6, Paragraph 1, Letter f of the GDPR (General Data Protection Regulation), is based on the following objectives:

• Ensuring a smooth connection and comfortable use of the website.
• Evaluating system security and stability, as well as other administrative purposes.

Under no circumstances do we use the collected data to draw conclusions about you.

b) When using our contact form

If you have any inquiries, we offer you the option to contact us via a form available on our website. You must provide at least a valid email address to identify the source of the inquiry and respond. Providing additional information is voluntary.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR based on your voluntary consent.

The personal data we collect for the use of the contact form will be automatically deleted once your inquiry has been resolved.

c) When concluding a contractual relationship

When concluding a contractual relationship, we ask you to provide the following personal data:

• Personal identification data, such as first name, last name, address, postal code, city, phone number, state, and country.
• Information about your payment methods.
• Other personal data that we are legally required or authorized to collect and process, and that we need for your authentication, identification, or to verify the information we have collected.

This data will be processed for the purpose of managing the contractual relationship, and such processing is based on Article 6, Paragraph 1, Letter b of the GDPR.

The personal data collected for the order will be blocked from further use once the contract has been fully processed. Your data will be stored until the legal warranty obligation expires and will then be deleted, unless we are required to retain it for a longer period in accordance with Article 6, Paragraph 1, Letter c of the GDPR due to tax and commercial law storage and documentation obligations (according to HGB, StGB, or AO) or if you have agreed to further storage in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR.

d) Use of payment service providers

We also collaborate with the following payment service providers to process your order. As part of the payment process, we will transmit your order data to the payment service provider you select, if necessary for the payment process. You can choose from the following payment service providers to make your payment with us. The legal basis for data transmission is, in any case, Article 6, Paragraph 1, Letter b of the GDPR.

• Stripe

On this website, we offer payment via Stripe services. The provider for customers within the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter referred to as “Stripe”).

When paying through the Stripe payment processor, your payment data will be forwarded to Stripe via an interface on our site to complete the payment. You can read details about this in Stripe's privacy policy at the following link: https://stripe.com/de/privacy.

Your data is transmitted to Stripe based on Art. 6 Paragraph 1 lit. b GDPR (contract processing) and based on our legitimate interest in using reliable and secure payment processes (Art. 6 Para. 1 lit. f GDPR).

e) When signing up for our newsletter

If you have explicitly consented in accordance with Art. 6, Paragraph 1, Point 1, Letter a GDPR, we will use your email address to send you our newsletter regularly.

You can unsubscribe at any time, for example, via a link at the end of each email you receive. You can also send your unsubscribe request at any time via email to support@original-licenses.com (preferably with the subject: "Unsubscribe from the newsletter").

3. Disclosure of Personal Data

We commit not to transfer your data to third parties for purposes other than those mentioned below. We will only share your data with third parties in the following cases:

• You have given your express consent in accordance with Art. 6 S. 1 para. 1 lit. a GDPR, this is necessary for processing the contractual relationship with you (Art. 6 S. 1 para. 1 lit. b GDPR),
• There is a legal obligation to make a statement (Art. 6 para. 1 para. 1 lit. c GDPR)
• When disclosure is necessary to assert, exercise, or defend legal claims, and there is no reason to believe that you have a personal interest in not disclosing your data (Art. 6 para. 1 sentence 1 letter f GDPR).

Additionally, the transfer of your personal data to the relevant body will occur when using the tracking and analysis tools detailed below, provided you have given your consent for their use. Below, we provide evidence that all administrators of the tracking tools we implement are certified under the "Privacy Shield."

Furthermore, the transfer of your personal data to third countries or international organizations will only take place if the Commission has issued a decision on its adequacy or if appropriate safeguards are in place. In the absence of these conditions, data transfer will be carried out based on exceptional circumstances, in accordance with Article 49 of the GDPR.

The responsible party for data processing and storage on this website is:

The data controller is the entity, either a natural or legal person, that, individually or together with others, determines the purposes and means of processing personal data, such as names, email addresses, and others.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke the consent you have given at any time. Simply send a message through the contact methods provided on the website, or directly by writing to info@original-licenses.com.

The legality of the data processing that took place before the revocation will not be affected by it.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

If data processing is based on Art. 6 para. 1 letter e or f GDPR, you have the right, at any time, to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedom of objection under Article 21 (1) of the GDPR.

If your personal data is processed for direct advertising, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling to the extent related to such direct advertising. If you object, your personal data will no longer be used for direct advertising purposes (objection under Art. 21 (2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, affected individuals have the right to file a complaint with the competent supervisory authority, particularly in the Member State of their habitual residence, workplace, or the place of the alleged violation. This right to file a complaint does not affect any other administrative or judicial remedy.

Right to Data Portability

You have the right to receive the data that we process automatically, based on your consent or in fulfillment of a contract, in a commonly used and machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.

SSL or TLS Encryption

To ensure security and protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by observing the browser's URL line, which is at the top, where the URL will always begin with the characters "https," and you should see a lock symbol next to the browser's URL.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website

If there is an obligation to send us your payment data (e.g., account number for direct debit authorization) after the conclusion of a fee-based contract, this data is necessary for payment processing.

Payment transactions using common means of payment (Visa/MasterCard, direct debit) are made exclusively through an encrypted SSL or TLS connection. You can recognize an encrypted connection by observing the browser's URL address, which will always begin with the string "https," and you should be able to see the lock symbol next to the browser's URL.

With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

In accordance with applicable legal provisions, you have the right to obtain free information about your stored personal data, its origin, recipient, and the purpose of the data processing. Additionally, you have the right, if necessary, to request correction or deletion of this data at any time. You can contact us at any time at the address indicated in the imprint if you have further questions on the subject of personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time using the information provided in the imprint. The right to restrict processing applies in the following cases:

• 1. If you have concerns about the accuracy of your personal data stored with us, we generally need time to verify this. While the verification is taking place, you have the right to request that the processing of your personal data be restricted.
• 2. If the processing of your personal data was carried out or is occurring unlawfully, you can request the restriction of data processing instead of deletion.
• 3. If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deletion.
• 4. If you have lodged an objection according to Article 21 (1) of the GDPR, your interests and ours must be evaluated. As long as it is not clear which interests prevail, you have the right to request that the processing of your personal data be restricted.

When the processing of your personal data is restricted, besides storage, it may only be used with your consent, for the presentation, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

4. Cookies

We use cookies on our website. These are small text files that are automatically created by your browser and stored on your device when you visit our website. The cookie contains information related to the specific device used. However, this does not mean that we can immediately identify you.

These cookies are categorized into first-party cookies ("own cookies") and third-party cookies ("third-party cookies"). First-party cookies are set by the website you are currently on and are not accessible to browsers across different domains. On the other hand, a third-party cookie is set by a third party, i.e., not by the website you are currently visiting.

Furthermore, cookies are classified into technically necessary and technically unnecessary cookies. On our website, both technically necessary and unnecessary cookies are set in accordance with the following paragraphs.

4.1. About Technically Necessary Cookies: Technically necessary cookies are essential for the operation of our website and enable certain functions. These cookies, which are strictly necessary and are only set for the required online session, are automatically deleted when you leave our website. The legal basis for the use of these technically necessary cookies is Art. 6, para. 1, page 1, letter f of the GDPR.

4.2. About Technically Unnecessary Cookies: If you have given your consent, we use so-called technically unnecessary cookies on our website. These cookies are mainly used to evaluate website usage and user behavior, generate reports on website visitor activities, and provide other services related to website usage.

The cookies we use that are not technically necessary are described in our cookie banner regarding their function, duration, and possible third-party recipients of the data. If certain external providers use cookies set as part of the service they provide to us, this will also be indicated separately in our privacy policy.

The legal basis for the use of cookies that are not technically necessary is Art. 6, para. 1, sentence 1, letter a of the GDPR, as long as you have given your consent.

Consent can be revoked at any time. Additionally, you have the option to adjust your cookie settings at any time. For example, you can configure your browser to inform you in advance about the setting of cookies or to reject them altogether.

In the provision of our online offer, applications and Java scripts are also used. If, for security reasons, you do not wish to use these utilities or active content, you should deactivate the corresponding settings in your browser.

5. Google reCAPTCHA

To protect your submissions through the online form, we use the reCAPTCHA service provided by Google Inc. This service is used to distinguish whether the input is made by a human or abusively through automated processing. The request involves sending the IP address and possibly other data required by Google for the reCAPTCHA service. Your input will be transmitted to Google and used for this purpose.

However, your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the service.

The IP address transmitted by your browser as part of reCAPTCHA will not be combined with any other data from Google. This data is subject to various data protection regulations from Google. For more information about Google's privacy policy, please visit: https://policies.google.com/privacy?hl=en. You can also opt-out via the following link: https://adssettings.google.com/authenticated.

6. Online Marketing Measures/Analysis

We implement online marketing measures and analyze user behavior on our website. Through this statistical recording, we aim to design our website to meet the needs of our users and continuously adapt and optimize their experience.

The use of the following online marketing and tracking measures is subject to your consent in accordance with Art. 6 paragraph 1 letter a of the GDPR, and is based on your approval.

• Google Analytics

Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). It includes the "Universal Analytics" mode, which allows data, sessions, and interactions across multiple devices to be assigned to a user ID and analyzed across devices.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within the member states of the European Union or other contracting states of the Agreement on the European Economic Area. We want to point out that Google Analytics has implemented IP anonymization on this website to ensure the anonymous recording of IP addresses (known as "IP masking"). The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. For more information about the terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=en.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website activity and internet usage.

The recipient of the data collected is Google. Personal data will be transferred to the USA under the EU-US Privacy Shield based on the European Commission's adequacy decision. You can download the certificate here (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

The data sent by us and linked to cookies, user IDs (e.g., user IDs), or advertising IDs are automatically deleted after 14 months. Data whose retention period has expired is automatically deleted once a month.

You can revoke your consent at any time with future effect by preventing the storage of cookies through the appropriate settings in your browser software. However, we would like to point out that, in this case, you may not be able to use all the features of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent Universal Analytics from collecting data across devices, you must opt out on all systems in use. Click here (https://tools.google.com/dlpage/gaoptout?hl=en) to set the opt-out cookie and disable Google Analytics.

• Google Web Fonts

This website uses web fonts provided by Google Inc. to ensure a consistent display of characters. When you visit our site, your browser loads the requested web fonts from Google into its cache to correctly display texts and fonts.

For this purpose, your browser connects to Google’s servers, allowing Google to identify your visit via your IP address. The use of these web fonts aims to present our online offers uniformly and attractively, which constitutes a legitimate interest.

In case your browser does not support the display of web fonts, a default font will be used on your device.

Personal data related to Google Web Fonts is transferred to the United States under the EU-US Privacy Shield, supported by the European Commission's adequacy decision. You can download the certificate here (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

For additional information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy/.

• Google Tag Manager

If you have given your consent, this website uses Google Tag Manager. This service allows you to manage your website tags through an interface. The Tag Manager tool, which implements the tags, operates on a cookie-less domain and does not collect personal data. The tool triggers other tags that may collect data. It’s important to note that Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will affect all tracking tags implemented by Google Tag Manager.

For more information about Google Tag Manager, visit: https://www.google.com/intl/en/tagmanager/use-policy.html.

• Google Adwords

We also implement the online advertising program "Google AdWords - Conversion Tracking." Conversion tracking is an analytics service provided by Google. When you click on an ad served by Google, a conversion tracking cookie is placed on your device. These cookies are valid for 30 days, do not contain any personal information, and are therefore not personally identifiable. If you visit specific pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a unique cookie, so it is not possible to track cookies across the websites of other AdWords customers.

The information collected with the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. These statistics indicate the total number of users who clicked on your ad and were redirected to a page with a conversion tracking tag. No information that allows personal identification of users is received. These purposes also represent our legitimate interest in data processing under Article 6, paragraph 1, letter f of the GDPR.

If you do not wish to participate in tracking, you can object by preventing the installation of cookies from the domain "googleadservices.com" through the appropriate settings in your browser software (opt-out option). In this way, you will not be included in the conversion tracking statistics. For more information and Google’s privacy policy, see: http://www.google.com/policies/technologies/ads/, https://policies.google.com/privacy?gl=en&hl=en.

• Google Remarketing

This website uses Google Remarketing, an advertising service from Google LLC ("Google"). Third parties, including Google, display ads on websites across the internet. These third parties, such as Google, use cookies to display ads based on a user's previous visits to this website. Users can opt out of using Google cookies by visiting the Google opt-out page at http://www.google.com/privacy_ads.html. Alternatively, users can opt out of using Google cookies for third-party advertising by visiting the Network Advertising Initiative opt-out page at http://www.networkadvertising.org/managing/opt_out.asp.

• Facebook Pixel

With your consent, our website uses the so-called "Facebook Pixel," operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA ("Facebook"). This pixel is used to track the behavior of visitors after being redirected to the provider’s website by clicking on a Facebook ad. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes, optimizing future advertising efforts. The data collected is anonymous to us, but Facebook stores and processes it, linking it to the respective user profile, and may use it for its own advertising purposes according to Facebook's data usage policy. This allows Facebook to display ads on and off Facebook. We have no influence over this use of the data. Additionally, a cookie may be stored on your computer for this purpose. You can find more information about protecting your privacy in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

You can also deactivate the "Custom Audiences" remarketing function in the Advertising Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen, while logged into Facebook. If you do not have a Facebook account, you can disable Facebook's usage-based advertising on the website of the European Interactive Digital Advertising Alliance.

• Bing Ads

This website uses Bing Universal Event Tracking, integrated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

When a user accesses our website via a Bing ad, a cookie is placed in the user's internet browser. Additionally, a piece of code is integrated into our website that, together with the cookie set, stores certain data about the use of the website.

As part of the so-called cross-device tracking, Microsoft can, if necessary, track the user across various electronic devices. This allows Microsoft to display personalized advertising to the user on Microsoft websites and apps.

Personal data related to Bing Ads Universal Event Tracking is transferred to the United States under the EU-US Privacy Shield based on the European Commission's adequacy decision. The certificate can be downloaded here (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).

For more information about Bing Ads Universal Event Tracking, visit https://help.bingads.microsoft.com/apex/en/61718 /2 and Microsoft's privacy policy: https://privacy.microsoft.com/en-us.

7. Social Media

On our website, we have included links to our social media sites (Facebook, Instagram, YouTube, Twitter, Pinterest, LinkedIn). We do not use traditional social media plugins that immediately register each website visitor with their IP address, which could lead to the logging of all subsequent activities on the internet, even without clicking on any buttons.

Instead, we use the Shariff solution, which ensures that no personal data is initially transmitted to individual providers when visitors access our website. With the Shariff solution, the buttons of individual providers are simply integrated as graphics that contain a link to the individual social media services. The link to the social media services is only established if the corresponding button is clicked. After clicking the button and being redirected to the social network's website, we are no longer responsible for providing information; instead, the responsibility lies with the operator of the social network. Information about the collection and use of your data on social networks can be found in the terms of use of the respective provider. For information on the purpose and scope of data collection after clicking, please refer to the privacy information of the respective network.

We would like to point out that data from visitors to our website may also be processed outside the European Union. This may pose risks to users, as enforcing users' rights may be more difficult. Concerning US providers certified under the Privacy Shield, we would like to point out that they commit to complying with EU data protection standards.

Your data may also be processed by third parties for market research and advertising purposes. For example, user profiles based on user behavior and interests may be created. User profiles can be used, for instance, to place advertisements inside and outside social networks that are likely to match the interests of users. For this purpose, cookies are usually stored on the users' computers, where user behavior and interests are recorded. Additionally, data may also be stored in user profiles regardless of the devices used, especially if the users are members of the respective social network and are logged in.

The processing of users' personal data is based on the legitimate interest of the respective providers in effective user information and communication, in accordance with Article 6, paragraph 1, sentence 1, letter f) of the GDPR. If users are asked by their respective providers to consent to data processing (i.e., to give their consent, for example, by ticking a checkbox or confirming a button), the legal basis for processing is Article 6, paragraph 1, sentence 1, letter a of the GDPR.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
• Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) - Privacy Policy: http://instagram.com/about/legal/privacy/.
• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: https://twitter.com/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
• Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) - Privacy Policy: https://policy.pinterest.com/en/privacy-policy.
• LinkedIn Corp. - Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

8. Data Security

We make every effort to implement all necessary technical and organizational security measures to store your personal data in a way that is not accessible to third parties or the public. However, it is important to note that complete confidentiality of transmitted information cannot be fully guaranteed, especially when using email as a communication method. Therefore, we recommend that you only send confidential information to us by mail and use secure data transmission methods when necessary.

9. News and Changes to This Privacy Policy

This privacy policy is in effect and was last updated in December 2023.

Adjustments to this privacy policy may be made based on the continuous development of our website, the offers mentioned above, or changes in legal or regulatory requirements.