Privacy policy.

This privacy policy explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the associated websites, functions and content as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering"). With regard to the terms used, such as "personal data" or their "processing", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Person responsible:

Name/Fa.: phaeno gGmbH

Street No.: Willy-Brandt-Platz 1

Postcode, City, Country: 38440 Wolfsburg, Germany

Commercial register no.: HRB 100986

Managing Director: Michel Junge, Jana Handrick

Telephone number: 05361. 890 100

E-mail address: entdecke@phaeno.de

Data protection officer:

Name: Svenja Hohnstock

Company: Hohnstock GmbH

Street, No.: Borsigstraße 12

Postcode , City: 38446 Wolfsburg

E-mail address: dsb@hohnstock.gmbh

Types of data processed:

Inventory data
contact data
contract data
payment data
Usage data (e.g. websites visited, interest in content, access times)
Meta/communication data (e.g. device information, IP addresses)

Processing of special categories of data (Art. 9 para. 1 GDPR):

In principle, no special categories of data are processed unless they are provided by the user for processing, e.g. entered in online forms.

Categories of data subjects affected by the processing:

Customers / interested parties / suppliers.
Visitors and users of the online offer.

Purpose of the processing:

Provision of the online offering, its content and functions.
Provision of contractual services, service and customer care.
Answering contact enquiries and communicating with users.
Marketing, advertising and market research.
Security measures.

Status: June 2026

1. Applicable legal bases

In accordance with Article 13 of the GDPR, we hereby inform you of the legal bases for our data processing activities. Where the legal basis is not specified in this privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 of the GDPR; the legal basis for processing to fulfil our services, carry out contractual measures and respond to enquiries is Article 6(1)(b) of the GDPR; the legal basis for processing to fulfil our legal obligations is Article 6(1)(c) of the GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) of the GDPR. In the event that the vital interests of the data subject or another natural person necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

2. Changes and updates to the privacy policy

We ask you to review the content of our privacy policy regularly. We will amend the Privacy Policy as soon as changes to the data processing activities we carry out make this necessary. We will inform you as soon as the changes require any action on your part (e.g. consent) or any other individual notification.

3. Security measures

In accordance with Article 32 of the GDPR, and taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk; These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, input of, disclosure of, and safeguarding the availability of the data, and ensuring its segregation. Furthermore, we have established procedures to ensure that data subjects’ rights are upheld, that data is erased and that we respond to any data breaches. Furthermore, we take the protection of personal data into account right from the development and selection of hardware, software and procedures, in accordance with the principle of data protection by design and by default (Article 25 of the GDPR).
These security measures include, in particular, the encrypted transmission of data between your browser and our server.

4. Cooperation with data processors and third parties

Where, in the course of our data processing, we disclose data to other individuals or organisations (data processors or third parties), transfer it to them or otherwise grant them access to the data, this is done only on the basis of a legal authorisation; for example, where the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract in accordance with Article 6(1)(b) of the GDPR, you have given your consent, a legal obligation requires it, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
Where we engage third parties to process data on the basis of a so-called ‘data processing agreement’, this is done in accordance with Article 28 of the GDPR.

5. Transfers to third countries

Where we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or where this occurs in the context of using third-party services or disclosure, or transfer of data to third parties, this takes place only where it is necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. Subject to statutory or contractual authorisations, we shall only process data in a third country, or have it processed there, where the specific conditions set out in Articles 44 et seq. of the GDPR are met. This means that processing takes place, for example, on the basis of specific safeguards, such as an officially recognised determination that a level of data protection equivalent to that of the EU is in place, or compliance with officially recognised specific contractual obligations (so-called ‘standard contractual clauses’).

6. Rights of data subjects

You have the right to request confirmation as to whether data concerning you is being processed, and to obtain access to this data, as well as further information and a copy of the data in accordance with Article 15 of the GDPR.
You have the right, in accordance with Article 16 of the GDPR, to request that data relating to you be completed or that any inaccurate data relating to you be rectified.
In accordance with Article 17 of the GDPR, you have the right to request that the data in question be erased without delay or, alternatively, in accordance with Article 18 of the GDPR, to request a restriction on the processing of the data.
You have the right, in accordance with Article 20 of the GDPR, to receive the data concerning you that you have provided to us and to request that it be transferred to other data controllers.
You also have the right, in accordance with Article 77 of the GDPR, to lodge a complaint with the competent supervisory authority.

7. Right to withdraw consent

You have the right to withdraw any consent you have given, in accordance with Article 7(3) of the GDPR, with effect for the future.

8. Right to object

You may object at any time to the future processing of your personal data in accordance with Article 21 of the GDPR. In particular, you may object to processing for the purposes of direct marketing.

9. Cookies and the right to object to direct marketing

We use temporary and permanent cookies, i.e. small files that are stored on users’ devices (for an explanation of the term and how they work, see the final section of this privacy policy). Some cookies serve security purposes or are necessary for the operation of our online service (e.g. for displaying the website) or to store the user’s choice when confirming the cookie banner. In addition, we or our technology partners use cookies for audience measurement and marketing purposes, as explained to users throughout this privacy policy.

A general objection to the use of cookies for online marketing purposes can be made for a wide range of services, particularly in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in your browser settings. Please note that, in such cases, you may not be able to use all the functions of this online service.

10. Deletion of data

The data we process will be deleted or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no statutory retention obligations preventing its deletion. Where data is not deleted because it is required for other, legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
Germany: In accordance with statutory requirements, data is retained in particular for 6 years pursuant to Section 257(1) of the German Commercial Code (HGB) (commercial ledgers, inventories, opening balance sheets, annual accounts, commercial correspondence, accounting documents, etc.) and for 10 years in accordance with Section 147(1) of the German Fiscal Code (AO) (ledgers, records, management reports, accounting documents, commercial and business correspondence, documents relevant to taxation, etc.).

11. Provision of contractual services

We process master data (e.g. names, addresses and contact details of users), contractual data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and providing services in accordance with Article 6(1)(b) of the GDPR. The fields marked as mandatory in online forms are required for the conclusion of the contract.
Users may optionally create a user account, which allows them, in particular, to view their orders. During registration, users are informed of the required mandatory details. User accounts are not public and cannot be indexed by search engines. Once users have cancelled their user account, their data relating to that account will be deleted, subject to any retention required for commercial or tax law purposes in accordance with Article 6(1)(c) of the GDPR. It is the users’ responsibility to back up their data prior to the termination of the contract. We are entitled to irrevocably delete all user data stored during the term of the contract.
When users register, log in again or use our online services, we store their IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests, as well as the users’ interests in protection against misuse and other unauthorised use. This data is not, as a matter of principle, disclosed to third parties, unless this is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6(1)(c) of the GDPR.
The data will be deleted once statutory warranty obligations and similar obligations have expired; the necessity of retaining the data is reviewed every three years; in the case of statutory archiving obligations, the data is deleted upon their expiry (retention period under commercial law: 6 years; retention period under tax law: 10 years). Information in the customer account remains there until the account is deleted.

12. Contact

When you contact us (by email), your details are processed for the purpose of handling your enquiry and its resolution in accordance with Article 6(1)(b) of the GDPR.
Users’ details may be stored in our Customer Relationship Management system (“CRM system”) or a similar enquiry management system.
We delete enquiries once they are no longer required. We review the necessity of retention every two years; enquiries from customers who have a customer account are stored permanently, and for deletion, please refer to the information regarding the customer account. Where statutory retention obligations apply, deletion takes place once these have expired (retention obligation under commercial law: 6 years; retention obligation under tax law: 10 years).

13. Comments and posts

When users leave comments or other posts, their IP addresses are stored for 7 days on the basis of our legitimate interests within the meaning of Article 6(1)(f) of the GDPR.
This is for our own protection in the event that someone posts unlawful content in comments or contributions (insults, prohibited political propaganda, etc.). In such cases, we ourselves may be held liable for the comment or contribution and are therefore interested in the author’s identity.

14. Collection of access data and log files

On the basis of our legitimate interests within the meaning of Article 6(1)(f) of the GDPR, we collect data on every access to the server on which this service is hosted (so-called server log files). Access data includes the name of the webpage accessed, the file, the date and time of access, the volume of data transferred, confirmation of successful access, browser type and version, the user’s operating system, the referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate cases of misuse or fraud) and is then deleted. Data that needs to be retained for further evidential purposes is exempt from deletion until the relevant incident has been fully resolved.

15. Social media presence

We maintain online presences on social networks and platforms in order to communicate with customers, prospective customers and users active on these platforms and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
Unless otherwise stated in our privacy policy, we process users’ data where they communicate with us within these social networks and platforms, for example by posting comments on our online presences or sending us messages.

16. Cookies & Audience Measurement

Cookies are pieces of information that are transmitted by our web server or third-party web servers to users’ web browsers, where they are stored for later retrieval. Cookies may be small files or other forms of information storage.
We use ‘session cookies’, which are stored only for the duration of your current visit to our website (e.g. to save your login status or the shopping basket function, thereby enabling you to use our online services at all). A session cookie contains a randomly generated unique identification number, known as a session ID. A cookie also contains information about its origin and its storage period. These cookies cannot store any other data. Session cookies are deleted once you have finished using our online service, for example when you log out or close your browser.
Users are informed about the use of cookies in the context of pseudonymous audience measurement in this privacy policy.
If users do not wish cookies to be stored on their computer, they are asked to disable the relevant option in their browser’s settings. Stored cookies can be deleted via the browser’s settings. Disabling cookies may result in functional limitations on this website.
You can object to the use of cookies for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/) and, additionally, the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
You can change your cookie settings here at any time.

17.1. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (‘Google’), on the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and commercial operation of our online service within the meaning of Article 6(1)(f) of the GDPR). Google uses cookies. The information generated by the cookie regarding users’ use of the online service is usually transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to analyse how users use our website, to compile reports on activity within the website, and to provide us with other services relating to the use of the website and internet usage. In doing so, pseudonymous user profiles may be created from the processed data.
We only use Google Analytics with IP anonymisation enabled. This means that users’ IP addresses are truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
The IP address transmitted by the user’s browser is not merged with other data held by Google. Users can prevent the storage of cookies by adjusting the settings in their browser software; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online service, as well as prevent Google from processing this data, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can disable tracking here: Disable Google Analytics
Further information on Google’s use of data, as well as options for settings and opting out, can be found on Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses data when you use our partners’ websites or apps”), https://policies.google.com/technologies/ads (“Data use for advertising purposes”), https://adssettings.google.com/authenticated (“Manage the information Google uses to show you adverts”).

17.2. Google Advertising

phaeno gGmbH has integrated Google Ads into this website. Google Ads is an online advertising service that allows advertisers to place adverts in Google’s search engine results. Google Ads enables an advertiser to specify certain keywords in advance, so that an advert is displayed in Google’s search engine results only when the user enters a search query relevant to those keywords. The operator of the Google Ads services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Ads is to promote our website by displaying interest-based advertising on third-party websites and in Google’s search results, and to display third-party advertising on our website.
If a data subject accesses our website via a Google advert, Google places a so-called cookie on the data subject’s IT system. A conversion cookie expires after thirty days and is not used to identify the data subject. Provided the cookie has not yet expired, the conversion cookie is used to track whether specific subpages on our website have been accessed.
The data and information collected through the use of the conversion cookie are used by Google to compile visitor statistics for our website. We, in turn, use these visitor statistics to determine the total number of users who were referred to us via Google Ads, i.e. to assess the success or failure of the respective Google Ads and to optimise our Google Ads for the future. Neither our company nor other Google Ads advertisers receive any information from Google that could be used to identify the data subject.
Processing is carried out on the basis of consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. There is currently no adequacy decision by the European Commission regarding the transfer of personal data to companies in the USA. However, Google is certified under the Privacy Shield Framework (https://www.privacyshield.gov/EU-US-Framework). Through this certification, the company has undertaken to comply with higher data protection standards than those customary in the United States, which are intended to be comparable to those of the European Union. The transfer of personal data to the USA therefore takes place solely on the basis of your explicit consent in accordance with Article 49(1), first sentence, point (a) of the GDPR.
The data subject may prevent our website from setting cookies at any time by adjusting the settings of their web browser accordingly, thereby permanently objecting to the setting of cookies. Adjusting the settings of the web browser used in this way would also prevent Google from setting a conversion cookie on the data subject’s IT system. Furthermore, a cookie already set by Google Ads can be deleted at any time via the web browser or other software programmes.
Furthermore, the data subject has the option to object to interest-based advertising by Google. To do so, the data subject must access the link www.google.de/settings/ads from each of the web browsers they use and select the desired settings there. Further information and Google’s applicable data protection policies can be found at https://www.google.de/intl/de/policies/privacy/.

18.1. Facebook Social Plugins

We use, on the basis of our legitimate interests (i.e. an interest in the analysis, optimisation and commercial operation of our online offering within the meaning of Article 6(1)(f) of the GDPR), social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may display interactive elements or content (e.g. videos, graphics or text posts) and can be recognised by one of the Facebook logos (a white ‘f’ on a blue tile, the terms ‘Like’, “Gefällt mir” or a “thumbs-up” symbol) or are labelled with the addition “Facebook Social Plugin”. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield Agreement and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user accesses a feature of this website that contains such a plugin, their device establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to the user’s device and integrated into the online service. In the process, user profiles may be created from the data processed. We therefore have no influence over the scope of the data that Facebook collects using this plugin and are therefore informing users in accordance with our current knowledge.
By embedding the plugins, Facebook receives the information that a user has accessed the relevant page of the online service. If the user is logged into Facebook, Facebook can associate the visit with their Facebook account. When users interact with the plugins – for example, by clicking the ‘Like’ button or posting a comment – the relevant information is transmitted directly from their device to Facebook and stored there. Even if a user is not a member of Facebook, it is still possible for Facebook to obtain and store their IP address. According to Facebook, only an anonymised IP address is stored in Germany.
Users can find out about the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and their rights and settings options for protecting their privacy, in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not wish Facebook to collect data about them via this online service and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Further settings and the option to object to the use of data for advertising purposes are available within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. These settings apply across all platforms, i.e. they are applied to all devices, such as desktop computers or mobile devices.

18.2. Meta Pixel

On this website, we use the Facebook visitor action pixel, provided by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, for conversion tracking. This allows us to track the behaviour of website visitors after they have been redirected to the provider’s website by clicking on a Facebook advert. This enables us to evaluate the effectiveness of Facebook adverts for statistical and market research purposes and to optimise future advertising campaigns.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, meaning that a link to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook’s Data Use Policy. This enables Facebook to display adverts on Facebook pages as well as outside of Facebook. As the website operator, we have no control over this use of the data. The use of Meta Pixel is based on Article 6(1)(f) of the GDPR.
The website operator has a legitimate interest in effective advertising measures, including on social media. You can find further information on the protection of your privacy in Facebook’s Privacy Policy: https://de-de.facebook.com/about/privacy/.
You can also disable the ‘Custom Audiences’ remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can opt out of Facebook’s behaviour-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

19. Newsletter

The following information explains the content of our newsletter, as well as the procedures for subscription, distribution and statistical analysis, and your rights to object. By subscribing to our newsletter, you agree to receive it and to the procedures described.
Content of the newsletter: We send out newsletters, emails and other electronic communications containing promotional information (hereinafter ‘newsletters’) only with the consent of the recipients or where permitted by law. Where the content of the newsletter is specifically described as part of the subscription process, this content forms the basis for the user’s consent. In addition, our newsletters contain information about our offers, promotions and our company.
Double opt-in and logging: Subscription to our newsletter takes place via a so-called double opt-in procedure. This means that, after subscribing, you will receive an email asking you to confirm your subscription. This confirmation is necessary to ensure that no one can subscribe using someone else’s email address. Newsletter subscriptions are logged so that we can provide evidence of the subscription process in accordance with legal requirements. This includes storing the time of subscription and confirmation, as well as the IP address. Any changes to your data stored with the mailing service provider are also logged.
Mailing service provider: The newsletter is sent via CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, hereinafter referred to as the ‘mailing service provider’. You can view the mailing service provider’s privacy policy here: www.cleverreach.com/de/datenschutz/.
Furthermore, according to the mailing service provider’s own information, it may use this data in pseudonymous form, i.e. without linking it to a specific user, to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and presentation of the newsletters or for statistical purposes to determine which countries the recipients come from. However, the mailing service provider does not use the data of our newsletter subscribers to contact them directly or to pass it on to third parties.
Subscription details: To subscribe to the newsletter, you simply need to provide your email address.
Performance measurement – The newsletters contain a so-called ‘web beacon’, i.e. a pixel-sized file that is retrieved from the mailing service provider’s server when the newsletter is opened. When this file is retrieved, technical information – such as details about your browser and system – as well as your IP address and the time of retrieval are collected. This information is used to improve the services technically on the basis of the technical data, or to analyse target groups and their reading behaviour based on their access locations (which can be determined using the IP address) or access times. The statistical analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. Although this information can, for technical reasons, be attributed to individual newsletter recipients, it is neither our intention nor that of the email service provider to monitor individual users. Rather, the analyses serve to help us identify our users’ reading habits and tailor our content accordingly, or to send different content based on our users’ interests.
Germany: The sending of the newsletter and the measurement of its success are based on the consent of the recipients in accordance with Article 6(1)(a), Article 7 of the GDPR in conjunction with Section 7(2)(3) of the German Unfair Commercial Practices Act (UWG), or on the basis of the statutory authorisation pursuant to Section 7(3) of the UWG.
The registration process is logged on the basis of our legitimate interests in accordance with Article 6(1)(f) of the GDPR and serves as proof of consent to receive the newsletter.
Cancellation/Withdrawal – You may cancel your subscription to our newsletter at any time, i.e. withdraw your consent. A link to unsubscribe from the newsletter can be found at the end of every newsletter. If users have only subscribed to the newsletter and have cancelled this subscription, their personal data will be deleted.

20. Integration of third-party services and content

Within our online offering, we incorporate, on the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and commercial operation of our online offering within the meaning of Article 6(1)(f) of the GDPR), to integrate content or services from third-party providers in order to incorporate their content and services, such as videos or fonts (hereinafter collectively referred to as “content”). This always requires the third-party providers of this content to collect users’ IP addresses, as they would be unable to send the content to users’ browsers without the IP address. The IP address is therefore necessary for the display of this content. We endeavour to use only such content where the respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as ‘web beacons’) for statistical or marketing purposes. These ‘pixel tags’ enable information, such as visitor traffic on the pages of this website, to be analysed. This pseudonymous information may also be stored in cookies on the user’s device and may include, amongst other things, technical information about the browser and operating system, referring websites, time of visit and further details regarding the use of our online service; it may also be linked to such information from other sources.
The following section provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and – in some cases, as already mentioned here – options to object (so-called ‘opt-out’):
If our customers use third-party payment services (e.g. PayPal or Sofortüberweisung), the terms and conditions and privacy policies of the respective third-party providers apply; these can be accessed via the relevant websites or transaction applications.
Maps are provided by the ‘Google Maps’ service operated by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: www.google.com/policies/privacy/, opt-out: www.google.com/settings/ads/.
Videos from the “YouTube” platform provided by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.
Features of the Instagram service are integrated into our website. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This enables Instagram to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Instagram. Privacy policy: http://instagram.com/about/legal/privacy/.
Functions of the Twitter service or platform (hereinafter referred to as ‘Twitter’) may be integrated into our online offering. Twitter is a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. These features include the display of our posts on Twitter within our online service, a link to our Twitter profile, and the ability to interact with Twitter’s posts and features, as well as to measure whether users access our online service via the advertisements we place on Twitter (so-called conversion tracking). Twitter is certified under the Privacy Shield Agreement and thereby guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy policy: https://twitter.com/de/privacy, opt-out: https://twitter.com/personalization.

20. Use of the MoinAI chatbot – from mid-June

On our website, you can use the MoinAI chatbot to get quick answers to questions about phaeno, our offerings and our services. The automated chatbot is a product of knowhere GmbH, Karolinenstraße 9, 20357 Hamburg.

To ensure you can seamlessly continue a conversation you have started after a break or during a subsequent visit to our website, an anonymous identifier is stored in your browser at the start of the chat. This ensures the dialogue is retained even across multiple sessions. Your chat histories are automatically deleted after 90 days at the latest.

You can find more information on knowhere GmbH’s data protection policy here:
https://www.iubenda.com/privacy-policy/59451072.

21. Terms and Conditions for phaeno competitions

The following applies generally to competitions held within the exhibition

The organiser of the competitions is phaeno gGmbH, Willy-Brandt-Platz 1, 38440 Wolfsburg.
Entry period: This will be announced on or via the relevant media. Entries received after the deadline will not be considered.
Eligibility: Participants must be at least 18 years old and resident in Germany. Employees of phaeno gGmbH and their relatives are excluded.
The rules of entry will be communicated via the relevant media (postcard, online competition form, social media channels). Mandatory details: Name, address and email address so that we can contact you should you win.
We will notify winners promptly or as communicated in the competition via email. Prizes will lapse after 14 days. We will post prizes by post. Vouchers or voucher codes will be sent by email
We process data (name, email address, postal address) solely for the purpose of running the competition (Article 6(1)(b) of the GDPR). The digital competition is run via the website. Information on data storage: The competition data will be stored on the phaeno email server for the duration of the competition.

phaeno reserves the right to amend or terminate competitions for good cause. Enquiries to: kommunikation@phaeno.de