Data protection

Status: November 11, 2019

Responsible

Fabian Silver
Edelweißstraße 8
13158 Berlin

imprint: https://www.carniflor.de/impressum/

Overview of processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

types of data processed

Inventory data (e.g. names, addresses).
Content data (e.g. text inputs, photographs, videos).
Contact details (e.g. email, telephone numbers).
Meta/communication data (e.g. device information, IP addresses).
Usage data (e.g. websites visited, interest in content, access times).
Contract data (e.g. subject matter of the contract, term, customer category).
Payment data (e.g. bank details, invoices, payment history).

Categories of data subjects

Employees (e.g. staff, applicants, former employees).
Business and contractual partners.
interested parties.
communication partner.
Customers.
Users (e.g. website visitors, users of online services).
Prize draw and competition participants.

purposes of processing

Affiliate tracking.
Provision of our online offering and user-friendliness.
Visit action evaluation.
Office and organizational procedures.
Direct marketing (e.g. via email or post).
Conducting competitions and contests.
Feedback (e.g. collecting feedback via online form).
Interest-based and behavior-based marketing.
Contact inquiries and communication.
Conversion measurement (measuring the effectiveness of marketing measures).
Profiling (Creating user profiles).
Remarketing.
Reach measurement (e.g. access statistics, recognition of returning visitors).
security measures.
Tracking (e.g. interest-/behavior-based profiling, use of cookies).
Contractual services and service.
Managing and responding to inquiries.

Relevant legal bases

"Below, we share the legal bases of the General Data Protection Regulation (GDPR) on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence and registered office."

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – The data subject has given their consent to the processing of their personal data for a specific purpose or purposes.
Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR) – The processing is necessary for the fulfillment of a contract to which the data subject is a party, or for the implementation of pre-contractual measures that take place at the request of the data subject.
Legal Obligation (Art. 6 para. 1 sentence 1 lit. c. GDPR) – The processing is necessary for the fulfillment of a legal obligation to which the controller is subject.
Protection of vital interests (Art. 6 para. 1 sentence 1 lit. d. GDPR) – The processing is necessary to protect the vital interests of the data subject or another natural person.
Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national data protection regulations apply in Germany. This includes in particular the law to protect against misuse of personal data during data processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special regulations on the right to information, the right to deletion, the right to object, the processing of special categories of personal data, processing for other purposes and transmission and automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for the purposes of the employment relationship (Section 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. Furthermore, state data protection laws of the individual federal states may apply.

security measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons to ensure a level of protection appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, disclosure, ensuring availability and its separation. We have also set up procedures to ensure that the rights of those affected are exercised, data are deleted and responses are made to data threats. We also take the protection of personal data into account when developing or selecting hardware, software and procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

SSL encryption (https): To protect the data you transmit via our online services, we use SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser.

Transmission and disclosure of personal data

As part of our processing of personal data, it may occur that the data is transmitted to other locations, companies, legally independent organizational units, or individuals, or disclosed to them. Recipients of this data may include, for example, payment institutions in the context of payment transactions, service providers commissioned with IT tasks, or providers of services and content that are integrated into a website. In such cases, we comply with legal requirements and, in particular, conclude corresponding contracts or agreements that serve to protect your data with the recipients of your data.

Data processing in third countries

"If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)), or if the processing takes place in the context of using services from third parties or the disclosure or transmission of data to other persons, entities, or companies, this will only occur in accordance with the legal requirements."

Subject to explicit consent or contractual or legal requirements for transmission, we process or allow the data to be processed only in third countries with an acknowledged level of data protection, which includes US processors certified under the "Privacy Shield," or on the basis of special guarantees, such as contractual obligations through so-called standard contractual clauses of the EU Commission, the existence of certifications, or binding internal data protection regulations, (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de ).

use of cookies

Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, language settings on a webpage, login status, a shopping cart, or the point at which a video was watched. The term cookies also includes other technologies that fulfill the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also referred to as "user IDs").

The following cookie types and functions are distinguished:

Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed their browser.
Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. The interests of users, which are used to measure reach or for marketing purposes, can also be stored in such a cookie.
First-party cookies: First-party cookies are set by us.
Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (also: essential or absolutely necessary) cookies: Cookies can, on the one hand, be absolutely necessary for the operation of a website (e.g. to save logins or other user input or for security reasons).
Statistics, Marketing, and Personalization Cookies: Furthermore, cookies are generally used for reach measurement as well as when a user's interests or behavior (e.g., viewing certain content, using features, etc.) are stored in a user profile on individual websites. Such profiles are used to display content to users that corresponds to their potential interests. This process is also referred to as "tracking," i.e., monitoring the potential interests of users. To the extent that we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.

Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you agree to the use of cookies, the legal basis for processing your data is the declared consent. Otherwise, the data processed using cookies will be processed on the basis of our legitimate interests (e.g. in the commercial operation of our online offering and its improvement) or if the use of cookies is necessary to fulfill our contractual obligations.

General Information on Revocation and Opposition (Opt-Out): Depending on whether the processing is based on consent or legal permission, you have the option to revoke any given consent or to object to the processing of your data through cookie technologies at any time (collectively referred to as "Opt-Out"). You can initially express your objection through your browser settings, e.g., by disabling the use of cookies (which may also limit the functionality of our online services). An objection to the use of cookies for online marketing purposes can also be made through a variety of services, especially in the case of tracking, via the websites http://optout.aboutads.info and http://www.youronlinechoices.com/. Additionally, you can receive further objection notices as part of the information provided about the service providers and cookies used.

Processing of cookie data based on consent: Before we process or allow the processing of data in the context of using cookies, we ask users for a revocable consent at any time. Until consent is given, only cookies that are necessary for the operation of our online services will be used. Their use is based on our interest and the interest of users in the expected functionality of our online services.

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g. website visitors, users of online services).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Commercial and business services

We process data of our contractual and business partners, e.g., customers and prospects (collectively referred to as "contract partners") within the framework of contractual and comparable legal relationships as well as related measures and in the context of communication with the contract partners (or pre-contractually), e.g., to respond to inquiries.

We process this data to fulfill our contractual obligations, to secure our rights, and for the purposes of the administrative tasks associated with this information as well as corporate organization. We only pass on the data of the contractual partners to third parties within the framework of applicable law to the extent necessary for the aforementioned purposes or to fulfill legal obligations, or with the consent of the contractual partners (e.g., to involved telecommunications, transport, and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). The contractual partners will be informed about further forms of processing, e.g., for marketing purposes, within the framework of this privacy policy.

We inform the contractual partners which data is required for the aforementioned purposes before or as part of data collection, e.g. in online forms, through special marking (e.g. colors) or symbols (e.g. asterisks, etc.), or in person.

We delete the data after the expiry of statutory warranty and comparable obligations, i.e. generally after 4 years, unless the data is stored in a customer account, e.g. as long as it must be retained for legal archiving reasons (e.g. for Tax purposes usually 10 years). We delete data that was disclosed to us by the contractual partner as part of an order in accordance with the specifications of the order, generally after the end of the order.

To the extent that we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.

Economic analyzes and market research: For business reasons and in order to be able to identify market trends, wishes of contractual partners and users, we analyze the data we have on business transactions, contracts, inquiries, etc., classifying the group of those affected Persons contractual partners, interested parties, customers, visitors and users of our online offering may fall.

The analyzes are carried out for the purpose of business evaluations, marketing and market research (e.g. to determine customer groups with different characteristics). If available, we can take into account the profiles of registered users including their information, e.g. about services used. The analyzes serve us alone and are not disclosed externally unless they are anonymous analyzes with summarized, i.e. anonymized, values. We also take the privacy of users into account and process the data for analysis purposes as pseudonymously as possible and, if possible, anonymously (e.g. as summarized data).

Shop and E-Commerce: We process our customers' data to enable them to select, purchase, or order the chosen products, goods, as well as related services, and to facilitate their payment and delivery, or execution.

The required information is marked as such within the framework of the ordering or comparable acquisition process and includes the information needed for delivery, provision, and billing, as well as contact information to enable any necessary consultation.

Educational and Training Services: We process the data of the participants in our educational and training offerings (uniformly referred to as "trainees"), in order to provide our training services to them. The data processed in this context, the type, scope, purpose, and necessity of their processing are determined by the underlying contractual and training relationship. The forms of processing also include performance evaluation and the assessment of our services as well as those of the instructors.

As part of our activities, we may also process special categories of data, particularly information regarding the health of trainees and apprentices, as well as data revealing ethnic origin, political opinions, religious or philosophical beliefs. For this purpose, we obtain explicit consent from the trainees and apprentices if necessary, and we only process the special categories of data otherwise if it is required for the provision of training services, for health care purposes, social protection, or the protection of vital interests of the trainees and apprentices.

"If it is necessary for the fulfillment of our contract, for the protection of vital interests, or required by law, or if there is consent from the trainees, we disclose or transmit the data of the trainees to third parties or contractors, such as authorities or in the field of IT, office, or comparable services, while observing professional legal requirements."

Artistic and literary services: We process the data of our clients to enable them to select, acquire, or commission the chosen services or works, as well as related activities, and to facilitate their payment and delivery or execution.

The required information is marked as such within the framework of the order, purchase, or comparable contract conclusion and includes the information needed for delivery and billing as well as contact information to enable any necessary consultations.

Publication Activity: We process the data of our contact partners, interview partners, and other individuals who are the subject of our publishing, editorial, and journalistic activities, as well as related activities. In this context, we refer to the applicability of the protective provisions of freedom of opinion and press according to Art. 85 GDPR in conjunction with the respective national laws. The processing serves to fulfill our contractual activities and takes place, in particular, on the basis of the public interest in information and media offerings.

Travel-related services: We process the data of our customers and prospects (collectively referred to as "customers") in accordance with the underlying contractual relationship. We may also process information about the characteristics and circumstances of individuals or their belongings if this is necessary within the framework of the contractual relationship. This may include, for example, information about personal living conditions, mobile assets, and financial situations.

"As part of our assignment, it may be necessary for us to process special categories of data within the meaning of Art. 9 para. 1 GDPR, in particular information regarding a person's health. The processing is carried out to protect the health interests of the clients and otherwise only with the consent of the clients."

"If required for the fulfillment of the contract or by law, or with the consent of the customers, or based on our legitimate interests, we disclose or transmit customer data, e.g., to the service providers involved in the fulfillment of travel services."

Events and Activities: We process the data of participants in the events and activities we offer or organize (hereinafter collectively referred to as "participants" and "events") to enable them to participate in the events and to take advantage of the services or promotions associated with participation.

"If we process health-related data, religious, political, or other special categories of data within this framework, it will be done in the context of transparency (e.g., at themed events or for health prevention, safety, or with the consent of the affected individuals)."

The required information is marked as such within the framework of the order, purchase, or comparable contract conclusion and includes the information needed for service provision and billing, as well as contact information to enable any necessary consultations. To the extent that we gain access to information from end customers, employees, or other individuals, we process this in accordance with legal and contractual requirements.

Further information on commercial services: We process the data of our customers and clients (hereinafter collectively referred to as "customers") in order to enable them to select, purchase or commission the chosen services or works, as well as related activities, and to facilitate their payment and delivery or execution or provision.

Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. email, telephone numbers), contract data (e.g. subject matter of the contract, term, customer category), usage data ( e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Interested parties, business and contractual partners, customers.
Purposes of processing: Contractual services and support, contact inquiries and communication, office and organizational procedures, management and response to inquiries, visitor action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), security measures.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legal obligation (Art. 6 Para. 1 S. 1 lit. c. GDPR), entitled parties Interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Use of Online Marketplaces for E-Commerce

"We offer our services on online platforms operated by other service providers. In this context, in addition to our privacy policy, the privacy policies of the respective platforms apply. This is particularly true with regard to the methods used on the platforms for reach measurement and interest-based marketing."

Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. email, telephone numbers), contract data (e.g. subject matter of the contract, term, customer category), usage data ( e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Customers.
Purposes of processing: Contractual services and service.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Services and service providers used:

Amazon: Online marketplace for e-commerce; Service providers: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l., and Amazon Media EU S.à.r.l., all four based at 38, avenue John F. Kennedy, L-1855 Luxembourg, as well as Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich (collectively "Amazon Europe"), parent company: Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA; Website: https://www.amazon.de/; Privacy policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010; Privacy Shield (guaranteeing data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active.
eBay: Online marketplace for e-commerce; Service provider: eBay Marketplaces GmbH, Helvetiastrasse 15/17, 3005 Bern, Switzerland; Website: https://www.ebay.de/; Privacy policy: https://www.ebay.de/help/policies/member-behavior-policies/datenschutzerklrung?id=4260.
Spreadshirt (SPOD), Online marketplace for e-commerce; service provider: sprd.net AG, Gießerstraße 27, 04229 Leipzig. Website: https://www.spreadshirt.de/ & https://www.spod.com/ Privacy policy: https://www.spreadshirt.de/datenschutz-C3928 & https://faq.spod.com/hc/en-us/articles/360020572720-Privacy-Policy

Payment service provider

"In the context of contractual and other legal relationships, based on statutory obligations or otherwise on the basis of our legitimate interests, we offer the affected individuals efficient and secure payment options and additionally use other payment service providers alongside banks and credit institutions (collectively referred to as 'payment service providers')."

The data processed by the payment service providers includes inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, amount, and recipient-related information. This information is necessary to carry out the transactions. However, the entered data is only processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, but only information confirming or denying the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit reporting agencies. This transmission aims to verify identity and creditworthiness. For this purpose, we refer to the terms and conditions and the privacy notices of the payment service providers.

"The terms and conditions and the privacy notices of the respective payment service providers apply to payment transactions, which can be accessed on the respective websites or transaction applications. We also refer to these for further information and the assertion of withdrawal, information, and other rights of the affected parties."

Processed data types: Master data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contract data (e.g. subject matter of the contract, duration, customer category), usage data (e.g. visited websites, interest in content, access times), meta-/communication data (e.g. device information, IP addresses).
Affected persons: Customers, prospects.
Purposes of processing: Contractual services and support, contact inquiries and communication, affiliate tracking.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Services and service providers used:

Amazon Payments: Payment services; Service provider: Amazon Payments Europe S.C.A. 38 avenue J.F. Kennedy, L-1855 Luxembourg; Website: https://pay.amazon.com/de; Privacy policy: https://pay.amazon.com/de/help/201212490.
PayPal: Payment services and solutions (e.g. PayPal, PayPal Plus, Braintree); Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Website: https://www.paypal.com/de; Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Registration and Login

Users can create a user account. During the registration process, users are informed of the required mandatory information and this information is processed for the purpose of providing the user account based on contractual obligations. The processed data includes, in particular, the login information (name, password, and an email address). The data entered during registration is used for the purposes of using the user account and its intended purpose.

Users may be informed via email about transactions relevant to their user account, such as technical changes. If users have terminated their user account, their data regarding the user account will be deleted, subject to any legal retention obligations. It is the users' responsibility to secure their data upon termination before the end of the contract. We are entitled to irretrievably delete all data of the user stored during the contract period.

In the context of using our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the users in protection against abuse and other unauthorized use. In principle, this data is not passed on to third parties unless it is necessary for the enforcement of our claims or there is a legal obligation to do so.

Online Forum: Participation in the forum requires registration, during which, subject to other information in the registration form, a name, a password, and the email address to which the access data will be sent must be provided. For security reasons, the password should meet current technical standards, meaning it should be complex (users will be informed of this during registration if necessary) and not used elsewhere. Contributions in the forum are visible to the public unless their visibility is restricted to certain members or member groups. The contributions of the authors are stored with their names, if registered or provided, the time of entry, and the content of the entry. During registrations and when making entries, the IP addresses of the users are also stored in case the entries contain prohibited content and the IP addresses could serve legal prosecution. The responsible party reserves the right to delete registrations and entries based on a reasonable assessment.

Two-Factor Authentication: Two-Factor Authentication provides an additional layer of security for your user account and ensures that only you can access your account, even if someone else knows your password.

"For this purpose, you must perform an additional authentication measure in addition to your password (e.g., enter a code sent to a mobile device). We will inform you about the procedure we use."

Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), meta/communication data (e.g. device information, IP addresses), usage data (e.g. visited websites, interest in content, access times).
Affected persons: Users (e.g. website visitors, users of online services).
Purposes of processing: Contractual services and support, security measures, management and response to inquiries.
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

blogs and publication media

"We use blogs or comparable means of online communication and publication (hereinafter referred to as "publication medium"). The data of the readers will only be processed for the purposes of the publication medium to the extent necessary for its presentation and the communication between authors and readers or for security reasons. Furthermore, we refer to the information on the processing of visitors to our publication medium within the framework of this privacy notice."

Comments and Contributions: When users leave comments or other contributions, their IP addresses may be stored based on our legitimate interests. This is done for our security in case someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we can be held liable for the comment or contribution and are therefore interested in the identity of the author.

Furthermore, we reserve the right to process user information for the purpose of spam detection based on our legitimate interests.

"On the same legal basis, we reserve the right to store the IP addresses of users for the duration of surveys and to use cookies to prevent multiple voting."

The information about the person communicated in the context of comments and contributions, any contact and website information, as well as the content-related information will be stored by us permanently until the users object.

Comment subscriptions: Follow-up comments can be subscribed to by users with their consent. Users will receive a confirmation email to verify that they are the owner of the entered email address. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information on how to revoke consent. For the purpose of proving user consent, we store the registration time along with the users' IP address and delete this information when users unsubscribe from the subscription.

"You can cancel the receipt of our subscription at any time, i.e., revoke your consents. We can store the unsubscribed email addresses for up to three years based on our legitimate interests before we delete them, in order to be able to prove a previously given consent. The processing of this data will be limited to the purpose of possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed."

Retrieval of WordPress Emojis and Smilies: Within our WordPress blog, graphic emojis (or smilies), i.e., small graphic files that express feelings, are used for the efficient integration of content elements, sourced from external servers. The providers of the servers collect the IP addresses of the users. This is necessary so that the emoji files can be transmitted to the users' browsers.

Profile pictures from Gravatar: We use the Gravatar service within our online offerings, particularly in the blog.

Gravatar is a service where users can sign up and store profile pictures and their email addresses. When users leave posts or comments on other online presences (especially in blogs) with the respective email address, their profile pictures can be displayed next to the posts or comments. For this purpose, the email address provided by the users is transmitted to Gravatar in an encrypted form to check whether a profile is stored for it. This is the only purpose of transmitting the email address. It is not used for other purposes and is deleted afterwards.

The use of Gravatar is based on our legitimate interests, as we provide authors of posts and comments the opportunity to personalize their contributions with a profile picture using Gravatar.

By displaying the images, Gravatar learns the IP address of the users, as this is necessary for communication between a browser and an online service.

If users do not want an avatar linked to their email address at Gravatar to appear in the comments, they should use an email address for commenting that is not registered with Gravatar. We also point out that it is possible to use an anonymous or even no email address if users do not wish for their email address to be sent to Gravatar. Users can completely prevent the transmission of data by not using our commenting system.

Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), usage data (e.g. visited websites, interest in content, access times), meta-/communication data (e.g. device information, IP addresses), contract data (e.g. subject of the contract, duration, customer category).
Affected persons: Users (e.g. website visitors, users of online services).
Purposes of processing: Contractual services and support, feedback (e.g. collecting feedback via online form), security measures, management and response to inquiries, contact requests and communication, provision of our online offerings and user-friendliness.
Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR), Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Protection of vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR).

Services and service providers used:

Retrieval of WordPress Emojis and Smilies: Retrieval of WordPress Emojis and Smilies; Service provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Website: https://automattic.com; Privacy policy: https://automattic.com/privacy.
Profile pictures from Gravatar: Profile pictures; Service provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Website: https://automattic.com; Privacy policy: https://automattic.com/privacy.
WordPress.com: Hosting platform for blogs; Service provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Website: https://wordpress.com; Privacy policy: https://automattic.com/de/privacy/.

Contact us

When you contact us (e.g. via contact form, email, telephone or via social media), the information provided by the person making the request will be processed to the extent that this is necessary to answer the contact requests and any requested measures.

Answering contact inquiries within the framework of contractual or pre-contractual relationships is carried out to fulfill our contractual obligations or to answer (pre-)contractual inquiries and otherwise on the basis of the legitimate interests in answering the inquiries.

Processed Data Types: Inventory data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), usage data (e.g. visited websites, interest in content, access times), meta-/communication data (e.g. device information, IP addresses).
Affected persons: Communication partners.
Purposes of processing: Contact requests and communication.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Communication via Messenger

"We use messenger services for communication purposes and therefore ask you to pay attention to the following information regarding the functionality of the messengers, encryption, the use of communication metadata, and your options for objection."

You can also contact us through alternative means, e.g. via telephone or email. Please use the contact options provided to you or the contact options specified within our online offer.

In the case of end-to-end encryption of content (i.e., the content of your message and attachments), we would like to point out that the communication content (i.e., the content of the message and attached images) is encrypted from end to end. This means that the content of the messages is not visible, not even to the messenger providers themselves. You should always use an up-to-date version of the messenger with encryption enabled to ensure the encryption of the message content.

"However, we also inform our communication partners that while the providers of the messengers cannot view the content, they can ascertain that and when communication partners are communicating with us, as well as process technical information about the communication partners' devices and, depending on their device settings, also location information (so-called metadata)."

Notes on Legal Bases: If we ask communication partners for permission before communicating with them via Messenger, the legal basis for our processing of their data is their consent. Furthermore, if we do not ask for consent and they, for example, contact us on their own, we use Messenger in relation to our contractual partners as a contractual measure and in the case of other interested parties and communication partners based on our legitimate interests in quick and efficient communication and meeting the needs of our communication partners for communication via Messengers. We also inform you that we will not transmit the contact details provided to us to the Messengers for the first time without your consent.

Revocation, objection, and deletion: You can revoke any consent given at any time and object to communication with us via Messenger at any time. In the case of communication via Messenger, we delete the messages in accordance with our general deletion policies (i.e., for example, as described above, after the end of contractual relationships, in the context of archiving requirements, etc.) and otherwise as soon as we can assume that we have answered any inquiries from the communication partners, when no reference to a previous conversation is expected and there are no legal retention obligations opposing the deletion.

Reservation of reference to other communication channels: In conclusion, we would like to point out that we reserve the right, for your safety, not to respond to inquiries via messenger. This is the case, for example, when contract details require special confidentiality or a response via messenger does not meet formal requirements. In such cases, we refer you to more appropriate communication channels.

Processed data types: Contact data (e.g. email, phone numbers), usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses), content data (e.g. text inputs, photographs, videos).
Affected persons: Communication partners.
Purposes of processing: Contact inquiries and communication, direct marketing (e.g. via email or postal mail).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Services and service providers used:

Facebook Messenger: Facebook Messenger with end-to-end encryption (the end-to-end encryption of Facebook Messenger requires activation unless it is enabled by default); service provider: https://www.facebook.com, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.facebook.com; privacy policy: https://www.facebook.com/about/privacy; Privacy Shield (ensuring data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; right to object (Opt-Out): https://www.facebook.com/settings?tab=ads.
WhatsApp: WhatsApp Messenger with end-to-end encryption; Service provider: WhatsApp Inc. WhatsApp Legal 1601 Willow Road Menlo Park, California 94025, USA; Website: https://www.whatsapp.com/; Privacy policy: https://www.whatsapp.com/legal; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG&status=Active.

Surveys and Questionnaires

The surveys and questionnaires conducted by us (hereinafter referred to as "surveys") are evaluated anonymously. The processing of personal data only occurs to the extent necessary for the provision and technical execution of the surveys (e.g., processing the IP address to display the survey in the user's browser or using a temporary cookie (session cookie) to allow a resumption of the survey) or if users have consented.

Notes on Legal Bases: If we ask participants for their consent to the processing of their data, this legal basis applies to the processing; otherwise, the processing of participants' data is based on our legitimate interests in conducting an objective survey.

Processed data types: Contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Communication partners, users (e.g. website visitors, users of online services).
Purposes of processing: Contact inquiries and communication, direct marketing (e.g. via email or postal mail), tracking (e.g. interest-/behavior-based profiling, use of cookies), feedback (e.g. collecting feedback via online form).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Services and service providers used:

Google Forms: Google Cloud Forms; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://firebase.google.com; Privacy policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Right to object (Opt-Out): Opt-Out Plugin: http://tools.google.com/dlpage/gaoptout?hl=en, Settings for displaying ads: https://adssettings.google.com/authenticated.

Provision of online offerings and web hosting

In order to be able to provide our online offering securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offering can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services as well as security and technical maintenance services.

The data processed as part of the provision of the hosting offer may include all information relating to the users of our online offer that arises in the context of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the content of online offerings to browsers, and all entries made within our online offering or on websites.

E-mail sending and hosting: The web hosting services we use also include sending, receiving and storing emails. For these purposes, the addresses of the recipients and senders as well as other information regarding the sending of emails (e.g. the providers involved) as well as the contents of the respective emails are processed. The aforementioned data may also be processed for SPAM detection purposes. We ask you to note that emails on the Internet are generally not sent encrypted. As a rule, emails are encrypted during transport, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore assume no responsibility for the transmission path of emails between the sender and receipt on our server.

Collection of access data and log files: We ourselves (or our web hosting provider) collect data about every access to the server (so-called server log files). The server log files include the address and name of the websites and files accessed, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP address. Addresses and the requesting provider belong.

The server log files can be used on the one hand for security purposes, e.g. to avoid overloading the servers (particularly in the case of abusive attacks, so-called DDoS attacks) and on the other hand to ensure the utilization of the servers and their stability.

Processed Data Types: Content data (e.g. text inputs, photographs, videos), usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g. website visitors, users of online services).
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

music and podcasts

"We use the hosting and analytics services of the service providers listed below to offer our audio content for listening or downloading and to obtain statistical information on the retrieval of the audio content."

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g. website visitors, users of online services).
Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors), visit action evaluation, profiling (creating user profiles).

Services and service providers used:

Soundcloud: Soundcloud – Music hosting; Service provider: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany; Website: https://soundcloud.com; Privacy policy: https://soundcloud.com/pages/privacy.
Spotify: Spotify – music hosting and widget; service provider: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden; website: https://www.spotify.com/de; privacy policy: https://www.spotify.com/de/legal/privacy-policy/.

Cloud Services

We use software services accessible over the Internet and executed on the servers of their providers (so-called "cloud services", also referred to as "software as a service") for the following purposes: document storage and management, calendar management, email sending, spreadsheets and presentations, exchange of documents, content and information with specific recipients or publication of websites, forms or other content and information as well as chats and participation in audio and video conferences.

In this context, personal data may be processed and stored on the servers of the providers, as far as they are part of communication processes with us or are otherwise processed by us, as outlined in this privacy policy. This data may particularly include master data and contact data of users, data related to transactions, contracts, other processes, and their contents. The providers of the cloud services also process usage data and metadata, which they use for security purposes and service optimization.

"If we provide forms or other documents and content for other users or publicly accessible websites with the help of cloud services, the providers may store cookies on the users' devices for the purposes of web analysis or to remember users' settings (e.g., in the case of media control)."

Notes on Legal Bases: If we request consent for the use of cloud services, the legal basis for processing is consent. Furthermore, their use may be part of our (pre)contractual services, provided that the use of cloud services has been agreed upon in this context. Otherwise, user data will be processed based on our legitimate interests (i.e., interest in efficient and secure management and collaboration processes).

Processed Data Types: Inventory data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), usage data (e.g. visited websites, interest in content, access times), meta-/communication data (e.g. device information, IP addresses).
Affected persons: Customers, employees (e.g. staff, applicants, former employees), interested parties, communication partners.
Purposes of processing: Office and organizational procedures.
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Services and service providers used:

Dropbox: Cloud storage services; Service provider: Dropbox, Inc., 333 Brannan Street, San Francisco, California 94107, USA; Website: https://www.dropbox.com/de; Privacy policy: https://www.dropbox.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0&status=Active; Standard contractual clauses (Guarantee of data protection level when processing in a third country): https://www.dropbox.com/terms/business-agreement-2016.
Google Cloud Services: Cloud storage services; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://cloud.google.com/; Privacy policy: https://www.google.com/policies/privacy, Security information: https://cloud.google.com/security/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000000001L5AAI&status=Active; Standard contractual clauses (Guarantee of data protection level when processing in a third country): https://cloud.google.com/terms/data-processing-terms; Additional information on data protection: https://cloud.google.com/terms/data-processing-terms.
Microsoft Cloud Services: Cloud storage services; Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA; Website: http://microsoft.com/en-us; Privacy policy: https://privacy.microsoft.com/en-us/privacystatement, Security information: https://www.microsoft.com/en-us/trustcenter; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active.

Newsletter and Broad Communication

We send newsletters, emails, and other electronic notifications (hereinafter "newsletters") only with the consent of the recipients or a legal permission. If the contents of the newsletter are specifically described as part of a subscription, they are decisive for the users' consent. Otherwise, our newsletters contain information about our services and us.

In order to register for our newsletters, it is generally sufficient to provide your email address. However, we may ask you to provide a name so that you can be addressed personally in the newsletter, or other information if this is necessary for the purposes of the newsletter.

Double opt-in procedure: Registration for our newsletter is generally carried out using a so-called double opt-in procedure. This means that after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else's email address. Registrations for the newsletter are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Deletion and Restriction of Processing: We can store the unsubscribed email addresses for up to three years based on our legitimate interests before we delete them, in order to be able to prove a previously given consent. The processing of this data will be limited to the purpose of possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the email address solely for this purpose in a blocking list (so-called "blacklist").

The registration process is recorded on the basis of our legitimate interests for the purpose of providing evidence of its proper execution. If we commission a service provider to send emails, this is done on the basis of our legitimate interests in an efficient and secure shipping system.

Notes on legal bases: The newsletter is sent on the basis of the consent of the recipient or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and to the extent that these are legally binding, e.g. in the case of advertising to existing customers , is allowed. If we commission a service provider to send emails, this is done on the basis of our legitimate interests. The registration process is recorded based on our legitimate interests to demonstrate that it was carried out in accordance with the law.

Contents: Information about us, our services, promotions, and offers.

Success Measurement: The newsletters contain a so-called "web beacon", i.e., a pixel-sized file that is retrieved from our server when the newsletter is opened, or, if we use a mailing service provider, from their server. As part of this retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of retrieval.

This information is used for the technical improvement of our newsletter based on technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. This analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if applicable, that of the mailing service provider, to monitor individual users. Rather, the evaluations serve to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The evaluation of the newsletter and the measurement of success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system, which serves both our business interests and meets the expectations of the users.

A separate revocation of the success measurement is unfortunately not possible; in this case, the entire newsletter subscription must be canceled or opposed.

Prerequisite for the use of free services: Consent to the sending of mailings may be made a prerequisite for the use of free services (e.g. access to certain content or participation in certain promotions). If users wish to use the free service without subscribing to the newsletter, we kindly ask you to get in touch.

Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), meta/communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interest of content, access times).
Affected persons: Communication partners, users (e.g. website visitors, users of online services).
Purposes of processing: Direct marketing (e.g. via email or postal mail), contractual services and support.
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).
Ability to object (opt-out): You can cancel your receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the contact options listed above, preferably email.

Services and service providers used:

Mailchimp: Email marketing platform; Service provider: "Mailchimp" – Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA; Website: https://mailchimp.com; Privacy policy: https://mailchimp.com/legal/privacy/; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.

Advertising communication via mail, fax, or telephone

We process personal data for the purposes of advertising communication, which can take place through various channels, such as email, telephone, mail, or fax. In this context, we observe the legal requirements and obtain the necessary consents, unless the communication is legally permitted.

The recipients have the right to revoke their consent at any time or to object to the advertising communication at any time.

After revocation or objection, we can store the data required to prove consent for up to three years based on our legitimate interests before deleting it. The processing of this data is limited to the purpose of possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

Types of data processed: Inventory data (e.g. names, addresses), contact details (e.g. email, telephone numbers).
Affected persons: Communication partners.
Purposes of processing: Direct marketing (e.g. by email or post).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Contests and Competitions

We process personal data of participants in competitions and contests only in compliance with the relevant data protection regulations, insofar as the processing is contractually necessary for the provision, execution, and settlement of the competition, the participants have consented to the processing, or the processing serves our legitimate interests (e.g., regarding the security of the competition or the protection of our interests against abuse through possible collection of IP addresses when submitting contest entries).

"If contributions from participants are published as part of the competitions (e.g., in the context of a vote or presentation of the competition entries or the winners or reporting on the competition), we would like to point out that the names of the participants may also be published in this context. Participants can object to this at any time."

"If the competition takes place within an online platform or a social network (e.g. Facebook or Instagram, hereinafter referred to as 'online platform'), the terms of use and data protection regulations of the respective platforms also apply. In these cases, we would like to point out that we are responsible for the information provided by the participants in the context of the competition and that inquiries regarding the competition should be directed to us."

The data of the participants will be deleted as soon as the competition or contest has ended and the data is no longer required to inform the winners or because inquiries regarding the competition are to be expected. In principle, the data of the participants will be deleted no later than 6 months after the end of the competition. Data of the winners may be retained longer, for example, to answer inquiries about the prizes or to fulfill the prize services; in this case, the retention period depends on the type of prize and can be up to three years for items or services, for example, to handle warranty cases. Furthermore, the data of the participants may be stored longer, for example, in the form of reporting on the competition in online and offline media.

If data was also collected for other purposes in the context of the competition, their processing and retention period are governed by the privacy notices for this use (e.g., in the case of a subscription to the newsletter in the context of a competition).

Processed data types: Master data (e.g. names, addresses), content data (e.g. text inputs, photographs, videos).
Affected persons: Contest and competition participants.
Purposes of processing: Conducting sweepstakes and competitions.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR).

Web analysis and optimization

Web analytics (also referred to as "reach measurement") serves to evaluate the visitor flows of our online offerings and can include behavior, interests, or demographic information about the visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify when our online offerings or their functions or content are used most frequently or invite reuse. We can also track which areas need optimization.

In addition to web analysis, we can also use testing procedures, for example to test and optimize different versions of our online offering or its components.

For these purposes, so-called user profiles can be created and stored in a file (so-called "cookie") or similar methods with the same purpose can be used. This information may include, for example, viewed content, visited websites and the elements used there, as well as technical information such as the browser used, the computer system used, and information about usage times. If users have consented to the collection of their location data, this may also be processed depending on the provider.

The users’ IP addresses are also stored. However, we use an IP masking process (i.e. pseudonymization by shortening the IP address) to protect users. In general, as part of web analysis, A/B testing and optimization, no clear user data (such as email addresses or names) is stored, but rather pseudonyms. This means that we and the providers of the software used do not know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.

Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for processing data is consent. Otherwise, user data will be processed based on our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this data protection declaration.

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g. website visitors, users of online services).
Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors), tracking (e.g. interest-/behavior-based profiling, use of cookies), visit action evaluation, profiling (creating user profiles), interest-based and behavior-based marketing.
Security measures: IP masking (pseudonymization of the IP address).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Services and service providers used:

Google Optimize: Use of Google Analytics data for the purpose of improving areas of our online offerings and better targeting our marketing measures to potential user interests; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://optimize.google.com; Privacy policy: https://policies.google.com/privacy; Privacy Shield (ensuring data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Right to object (Opt-Out): Opt-Out plugin: http://tools.google.com/dlpage/gaoptout?hl=de, Settings for displaying ads: https://adssettings.google.com/authenticated.
Jetpack (WordPress Stats): Jetpack provides analytics features for WordPress software. Service provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Website: https://automattic.com; Security measures: IP masking (pseudonymization of the IP address); Privacy policy: https://automattic.com/privacy, Cookie policy: https://jetpack.com/support/cookies.

online marketing

"We process personal data for the purposes of online marketing, which may include the marketing of advertising spaces or the presentation of advertising and other content (collectively referred to as "content") based on potential user interests as well as measuring their effectiveness."

For these purposes, so-called user profiles are created and stored in a file (so-called "cookie") or similar methods are used, through which the information relevant for displaying the aforementioned content about the user is stored. This information may include, for example, viewed content, visited websites, used online networks, as well as communication partners and technical information, such as the browser used, the computer system used, and information about usage times. If users have consented to the collection of their location data, this data may also be processed.

The users’ IP addresses are also stored. However, we use available IP masking procedures (i.e. pseudonymization by shortening the IP address) to protect users. In general, as part of the online marketing process, no clear user data (such as e-mail addresses or names) is stored, but rather pseudonyms. This means that we as well as the providers of online marketing processes do not know the actual identity of the users, but only the information stored in their profiles.

The information in the profiles is usually stored in cookies or using similar methods. These cookies can later generally be read on other websites that use the same online marketing process, analyzed for the purposes of displaying content, and supplemented with further data and stored on the server of the online marketing process provider.

"In exceptional cases, clear data can be assigned to the profiles. This is the case when users are, for example, members of a social network whose online marketing methods we use, and the network connects the users' profiles with the aforementioned information. We ask you to note that users may make additional agreements with the providers, for example, by consenting during the registration process."

We generally only receive access to aggregated information about the success of our advertisements. However, as part of so-called conversion measurements, we can check which of our online marketing processes have led to a so-called conversion, i.e., for example, to the conclusion of a contract with us. Conversion measurement is used solely to analyze the success of our marketing measures.

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g. website visitors, users of online services), interested parties.
Purposes of processing: Tracking (e.g. interest-/behavior-based profiling, use of cookies), remarketing, visit action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors).
Security measures: IP masking (pseudonymization of the IP address).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).
Right to Object (Opt-Out): We refer to the privacy notices of the respective providers and the objection options provided for the providers (so-called "Opt-Out"). If no explicit opt-out option has been provided, there is the possibility that you can disable cookies in your browser settings. However, this may limit the functionality of our online services. Therefore, we additionally recommend the following opt-out options, which are offered summarizingly for each respective area: a) Europe: https://www.youronlinechoices.eu. b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Cross-Border: http://optout.aboutads.info.

Services and service providers used:

Google Analytics: Online marketing and web analysis; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Right to object (Opt-Out): Opt-Out plugin: http://tools.google.com/dlpage/gaoptout?hl=de, Settings for displaying ads: https://adssettings.google.com/authenticated.
Google Ads and Conversion Tracking: We use the online marketing method "Google Ads" to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that they are shown to users who have a presumed interest in the ads. Furthermore, we measure the conversion of the ads. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page marked with a so-called "conversion tracking tag." We do not receive any information that would allow us to identify users. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google Ad Manager: We use the "Google Marketing Platform" (and services such as "Google Ad Manager") to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.). The Google Marketing Platform is characterized by displaying ads in real-time based on users' presumed interests. This allows us to display ads for and within our online offerings more targeted, presenting users only with ads that potentially match their interests. For example, if a user is shown ads for products they have shown interest in on other online offerings, this is referred to as "Remarketing." Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google Adsense with personalized ads: We use the service Google Adsense with personalized ads, which helps display ads within our online offerings and for which we receive compensation for their display or other use. ; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google Adsense with non-personalized ads: We use the service Google Adsense with non-personalized ads, which helps display ads within our online offerings, and we receive compensation for their display or other use. ; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
LinkedIn: Insights Tag / Conversion Measurement; Service Provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; Website: https://www.linkedin.com; Security Measures: IP Masking (Pseudonymization of the IP Address); Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy: https://www.linkedin.com/legal/cookie_policy; Privacy Shield (Ensuring Data Protection Level when Processing Data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; Right to Object (Opt-Out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Twitter: Twitter Marketing and Advertising; Service Provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Website: https://twitter.com/de; Privacy Policy: https://twitter.com/de/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active; Right to Object (Opt-Out): https://twitter.com/personalization.

Affiliate programs and affiliate links

"In our online offering, we incorporate so-called affiliate links or other references (which may include discount codes, for example) to the offers and services of third-party providers (collectively referred to as "affiliate links"). If users follow the affiliate links or subsequently take advantage of the offers, we may receive a commission or other benefits from these third-party providers (collectively referred to as "commission")."

In order to track whether users have taken advantage of the offers from an affiliate link we have used, it is necessary for the respective third parties to know that users have followed an affiliate link used within our online offering. The assignment of the affiliate links to the respective business transactions or other actions (e.g., purchases) is solely for the purpose of commission accounting and will be deleted as soon as it is no longer necessary for that purpose.

"For the purposes of the aforementioned assignment of affiliate links, the affiliate links may be supplemented with certain values that are part of the link or can be stored in other ways, e.g., in a cookie. The values may include, in particular, the originating website (referrer), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer, and an online identifier of the user."

Notes on Legal Bases: If we ask users for their consent to the use of third-party providers, the legal basis for processing data is consent. Furthermore, their use may be part of our (pre)contractual services, provided that the use of third-party providers has been agreed upon in this context. Otherwise, user data is processed on the basis of our legitimate interests (i.e., interest in efficient, economical, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this privacy policy.

Processed data types: Contract data (e.g. subject of the contract, duration, customer category), usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses), inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history).
Affected persons: Users (e.g. website visitors, users of online services), customers.
Purposes of processing: Affiliate tracking, contractual services and support.
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Services and service providers used:

Amazon Partner Program: Amazon – Partner Program – Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates. Service providers: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l, Amazon Services Europe S.à.r.l. and Amazon Media EU S.à.r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, as well as Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich (collectively "Amazon Europe"), parent company: Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA.; Website: https://www.amazon.de; Privacy Policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active.
eBay Partner Network: Service provider: eBay Partner Network, Inc., 2145 Hamilton Ave., San Jose, CA 95125, USA; Website: https://partnernetwork.ebay.de; Privacy policy: https://partnernetwork.ebay.de/legal#privacy-policy.

Offer of an affiliate program

"We offer an affiliate program, i.e., commissions or other benefits (collectively referred to as 'commission') for users (referred to as 'affiliates') who refer to our offers and services. The referral is made through a link assigned to the respective affiliate or other methods (e.g., discount codes) that allow us to recognize that the use of our services was based on the referral (collectively referred to as 'affiliate links')."

In order to track whether users have accessed our services through the affiliate links used by the affiliates, it is necessary for us to know that users have followed an affiliate link. The assignment of the affiliate links to the respective business transactions or to other

This module is only accessible after entering the license code "Privacy Policy German".

Do you already have a license code? Please enter it above in the premium area.

Or please purchase the license from us in the shop for business customers.

Do you want to know how the license acquisition works? Please take a look at our guide.

Claim For full text please purchase the license. Services For full text please purchase the license. alone For full text please purchase the license. Purpose For full text please purchase the license. Provision accounting For full text please purchase the license. is For full text please purchase the license. as soon as For full text please purchase the license. for For full text please purchase the license. Purpose For full text please purchase the license. more For full text please purchase the license. is.

For full text please purchase the license. purposes For full text please purchase the license. aforementioned For full text please purchase the license. the For full text please purchase the license. can For full text please purchase the license. affiliate links For full text please purchase the license. certain For full text please purchase the license. supplemented For full text please purchase the license. the For full text please purchase the license. component For full text please purchase the license. links For full text please purchase the license. or For full text please purchase the license. e.g. For full text please purchase the license. a For full text please purchase the license. stored For full text please purchase the license. can. For full text please purchase the license. the For full text please purchase the license. can For full text please purchase the license. the For full text please purchase the license. (referrer), For full text please purchase the license. time, For full text please purchase the license. online identifier For full text please purchase the license. operator For full text please purchase the license. website, For full text please purchase the license. the For full text please purchase the license. the For full text please purchase the license. was, For full text please purchase the license. online identifier For full text please purchase the license. respective For full text please purchase the license. the For full text please purchase the license. of For full text please purchase the license. links, For full text please purchase the license. type For full text please purchase the license. offer For full text please purchase the license. a For full text please purchase the license. of For full text please purchase the license. belong.

Notes For full text please purchase the license. Legal basis: For full text please purchase the license. we For full text please purchase the license. users For full text please purchase the license.

Processed data types: Contract data (e.g. subject of the contract, duration, customer category), usage data (e.g. visited websites, interest in content, access times).
Affected persons: Users (e.g. website visitors, users of online services), business and contractual partners.
Purposes of processing: Contractual services and service, affiliate tracking.
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

rating platforms

We participate in evaluation processes to evaluate, optimize and promote our services. If users rate us via the evaluation platforms or procedures involved or otherwise give feedback, the general terms and conditions or terms of use and the data protection information of the providers also apply. As a rule, the evaluation also requires registration with the respective provider.

In order to ensure that the reviewers have actually used our services, we transmit, with the consent of the customer, the necessary data regarding the customer and the service used to the respective review platform (including name, email address and Order number or article number). This data is used solely to verify the authenticity of the user.

Rating Widget: We integrate so-called "rating widgets" into our online offering. A widget is a functional and content element embedded in our online offering that displays variable information. It can be represented, for example, in the form of a seal or a comparable element, sometimes also referred to as a "badge." While the corresponding content of the widget is displayed within our online offering, it is retrieved at that moment from the servers of the respective widget provider. This is the only way to always show the current content, especially the most recent rating. For this, a data connection must be established from the webpage accessed within our online offering to the server of the widget provider, and the widget provider receives certain technical data (access data, including IP address) that is necessary for delivering the content of the widget to the user's browser.

Furthermore, the widget provider receives information that users have visited our online offerings. This information may be stored in a cookie and used by the widget provider to recognize which online offerings participating in the evaluation process have been visited by the user. The information may be stored in a user profile and used for advertising or market research purposes.

Types of data processed: Contract data (e.g. subject matter of the contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Customers, users (e.g. website visitors, users of online services).
Purposes of processing: Feedback (e.g. collecting feedback via online form), reach measurement (e.g. access statistics, recognition of returning visitors), visit action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Services and service providers used:

Trusted Shops (Trustedbadge): Reviews and Widget (Trustedbadge); Service provider: Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany; Website: https://www.trustedshops.de; Privacy policy: https://www.trustedshops.de/impressum/#datenschutz.
Trustpilot: Reviews and Widget; Service provider: Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark; Website: https://de.trustpilot.com; Privacy Policy: https://de.legal.trustpilot.com/end-user-privacy-terms.

Presences in social networks

"We maintain online presences within social networks to communicate with the users active there or to offer information about us there."

"We would like to point out that user data may be processed outside the European Union. This may pose risks for users, as it could make the enforcement of users' rights more difficult. With regard to US providers that are certified under the Privacy Shield or offer comparable guarantees of a secure level of data protection, we would like to point out that they commit to complying with the data protection standards of the EU."

Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).

For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

In the case of requests for information and the assertion of the rights of those affected, we would also like to point out that these can most effectively be asserted with the providers. Only the providers have access to user data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

Processed Data Types: Inventory data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), usage data (e.g. visited websites, interest in content, access times), meta-/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g. website visitors, users of online services).
Purposes of processing: Contact inquiries and communication, tracking (e.g. interest-/behavior-based profiling, use of cookies), remarketing, reach measurement (e.g. access statistics, recognition of returning visitors).
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Services and service providers used:

Instagram: Social network; Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy policy: http://instagram.com/about/legal/privacy.
Facebook: Social network; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Right to object (Opt-Out): Ad settings: https://www.facebook.com/settings?tab=ads; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, Data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
LinkedIn: Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; Right to object (Opt-Out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Twitter: Social network; Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy policy: https://twitter.com/de/privacy, (Settings) https://twitter.com/personalization; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
YouTube: Social Network; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Right to Object (Opt-Out): https://adssettings.google.com/authenticated.
Xing: Social Network; Service Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; Website: https://www.xing.de; Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

Plugins and embedded functions and content

"We integrate functional and content elements into our online offering that are sourced from the servers of their respective providers (hereinafter referred to as "third-party providers"). This may include, for example, graphics, videos, or social media buttons as well as posts (hereinafter uniformly referred to as "content")."

The integration always assumes that the third-party providers of this content process the users' IP addresses, as they would not be able to send the content to their browsers without the IP address. The IP address is therefore necessary for the display of this content or functions. We strive to use only such content whose respective providers use the IP address solely for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. Through the "pixel tags," information such as visitor traffic on the pages of this website can be evaluated. The pseudonymous information may also be stored in cookies on the users' devices and may include technical information about the browser and operating system, referring websites, visit times, as well as other details about the use of our online offerings, and may also be linked with such information from other sources.

Processed Data Types: Usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses), contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), inventory data (e.g. names, addresses).
Affected persons: Users (e.g. website visitors, users of online services), communication partners.
Purposes of Processing: Provision of our online services and user-friendliness, contractual services and support, contact inquiries and communication, direct marketing (e.g. via email or postal mail), tracking (e.g. interest-/behavior-based profiling, use of cookies), interest-based and behavior-based marketing, profiling (creating user profiles), reach measurement (e.g. access statistics, recognition of returning visitors), feedback (e.g. collecting feedback via online form), security measures, management and response to inquiries.
Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR), consent (Art. 6 para. 1 sentence 1 lit. a GDPR), performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR).

Services and service providers used:

Facebook Social Plugins: Facebook Social Plugins – This may include content such as images, videos, or texts and buttons that allow users to share content from this online offering within Facebook. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/; Service provider: https://www.facebook.com, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy; Privacy Shield (ensuring data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Right to object (Opt-Out): Ad settings: https://www.facebook.com/settings?tab=ads.
Google Fonts: We integrate the fonts ("Google Fonts") from the provider Google, whereby the data of the users is used solely for the purpose of displaying the fonts in the users' browsers. The integration is based on our legitimate interests in a technically secure, maintenance-free, and efficient use of fonts, their uniform display, and taking into account possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/; Privacy policy: https://policies.google.com/privacy; Privacy Shield (ensuring data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TRkEAAW&status=Active.
Google Maps: We integrate the maps of the service "Google Maps" provided by Google. The processed data may include, in particular, IP addresses and location data of users, which are collected only with their consent (usually carried out within the settings of their mobile devices). Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://maps.google.de; Privacy policy: https://policies.google.com/privacy; Privacy Shield (guaranteeing data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TRkEAAW&status=Active; Right to object (Opt-Out): Opt-Out Plugin: http://tools.google.com/dlpage/gaoptout?hl=de, settings for displaying advertisements: https://adssettings.google.com/authenticated.
Instagram Plugins and Buttons: Instagram plugins and buttons – This may include content such as images, videos, or texts and buttons that allow users to share content from this online offering within Instagram. Service provider: https://www.instagram.com, Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy policy: http://instagram.com/about/legal/privacy.
LinkedIn Plugins and Buttons: LinkedIn plugins and buttons – This may include content such as images, videos, or texts and buttons that allow users to share content from this online offering within LinkedIn. Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.instagram.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; Right to object (Opt-Out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
OpenStreetMap: We integrate the maps of the service "OpenStreetMap", which are offered based on the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation (OSMF). The users' data is used by OpenStreetMap solely for the purpose of displaying the map functions and for temporarily storing the selected settings. This data may particularly include users' IP addresses and location data, which, however, will not be collected without their consent (usually carried out within the settings of their mobile devices). Service provider: OpenStreetMap Foundation (OSMF); Website: https://www.openstreetmap.de; Privacy policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.
ReCaptcha: We integrate the "ReCaptcha" function to detect bots, e.g., when filling out online forms. The behavior data of users (e.g., mouse movements or queries) is evaluated to distinguish humans from bots. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.google.com/recaptcha/; Privacy policy: https://policies.google.com/privacy; Privacy Shield (ensuring data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TRkEAAW&status=Active; Right to object (Opt-Out): Opt-Out plugin: http://tools.google.com/dlpage/gaoptout?hl=de, settings for displaying ads: https://adssettings.google.com/authenticated.
SlideShare Presentations: Embedding SlideShare presentations; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Soundcloud Music Player Widget: Soundcloud Music Player Widget; Service provider: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany; Website: https://soundcloud.com; Privacy policy: https://soundcloud.com/pages/privacy.
Spotify Music Player Widget: Spotify Music Player Widget; Service provider: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden; Website: https://www.spotify.com/de; Privacy policy: https://www.spotify.com/de/legal/privacy-policy/.
Twitter Plugins and Buttons: Twitter plugins and buttons – This may include content such as images, videos, or texts and buttons that allow users to share content from this online offering within Twitter. Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Website: https://twitter.com/de; Privacy policy: https://twitter.com/de/privacy.
YouTube: Videos; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy policy: https://policies.google.com/privacy; Privacy Shield (Guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Right to object (Opt-Out): Opt-Out plugin: http://tools.google.com/dlpage/gaoptout?hl=de, Settings for displaying ads: https://adssettings.google.com/authenticated.

Planning, organization, and tools

"We use services, platforms, and software from other providers (hereinafter referred to as 'third-party providers') for the purposes of organizing, managing, planning, and delivering our services. In selecting third-party providers and their services, we comply with legal requirements."

In this context, personal data may be processed and stored on the servers of third-party providers. Various types of data may be affected, which we process in accordance with this privacy policy. This data may particularly include master data and contact details of users, data related to transactions, contracts, other processes, and their contents.

If users are referred to third-party providers or their software or platforms in the context of communication, business, or other relationships with us, the third-party providers may process usage data and metadata for security purposes, service optimization, or marketing purposes. We therefore ask that you pay attention to the privacy notices of the respective third-party providers.

Processed Data Types: Inventory data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. text inputs, photographs, videos), usage data (e.g. visited websites, interest in content, access times), meta-/communication data (e.g. device information, IP addresses).
Affected persons: Communication partners, users (e.g. website visitors, users of online services).
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

deletion of data

The data we process will be deleted in accordance with legal requirements as soon as the consents permitted for processing are revoked or other permissions lapse (e.g., when the purpose of processing this data is no longer applicable or they are no longer necessary for the purpose).

Unless the data is deleted because it is required for other legally permissible purposes, its processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons or whose storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.

Further information on the deletion of personal data may also be provided within the individual privacy notices of this privacy policy.

Changes and updates to the data protection declaration

We ask you to regularly inform yourself about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

Created with the free Data Protection Generator.de by Dr. Thomas Schwenke

Data protection

Data protection

table of contents

Responsible

Overview of processing

types of data processed

Categories of data subjects

purposes of processing

Relevant legal bases

security measures

Transmission and disclosure of personal data

Data processing in third countries

use of cookies

Commercial and business services

Use of Online Marketplaces for E-Commerce

Payment service provider

Registration and Login

blogs and publication media

Contact us

Communication via Messenger

Surveys and Questionnaires

Provision of online offerings and web hosting

music and podcasts

Cloud Services

Newsletter and Broad Communication

Advertising communication via mail, fax, or telephone

Contests and Competitions

Web analysis and optimization

online marketing

Affiliate programs and affiliate links

Offer of an affiliate program

rating platforms

Presences in social networks

Plugins and embedded functions and content

Planning, organization, and tools

deletion of data

Changes and updates to the data protection declaration