Account

Privacy policy

1. Information on the collection of personal data

Below, we provide information on the collection of personal data when you use our website. Personal data means any data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address and, where applicable, your name and your telephone number) will be stored by us in order to answer your questions. We erase the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we will also state the defined criteria for the storage period.

2. Your rights

You have the following rights vis-à-vis us with regard to the personal data concerning you:

  • Right of access free of charge
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

3. Collection of personal data when you visit our website

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Art. 6(1)(f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot run programs or transfer viruses to your computer. They serve to make the website as a whole more user-friendly and effective.

Use of cookies:
We use cookies in order to be able to identify you on subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit. This website uses the following types of cookies, the scope and functioning of which are explained below:

  • Transient cookies
  • Persistent cookies

Transient cookies are deleted automatically when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser. Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser. You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website.

One such cookie (“pro_seite”) remembers only how many items you wish to have displayed per page. It contains only this number, no identifier and no personal data, and is deleted automatically after 180 days.

4. Further functions and offerings of our website

In addition to the purely informational use of our website, we offer various services which you may use if you are interested. To do so, you will generally have to provide further personal data, which we use to provide the respective service and to which the data processing principles stated above apply. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly. Furthermore, we may disclose your personal data to third parties if participation in promotions, prize draws, conclusions of contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or below in the description of the offering. Where our service providers or partners are established in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offering.

5. Objection to the processing of your data or withdrawal of consent

If you have given consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the lawfulness of the processing of your personal data after you have communicated it to us. Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case if the processing is, in particular, not necessary for the performance of a contract with you, which we set out in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing. You may, of course, object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the following contact details:

Bütic GmbH
Bahnhofstr. 12
07381 Pößneck
Tel: 036475050811
Fax: 036475049911
kontakt@buetic.de

6. Use of our online shop

If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data that we require to process your order. Mandatory information necessary for the performance of the contracts is marked separately; further information is voluntary. We process the data you provide in order to process your order. For this purpose, we may pass on your payment data to our bank. The legal basis for this is Art. 6(1)(b) GDPR. You may voluntarily create a customer account, through which we can store your data for later further purchases. When you create an account under “My Account”, the data you provide will be stored revocably. You can delete your stored addresses yourself in the customer area. You may request the deletion of your customer account at any time without any formal requirements at kontakt@buetic.de. We may also process the data you provide in order to inform you about further interesting products from our portfolio or to send you e-mails with technical information. Due to commercial and tax law requirements, we are obliged to retain invoices with the associated address, payment and order data for eight years from the end of the respective calendar year (§ 147 AO (German Fiscal Code)). However, after two years we restrict the processing, i.e. your data will only be used to comply with the statutory obligations. To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

6a. Orders via online marketplaces (e.g. Amazon, eBay)

If you order our products from us not directly in this shop but via an online marketplace (e.g. Amazon or eBay), we process the data necessary for processing your order that the respective marketplace provides to us. This includes, in particular, your name, your delivery address and, where applicable, billing address, the order and item data and – in the case of individually manufactured items – the personalisation details you have submitted (e.g. the desired engraving text).

We use these data exclusively to process your order: for manufacture (including engraving/personalisation), for generating the shipping label and for dispatch, for invoicing and accounting and – where necessary – for order-related communication (e.g. queries regarding personalisation details). The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and, for obligations under tax and commercial law, Art. 6(1)(c) GDPR.

Processing and storage take place exclusively internally on our own encrypted server in Germany; transmission is encrypted. The data are not disclosed to third parties, with the exception of the recipients necessary for the performance of the contract (e.g. the carrier commissioned with the shipment). These data are not used for advertising, profiling or resale purposes.

We keep your personal data from marketplace orders for active order processing only for as long as this is necessary. In addition, due to commercial and tax law requirements, we are obliged to retain your address, order and invoice data for eight years from the end of the respective calendar year (§ 147 AO (German Fiscal Code)); after processing has been completed, these data are kept exclusively to fulfil this statutory retention obligation in restricted, encrypted and access-restricted form and are subsequently erased.

Your data subject rights set out in section 2 also apply to the data processed in connection with marketplace orders.

6b. Payment service providers

We use external payment service providers to process payments in our online shop. If you choose a payment method offered by such a provider, the data necessary for processing the payment (including name, address, e-mail address, order and payment amount, and, where applicable, bank details or means of payment) are transmitted to the respective provider and processed there under its own responsibility. The legal basis is Art. 6(1)(b) GDPR (performance of a contract); for fraud prevention and for an identity and credit check carried out in the case of purchase on account or by instalments, Art. 6(1)(f) GDPR (legitimate interest in preventing payment defaults and misuse).

We load the PayPal and Amazon Pay scripts on the product pages as soon as the purchase area with the instant purchase buttons becomes visible, and on all pages as soon as your basket contains items. This allows you to order directly with PayPal or Amazon Pay without going through the checkout. At the checkout, the PayPal script is loaded because PayPal is preselected as the payment method; the scripts of the other providers are loaded only when you select the respective payment method or point to it with your mouse pointer. When a script is loaded, the provider receives, for technical reasons, your IP address and information about your browser. Insofar as the scripts store information on your device or read information from it in doing so, this is strictly necessary for the ordering function of our online shop that you are using (§ 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act)). The legal basis for the processing is Art. 6(1)(b) GDPR (steps prior to entering into the purchase contract) and Art. 6(1)(f) GDPR (legitimate interest in a fast ordering process).

The providers are:

  • PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. In addition to payment with a PayPal account, we also process credit card, SEPA direct debit, instalment payment, Google Pay, Apple Pay as well as iDEAL, Bancontact and eps via PayPal. In the case of Google Pay, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and in the case of Apple Pay, Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork T23 YK84, Ireland, additionally process the payment data stored in your respective account. PayPal may transfer data to group companies in third countries (including the USA); the transfer is safeguarded by EU standard contractual clauses or the EU-US Data Privacy Framework.
  • Purchase on account via PayPal (Ratepay) – For purchases on account, PayPal works together with Ratepay GmbH, Ritterstr. 12–14, 10969 Berlin. For this purpose, we additionally transmit your date of birth and your telephone number. PayPal and Ratepay verify your identity and creditworthiness and may involve credit agencies for this purpose. If the purchase on account is accepted, PayPal assigns the purchase price claim to Ratepay; you then pay Ratepay. Details can be found in Ratepay’s privacy notice.
  • Fraud prevention for purchases on account (PayPal FraudNet) – If you choose purchase on account, we load a security script from PayPal. It collects technical characteristics of your device and browser (e.g. IP address, browser type and version, language setting, screen resolution, time zone) and links them to a random identifier, which we transmit to PayPal together with your order. PayPal and Ratepay use this information to detect misuse and include it in the risk assessment. The legal basis is Art. 6(1)(f) GDPR; the storage of and access to information on your device is strictly necessary for the purchase on account you have chosen (§ 25(2) no. 2 TDDDG (Telecommunications Digital Services Data Protection Act)).
  • Amazon Pay – Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg.
  • Stripe – We integrate the payment methods Klarna and Revolut Pay via Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin D02 H210, Ireland. For this purpose, Stripe receives the order and payment data as well as technical device and browser data, which Stripe also analyses for fraud prevention. Stripe may transfer data to Stripe, Inc. in the USA; the transfer is safeguarded by the EU-US Data Privacy Framework or EU standard contractual clauses.
  • Klarna – Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If you select Klarna, you will be redirected to Klarna; there, Klarna may carry out an identity and credit check in order to decide whether the contract is concluded.
  • Revolut Pay – Revolut Bank UAB, Konstitucijos pr. 21B, 08130 Vilnius, Lithuania. You confirm the payment with Revolut.

Automated decision: For purchases on account (Ratepay) and for Klarna, the respective provider decides by automated means, on the basis of its check, whether the payment method is offered to you (Art. 22(2)(a) GDPR). You have the right to obtain human intervention on the part of the provider, to express your point of view and to contest the decision. If the payment method is declined, you can choose another one.

For details of the processing by the respective provider, please refer to its privacy notice.

6c. Saved payment methods (PayPal)

If you have a customer account with us, you can save your PayPal account or your credit or debit card for future purchases – either when placing an order, by ticking the box “Pay with one click next time” at checkout, or without placing an order in your customer account under “Payment methods” via “Add payment method”. Nothing is saved without this express action.

If you order without a customer account and tick the box for PayPal – at checkout or when using instant purchase on the product page or in the basket –, PayPal likewise stores your PayPal account in its data vault. We initially record the reference (token) with the information listed below only together with the email address of your order and create a customer account without a password for this address. We send you a link to this address with which you set a password; only then can the payment method be used in your customer account. If a confirmed customer account already exists for the address, we assign it directly to that account. If you do not set a password within 30 days, we delete the record and arrange for deletion at PayPal.

When adding a payment method without placing an order, no payment is made. You confirm a PayPal account in a PayPal window. For a card, we transmit your name and the default billing address from your customer account to PayPal; your bank may have the card confirmed by means of a security check (3-D Secure), and PayPal may send an authorisation request without a charge to your bank for verification. If the check is not passed, the card is not saved.

The payment data themselves – for cards, the card number, expiry date and security code; for PayPal, the link to your PayPal account – are stored exclusively by PayPal (for provider details, see section 6b) in its data vault. You enter card data into input fields provided directly by PayPal; we do not receive them. We store only a reference (token) assigned by PayPal and your PayPal customer number and, for recognition at checkout and in your customer account, in addition, for PayPal, the email address of the PayPal account (displayed in abbreviated form), for cards, the card brand, the last four digits and the expiry month, as well as the time of saving and of last use.

The purpose of the processing is to enable you to pay for future orders without re-entering your payment data. Your bank may still require confirmation (3-D Secure) in this context.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future by removing the saved payment method in your customer account under “Payment methods” or by informing us informally. We will then delete it from our systems and arrange for deletion at PayPal. The lawfulness of processing carried out before the withdrawal remains unaffected. Irrespective of this, the statutory retention obligations apply to the individual payment transactions (see section 6b).

6d. Images and files for custom-made products

If you send us images, logos or templates for a custom-made product – by email, via a message on a marketplace or with your order –, we store these files together with your order. This also includes the production files that we create from them (e.g. engraving templates). We use the files to manufacture your product, to clarify queries and to handle complaints. The legal basis is Art. 6(1)(b) GDPR.

After the order has been completed, we retain the files without a fixed time limit so that you can reorder the same design at any time without submitting it again. The legal basis is our legitimate interest in enabling easy reordering (Art. 6(1)(f) GDPR). You can object to this at any time and request erasure – an informal message to kontakt@buetic.de is sufficient. We will then delete the files and confirm the erasure to you. Excepted from this are emails relating to your order, including attachments: they are business letters that we are required to retain for the statutory period (§ 257 HGB (German Commercial Code), § 147 AO (German Fiscal Code)), and until then they are kept solely for this purpose.

The files are stored on our own servers in Germany (Hetzner Online GmbH). Only the employees who are involved with your order have access to them. We do not pass the files on to third parties and do not use them for advertising.

6e. Contacting us (email, telephone, WhatsApp, Facebook and Instagram)

If you write to us or call us, we process your information (e.g. name, email address or telephone number, your message and attached files) in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as it concerns an order or a contract, otherwise our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR). We store the correspondence in our own system on servers in Germany (Hetzner Online GmbH) and delete it as soon as it is no longer needed; we retain business letters relating to orders for the statutory period (§ 257 HGB (German Commercial Code), § 147 AO (German Fiscal Code)).

WhatsApp, Facebook Messenger and Instagram: If you write to us via WhatsApp or via our pages on Facebook or Instagram, the message is transmitted via the services of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). We receive your message and your profile name, in the case of WhatsApp also your telephone number, and reply to it from our customer service system. Meta itself is responsible for what else it does with the data generated when these services are used; details at whatsapp.com/legal/privacy-policy-eea and facebook.com/privacy/policy. In this context, data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-U.S. Data Privacy Framework. If you do not want this, please write to us by email.

Translation and draft replies using AI: So that we can reply quickly to messages in any language, we use an AI service from Anthropic (Anthropic Ireland Limited, Ireland, and Anthropic, PBC, USA) in our customer service system. It translates incoming messages into German and our replies into your language and, at the push of a button, suggests draft replies to us. For this purpose, we transmit the text of your message and of the previous correspondence, the subject line and, where applicable, the order number. Replies are always written and sent by a person from our team; the AI does not make any decisions. Anthropic processes the data as our processor (Art. 28 GDPR) and may not use them to train AI models. The legal basis is our legitimate interest in handling your enquiry quickly and comprehensibly (Art. 6(1)(f) GDPR). In this context, data may be transferred to the USA; the basis for this is the EU standard contractual clauses (Art. 46(2)(c) GDPR). You may object to this processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR).

7. Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. For registration for our newsletter, we use the so-called double opt-in procedure. This means that, after you register, we send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically erased after one month. In addition, we store the IP addresses you used and the times of registration and confirmation in each case. The only mandatory information for sending the newsletter is your e-mail address. The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent to receiving the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal by clicking on the link provided in every newsletter e-mail, by e-mail to kontakt@buetic.de or by sending a message to the contact details given in the legal notice.

Advertising to customers (without registration): If you have placed an order with us, we use the e-mail address you provided in doing so, even without newsletter registration, to send you ideas and offers for our own products that match your purchase from time to time (§ 7(3) UWG (German Act against Unfair Competition)). The legal basis is our legitimate interest in direct marketing (Art. 6(1)(f) GDPR). You can object to the use of your e-mail address for advertising at any time – via the unsubscribe link in every e-mail or by sending a message to kontakt@buetic.de – without incurring any costs other than the transmission costs at the basic rates. Following your objection, we place your address on a suppression list so that you no longer receive advertising from us.

7a. Audience measurement

We measure the use of our online shop and of our site bütic.com using our own procedure – without Google and without any other third-party providers. In doing so, we do not store anything in your browser: no cookies, no local storage, no session storage. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in finding out how our shop is used in order to improve it.

On bütic.com, by contrast, we only measure with your consent: counting only begins once you select “Marketing” in the site’s privacy window or click “Accept all”. bütic.com then stores a random session identifier in your browser’s session storage for the duration of your visit, which is deleted when you close the tab; the site stores your selection itself in local storage. The legal basis there is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act)). You can withdraw it at any time via the “Privacy settings” in the footer of bütic.com.

Which data: the page accessed (path), the domain of the referring page, campaign identifiers (e.g. whether you came via an advertisement) and the respective event (page view, use of the page, basket, checkout, purchase – in the case of a purchase, additionally the order number and order value). In order to recognise page views that belong together, we generate on our server a check value that changes daily from the IP address and browser identifier; page views with the same check value and no more than 30 minutes apart are counted as one visit. We do not store the IP address itself. In addition, without an identifier, we measure how quickly the page loads and responds to input (e.g. time until the largest content is displayed, response time to clicks, layout shift), together with the page type, page address without parameters, device class (mobile/desktop) and a technical designation of the page element concerned. These values are transmitted once when you leave the page, are not linked to your IP address or a visitor identifier and are erased after 90 days.

Purpose and recipients: Statistics on how our shop is used (visits, origin, completed purchases) in order to improve it. The data remain on our own servers and are not disclosed to third parties – with one exception: the reports to Meta in accordance with section 8 if you have consented to “Marketing”.

Storage period: We erase the individual measurement events after 90 days. After that, only aggregated daily figures remain (e.g. number of visits and purchases per day and origin), without reference to individual visitors, sessions or orders.

Objection: You can object to the audience measurement at any time on grounds relating to your particular situation (Art. 21(1) GDPR) – e.g. by e-mail to kontakt@buetic.de.

8. Consent-based marketing (Google, Meta and Microsoft)

On our website we use – only with your prior consent – services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). You can withdraw or adjust your consent at any time with effect for the future – via the “Cookie settings” link in the footer. Until you give your consent, these services are not loaded; no corresponding cookies are set and no data are transmitted to Google.

Google Tag Manager: We use Google Tag Manager to integrate the service described below. It does not itself collect any personal data for analysis purposes and does not set any analysis cookies, but merely controls the triggering of the tags you have approved in accordance with your consent (Google Consent Mode).

Marketing – Google Ads (conversion tracking and remarketing): With your consent to the “Marketing” category, we use Google Ads to measure the success of our online advertisements (e.g. whether a purchase follows a click on an advertisement) and to show you advertising tailored to your interests, for example for products you have viewed with us. For this purpose, cookies are set and usage data are processed (including the item numbers of products viewed, added to the basket and purchased). In the case of a purchase, we additionally transmit the order number, order value, quantity and price of the items purchased, any discount redeemed, whether it is your first order with us, as well as your e-mail address and telephone number – these two only as a hash value that is already generated in your browser (“enhanced conversions”) – so that Google can attribute the purchase to the advertisement.

Marketing – Meta (Conversions API): If you have consented to the “Marketing” category and have come to us via an advertisement on Facebook or Instagram, we report to Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”) from our server which products you view and add to the basket and whether you go to the checkout (page address, item number, value), so that Meta can measure the success of the advertisement. The sole means of attribution is the click identifier that Meta appends to the address when the advertisement is clicked; we do not transmit the IP address or browser identifier in this process. We do not use a Meta Pixel or Meta cookies. We only report purchases to Meta with your separate consent in accordance with section 8a.

Marketing – Microsoft Advertising (UET): With your consent to the “Marketing” category, we use Universal Event Tracking (UET) of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”). It measures whether a purchase follows a click on one of our advertisements in the Bing search engine or in Microsoft’s advertising network, and enables Microsoft to show you relevant advertising. For this purpose, Microsoft sets cookies and processes usage data such as the pages accessed, the click identifier of the advertisement, your IP address and information about your browser; in the case of a purchase, additionally the order number and order value. Without your consent, UET is not loaded. Further information: privacy.microsoft.com.

Data transfer to the USA: In this process, personal data may be transferred to servers of Google LLC, Meta Platforms, Inc. or Microsoft Corporation in the USA. All three are certified under the EU-U.S. Data Privacy Framework; in addition, the EU standard contractual clauses apply. Further information: policies.google.com/privacy and facebook.com/privacy/policy.

Withdrawal: You can withdraw your consent at any time via “Cookie settings” in the footer.

8a. Customer matching with Google and Meta (only with consent)

If you expressly consent at checkout or in your customer account under “Login details”, we transmit your e-mail address to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) and to Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Without consent, we transmit nothing.

Which data and in what form: Exclusively your e-mail address – not in plain text, but as a hash value (SHA-256) that we generate on our server. We only take into account orders in our own online shops, not orders via marketplaces such as Amazon or eBay.

Google (customer matching): On the basis of your orders, we assign you to a group (existing customer, customer with a high order value or customer who has not ordered for some time). Google matches the hash value against its user accounts so that Google can show you relevant advertising from Bütic and our advertising can distinguish between existing and new customers; Google erases the uploaded hash values after matching. Membership of a group ends after 540 days at the latest.

Meta (Conversions API): If you found us via an advertisement on Facebook or Instagram and placed an order, we report the purchase (time and order value) to Meta together with the hash value of your e-mail address, so that Meta can measure the success of the advertisement and improve its delivery.

Data transfer to the USA: In this process, data may be transferred to Google LLC and Meta Platforms, Inc. in the USA. Both are certified under the EU-U.S. Data Privacy Framework. Further information: policies.google.com/privacy and facebook.com/privacy/policy.

Withdrawal: You can withdraw your consent at any time with effect for the future – with one click in your customer account under “Login details” or informally by email to kontakt@buetic.de. From the time of withdrawal, we no longer transmit anything; we remove your address from the groups at Google during the next weekly synchronisation.

9. Our pages on Facebook and Instagram

We operate pages on Facebook (facebook.com/buetic) and Instagram (instagram.com/buetic_gmbh). When you visit these pages or interact with them, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”) processes your data. From this, Meta provides us with aggregated statistics on the use of our pages (“Page Insights”), such as reach, interactions and demographic information about visitors. We cannot identify individual persons in these statistics.

Joint controllership: We and Meta are joint controllers for the processing for these statistics (Art. 26 GDPR). Meta provides the corresponding arrangement (facebook.com/legal/terms/page_controller_addendum). Its essence: Meta assumes primary responsibility for the processing of Insights data, for informing data subjects and for fulfilling their rights. You can exercise your rights (e.g. access or erasure) directly with Meta; if you contact us, we will forward your request to Meta. Meta explains which data are included in Page Insights at facebook.com/legal/terms/information_about_page_insights_data. Meta is solely responsible for all other processing on Facebook and Instagram; for details, see Meta’s Privacy Policy at facebook.com/privacy/policy.

The legal basis for our part is our legitimate interest in presenting our products and being in contact with customers and prospective customers (Art. 6(1)(f) GDPR). In this context, data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-U.S. Data Privacy Framework. We handle messages that you send us via these pages as described in section 6e.

Bütic® and Bütic GmbH® are registered trademarks of Bütic GmbH.